orlenix-tr[.]com

Analysis as of July 24 2026 indicates that the domain orlenix-tr.com was registered on February 21 2026 through Name SRS AB and is currently taken offline. The authoritative nameservers are harmony.ns.cloudflare.com and rajeev.ns.cloudflare.com, pointing to Cloudflare's network. DNS resolution maps the domain to IP address 104.21.17.197, which belongs to AS13335 Cloudflare, Inc., and is geolocated in the United States. No TLS certificate is presented for the host, confirming the absence of HTTPS support. The page title retrieved prior to takedown reads “Orlenix - Resmi Platform | AI Ticaret 2025 | 10.000'den Fazla Yorum”, which contains no reference to the impersonated brand.

However, threat intelligence tags the site as a Binance brand impersonation, classifying the activity as brand impersonation. VirusTotal scans show that ten of ninety‑five security vendors flagged the domain as malicious. The domain appears on a single security blocklist and has been specifically blocked by the PhishDestroy service. Gridinsoft assigns the domain a trust score of 0 out of 100, reflecting extreme lack of credibility.

The combination of a newly created domain, Cloudflare front‑end, lack of encryption, low trust score, and multiple vendor detections suggests a high likelihood of phishing or credential harvesting targeting Binance users. Uncertainties remain regarding the exact payload or phishing page content, as the site is offline and no HTTP response body has been captured. Defenders should add orlenix-tr.com to domain blocklists, monitor traffic to the associated IP address for any residual activity, and consider extending detection rules to cover similar Cloudflare‑hosted domains created after February 2026 that lack SSL. Ongoing observation of the registrar Name SRS AB for further suspicious registrations is also advised.