plsfreshui[.]weebly[.]com

PhishDestroy identifies the domain plsfreshui.weebly.com as a high-risk generic phishing campaign currently active and impersonating the Orange.fr SMS portal (SMS.orange.fr). This domain poses a critical threat to users who may receive fraudulent messages directing them to this malicious site, risking credential theft and financial fraud. The campaign exploits trust in the legitimate Orange brand to deceive victims into entering sensitive information.

This domain was flagged by 19 of 95 VirusTotal vendors, registered through MarkMonitor, Inc., and resolves to IP address 74.115.51.9. The domain was created on March 29, 2006, and currently appears on 2 security blocklists. The SSL certificate is issued by Let's Encrypt, which does not validate the legitimacy of the domain itself. This domain is already blocked by OpenPhish and OISD, indicating widespread recognition of its malicious nature.

Given the high-risk status and active nature of this phishing campaign, PhishDestroy strongly advises users to avoid clicking any links associated with plsfreshui.weebly.com. If you encounter this domain, report it immediately to your email provider or security team. Organizations should ensure their security solutions are updated to block this domain and similar threats. Users should verify the authenticity of SMS messages purporting to be from Orange by contacting the official Orange support channels directly.