Phishing detection: the-replacements-on-netflix.pages.dev

Site impersonates Netflix on Cloudflare Pages using a brand-containing domain. The favicon matches known Netflix phishing kit patterns and the keyword classifier scores maximally. Flagged by urlscan as malicious, likely targeting streaming account credentials.