orcapc[.]app

The domain orcapc.app has been flagged as a brand impersonation threat targeting Orca, a decentralized finance platform. This domain was created on February 21, 2026, and its page title, 'Orca Desktop App — DeFi Made Simple, Fast, and Human,' is designed to deceive users into believing it is the legitimate Orca desktop application. The threat type is brand impersonation, and while no specific drainer kit has been identified, the domain's sole purpose appears to be phishing for cryptocurrency credentials or wallet connections.

Technical analysis reveals that orcapc.app resolves to IP address 216.198.79.1 and is registered through NiceNIC International Group Co., Limited. VirusTotal reports 2 out of 95 security vendors flagging this domain as malicious, and it appears on one security blocklist. The SSL certificate is issued by Let's Encrypt (R12), which is commonly used by both legitimate and malicious sites. Google Safe Browsing has not yet blacklisted the domain, but its recent creation and suspicious activity suggest it is actively being used for phishing.

As of the latest check, orcapc.app has been taken offline, reducing immediate risk. However, users should remain vigilant as similar domains may appear. PhishDestroy recommends verifying any Orca-related URLs through official channels and avoiding entering sensitive information on unfamiliar sites. The domain's age and registration details indicate it was set up specifically for this campaign, and while it is currently inactive, the threat of future impersonation remains. Users are advised to use PhishDestroy for real-time verification of any suspicious domains. The overall risk level is elevated, and continued monitoring is recommended. Unique seed: 075be6.