renouvelez-votre-souscription[.]com

This domain, renouvelez-votre-souscription.com, is flagged as an active high-risk phishing site targeting users through a fraudulent subscription renewal scheme. Registered on May 11, 2026, the domain resolves to IP 180.178.160.153, hosted in Pakistan under Telecom Services. Infrastructure analysis reveals the use of Plesk Obsidian 18.0.77, as indicated by the page title, suggesting the site may exploit web hosting control panel branding to appear legitimate. The domain is served by four nameservers (ns1.ultahost.com through ns4.ultahost.com) and was registered through Ultahost, Inc., a provider frequently observed in malicious infrastructure. The site is currently active, returning an HTTP 303 redirect status, which is atypical for legitimate subscription portals and may indicate automated redirection to a fraudulent payment or credential harvesting page. It appears on one security blocklist and has been flagged in a single AlienVault OTX threat intelligence pulse, reinforcing its classification as malicious. Gridinsoft assigns it a trust score of 0/100, further corroborating its high-risk status. While one security vendor on VirusTotal has detected the domain, the absence of broader detection does not diminish its threat level, as phishing domains often evade initial scans. No specific brand impersonation is confirmed beyond the Plesk-related page title, and the exact content of the phishing kit remains unanalyzed. Defenders should treat this domain as a confirmed phishing asset, block DNS resolution to 180.178.160.153, and monitor associated nameserver infrastructure for additional malicious domains. The short registration age and use of Let's Encrypt SSL certificates (R12) align with common phishing tactics, where free certificates are leveraged to create a false sense of security.