https://www.update-netflix.com/

Impersonating Netflix

Intent: Credential collection

• Domain is not operated by Netflix
• TLS certificate has no organization information
• Domain was registered very recently
• Domain not registered through Netflix's usual registrar
• SPF record does not reference Netflix's infrastructure

Netflix-branded payment method update form requesting credit or debit card details