# potrfolio.com — MALICIOUS

> Warning: potrfolio.com impersonates Zerion and appears on multiple security blocklists. Avoid interacting to protect your data.

## Summary
PhishDestroy identifies potrfolio.com as a brand impersonation domain targeting Zerion users. It attempts to mimic the official Zerion site, using a deceptive subdomain structure like www.zerion.potrfolio.com to confuse visitors.

The domain was created recently on February 21, 2026, and currently appears on three security blocklists. VirusTotal flags it by 6 out of 95 security vendors, indicating moderate detection. The infrastructure and URL patterns align with typical brand impersonation tactics aimed at stealing credentials or misleading users.

Potrfolio.com remains active despite these warnings. Users are advised to avoid the site and report it if encountered. PhishDestroy continues monitoring the domain's status to provide timely alerts and protect the community from potential risks.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Target brand: Zerion
- Page title: www.zerion.potrfolio.com

## Domain Intelligence
- Registered: 2026-02-21 07:01:08

## Detection Status
- VirusTotal: 6 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "Fortinet", "G-Data", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019afa71-4553-7775-8382-b006a267802b.png
- PhishDestroy: https://phishdestroy.io/domain/potrfolio.com/
- LLM endpoint: https://phishdestroy.io/domain/potrfolio.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/potrfolio.com/
Last updated: 2026-03-19