moonrays.shop
Appeared in the .shop zone on Sunday, September 13, 2026; by the end of that day the census found active website about e-commerce & retail. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
MoonRays sells 'Netflix Premium / Prime Video / Disney+ Hotstar' accounts at ₹349 for 3 months via direct UPI payment with credentials dispatched over WhatsApp — an unauthorised OTT credential-resale/piracy front (and a payment-first, no-recourse shape), not a licensed reseller; it does not pretend to be Netflix itself, so it is abuse rather than phishing.
MoonRays is a resale/credential-sharing operation selling unauthorized access to Netflix, Prime Video, Disney+, and other streaming services via WhatsApp for ₹349–₹1,947. While it uses Netflix branding in promotional material, it is not impersonating Netflix as an organization; rather, it is a fraud scheme selling stolen or shared credentials. The WhatsApp operator contact, UPI payment model, and 'instant delivery' language are characteristic of account-resale scams, not credential phishing.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Sunday, September 13, 2026
Same data as JSON: /api/zone/domain/moonrays.shop. This page is not indexed by search engines and does not link to the site it describes.