orionlogistics[.]org

The domain orionlogistics.org was a brand-impersonation phishing site targeting users of the brand 'across'. It posed as a legitimate service to deceive victims into entering credentials or sensitive information, classified specifically as a brand-impersonation scam. No crypto drainer kit was identified. The site is currently taken offline.

Technical indicators confirm orionlogistics.org was flagged by 2 of 95 VirusTotal security vendors, including alphaMountain.ai and Kaspersky. It appeared on 1 security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. The domain was registered through Spaceship, Inc. on June 14, 2025, and resolved to the IP address 172.245.14.131, hosted on AS36352 (HostPapa) in the US. No SSL certificate was present, and the observed page title was 'orionlogistics.org'. The domain had a Gridinsoft trust score of 0/100 and used a single nameserver.

Victims of orionlogistics.org should immediately change any passwords entered on the site and enable two-factor authentication (2FA) on all accounts. Monitor financial statements and credit reports for signs of fraud. Report the phishing domain to the impersonated brand's security team, as well as to platforms like Google Safe Browsing, PhishTank, or local cybercrime authorities to aid in takedown efforts.