orion.ps

Abuse detected

UnknownOther

The completed capture reached orion.ps, observed the page title “- Orion”, and identified the presented service as Orion. Orion contains directly observed or authoritative evidence of unknown.

Supported findings: 1from 1 artifact
Capture coverage: Complete capture
The scanner reached the target and captured every planned artifact.
Evidence sources: threat kbdomainpagescreenshottlsoperator context
Assessed: Oct 26, 2026, 12:00 AM UTC

Findings

Each finding below is derived from a captured artifact. Expand one to see exactly what it was drawn from.

Analyst summary

Observed 3 capture stage(s); canonical stage is late_render_3s.
Distinctive asset clues: Index-0BlWtNqF.js, _plugin-vue_export-helper-BDNMzG2s.js, css, app-Da2xKopj.css, background-halloween-BP0E-EdV.png, buttonbg2-tb8bzTd0.png.

Supported findings1

Known Orion kit detected
Unknown
Captured artifacts match this high-specificity Threat-KB signature.
direct observation

Capture signals

Forms: 0
Password fields: 0
Resources: 31
Distinct hosts: 5

Threat-KB / IOK matches1

Matched Oct 25, 2026, 11:58 PM UTC

orion-clone-kit
orion-clone-kit
high
Family gaming