Is this email your_order_US@orders.apple.com a legitimate ?

Apple customer emails will never have a domain except '@apple.com', with nothing added.

That is not quite true. The AppleCare+ confirmation for both of our 2018 minis came from…

AppleSupport@email.apple.com

Though our emails are from 2019, Apple does still use that domain.

Any legitimate email related to your Apple ID account will always come from appleid@id.apple.com.

But yes, @orders.apple.com is a scam address. As an email, it sounds a bit more convincing. But any SMS message from "Apple" will always be a scam. Apple does not send out communications via text.

That's a scam. Apple customer emails will never have a domain except '@apple.com', with nothing added.

Recognize and avoid phishing messages, phony support calls, and other scams - Apple Support