dapp[.]iorca[.]io

This domain, dapp.iorca.io, poses a high-risk brand impersonation threat targeting users of the Orca platform. The site mimics legitimate Orca interfaces, likely to deceive visitors into entering sensitive credentials, wallet private keys, or other authentication details. Such impersonation attacks are commonly used to facilitate unauthorized access to cryptocurrency wallets, financial accounts, or personal data, leading to potential asset theft or identity compromise. Analysis indicates the domain was registered on April 22, 2026, through GoDaddy.com, LLC, and resolved to the IP address 163.181.214.103. At the time of assessment, 16 out of 95 security vendors on VirusTotal flagged the domain as malicious. The site was hosted using technologies including Node.js, React, Next.js, and Webpack, and employed a Let's Encrypt SSL certificate to appear legitimate. The domain appeared on five security blocklists and was actively blocked by multiple browser extensions and security tools. If you visited dapp.iorca.io or interacted with its content, immediate action is required. Disconnect any connected wallets or sessions and revoke permissions for associated applications. Scan your device for malware using updated security software. Monitor financial accounts and transaction histories for unauthorized activity. Change passwords for any accounts accessed during or after the visit, and enable multi-factor authentication where available. Report the incident to relevant security teams or platforms to aid in mitigation efforts.