Highscore 42 · flagged Sunday, August 30, 2026

cardnay.store

Appeared in the .store zone on Sunday, August 30, 2026; by the end of that day the census found active website about e-commerce & retail. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

page impersonates a brand
matched: Netflix
+22
brand in page title, not in the name
matched: netflix
+20
Registrar
NameCheap, Inc.
Nameserver provider
Nameservers
dns1.p01.nsone.net, dns2.p01.nsone.net, dns3.p01.nsone.net, dns4.p01.nsone.net
First-day state
active website
HTTP status
200
Page title
cardnay | Buy Premium Digital Subscriptions in Bangladesh
Has a form
no
Brand echoed

Model opinions

Second opinionlooks like abuseconfidence 62%· claude-opus-5

Bangladeshi gray-market reseller offering 'premium subscriptions' (Netflix and other streaming/design brands' logos and names used without authorisation) for instant activation, paid by bKash/Nagad through a WhatsApp help desk with no company identity, refund path, or on-site checkout — the classic shared/stolen-account resale front rather than a credential-harvesting phish.

First passlooks like phishingtarget: Netflixconfidence 95%· claude-haiku-4-5

The page impersonates Netflix by claiming to sell 'Premium Subscriptions' and referencing Netflix alongside other streaming services, while the domain 'cardnay.store' creates false legitimacy. The form collects personal data (name, phone, email) posting to itself with no legitimate Netflix integration, and operator contact via WhatsApp indicates credential/payment harvesting intent rather than a genuine reseller.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Sunday, August 30, 2026

Screenshot of cardnay.store taken by the zone census on 2026-08-30

Same data as JSON: /api/zone/domain/cardnay.store. This page is not indexed by search engines and does not link to the site it describes.