torzonmarket-v1[.]com

This domain, torzonmarket-v1.com, is identified as a phishing site designed to impersonate Torzon Market, a darknet marketplace. The site presents itself as an official mirror with a secure login portal, targeting users seeking access to Torzon Market’s services. Analysis indicates no association with legitimate Torzon Market infrastructure, and the page title explicitly claims authenticity with the phrase 'Torzon Market [Official] — Verified Onion Mirror & Secure Login URL,' a common tactic to deceive visitors into entering credentials or sensitive information. Infrastructure analysis reveals multiple technical indicators supporting its malicious classification. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently utilized for suspicious domains. It resolves to the IP address 188.114.96.3 and employs Cloudflare services, including Cloudflare Browser Insights and HTTP/3, likely to obfuscate hosting details. The SSL certificate is issued by Google Trust Services, providing a false sense of security. Detection metrics include a VirusTotal score of 3/95 security vendors flagging the domain, and it appears on one security blocklist, specifically PhishDestroy. The Gridinsoft trust score for this domain is 0/100, further corroborating its malicious nature. As of the latest assessment, torzonmarket-v1.com has been taken offline, reducing immediate exposure risk. However, the domain’s infrastructure remains registered, and similar phishing campaigns may re-emerge under different domains or IPs. Users who accessed the site are advised to reset any credentials entered and monitor for unauthorized activity. Organizations should update blocklists to include this domain and its associated IP address to prevent future access attempts. Continuous monitoring of newly registered domains with similar naming patterns is recommended to mitigate recurring threats.