orange97[.]godaddysites[.]com

This domain, orange97.godaddysites.com, is identified as a generic phishing resource designed to impersonate Orange, a major telecommunications provider. Analysis indicates the site was crafted to harvest user credentials through a fraudulent login interface, presenting itself under the page title 'Orange.' The domain is currently offline, though prior activity suggests it was actively used in credential theft operations targeting Orange customers. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on February 21, 2026, an anomalous creation date likely intended to evade temporal detection heuristics. It resolves to the IP address 76.223.105.230, hosted within the Amazon.com, Inc. autonomous system (AS16509) in the United States. The SSL certificate, issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority - G2, provides a superficial layer of legitimacy while failing to mitigate the underlying malicious intent. Detection metrics confirm the domain was flagged by 21 of 95 security vendors on VirusTotal, with additional presence on one security blocklist. The registrar’s hosting platform, godaddysites.com, is frequently exploited due to its accessibility and low barrier to entry for threat actors. At present, the domain has been taken offline, though its prior operational status and detection history warrant continued vigilance. Organizations and end users are advised to treat any prior interactions with this domain as compromised, particularly if credentials or personal data were submitted. Network administrators should implement blocklist updates to prevent resolution of this domain and monitor for related indicators of compromise, including the IP address 76.223.105.230 and associated SSL certificate fingerprints. Users who accessed the site are strongly encouraged to reset passwords for any accounts potentially exposed and enable multi-factor authentication where available.