oniontorzon[.]store

The domain oniontorzon.store is identified as a generic phishing site posing an elevated risk to users. The site, which has been taken offline, was observed with the page title 'TorZon Market – Official Onion Links & Verified Mirrors', indicating it may have been used to deceive visitors into believing it was a legitimate marketplace for onion services. Given its current status and the specific threat it represents, users should avoid interacting with oniontorzon.store and consider it unsafe.

Technical indicators for oniontorzon.store include 2 of 95 VirusTotal vendors flagging the domain, including Fortinet and SOCRadar. The domain was registered through NiceNIC International Group Co., Limited on February 21, 2026, and resolved to the IP address 188.114.96.3, located in the US under AS13335 Cloudflare, Inc. The site appeared on 1 security blocklist, specifically PhishDestroy, and used an SSL certificate issued by Google Trust Services / WE1. Technologies detected on the site include Cloudflare and HTTP/3.

To protect against the generic phishing threat posed by oniontorzon.store, users should change their passwords and enable two-factor authentication for any accounts that may have been compromised. Additionally, they should monitor their accounts for any unauthorized activity or fraud. Affected users can report the domain to their security software providers, local cybercrime units, or through the reporting mechanisms provided by Google Safe Browsing and PhishDestroy.