orcance[.]com

This domain operates as a fraudulent replica of the Orca cryptocurrency platform, designed to deceive users into disclosing sensitive credentials or transferring digital assets. Analysis confirms the site closely mimics the legitimate Orca interface, including identical page titles and visual elements, to establish false credibility. The infrastructure specifically targets users familiar with Orca’s decentralized exchange services, likely through phishing campaigns or malicious advertisements. Evidence from technical indicators reveals multiple red flags. The domain orcance.com was registered on October 17, 2024, through Gname.com Pte. Ltd., a registrar frequently associated with newly created malicious domains. Security vendors flagged the domain on VirusTotal, with 16 out of 95 engines detecting it as malicious. It appears on four security blocklists, including MetaMask and PhishDestroy, and resolves to the IP address 128.241.254.206. Technologies detected on the site include Vue.js for frontend development, Nginx as the web server, and HSTS implementation, suggesting an attempt to appear legitimate while concealing malicious intent. Users who visited orcance.com should immediately cease all interactions with the site. Those who entered credentials or connected wallets must revoke any active sessions and transfer assets to a secure wallet. Monitor accounts for unauthorized transactions and enable multi-factor authentication on all related services. Given the domain’s high-risk classification and offline status, users should remain vigilant for similar impersonation attempts, particularly those targeting cryptocurrency platforms. Report the domain to relevant security teams for further analysis and mitigation.