zerionexplorer[.]firebaseapp[.]com
“Crypto Wallet Tracker & Portfolio Tracking | Zerion”
Observação armazenada
Contraste de títulos observado
Resumo das evidências
zerionexplorer.firebaseapp.com was registered on March 06, 2026 through Google LLC and resolves to the IP address 199.36.158.100, which is advertised as belonging to AS54113 Fastly, Inc. in the United States. The host presents an SSL certificate issued by Google Trust Services (certificate name WR4), indicating that the TLS termination is provided by a legitimate Google‑run certificate authority. An HTTP request to the root path returns a 404 status code, and the only visible page title collected by analysis tools is “Crypto Wallet Tracker & Portfolio Tracking | Zerion”, matching the branding of the Zerion crypto‑wallet service. This alignment, together with the classification “brand impersonation” and the listed scam type “Wallet/Seed Phishing”, suggests that the domain is being used to lure victims into disclosing cryptocurrency wallet credentials or seed phrases.
Dynamic analysis on VirusTotal shows that four of ninety‑four scanning engines have flagged the domain as malicious, and the domain appears on three external blocklists. Independent blocklist providers PhishDestroy, MetaMask and SEAL have already added the domain to their deny lists, and the Gridinsoft trust scoring system assigns a score of 0 out of 100, reflecting a high confidence of malicious intent. The current operational status is reported as offline, indicating that the site may have been taken down or is otherwise inaccessible at the time of this assessment. Evidence gaps remain regarding the exact payload delivered to visitors, the presence of any credential‑harvesting forms, and the duration of active hosting.
Analysts should therefore treat the domain as a confirmed phishing indicator and incorporate it into network‑level block policies, DNS sinkhole configurations, and endpoint URL filtering rules. Continuous monitoring of the associated IP address and related Fastly edge nodes is recommended, as adversaries frequently shift hosting to other edge locations after takedown.
Data Coverage
Pipeline de resposta a ameaças
Cobertura de listas de bloqueio
10 fontes externas monitoradas · instantâneo de 10/08/2026
Linha do tempo de detecção
-
Cloudflare Radar
Varredura do Cloudflare Radar armazenada · Abrir varredura
Análise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of zerionexplorer.firebaseapp.com · checked Mar 26, 2026
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo