orbitai[.]digital

Analysis of orbitai.digital indicates a confirmed fraudulent domain targeting users with a fake automated cryptocurrency trading bot service. The domain, registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, is currently offline but was previously flagged by multiple security sources. Infrastructure analysis reveals the domain resolved to IP 188.114.96.3, hosted on Cloudflare's network (AS13335), a common tactic to obscure the true origin of malicious sites. While no SSL certificate was present, the page title 'OrbitAI | Automated Crypto Trading Bot & Algo Strategies' explicitly advertised algorithmic crypto trading services, a known lure for investment scams. Security vendors detected this domain as malicious, with 3 out of 93 engines on VirusTotal flagging it at the time of assessment.

Additionally, orbitai.digital appears on two security blocklists, including PhishDestroy and ScamSniffer, further corroborating its fraudulent nature. The use of Cloudflare nameservers (colin.ns.cloudflare.com and tricia.ns.cloudflare.com) is consistent with phishing campaigns that leverage the provider's privacy features to evade takedowns. No legitimate business registration or brand affiliation was identified in the available data, and the domain's recent creation aligns with the typical lifecycle of short-lived phishing sites. Defenders should treat orbitai.digital as a confirmed threat and block all resolutions to its IP and associated domains.

Given its offline status, monitoring for re-emergence under similar naming conventions or Cloudflare-hosted infrastructure is recommended. Organizations should also review logs for connections to 188.114.96.3 during the domain's active period, as this may indicate compromised endpoints or internal phishing exposure. The absence of an SSL certificate is a red flag, as legitimate financial services universally enforce HTTPS.