messageriealerte-orange[.]cloud-ip[.]cc

This domain is flagged as a generic phishing threat and remains under active investigation as of July 17, 2026. The domain was registered on August 21, 2025, through Cloud DNS Ltd, a registrar commonly observed in low-reputation or abusive domain registrations. It resolves to IP address 146.190.217.182 and uses nameservers from CloudNS (ns71.cloudns.net, ns72.cloudns.com, ns73.cloudns.net, ns74.cloudns.uk), a DNS provider frequently associated with phishing and scam operations. The domain name incorporates 'messageriealerte-orange', which suggests an attempt to impersonate a French telecommunications brand, though the exact content of the site has not been analysed and no brand target is confirmed in the available intelligence. The infrastructure remains active at the time of reporting, indicating the phishing operation is still accessible. Defenders should treat this domain as a confirmed phishing asset, block traffic to it at the network level, and monitor for related subdomains or IP changes. Given the registration date over ten months ago, this domain may be part of a longer-running campaign or repurposed for multiple attacks. No VirusTotal scan data is present in the intelligence, so detection rates or community flags cannot be assessed. The combination of a suspicious domain string, Cloud DNS Ltd registration, and CloudNS hosting strongly supports a malicious classification. Defenders should verify whether any internal systems have communicated with this domain and investigate for potential credential compromise.