Phishing sites impersonating Orca

PhishDestroy has recorded 108 phishing domains impersonating Orca since 2025-08-03, 12 of them in the last 30 days. The most used registrars are Cloudflare and Dynadot; the most common TLDs are .com and .dev. The official Orca domain is orca.so: any other site asking for your login or wallet is not Orca.

108
Domains, all time
12
Last 30 days
59
Online at last check
10
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 12026-07-28: 12026-07-29: 12026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 12026-08-04: 12026-08-05: 02026-08-06: 02026-08-07: 12026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 22026-08-15: 02026-08-16: 22026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 12026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 22026-08-29: 02026-08-30: 02026-08-31: 32026-09-01: 12026-09-02: 12026-09-03: 32026-09-04: 02026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 12026-09-18: 02026-09-19: 02026-09-20: 12026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 12026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 42026-10-08: 02026-10-09: 12026-10-10: 02026-10-11: 12026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 22026-10-17: 12026-10-18: 02026-10-19: 22026-10-20: 02026-10-21: 02026-10-22: 0
Orca phishing domains detected per day: 35 from 2026-07-25 to 2026-10-22; peak 4.

How to tell a fake Orca site

Official domain: orca.so.

Words most often added to the brand in reported domains: swap, boxd, trade, finance, ocagent, claim, orcasol, wallet, claims, orcaswap.

  • Type the address yourself or use a bookmark; phishing links for Orca arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Orca will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Orca phishing domains

The 50 most recently detected domains impersonating Orca
DomainFirst detectedStatus at last checkRegistrar
superbuyde.click2026-10-19OnlineSpaceship
superbuyde.study2026-10-19OnlineSpaceship
blacksheepsurfcoshop.shop2026-10-17OnlineDynadot
binderplayvault.shop2026-10-16OnlineDynadot
kakobuyde.quest2026-10-16OnlineSpaceship
lluismansilla.cat2026-10-11OnlineNOMINALIA INTERNET S.L
axionnowworld.shop2026-10-09OnlineDynadot
arkopharmadirect.shop2026-10-07OnlineDynadot
arkelstore.shop2026-10-07OnlineDynadot
aograde.shop2026-10-07OnlineDynadot
aoselect.shop2026-10-07OnlineDynadot
orcamento.evergreenfin.ltd2026-09-29OfflineNICENIC
usenosh.app2026-09-20OnlineName.com
sprawnykapitewnik.digital2026-09-17OnlineDynadot
orca.aelithia.shop2026-09-03OnlineALIBABA.COM SINGAPORE E-COMMERCE PRIVATE
orca.aykutbayrambey.cloud2026-09-03OnlineHOSTINGER operations
axian.orca-fraud.com2026-09-03OnlineGoDaddy.com
orca-rwnman.vercel.app2026-09-02OnlineVercel
orca.sij.mx2026-09-01OnlineGoDaddy.com
orca.homelababrera.es2026-08-31Offline—
orca.spressman.ca2026-08-31OnlineGo Get Canada Domain Registrar
dbpanel.garudalogistics.orca.devs.surf2026-08-31OnlineSpaceship
arborcapital.digital2026-08-28OnlineNETIM
orca.1punicorn.com2026-08-28OnlineSpaceship
sdm-admin.orca.partners2026-08-21OnlineAmazon Registrar
orca-boxd-fork-orca-9ba527d3-cb00-41b6-b.boxd.sh2026-08-16OnlineNameCheap
orca-boxd-fork-orca-7afce6e7-1ad3-43bb-8.boxd.sh2026-08-16OfflineNAMECHEAP
orcaclaim.live2026-08-14OnlineDynadot
orca.iruxu.cloud2026-08-14OfflineHOSTINGER operations
orrca-trade.pages.dev2026-08-07OfflineCloudflare Pages
orca-swim.vercel.app2026-08-04OnlineVercel
orca.mrexcel.asia2026-08-03OnlineHiChina (www.net.cn)
rayswap.org2026-07-29OnlineTrustname.com
fearfactorcasting.com2026-07-28OnlineSav.com, - 18
wealthspringinc.org2026-07-27OnlineNAMECHEAP
cn.ocagent.io2026-07-23OnlineDynadot
dapp.ocagent.io2026-07-23OnlineDynadot
cn.ocagent.us2026-07-23Online—
senatorcasinos-hr.com2026-07-06OnlineRegistrar.eu
orca-trada.github.io2026-07-02OfflineGitHub
shieldharborcase.com2026-06-28OfflineTrustname.com
airdrope-orca.xyz2026-06-19OnlineGMO Internet
torcat.net2026-06-15OnlineNICENIC
stealsabrainrot.com2026-06-08OnlineCloudflare
stealabrainrot.netlify.app2026-06-07OnlineNetlify
orcatrack.pages.dev2026-06-01OnlineCloudflare
us-orcs-finance.pages.dev2026-06-01OnlineCloudflare
dapp.iorca.io2026-05-31OnlineGoDaddy.com
orca-v2.org2026-05-22OfflineDynadot
orca-swap.org2026-05-19OfflineDynadot

All 108 Orca reports

Where they are registered and hosted

Registrars

  1. Cloudflare16
  2. Dynadot7
  3. NameCheap6
  4. Spaceship6
  5. Dynadot6
  6. Web Commerce Communications5
  7. PublicDomainRegistry.com5
  8. NICENIC4

Top-level domains

  1. .com20
  2. .dev17
  3. .io9
  4. .app9
  5. .shop8
  6. .org5
  7. .xyz4
  8. .live3

Hosting networks

  1. Cloudflare, Inc.20
  2. CLOUDFLARENET, US19
  3. CLOUDFLARENET - Cloudflare, Inc., US9
  4. Amazon.com, Inc.7
  5. malakmadze Malakmadze Web LLC, GE7
  6. AMAZON-02, US5
  7. AMAZON-02 - Amazon.com, Inc., US4
  8. Hostinger International Limited3

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Orca; share of all PhishDestroy reports: 0.05%.