# Phishing sites impersonating Orange PhishDestroy has recorded 50 phishing domains impersonating Orange since 2025-10-20, 0 of them in the last 30 days. The most used registrars are GoDaddy.com and DuckDNS; the most common TLDs are .com and .app. Open Orange only from its official app or a saved bookmark. 50Domains, all time 0Last 30 days 28Online at last check 24Confirmed takedowns ## New domains in the last 90 days Orange phishing domains detected per day: 5 from 2026-07-25 to 2026-10-22; peak 1. ## How to tell a fake Orange site Words most often added to the brand in reported domains: duckdns, espace, intgrale, proton, cic, resl, ggceiyj, rubinal, sock, courteous. - Type the address yourself or use a bookmark; phishing links for Orange arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Orange does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Orange phishing domains The 50 most recently detected domains impersonating Orange Domain | First detected | Status at last check | Registrar | [orangdj.delettrecharpente.fr](https://phishdestroy.io/domain/orangdj.delettrecharpente.fr/) | 2026-09-02 | Online | OVH | [ganpatimatrimonial.com](https://phishdestroy.io/domain/ganpatimatrimonial.com/) | 2026-08-12 | Online | GoDaddy.com | [absencestelefone.weebly.com](https://phishdestroy.io/domain/absencestelefone.weebly.com/) | 2026-08-09 | Offline | Square | [truckilasoudt.duckdns.org](https://phishdestroy.io/domain/truckilasoudt.duckdns.org/) | 2026-08-04 | Offline | DuckDNS | [site-1ft2ad0jn.godaddysites.com](https://phishdestroy.io/domain/site-1ft2ad0jn.godaddysites.com/) | 2026-08-03 | Online | GoDaddy.com | [assistance4.godaddysites.com](https://phishdestroy.io/domain/assistance4.godaddysites.com/) | 2026-07-24 | Online | GoDaddy.com | [frouuufacturearz.duckdns.org](https://phishdestroy.io/domain/frouuufacturearz.duckdns.org/) | 2026-07-23 | Online | DuckDNS | [edc.dinero.best](https://phishdestroy.io/domain/edc.dinero.best/) | 2026-07-17 | Online | NETIM | [messageriealerte-orange.cloud-ip.cc](https://phishdestroy.io/domain/messageriealerte-orange.cloud-ip.cc/) | 2026-07-17 | Online | Cloud DNS | [frongivedonrousza.duckdns.org](https://phishdestroy.io/domain/frongivedonrousza.duckdns.org/) | 2026-07-03 | Offline | DuckDNS | [joliveroi.site](https://phishdestroy.io/domain/joliveroi.site/) | 2026-06-24 | Offline | Ligne Web Services dba LWS | [orange603.dyh8f.top](https://phishdestroy.io/domain/orange603.dyh8f.top/) | 2026-06-22 | Offline | Chengdu west dimension digital | [orange514.wd882.xyz](https://phishdestroy.io/domain/orange514.wd882.xyz/) | 2026-06-22 | Offline | HiChina (www.net.cn) | [id.rivdevis.xyz](https://phishdestroy.io/domain/id.rivdevis.xyz/) | 2026-06-20 | Offline | NETIM | [capable-architecture-053275.framer.app](https://phishdestroy.io/domain/capable-architecture-053275.framer.app/) | 2026-06-03 | Taken down | Framer | [dringarangapp.duckdns.org](https://phishdestroy.io/domain/dringarangapp.duckdns.org/) | 2026-03-28 | Offline | DuckDNS | [drougroupez.duckdns.org](https://phishdestroy.io/domain/drougroupez.duckdns.org/) | 2026-03-28 | Offline | DuckDNS | [mail25.godaddysites.com](https://phishdestroy.io/domain/mail25.godaddysites.com/) | 2026-03-20 | Online | GoDaddy.com | [orange96.godaddysites.com](https://phishdestroy.io/domain/orange96.godaddysites.com/) | 2026-03-03 | Online | GoDaddy.com | [orange97.godaddysites.com](https://phishdestroy.io/domain/orange97.godaddysites.com/) | 2026-02-26 | Online | GoDaddy.com | [squareonee-sa.store](https://phishdestroy.io/domain/squareonee-sa.store/) | 2026-02-26 | Offline | — | [identifiezvous.godaddysites.com](https://phishdestroy.io/domain/identifiezvous.godaddysites.com/) | 2026-02-26 | Online | GoDaddy.com | [ar.espace-intgrale.fr](https://phishdestroy.io/domain/ar.espace-intgrale.fr/) | 2026-02-25 | Offline | HOSTINGER operations | [docaposte.espace-intgrale.fr](https://phishdestroy.io/domain/docaposte.espace-intgrale.fr/) | 2026-02-25 | Offline | HOSTINGER operations | [orange98.godaddysites.com](https://phishdestroy.io/domain/orange98.godaddysites.com/) | 2026-02-22 | Online | GoDaddy.com | [centered-video-625311.framer.app](https://phishdestroy.io/domain/centered-video-625311.framer.app/) | 2026-02-08 | Taken down | CSC Corporate Domains | [inspirational-advantage-843825.framer.app](https://phishdestroy.io/domain/inspirational-advantage-843825.framer.app/) | 2026-02-07 | Taken down | CSC Corporate Domains | [affable-arrow-439402.framer.app](https://phishdestroy.io/domain/affable-arrow-439402.framer.app/) | 2026-02-02 | Taken down | CSC Corporate Domains | [site-2xyv2b8yf.godaddysites.com](https://phishdestroy.io/domain/site-2xyv2b8yf.godaddysites.com/) | 2026-01-22 | Taken down | GoDaddy.com | [saisiedevotreidentifiant-ldent.godaddysites.com](https://phishdestroy.io/domain/saisiedevotreidentifiant-ldent.godaddysites.com/) | 2026-01-21 | Taken down | GoDaddy.com | [main-phone-080739.framer.app](https://phishdestroy.io/domain/main-phone-080739.framer.app/) | 2026-01-07 | Taken down | CSC Corporate Domains | [site-00h8xbk52.godaddysites.com](https://phishdestroy.io/domain/site-00h8xbk52.godaddysites.com/) | 2026-01-07 | Taken down | GoDaddy.com | [cd389554.tw1.ru](https://phishdestroy.io/domain/cd389554.tw1.ru/) | 2026-01-05 | Online | TIMEWEB-RU | [orange79.godaddysites.com](https://phishdestroy.io/domain/orange79.godaddysites.com/) | 2026-01-04 | Taken down | GoDaddy.com | [site-0c4q6v15a.godaddysites.com](https://phishdestroy.io/domain/site-0c4q6v15a.godaddysites.com/) | 2025-12-26 | Taken down | GoDaddy.com | [site-drq1z8cp0.godaddysites.com](https://phishdestroy.io/domain/site-drq1z8cp0.godaddysites.com/) | 2025-12-24 | Taken down | GoDaddy.com | [site-5xasj1gbt.godaddysites.com](https://phishdestroy.io/domain/site-5xasj1gbt.godaddysites.com/) | 2025-12-22 | Taken down | GoDaddy.com | [janera-jsdfjsjds-projects.vercel.app](https://phishdestroy.io/domain/janera-jsdfjsjds-projects.vercel.app/) | 2025-12-16 | Taken down | Vercel | [site-vgfeuud25.godaddysites.com](https://phishdestroy.io/domain/site-vgfeuud25.godaddysites.com/) | 2025-11-22 | Taken down | GoDaddy.com | [k901zx.webwave.dev](https://phishdestroy.io/domain/k901zx.webwave.dev/) | 2025-11-22 | Online | Key-Systems | [orange-service.godaddysites.com](https://phishdestroy.io/domain/orange-service.godaddysites.com/) | 2025-11-19 | Taken down | GoDaddy.com | [suporange.godaddysites.com](https://phishdestroy.io/domain/suporange.godaddysites.com/) | 2025-11-15 | Taken down | GoDaddy.com | [65b7d3757c56390008a2d84a--ods-android.netlify.app](https://phishdestroy.io/domain/65b7d3757c56390008a2d84a--ods-android.netlify.app/) | 2025-11-13 | Taken down | Netlify | [courteous-takeaways-514228.framer.app](https://phishdestroy.io/domain/courteous-takeaways-514228.framer.app/) | 2025-11-12 | Taken down | AT-88-Z (ASN: 16509) | [00003.godaddysites.com](https://phishdestroy.io/domain/00003.godaddysites.com/) | 2025-11-09 | Taken down | GoDaddy.com | [rubinal-sock.netlify.app](https://phishdestroy.io/domain/rubinal-sock.netlify.app/) | 2025-11-01 | Taken down | Netlify | [site-ggceiyj3y.godaddysites.com](https://phishdestroy.io/domain/site-ggceiyj3y.godaddysites.com/) | 2025-10-30 | Taken down | GoDaddy.com | [site-rx5e2resl.godaddysites.com](https://phishdestroy.io/domain/site-rx5e2resl.godaddysites.com/) | 2025-10-27 | Taken down | GoDaddy.com | [proton-cic.netlify.app](https://phishdestroy.io/domain/proton-cic.netlify.app/) | 2025-10-25 | Taken down | Netlify | [site-m71481kq3.godaddysites.com](https://phishdestroy.io/domain/site-m71481kq3.godaddysites.com/) | 2025-10-20 | Taken down | GoDaddy.com | [All 50 Orange reports](https://phishdestroy.io/domain/?brand=Orange) ## Where they are registered and hosted ### Registrars - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)22 - DuckDNS5 - CSC Corporate Domains4 - Netlify3 - [HOSTINGER operations](https://phishdestroy.io/registrar/hostinger/)2 - [NETIM](https://phishdestroy.io/registrar/netim/)2 - AT-88-Z (ASN: 16509)1 - [Key-Systems](https://phishdestroy.io/registrar/key-systems/)1 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)23 - [.app](https://phishdestroy.io/tld/app/)10 - [.org](https://phishdestroy.io/tld/org/)5 - [.fr](https://phishdestroy.io/tld/fr/)3 - [.xyz](https://phishdestroy.io/tld/xyz/)2 - [.dev](https://phishdestroy.io/tld/dev/)1 - [.ru](https://phishdestroy.io/tld/ru/)1 - [.store](https://phishdestroy.io/tld/store/)1 ### Hosting networks - AMAZON-02, US18 - AMAZON-02 - Amazon.com, Inc., US8 - Amazon.com, Inc.4 - Dynu Systems Incorporated4 - Cloudflare, Inc.2 - CLOUDFLARENET - Cloudflare, Inc., US2 - AMAZON-AES, US1 - ETOP-AS eTOP sp. z o.o., PL1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Orange; share of all PhishDestroy reports: 0.02%. Canonical: https://phishdestroy.io/brand/orange/