A photo would have helped. Then we could see the manufacturers logo and if it was thro hole or surface mount.
The ‘HM99AL’ you quoted could be the “Assembly Location, Wafer Lot, Year, Work Week, Pb-free package” information?
Perhaps the second line is the device ID?
Probably something like this
http://wiki.sunfounder.cc/index.php?title=Step-down_DC-DC_Converter_ModuleRegarding the Metal Oxide Varistor, I can’t identify the manufacturer, but that’s not important.
For protection choose a component with approx.
1.6x higher than the circuit RMS AC voltage,
1.2x higher than the circuit DC voltage