Is 0123movies.com safe? Redirects, notifications and how to stop them
0123movies.com was a free movie-streaming page that asked for notification permission and opened ads in 2021; in October 2026 it forwarded us to an adult live-camera site instead of showing films. The page installed nothing in our test, so the trouble to remove is a notification permission, an extension or a file you ran because of it.
Facts checked October 6, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
A scan of the PC is a quick way to confirm that nothing installed is behind the 0123movies.com redirects.
Do it yourself · free Remove 0123movies.com yourself 1 step, about 5 minutes, no software needed.
0123movies.com: summary
| Type | Website that forwards visitors to other sites (formerly a free movie-stream page); not malware |
|---|---|
| Risk | Medium: it hands visitors to advertising partners; higher if you allowed notifications or ran a file from a page |
| Symptoms | Redirects to other addresses, notification prompts and pop-up tabs on the name or its copies; ads on the desktop from a permission allowed years ago; a start page or search engine you did not set, if an extension came with it |
| How to get rid of it | Block or remove the notification permission in the browser, remove unknown extensions and reset the browser (steps below); uninstall and scan only if you ran a file from a page |
| Our check (5 October 2026) | Forwarded to crmrc.livejasmin.com; no notification request, pop-up or service worker on that one visit; 14 other hosts contacted |
| Running since | 4 February 2017 (domain registered, paid until 4 February 2027) |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 15 more facts
| First reported by us | 2 January 2021 |
|---|---|
| Microsoft detection | No Microsoft detection name is known: we found none for the website, and nothing is installed by visiting it |
| Installed on the PC | Nothing: visiting the site installs no program |
| Registry record changed | 1 February 2026 (registrar GoDaddy.com, LLC) |
| Name servers | ns1.parklogic.com, ns2.parklogic.com |
| Other addresses | www9.0123movies.com (2021 prompts), 9.0123movies.com (2021 claim); not checked in 2026 |
| Distribution | Visitors find it by searching for free movies, or through ads, redirects and bundled software |
| Evidence | Our test of the site, the registry's record, our 2021 captures |
| Name | 0123movies.com |
| Domains | 0123movies.com |
| Ads shown as | Redirects through ad pages |
| Browsers | Chrome, Edge and Firefox |
| First seen | 2 January 2021 |
| Damage | Redirects to scam pages, fake updates and tech support scams |
| Facts checked | 6 October 2026 |
Facts checked on 5 and 6 October 2026 against our own test of the home page in desktop Chromium from Lithuania (one visit, no clicks) and the registry's RDAP record. We did not test the 2021 addresses or any copy.
What 0123movies.com is and how it works
0123movies.com is a website, not a program: in 2021 it presented itself as a free movie-streaming page, and when we opened it in October 2026 it sent the browser to an adult live-camera site instead. Opening a website installs nothing; a program is involved only if you ran a file that an ad or a page offered.
- 1
You search for free movies
People reach the name by searching for free films and series. In 2021 the page looked like a copy of the 123Movies layout, with a search box and menus for Genres, Country and TV-Series.
- 2
The page earns money from your visit
Free-stream sites are paid for by advertising, and in 2021 our captures showed pop-up ads, notification prompts and clicks that led to other sites. The address itself no longer shows a movie page.
- 3
The harm comes from what follows
A notification you allowed keeps sending ads to the desktop. A redirect can end on a scam, a fake player or a fake update. A file you run from such a page can install adware, and only an extension or program can change your browser's start page or search engine.
- Calls itself (2021)
- A site to "Watch free movies without disruption from annoying advertisements", with the line "Our site is Ads-Free"
- Moved to (2021 claim)
www9.0123movies.com, shown in the prompts of our 2021 pictures; our 2021 guide said the name could change often- October 2026
0123movies.comanswered with a page onlivejasmin.com, an adult live-camera site with an 18+ notice- Name servers
ns1.parklogic.comandns2.parklogic.com, as the registry's record lists them- Installs a program
- Not by opening it. Anything installed came from a file you ran
The change matters for anyone who finds the name in an old link. The movie page our 2021 guide described is not what the address shows now, so the "0123movies virus" people search for is the ads, prompts and redirects around the name, and any extension that was installed with it.
Is 0123movies.com dangerous?
Our test on 5 October 2026
We opened 0123movies.com the way a visitor does: a clean desktop Chromium profile, in Lithuania, on the home page only, with no clicks. This is nothing more than one visit from one country: adware pages often act differently by country, device, referrer, a second visit or a click, and many hide from automated browsers, so what we did not see is not proof that it never happens.
0123movies.com · desktop Chromium · Europe · 5 October 2026
- Page loadedThe address answered with status 200.
- Where the browser ended upOn
crmrc.livejasmin.com, a different domain, at a page titled "LiveJasmin.com - Hot Live Sex Shows!", with a notice that says to enter only if you are at least 18. We saw no movie page. - Tracking tags on the final addressThe address we landed on carried tags such as
utm_sourceandsubaffid, which look like an affiliate (referral) code: the sender is likely paid for the visit. We did not identify who gets paid. - Hosts contacted14 other hosts, among them
router.parklogic.com,click-v4.expclknb.com,filter.explorads.com,api-protected.protoawegw.comandcrdema.com, besides thelivejasmin.comandjsmsat.compages. The names suggest traffic routing and advertising, but we did not verify who runs them. - Notification requestNone on this one visit.
- Pop-upsNone. No extra window or tab opened on this visit.
- Service workerNone registered, so nothing stays in the browser from this visit.
- Ad networksOur detector listed no known ad network, yet the hosts above include names that look like ad or traffic services, so this row is not a clearance.
- Not testedOther countries, a phone, a second visit, a click on the page, and the addresses
www9.0123movies.comand9.0123movies.comfrom 2021. A site that forwards to an ad partner can send other visitors elsewhere.
Medium risk: the address no longer shows a movie site On this one visit the address forwarded to another company's adult site with affiliate-style tags, and we saw no notification prompt or pop-up. A quiet visit does not clear it: the old pages asked for notification permission and opened ads, and a site that sells its traffic can show other visitors something else.
What changed since our 2021 report
February 2017
The domain is registered
0123movies.com was registered on 4 February 2017 and is paid up until 4 February 2027. The registry record, held through GoDaddy, was last changed on 1 February 2026.
January 2021
Our first report: a movie site that said it had no ads
We described a free-stream page in the 123Movies style, shown with a Christmas theme of snow and trees, whose front page said "Watch free movies without disruption from annoying advertisements" and "Our site is Ads-Free". On opening it, no pop-up, banner or in-text link was visible at first.
The 0123movies.com front page in our 2021 report, with the ad-free claim at the bottom of the page. January 2021
The same page, listed in our report as a hijacker
Our report treated the name as a browser hijacker that sets the start page, new tab and search engine. The picture is the collage from that report: the site's pages with a search-results page behind them. Nothing in it shows a setting being changed.
The collage from our 2021 report: the movie site's pages and a search-results page. The woman is stock decoration. January 2021
A notification prompt, and others behind it
Chrome showed "www9.0123movies.com wants to Show notifications" with Block and Allow. In the same capture, another address,
topflownews.com, asked the same, and the notifications that had already arrived offered to scan a Mac and promised a prize in Russian. Allow lets a page send notifications until you take the permission back.
Three Chrome prompts from our 2021 report: two for www9.0123movies.com, one fortopflownews.com, with the ads that followed.January 2021
A new tab on another domain, then a second prompt
A click on the video opened a new tab on
newstext.biz, which asked for notification permission on a black page, whilewww9.0123movies.comasked again in a second prompt.
The prompts from newstext.bizandwww9.0123movies.comin our 2021 capture. Allow gives the page permission to send notifications.January 2021
Ads over the movie pages
Full-page ad overlays covered the site: one for a click-for-money scheme ("Register - Click ADS", "Always Instant Payment") and one for a game called Game of Thrones with a Play Now button.
Two ad overlays shown on the site in 2021, one for a paid-to-click scheme and one for a game. October 2026
Our new check: no movie page, a hand-off to an adult site
The address forwarded us to
crmrc.livejasmin.com. No notification request, pop-up or service worker appeared on that one visit. We are not showing the page here: it is an adult site, and what it shows is not what this guide is about.
One name on many addresses
The name has been used on more than one address, and nothing proves they all share an owner. Copies exist to sell traffic, so each one can behave differently.
| Address | What we know | Checked |
|---|---|---|
0123movies.com | Registered 4 February 2017; name servers at ParkLogic; forwarded to crmrc.livejasmin.com on one visit | 5 October 2026 |
www9.0123movies.com | The address in the 2021 notification prompts; our 2021 guide said the site moved to 9.0123movies.com | Not checked now |
topflownews.com | Asked for notification permission in a 2021 capture | Not checked now |
newstext.biz | Opened in a new tab and asked for notification permission in a 2021 capture | Not checked now |
People who look for a working 0123movies or an "unblocked" copy land on mirrors and proxies. Those are where prompts, pop-unders and fake players sit, because a copy exists to sell traffic. If an address asks you to click Allow before it shows anything, close it.
Did it change your browser?
A website cannot change your start page by itself; an extension or a program installed with other software does. If your browser keeps going to 0123movies.com or a page you did not choose, check these three places.
- 1
Start page and new tab
In Chrome open Settings > On startup and Settings > Appearance; in Firefox open Settings > Home. Remove any address you did not set yourself.
- 2
Search engine
In Chrome open Settings > Search engine > Manage search engines and site search; in Firefox open Settings > Search. Delete engines you do not recognise and choose the one you want as the default.
- 3
Extensions
Paste
chrome://extensionsoredge://extensionsinto the address bar, orabout:addonsin Firefox, and remove what you did not install yourself, especially video players, "search" or download helpers added recently. - 4
Still going back?
Use the reset step for your browser below. It puts the start page and search engine back and turns extensions off. If you suspect a program, follow the steps after "If you clicked an ad or ran a file".
The real risks, from most to least serious
Opening the address installed nothing in our test, so "0123movies virus" is not accurate for the page itself. These are the ways a visit to this name, or to a copy, can still go wrong.
- High
Running a file or installing an extension from a page
Free-stream pages offer players, codecs and extensions. An installer with extras, or an extension, is how adware and browser hijackers reach a PC. Only then does something change your start page, new tab or search engine, and that was the main complaint in our 2021 report.
- High
Scam and malware pages at the end of a redirect
Our 2021 guide warned that ads can lead to tech-support scams, phishing and sites that push bogus apps. People who follow them can lose money by buying a product or installing a fake program.
- Medium
Clicking Allow on a notification prompt
One click lets the page, or the page an ad opened, send ads to your desktop until you take the permission back. Chrome and Edge can show them with the window closed because they keep running in the background by default; Firefox shows them only while it is open.
- Medium
Redirects to other domains
In 2021 some clicks went straight to affiliated sites, and in 2026 the address itself forwarded to another company's site. The place you end up is chosen by whoever buys the traffic.
- Medium
Copyright trouble
Free copies of films and series on such sites are often unlicensed, and viewing them can bring trouble where you live. Using a licensed service avoids this.
- Low
Tracking by ad networks
Pages full of ads let the networks behind them see your IP address, the pages you visit and the ads you click. The site is not responsible for what those ads contain, so clicking is at your own risk.
What a hijacker or ad network can typically collect
- Technical details of the device
- Sites visited
- Links and ads clicked
- IP address
- Browser and device details
- Email address or phone number if you type one into a page
Our 2021 guide said the site had no Privacy Policy or Terms of Service; we did not re-check that in 2026. Without such documents there is no way to see where the data goes, so assume it can reach unknown third parties. If you typed a password or card number into a page an ad opened, change the password at once and tell your bank.
How to remove 0123movies.com
How to stop the 0123movies.com redirects
Work in this order and test a few links after each step, so you know which one was the cause.
Which browser shows the ads?
Remove extensions you do not recognise
Paste
chrome://extensionsinto the address bar and click Remove on anything you did not install yourself, especially video downloaders, "search" or PDF helpers added recently.Full procedure with screenshots: Remove a browser extension
Clear the site data
Press Ctrl + Shift + Delete, choose All time, tick Cookies and other site data and Cached images and files, and click Delete data.
Reset Chrome
Open Settings > Reset settings > Restore settings to their original defaults and confirm with Reset settings. This resets the start page, search engine and pinned tabs and turns off extensions; bookmarks and saved passwords stay. To stop notifications after you close Chrome, also turn off Settings > System > Continue running background apps when Google Chrome is closed.
Full procedure with screenshots: Reset a browser and fix a hijacked search engine
Remove extensions you do not recognise
Paste
edge://extensionsinto the address bar and click Remove under anything you did not install yourself.Full procedure with screenshots: Remove a browser extension
Clear the site data
Open Settings > Privacy, search, and services > Delete browsing data > Choose what to clear, set All time, tick Cookies and other site data and Cached images and files, and click Clear now.
Reset Edge
Open Settings > Reset settings > Restore settings to their default values and confirm with Reset. Extensions are turned off and the start page goes back to default; favourites, history and saved passwords stay. To stop notifications after you close Edge, turn off Settings > System and performance > Continue running background extensions and apps when Microsoft Edge is closed.
Full procedure with screenshots: Reset a browser and fix a hijacked search engine
Remove add-ons you do not recognise
Paste
about:addonsinto the address bar, open Extensions, and choose Remove from the three-dot menu of anything you did not install yourself.Full procedure with screenshots: Remove a browser extension
Clear cookies and site data
Open Settings > Privacy & Security > Cookies and Site Data > Clear Data, tick both boxes and click Clear.
Refresh Firefox
Open the menu > Help > More troubleshooting information and click Refresh Firefox. Add-ons and custom settings are removed and the home page goes back to default; bookmarks, history and passwords stay.
Full procedure with screenshots: Reset a browser and fix a hijacked search engine
Take back the notification permission
Safari 18 and later on macOS: open Safari > Settings > Websites > Notifications, select
0123movies.com(or any site you do not recognise) and set it to Deny, or click Remove. Untick Allow websites to ask for permission to send notifications at the bottom so no site can ask again.Remove extensions you do not recognise
In Safari > Settings > Extensions, select anything you did not install yourself and click Uninstall.
Clear the site data
In Safari > Settings > Privacy > Manage Website Data, remove the site's data, or use History > Clear History > all history. To empty the cache as well, turn on Show features for web developers in Settings > Advanced and choose Develop > Empty Caches.
Check the Mac for apps from the ads
Ads also target Mac users with fake players and "cleaners". In Finder > Applications, move anything unknown to the Bin. In System Settings > General > Login Items & Extensions, remove unknown items. Then use Go > Go to Folder to check
/Library/LaunchAgents,~/Library/LaunchAgents,/Library/LaunchDaemonsand/Library/Application Supportfor folders and files with the same unknown names, and empty the Bin.
Then, whichever browser you use
Step 1: Scan the PC if you downloaded anything from the ads
If you only saw the notifications and clicked nothing, you can stop before this step. If a notification led you to download or run something, delete that file, then scan Windows.
In Windows Security > Virus & threat protection > Scan options, run a Full scan, then choose Microsoft Defender Antivirus (offline scan) and Scan now. The offline scan restarts the PC and takes about 15 minutes on Windows 11 and Windows 10.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
After removal: keep the ads from coming back
If you allowed notifications from a 0123movies address
A permission granted in 2021 is still there today. It works even when the site changed, because the ads arrive from the push service the site signed you up to.
- 1
Chrome or Edge
Open Settings > Privacy and security > Site settings > Notifications. Find any
0123moviesaddress in the Allowed to send notifications list, open its three-dot menu and choose Block or Remove. - 2
Firefox
Open Settings > Privacy & Security, scroll to Permissions and click Settings next to Notifications. Select the address and click Remove Website.
- 3
Look for sites you do not recognise
Anything in the allowed list that you never visited on purpose came from a prompt like the ones in the 2021 pictures, for example
topflownews.comornewstext.biz. Remove it too.
If you clicked an ad or ran a file
The browser steps are enough if you only saw prompts or redirects. If an ad or a page led you to download or run something, do these three things as well.
- 1
Remove what was installed that day
Go to Settings > Apps > Installed apps (Windows 11) or Apps & features (Windows 10), sort by install date, and uninstall every program dated the day you followed the ad (Uninstall a program or app in Windows On uGetFix).
- 2
Run two Defender scans
In Windows Security > Virus & threat protection, run a Full scan, then the Microsoft Defender Antivirus (offline scan) from the scan options. The offline scan restarts the PC and can find trojans and backdoors that hide while Windows runs.
- 3
Reset the browser
Programs from ads often change the start page, search engine or extension list. Use the reset step for your browser below.
If you typed a password, card number or other details into a page an ad opened, change that password at once and tell your bank about the card.
How to keep it from happening again
Free-software bundles are how many such extensions arrive, so the habits below matter more than any single removal.
Do
- Turn off notification requests: in Chrome, Settings > Privacy and security > Site settings > Notifications > Don't allow sites to send notifications.
- Watch films on a licensed service or the studio's own site.
- Download programs only from their makers' sites or the Microsoft Store.
- When an installer offers Custom or Advanced setup, choose it and untick extra programs, extensions and pre-ticked offers; Quick or Recommended settings hide them.
- Read a few reviews of a new program before you install it; a program that seems legitimate can still behave like malware.
- Keep Microsoft Defender SmartScreen on, or Chrome's Enhanced protection: both warn before known malicious pages and downloads.
- On public networks, a VPN hides your IP address from the sites and ad networks you visit; it does not block ads or malware.
- Keep a current backup of your files (File History or OneDrive).
Don't
- Click Allow on a page that says you must allow notifications to play a video.
- Use a mirror, proxy or "unblocked" copy of a movie site: copies are where the ads and fake players sit.
- Install a player, codec or extension that a page demands before it shows a film.
- Run an
.exeor.msifile a streaming page offered as a player or update. - Buy anything, subscribe, or type card details on a page an ad opened.
- Trust an "ad-free" claim: free-stream pages are paid for by ads.
Safer ways to watch films and series
Use a service that has the rights to the film: it needs no extension and no permission prompt.
| Where to look | What it gives you |
|---|---|
| Your own TV or streaming subscription | Films and series you already pay for, on a phone, TV or computer |
| The studio's or broadcaster's own site and app | Full catalogues, with clear terms, many with a free ad-supported tier in some countries |
| Your library's streaming service | Free films and series with a library card, where your library offers it |
| Rent or buy from a store you know | Pay per film, with no extra downloads and a refund route if it fails |
If a page promises every new release for free, expect pop-ups and prompts: that is how it pays for itself. Pick a licensed source, or wait for the film.
Questions about 0123movies.com
Is 0123movies.com a virus?
No, the website itself is not a virus: opening it installs nothing. Our 2021 article called it a browser hijacker because the pages asked for notification permission, opened ads and sent clicks to other sites. That was the pages' behaviour, not a program on the computer.
A program or extension is involved only if you installed one that a page offered. If you only saw prompts or redirects, the browser steps on this page are enough. If you ran a file, uninstall what was installed that day and run a Microsoft Defender full scan and offline scan.
Is 0123movies.com safe to open?
Treat it as medium risk. On 5 October 2026 the address forwarded our browser to an adult live-camera site, livejasmin.com, with affiliate-style tags on the address, and we saw no notification prompt or pop-up on that one visit.
We tested the home page only, from Lithuania, with no clicks. A quiet visit does not clear a site: in 2021 the same name asked for notification permission and opened ads. Do not click Allow, install a player or extension, or run a download from it.
Why does 0123movies.com redirect me to another site?
The address sells its visitors on. Its name servers are ns1.parklogic.com and ns2.parklogic.com, and in our test it ended on crmrc.livejasmin.com, an address that carried referral tags. Where you land is chosen by whoever buys the traffic, so it can differ by country or visit.
We did not identify who is paid. If your browser lands on it without you typing it, check the start page, search engine and extensions, as described in the "Did it change your browser?" section.
Does 0123movies.com change my homepage or search engine?
A website alone cannot. Our 2021 guide said it set the homepage, new tab and search engine, but a change like that needs an extension or program that was installed, often in a bundle with free software.
Our 2026 visit installed nothing and we saw no extension. If your start page or search engine did change, open the browser settings and remove any address or engine you did not choose, then remove unknown extensions, and use the browser's reset if it keeps coming back.
How do I stop 0123movies notifications?
Open your browser's notification settings and block or remove the 0123movies address. In Chrome or Edge go to Settings > Privacy and security > Site settings > Notifications and block or remove 0123movies or www9.0123movies.com. In Firefox go to Settings > Privacy & Security > Permissions > Notifications > Settings and click Remove Website.
Remove other unfamiliar addresses too, such as the ones in our 2021 pictures. The ads come from a push service you signed up to, so they continue until the permission is removed, even if the site changed.
Is 0123movies.com legal?
We cannot say what is licensed on a site that no longer shows films, but free copies of recent films and series are often unlicensed, and our 2021 guide said viewing such content can bring trouble. The rules differ by country. You avoid the question by using a service that has the rights:
- your own subscription
- a studio or broadcaster site
- a library service
- a paid rental
Those also avoid the notification prompts and the redirects, and they show clear terms of use, which free-stream pages did not in 2021 according to our old report.
What happened to 0123movies.com and 9.0123movies.com?
The domain 0123movies.com was registered on 4 February 2017 and is paid up until 4 February 2027. In 2021 it showed a 123Movies-style page and said the name could change to www9.0123movies.com. In October 2026 the main address forwarded to another company's site, and we did not test the other one.
Mirrors and copies come and go, and nothing proves that one address belongs to the same owner as another. If you meet one that asks you to click Allow before it shows anything, close it. Our 2021 pictures show the addresses topflownews.com and newstext.biz doing exactly that, and we did not test them in 2026.
What do I do if I clicked an ad on 0123movies?
If you only closed the page, nothing is installed. If you clicked Allow, remove the notification permission. If an ad led you to run a file or install a player, uninstall every program dated that day under Settings > Apps > Installed apps, run a Full scan and the Microsoft Defender Antivirus (offline scan) in Windows Security, and reset the browser.
If you typed a password or a card number into a page an ad opened, change that password at once and tell your bank about the card.
How did 0123movies.com get on my computer?
The site itself does not get on a computer: you open it. The ads, notifications and extensions tied to the name arrive when someone clicks Allow, follows an ad, or installs a program that was bundled with free software or offered as a player.
Choose Custom or Advanced setup in installers, untick extras, and download only from the maker's site. If something was already installed, the steps on this page find it:
- check notifications
- extensions and the list of installed apps
- in that order
Will Fortect remove 0123movies.com?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For 0123movies.com, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- Verisign RDAP: record for 0123movies.com (registrar GoDaddy.com, LLC; name servers at ParkLogic) (read October 6, 2026)
- 0123movies.com: home page (our test of 5 October 2026, forwarded to crmrc.livejasmin.com) (no longer online) (read October 5, 2026)
- Google Chrome Help: Use notifications to get alerts (no longer online) (read October 6, 2026)
- Mozilla Support: Web Push notifications in Firefox (read October 6, 2026)
- 2-spyware.com: our 2021 report on 0123movies.com (old guide) (read October 6, 2026)