# Phishing sites impersonating Orca PhishDestroy has recorded 108 phishing domains impersonating Orca since 2025-08-03, 12 of them in the last 30 days. The most used registrars are Cloudflare and Dynadot; the most common TLDs are .com and .dev. The official Orca domain is orca.so: any other site asking for your login or wallet is not Orca. 108Domains, all time 12Last 30 days 59Online at last check 10Confirmed takedowns ## New domains in the last 90 days Orca phishing domains detected per day: 35 from 2026-07-25 to 2026-10-22; peak 4. ## How to tell a fake Orca site Official domain: orca.so. Words most often added to the brand in reported domains: swap, boxd, trade, finance, ocagent, claim, orcasol, wallet, claims, orcaswap. - Type the address yourself or use a bookmark; phishing links for Orca arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Orca will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Orca phishing domains The 50 most recently detected domains impersonating Orca Domain | First detected | Status at last check | Registrar | [superbuyde.click](https://phishdestroy.io/domain/superbuyde.click/) | 2026-10-19 | Online | Spaceship | [superbuyde.study](https://phishdestroy.io/domain/superbuyde.study/) | 2026-10-19 | Online | Spaceship | [blacksheepsurfcoshop.shop](https://phishdestroy.io/domain/blacksheepsurfcoshop.shop/) | 2026-10-17 | Online | Dynadot | [binderplayvault.shop](https://phishdestroy.io/domain/binderplayvault.shop/) | 2026-10-16 | Online | Dynadot | [kakobuyde.quest](https://phishdestroy.io/domain/kakobuyde.quest/) | 2026-10-16 | Online | Spaceship | [lluismansilla.cat](https://phishdestroy.io/domain/lluismansilla.cat/) | 2026-10-11 | Online | NOMINALIA INTERNET S.L | [axionnowworld.shop](https://phishdestroy.io/domain/axionnowworld.shop/) | 2026-10-09 | Online | Dynadot | [arkopharmadirect.shop](https://phishdestroy.io/domain/arkopharmadirect.shop/) | 2026-10-07 | Online | Dynadot | [arkelstore.shop](https://phishdestroy.io/domain/arkelstore.shop/) | 2026-10-07 | Online | Dynadot | [aograde.shop](https://phishdestroy.io/domain/aograde.shop/) | 2026-10-07 | Online | Dynadot | [aoselect.shop](https://phishdestroy.io/domain/aoselect.shop/) | 2026-10-07 | Online | Dynadot | [orcamento.evergreenfin.ltd](https://phishdestroy.io/domain/orcamento.evergreenfin.ltd/) | 2026-09-29 | Offline | NICENIC | [usenosh.app](https://phishdestroy.io/domain/usenosh.app/) | 2026-09-20 | Online | Name.com | [sprawnykapitewnik.digital](https://phishdestroy.io/domain/sprawnykapitewnik.digital/) | 2026-09-17 | Online | Dynadot | [orca.aelithia.shop](https://phishdestroy.io/domain/orca.aelithia.shop/) | 2026-09-03 | Online | ALIBABA.COM SINGAPORE E-COMMERCE PRIVATE | [orca.aykutbayrambey.cloud](https://phishdestroy.io/domain/orca.aykutbayrambey.cloud/) | 2026-09-03 | Online | HOSTINGER operations | [axian.orca-fraud.com](https://phishdestroy.io/domain/axian.orca-fraud.com/) | 2026-09-03 | Online | GoDaddy.com | [orca-rwnman.vercel.app](https://phishdestroy.io/domain/orca-rwnman.vercel.app/) | 2026-09-02 | Online | Vercel | [orca.sij.mx](https://phishdestroy.io/domain/orca.sij.mx/) | 2026-09-01 | Online | GoDaddy.com | [orca.homelababrera.es](https://phishdestroy.io/domain/orca.homelababrera.es/) | 2026-08-31 | Offline | — | [orca.spressman.ca](https://phishdestroy.io/domain/orca.spressman.ca/) | 2026-08-31 | Online | Go Get Canada Domain Registrar | [dbpanel.garudalogistics.orca.devs.surf](https://phishdestroy.io/domain/dbpanel.garudalogistics.orca.devs.surf/) | 2026-08-31 | Online | Spaceship | [arborcapital.digital](https://phishdestroy.io/domain/arborcapital.digital/) | 2026-08-28 | Online | NETIM | [orca.1punicorn.com](https://phishdestroy.io/domain/orca.1punicorn.com/) | 2026-08-28 | Online | Spaceship | [sdm-admin.orca.partners](https://phishdestroy.io/domain/sdm-admin.orca.partners/) | 2026-08-21 | Online | Amazon Registrar | [orca-boxd-fork-orca-9ba527d3-cb00-41b6-b.boxd.sh](https://phishdestroy.io/domain/orca-boxd-fork-orca-9ba527d3-cb00-41b6-b.boxd.sh/) | 2026-08-16 | Online | NameCheap | [orca-boxd-fork-orca-7afce6e7-1ad3-43bb-8.boxd.sh](https://phishdestroy.io/domain/orca-boxd-fork-orca-7afce6e7-1ad3-43bb-8.boxd.sh/) | 2026-08-16 | Offline | NAMECHEAP | [orcaclaim.live](https://phishdestroy.io/domain/orcaclaim.live/) | 2026-08-14 | Online | Dynadot | [orca.iruxu.cloud](https://phishdestroy.io/domain/orca.iruxu.cloud/) | 2026-08-14 | Offline | HOSTINGER operations | [orrca-trade.pages.dev](https://phishdestroy.io/domain/orrca-trade.pages.dev/) | 2026-08-07 | Offline | Cloudflare Pages | [orca-swim.vercel.app](https://phishdestroy.io/domain/orca-swim.vercel.app/) | 2026-08-04 | Online | Vercel | [orca.mrexcel.asia](https://phishdestroy.io/domain/orca.mrexcel.asia/) | 2026-08-03 | Online | HiChina (www.net.cn) | [rayswap.org](https://phishdestroy.io/domain/rayswap.org/) | 2026-07-29 | Online | Trustname.com | [fearfactorcasting.com](https://phishdestroy.io/domain/fearfactorcasting.com/) | 2026-07-28 | Online | Sav.com, - 18 | [wealthspringinc.org](https://phishdestroy.io/domain/wealthspringinc.org/) | 2026-07-27 | Online | NAMECHEAP | [cn.ocagent.io](https://phishdestroy.io/domain/cn.ocagent.io/) | 2026-07-23 | Online | Dynadot | [dapp.ocagent.io](https://phishdestroy.io/domain/dapp.ocagent.io/) | 2026-07-23 | Online | Dynadot | [cn.ocagent.us](https://phishdestroy.io/domain/cn.ocagent.us/) | 2026-07-23 | Online | — | [senatorcasinos-hr.com](https://phishdestroy.io/domain/senatorcasinos-hr.com/) | 2026-07-06 | Online | Registrar.eu | [orca-trada.github.io](https://phishdestroy.io/domain/orca-trada.github.io/) | 2026-07-02 | Offline | GitHub | [shieldharborcase.com](https://phishdestroy.io/domain/shieldharborcase.com/) | 2026-06-28 | Offline | Trustname.com | [airdrope-orca.xyz](https://phishdestroy.io/domain/airdrope-orca.xyz/) | 2026-06-19 | Online | GMO Internet | [torcat.net](https://phishdestroy.io/domain/torcat.net/) | 2026-06-15 | Online | NICENIC | [stealsabrainrot.com](https://phishdestroy.io/domain/stealsabrainrot.com/) | 2026-06-08 | Online | Cloudflare | [stealabrainrot.netlify.app](https://phishdestroy.io/domain/stealabrainrot.netlify.app/) | 2026-06-07 | Online | Netlify | [orcatrack.pages.dev](https://phishdestroy.io/domain/orcatrack.pages.dev/) | 2026-06-01 | Online | Cloudflare | [us-orcs-finance.pages.dev](https://phishdestroy.io/domain/us-orcs-finance.pages.dev/) | 2026-06-01 | Online | Cloudflare | [dapp.iorca.io](https://phishdestroy.io/domain/dapp.iorca.io/) | 2026-05-31 | Online | GoDaddy.com | [orca-v2.org](https://phishdestroy.io/domain/orca-v2.org/) | 2026-05-22 | Offline | Dynadot | [orca-swap.org](https://phishdestroy.io/domain/orca-swap.org/) | 2026-05-19 | Offline | Dynadot | [All 108 Orca reports](https://phishdestroy.io/domain/?brand=Orca) ## Where they are registered and hosted ### Registrars - Cloudflare16 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)7 - [NameCheap](https://phishdestroy.io/registrar/namecheap/)6 - [Spaceship](https://phishdestroy.io/registrar/spaceship/)6 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)6 - [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)5 - [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)5 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)4 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)20 - [.dev](https://phishdestroy.io/tld/dev/)17 - [.io](https://phishdestroy.io/tld/io/)9 - [.app](https://phishdestroy.io/tld/app/)9 - [.shop](https://phishdestroy.io/tld/shop/)8 - [.org](https://phishdestroy.io/tld/org/)5 - [.xyz](https://phishdestroy.io/tld/xyz/)4 - [.live](https://phishdestroy.io/tld/live/)3 ### Hosting networks - Cloudflare, Inc.20 - CLOUDFLARENET, US19 - CLOUDFLARENET - Cloudflare, Inc., US9 - Amazon.com, Inc.7 - malakmadze Malakmadze Web LLC, GE7 - AMAZON-02, US5 - AMAZON-02 - Amazon.com, Inc., US4 - Hostinger International Limited3 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Orca; share of all PhishDestroy reports: 0.05%. Canonical: https://phishdestroy.io/brand/orca/