integration[.]orionpharmaanimalhealth[.]com

PhishDestroy identifies integration.orionpharmaanimalhealth.com as an active generic phishing domain posing as Orion Pharma Animal Health’s login portal. It features a page titled “Sign in to your account” and likely attempts to harvest corporate or personal credentials under the guise of animal-health services. No drainer kit fingerprint has been publicly released. This domain was flagged on April 16, 2021, and is registered through MarkMonitor, Inc. It resolves to the IP address 104.18.33.90 and presents a valid SSL certificate issued by Google Trust Services. VirusTotal currently shows 2 out of 95 engines detecting the page, and the domain remains absent from Google Safe Browsing at time of writing. The campaign is presently active, with the seed 293efc indicating ongoing tracking under heightened suspicion. No mitigations are listed in public feeds, so blocking the domain at DNS/WAF and warning affected users remains the advised countermeasure. Remaining risk is high given the zero-detection status and continued availability of the phishing page.