orbitglobal[.]ltd

The domain orbitglobal.ltd was registered through NameSilo, LLC on May 10, 2026 and currently resolves to the IPv4 address 51.222.162.110. Its authoritative name servers are ns5.ddoscure.com, ns6.ddoscure.com, protected3.ddoscure.com and protected4.ddoscure.co, indicating that the infrastructure is hosted on the ddoscure DNS service. VirusTotal scans have identified nine positive detections out of ninety‑one submitted engines, confirming that multiple security vendors flag the site as malicious.

The domain appears on one public security blocklist and is explicitly listed by the PhishDestroy takedown service, reinforcing its classification as a high‑risk phishing infrastructure. No public information about SSL certificates, HTTP response codes, page titles, or targeted brands has been disclosed, leaving the exact content and lure technique unknown. The combination of a recent registration, dedicated DNS providers, and multiple vendor detections suggests a purpose‑built operation rather than a compromised legitimate site.

Defenders should add orbitglobal.ltd to web‑filter deny lists, monitor outbound traffic for connections to 51.222.162.110, and enforce credential‑validation controls for any services that could be impersonated. Continuous re‑scanning on VirusTotal and checking for updates to blocklist entries are recommended to capture any changes in the domain’s behavior. Until further forensic evidence is released, the domain should be treated as actively malicious and blocked at perimeter and endpoint layers.