torzonmarketdark[.]com

This domain is flagged as a high-risk generic phishing threat. Analysis shows it was registered on February 21, 2026 through NiceNIC International Group Co., Limited, and remains active as of July 12, 2026. The page title explicitly claims to be the official Torzon Darknet Market, offering URLs and onion mirror links for 2026, which suggests it is impersonating a known darknet marketplace to deceive users. The domain resolves to IP 104.21.60.170, hosted on Cloudflare infrastructure (AS13335) in the United States, using Cloudflare nameservers paris.ns.cloudflare.com and vasilii.ns.cloudflare.com. SSL is issued by Google Trust Services (WE1), and the site uses HTTP/3 and Cloudflare Browser Insights. VirusTotal reports 6 of 93 security vendors flagging this domain, and it appears on one blocklist (PhishDestroy). Gridinsoft trust score is 0/100, indicating strong distrust. The exact phishing mechanism or landing page content has not been analysed, but the combination of a recently registered domain, impersonation of a darknet market, low trust score, and partial vendor detection suggests this site is likely used for credential harvesting or directing users to malicious resources. Defenders should block the domain at the network level, monitor for related infrastructure, and warn users not to visit the site or provide any personal information.