orca-v2[.]org

This domain is flagged for elevated-risk brand impersonation targeting Orca, a decentralized exchange operating on the Solana blockchain. Analysis indicates the site was designed to deceive users into believing they are interacting with the legitimate Orca Finance platform, likely with the intent to harvest wallet credentials, private keys, or authorize malicious smart contract transactions. The threat type is classified as cryptocurrency phishing with a specific focus on Solana-based decentralized finance users. Infrastructure analysis reveals the domain orca-v2.org was registered through Dynadot Inc on May 20, 2024, and previously resolved to the IP address 130.12.180.128. At the time of assessment, the domain was taken offline, though it remains flagged by 5 out of 95 security vendors on VirusTotal. The site appears on three distinct security blocklists and is actively blocked by multiple wallet protection systems and phishing detection frameworks. The page title, 'Orca Finance | DEX on Solana,' directly mirrors legitimate branding, and the Gridinsoft trust score for this domain is 0 out of 100, indicating a complete absence of reputable digital footprint. Users who may have interacted with orca-v2.org are advised to immediately revoke any smart contract approvals associated with the domain using a blockchain explorer or wallet interface. All credentials, including wallet seed phrases and private keys, should be considered compromised if entered on this site. Verification of all recent Solana transactions is recommended to identify unauthorized transfers. To prevent future exposure, users should rely exclusively on official Orca channels, verify domain authenticity through community-validated sources, and enable real-time phishing protection mechanisms in their wallet software. The creation of bookmarks for legitimate DeFi platforms can reduce the risk of domain spoofing.