bienvenuemessagerieorange[.]weebly[.]com

This domain, bienvenuemessagerieorange.weebly.com, is a credential theft site designed to impersonate Orange, a telecommunications provider. Visitors are presented with a fake login portal mimicking Orange’s webmail service, with the intent to harvest usernames and passwords. The site exploits trust in the Orange brand to deceive users into entering sensitive account details, which are then captured by threat actors for unauthorized access or further malicious activity. Analysis indicates the domain was registered through Safenames Ltd on March 29, 2006, though the phishing content appears to be a recent addition. The site resolves to the IP address 74.115.51.9, hosted on infrastructure belonging to Weebly, Inc. (AS27647) in the United States. Security vendors on VirusTotal flagged the domain, with 18 out of 95 engines detecting malicious activity. The SSL certificate is issued by Let’s Encrypt, a common tactic to lend false legitimacy to phishing pages. The domain is also listed on one security blocklist, further confirming its malicious intent. If you visited bienvenuemessagerieorange.weebly.com and entered login credentials, immediately change the passwords for your Orange account and any other services where the same credentials may have been reused. Enable multi-factor authentication (MFA) on all critical accounts to mitigate the risk of unauthorized access. Monitor your accounts for suspicious activity, such as unauthorized logins or transactions. Report the incident to Orange’s official security team and consider notifying relevant authorities or cybersecurity incident response organizations. Avoid interacting with any communications or links originating from this domain, as they may lead to further compromise.