m[.]orionxedge[.]com

The domain m.orionxedge.com is currently active and has been flagged as a high-risk phishing site. The page title identified is "ORionx Markets," which suggests an attempt to impersonate a legitimate trading platform. Infrastructure analysis reveals that the domain was registered on December 20, 2025, through Gname.com Pte. Ltd. The domain resolves to the IP address 172.67.129.47, which is associated with Cloudflare services, indicating the use of a content delivery network potentially to obfuscate the true hosting environment.

Security assessments indicate that m.orionxedge.com has been blocked by multiple security solutions, including SEAL, MetaMask, PhishDestroy, and BLP-Malware. A scan on VirusTotal shows that 8 out of 95 security vendors have flagged this domain, reinforcing its classification as a phishing threat. Additionally, the Gridinsoft trust score for this domain is 0 out of 100, further indicating its malicious standing. The domain appears on four distinct security blocklists, highlighting its recognition as a threat within the cybersecurity community.

The website utilizes several technologies including Ant Design, Vue.js, and Cloudflare Browser Insights. The presence of HTTP/3 suggests an attempt to leverage modern web protocols for improved performance or evasion tactics. However, the exact nature of the phishing scheme remains uncertain without further detailed analysis of the site's content and user interaction flows.

Defenders are advised to implement monitoring and blocking of this domain across their networks and user endpoints. Continuous updates from security vendors should be integrated to ensure that any new iterations or variations of this phishing attempt are effectively mitigated. Given the active status and high-risk classification of this domain, vigilance is essential to protect users from potential data theft or financial fraud.