Criticalscore 60 · flagged Sunday, September 13, 2026

hdmovie2a.live

Appeared in the .live zone on Sunday, September 13, 2026; by the end of that day the census found active website about streaming piracy. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

page impersonates a brand
matched: Netflix
+22
brand in page title, not in the name
matched: netflix
+20
form on a brand-styled page
matched: has_form
+18
Registrar
Nameserver provider
Nameservers
dante.ns.cloudflare.com, magnolia.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
HDMovie2 - Watch Free Movies Online in HD Quality
Has a form
yes
Brand echoed

Model opinions

Second opinionlooks like abuseconfidence 95%· claude-opus-5

HDMovie2 is a pirated-film streaming/download portal offering unauthorised copies of 2026 Bollywood, Hollywood and Netflix/Amazon titles, with a Telegram operator channel and a chain of mirror domains (hdmovie2.biz.id, hdmovie20.cfd, hmovie2a.my); the 'NETFLIX' menu item is a piracy category label, not brand impersonation, and the only forms are site search.

First passlooks like abuseconfidence 92%· claude-haiku-4-5

This is a piracy front posing as a legitimate streaming site. While the page uses 'NETFLIX' as a content tag/category label (not impersonating Netflix itself), the site's primary purpose is to distribute copyrighted movies and TV shows illegally, with links to external piracy mirrors (hdmovie2.biz.id, hdmovie20.cfd, tellyhd.pics) and a Telegram operator contact for engagement. The form and operator contact (t.me) are consistent with piracy-site infrastructure rather than phishing, making this ab

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Sunday, September 13, 2026

Screenshot of hdmovie2a.live taken by the zone census on 2026-09-13

Same data as JSON: /api/zone/domain/hdmovie2a.live. This page is not indexed by search engines and does not link to the site it describes.