get-started-orca-wallet[.]pages[.]dev

The domain get-started-orca-wallet.pages.dev has been identified as a potential threat due to brand impersonation. This domain impersonates the Orca Wallet, a well-known digital wallet for Solana traders and investors, and could be used to deceive users into providing sensitive information such as login credentials or private keys.

Infrastructure analysis reveals that get-started-orca-wallet.pages.dev resolves to the IP address 172.66.47.160 and was created on April 21, 2026. The domain is registered through Cloudflare, Inc., and utilizes an SSL certificate from Google Trust Services. The page has a Gridinsoft trust score of 0/100, indicating a very low level of trust. VirusTotal reports 0/95 detections, suggesting that while the domain has not yet been widely recognized as malicious, it is under investigation and has been added to one security blocklist. The presence of technologies such as HSTS, Cloudflare, and HTTP/3 suggests an effort to appear legitimate and secure.

If users have visited get-started-orca-wallet.pages.dev, they should immediately check their Solana accounts for any unauthorized activity. It is recommended to change passwords and ensure that any private keys or sensitive information have not been compromised. Users should also be cautious of any emails or messages that direct them to this domain and report any suspicious activity to their wallet provider or security team. Regular security audits and the use of reputable security tools can help prevent future incidents involving similar threats.