orcaswap[.]pages[.]dev

PhishDestroy identifies orcaswap.pages.dev as a confirmed brand impersonation scam targeting the Orca cryptocurrency exchange. This malicious domain mimics Orca’s branding to deceive users into entering sensitive credentials or transferring funds. The site is hosted on Cloudflare infrastructure and resolves to IP 172.66.47.53, leveraging Google Trust Services’ SSL certificate to appear legitimate. Users who interact with this domain risk credential theft, financial loss, or malware exposure. This domain was flagged by PhishDestroy’s automated monitoring systems, showing zero detections on VirusTotal (5/95 engines) despite its fraudulent nature. Registered through Cloudflare, Inc., the domain exploits the .pages.dev subdomain to masquerade as part of Orca’s official ecosystem. The absence of detections highlights the need for proactive threat intelligence, as traditional antivirus tools may not yet recognize this emerging scam. Users should remain vigilant against similar impersonation tactics, especially those targeting cryptocurrency platforms. If you visited orcaswap.pages.dev, assume your data may have been compromised. Immediately revoke any shared credentials, monitor your accounts for unauthorized transactions, and run a full malware scan. Report the domain to Orca’s official security team and avoid interacting with any unsolicited links. For future protection, use browser-based phishing filters and bookmark only verified Orca domains. Stay cautious—scammers continuously evolve their tactics to bypass detection systems.