Highscore 46 · flagged Tuesday, September 1, 2026

lecrazy.mom

Appeared in the .mom zone on Tuesday, September 1, 2026; by the end of that day the census found active website about food & restaurants. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

TLD with a high abuse rate
matched: mom
+8
brand in page title, not in the name
matched: booking
+20
form on a brand-styled page
matched: has_form
+18
Registrar
PDR Ltd. d/b/a PublicDomainRegistry.com
Nameserver provider
Nameservers
lloyd.ns.cloudflare.com, suzanne.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
Le Spectacle du Crazy Horse® - Réservez Maintenant en ligne
Has a form
yes
Brand echoed

Model opinions

Second opinionlooks like phishingtarget: Crazy Horse Parisconfidence 72%· claude-opus-5

Newly registered .mom domain behind Cloudflare serves a pixel-for-pixel clone of the Crazy Horse Paris booking site (logo, offer names, prices, cart and 'Log in'), with even the 'Site officiel' link kept on-site (no offsite hosts) — a self-contained replica of a ticketing checkout designed to collect card and personal data under the brand's name.

First passlooks like phishingtarget: Crazy Horse Parisconfidence 92%· claude-haiku-4-5

The domain lecrazy.mom impersonates Crazy Horse Paris (a famous cabaret in Paris) using the brand's logo, trademarked name, show titles, pricing, and booking interface. The page contains a login form posting to itself with no offsite links—a sealed-room phishing pattern designed to capture credentials. The .mom TLD combined with 'lecrazy' obscures the impersonation from casual inspection, and 'booking' in the page title (not the domain name) is the decoy text masking credential theft intent.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Tuesday, September 1, 2026

Screenshot of lecrazy.mom taken by the zone census on 2026-09-01

Same data as JSON: /api/zone/domain/lecrazy.mom. This page is not indexed by search engines and does not link to the site it describes.