# integration.orionpharmaanimalhealth.com — SUSPICIOUS

> integration.orionpharmaanimalhealth.com shows a fake sign-in page luring users with a title claiming to be Orion Pharma Animal Health; VirusTotal score 0/95,.

## Summary
PhishDestroy identifies integration.orionpharmaanimalhealth.com as an active generic phishing domain posing as Orion Pharma Animal Health’s login portal. It features a page titled “Sign in to your account” and likely attempts to harvest corporate or personal credentials under the guise of animal-health services. No drainer kit fingerprint has been publicly released.    This domain was flagged on April 16, 2021, and is registered through MarkMonitor, Inc. It resolves to the IP address 104.18.33.90 and presents a valid SSL certificate issued by Google Trust Services. VirusTotal currently shows 0 out of 95 engines detecting the page, and the domain remains absent from Google Safe Browsing at time of writing.    The campaign is presently active, with the seed 293efc indicating ongoing tracking under heightened suspicion. No mitigations are listed in public feeds, so blocking the domain at DNS/WAF and warning affected users remains the advised countermeasure. Remaining risk is high given the zero-detection status and continued availability of the phishing page.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Page title: Sign in to your account

## Domain Intelligence
- Registered: 2021-04-16 13:18:34
- Registrar: MarkMonitor, Inc.
- IP: 104.18.33.90

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ceabfaa7-5c1e-4a13-8ffe-7e358a6485d0
- PhishDestroy: https://phishdestroy.io/domain/integration.orionpharmaanimalhealth.com/
- LLM endpoint: https://phishdestroy.io/domain/integration.orionpharmaanimalhealth.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/integration.orionpharmaanimalhealth.com/
Last updated: 2026-03-24