Most phishing scams I’ve seen use some IP address as the web server — or an indistinguishable domain name. However this scam is actually using the domain name http://secure.orange-register.net. Brave. Because with a domain, you can be identified — at some point. Or, at least, there’s a paper trail of sorts.
I did a whois on the domain — of course the details are, one imagines, completely fake. Although I wonder how accurate the postcode is? 
Now, if I was Orange, I’d have register.com or someone continually watching for people registering any domains with the word ‘orange’ in them, a) for possible trademark infringements and b) for people running phishing scams. I wonder if they have this? Or if that is perhaps an unreasonable expectation.
This domain should, clearly, be shut down immediately. It’s passing off and intended purely for capturing the financial details of unwitting Orange customers.
If you know anyone at Orange, perhaps you might advise them that orange-register.net should be closed.
Get a daily email update from us -- by using this QR code to sign up. Give it a go and see if it works. If not, the link you need to subscribe is 
