torzon4kv5swfazrziqvel2imhxcckc4otcvopiv5lnxzpqu4v4m5iyd[.]io

The domain torzon4kv5swfazrziqvel2imhxcckc4otcvopiv5lnxzpqu4v4m5iyd.io was registered on June 08, 2026 and remains active as of the report date, July 12, 2026. DNS resolution points to the Cloudflare‑owned address 188.114.97.3, located in Canada, and the site is served through Cloudflare services including Browser Insights and HTTP/3. The TLS certificate is issued by Let’s Encrypt (E7) and the HTTP response code is 200. Security telemetry shows a Gridinsoft trust score of 0/100, inclusion in four AlienVault OTX pulses, presence on a single security blocklist, and a detection rate of five out of ninety‑one VirusTotal scanners. PhishDestroy currently blocks the domain. The page title declares "TorZon – Secure Darknet Marketplace | Verified Onion Link," suggesting an attempt to lure victims interested in darknet services. No additional content analysis is available, and the exact phishing payload or credential‑harvesting mechanisms have not been disclosed. Defenders should add the domain and its resolving IP to deny‑list rules, monitor for related DNS queries, and consider broader indicators such as the Cloudflare infrastructure and the low trust score when assessing related traffic. Continuous re‑evaluation is advised as additional intelligence may emerge.