Highscore 46 · flagged Saturday, September 19, 2026

hhdmovies.mom

Appeared in the .mom zone on Saturday, September 19, 2026; by the end of that day the census found redirects elsewhere. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

TLD with a high abuse rate
matched: mom
+8
brand in page title, not in the name
matched: google
+20
form on a brand-styled page
matched: has_form
+18
Registrar
Key-Systems, LLC
Nameserver provider
Nameservers
ns19.domaincontrol.com, ns20.domaincontrol.com
First-day state
redirects elsewhere
HTTP status
200
Page title
Google Public DNS
Has a form
yes
Brand echoed

Model opinions

Second opinionsuspiciousconfidence 60%· claude-opus-5

The name 'hhdmovies' on a .mom TLD matches the HD-movies piracy-mirror naming family (hdmovies/hdhub clones), but the domain currently serves no content of its own — it just 302s to dns.google, a neutral holding target, so the Google branding in the capture is the destination's, not impersonation by this domain. Signals point to a piracy site being staged, but there is no content yet to confirm.

First passlooks like phishingtarget: Googleconfidence 95%· claude-haiku-4-5

The domain hhdmovies.mom redirects to dns.google, deceiving visitors into believing they are on Google's DNS tool. The domain name (unrelated to movies or Google) combined with the redirect to Google's branded page, nameserver configuration via Domaincontrol, and the presence of a form creates a classic phishing setup: users arriving at hhdmovies.mom are seamlessly redirected to what appears to be Google's legitimate service, lowering their guard and making them susceptible to credential theft o

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Saturday, September 19, 2026

Screenshot of hhdmovies.mom taken by the zone census on 2026-09-19

Same data as JSON: /api/zone/domain/hhdmovies.mom. This page is not indexed by search engines and does not link to the site it describes.