guide-en-orca-trade[.]pages[.]dev

guide-en-orca-trade.pages.dev was created on 21 February 2026 and is currently taken offline. The authoritative nameservers are lorna.ns.cloudflare.com and leif.ns.cloudflare.com, indicating registration with Cloudflare, Inc. DNS resolution points to 172.66.44.54, an IP owned by AS13335 Cloudflare, Inc. in the United States. The server presents an HTTPS certificate issued by Google Trust Services under the WE1 label, and HTTP responses return status code 403. The site advertises HSTS and Cloudflare as detected technologies.

Threat intelligence shows the domain is listed on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis reports that ten of ninety‑three scanned security vendors flag the domain as malicious, reinforcing the high‑risk assessment. The Gridinsoft trust score is 0 out of 100, reflecting a lack of confidence in the host. The page title returned by the server is "Suspected phishing site | Cloudflare," and the classified scam type is credential phishing, indicating an attempt to harvest user credentials.

Given the combination of recent registration, use of reputable CDN services, a low trust score, and detection by multiple vendor feeds, defenders should treat the domain as a high‑confidence phishing indicator. Recommended mitigations include adding the domain to local and network‑level blocklists, enforcing DNS sink‑hole policies for the associated IP range, and monitoring for any resurgence of the domain or related sub‑domains. Continuous re‑evaluation of VirusTotal and other multi‑engine scans is advised, as the domain may be re‑activated in the future.