superfluous-party-506083[.]framer[.]app

The domain superfluous-party-506083.framer.app has been identified as a generic phishing threat, specifically targeting users of the French telecommunications company Orange. The page title observed was "Saisie de votre identifiant - Identification Orange," indicating an attempt to harvest login credentials by mimicking the official Orange authentication portal. No specific crypto drainer kit was associated with this threat, but the site's design and purpose were aligned with classic credential theft.

Technical analysis reveals that the domain was registered through Framer and resolved to IP address 31.43.161.6. It utilized a Let's Encrypt SSL certificate (E8), which provides encryption but does not guarantee legitimacy. VirusTotal flagged the domain with a score of 19 out of 95 security vendors, indicating broad community detection. Additionally, the domain appeared on one security blocklist, and Google Safe Browsing likely flagged it before it was taken offline. The registrant and creation date details were not publicly available, but the domain's recent registration and rapid takedown suggest a short-lived malicious campaign.

As of the latest check, the domain is offline, indicating that either the hosting provider or relevant authorities have taken action to disrupt the phishing operation. However, users should remain vigilant, as similar domains may reappear under different names. PhishDestroy recommends that anyone who may have interacted with this domain or entered credentials should change their Orange account password immediately and enable two-factor authentication. Always verify URLs by navigating directly to official websites rather than clicking links in unsolicited messages.