logo

Fake domain renewal emails trick website owners into paying scammers

ID: 83975732-37d8-570e-aa57-2b013382ca77

STIX ID: report--83975732-37d8-570e-aa57-2b013382ca77

Feed Name: Malwarebytes Blog

Threat Score
45/100

Date Published: 2026-06-25

Date Updated: 2026-06-25

...
...

This report describes a fraudulent domain-renewal phishing campaign that uses convincing emails and fake 'Renovarix' webpages—complete with fabricated WHOIS-like data and countdown timers—to trick site owners into submitting personal and payment information; it documents the scam flow, defensive guidance, and lists several malicious domains associated with the campaign.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.