torzonm[.]com

As of July 24, 2026, the domain torzonm.com has been flagged as a potential phishing domain with an elevated risk level. The domain, which was registered through NiceNIC International Group Co., Limited on February 22, 2026, is currently offline and returns a 404 HTTP status. This suggests that the website is not actively being used or has been taken down, possibly in response to security measures. The page title, 'Torzon Market - Torzon Darknet - Secure Onion Market,' indicates that the domain may have been part of a darknet market or a similar service. However, the exact content and purpose of the site have not been fully analyzed, and the offline status makes it difficult to determine current intent or functionality.

Infrastructure analysis reveals that torzonm.com uses Cloudflare services, including Cloudflare Browser Insights and HTTP/3, which are common for both legitimate and malicious websites. The domain resolves to the IP address 104.21.2.238, located in the United States and associated with AS13335 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1, which adds a layer of security but does not definitively indicate the legitimacy of the site. The domain appears on one security blocklist and is blocked by PhishDestroy, a known security vendor. This blocking is a strong indicator of potential malicious activity, although the exact nature of the threat is not specified. Analysis indicates that 3 out of 95 security vendors have flagged this domain, which, while not a majority, still suggests a significant level of suspicion.

Defenders should remain cautious and treat torzonm.com as a potentially harmful domain. Due to its elevated risk level and presence on a security blocklist, it is advisable to avoid accessing the site and to monitor any related infrastructure for further signs of phishing or other malicious activity.