Phishing detection: netflixrenew.com

Netflix
https://netflixrenew.com Access site
Screenshot
Screenshot of netflixrenew.com
Phishunt analysis Beta
70 high suspicion likely_phishingheuristic risk score · not a probability
Why?
  • +6.1 Google Safe Browsing
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +4.0 Young domain
  • +3.9 Password field
  • +3.7 Brand in domain label
  • +2.2 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.9 Young certificate
  • +0.9 No registrar lock
  • +0.7 Brand in cert SAN
  • +0.3 Free CA
  • +0.3 Long domain
  • +0.2 Suspicious TLD
  • Boosted to 45: Google-flagged credential form
  • Boosted to 70: Credential + brand lookalike
18 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Impersonates Netflix with a renewal-themed domain registered about 4 days ago and a certificate naming the brand. The page has a password input and is flagged by Google Safe Browsing, consistent with account credential and billing harvesting behind Cloudflare.

Password fieldGoogle Safe BrowsingYoung domain
AI-generated from stored detector signals - the AI never visited the site. · 2026-11-06 · confidence 90%
Domain & Network
Whois
Registrar Porkbun LLC
Network
IP 172.67.177.173 Cloudflare CDN
Country United StatesUnited States
ASN AS13335
TLS Cert YE1
External detection Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Report this phishing
Network / ASN Cloudflare, Inc.
Brand owner Netflix

Tracked from 2026-11-06 17:20 UTC  ·  Last refreshed 2026-11-06 17:30 UTC