YouTube

Streaming & media United Statesyoutube.comRank 96 of the most impersonated
Cert findings · 24 h
1
Cert findings · 7 days
9
1 reported or listed · 8 on phishing hosts
Registered lookalikes
303
58 listed by a source or an address list
Official domains
54
verified from YouTube's own sites and records

Certificate findings for YouTube

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to YouTube's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 20 findings, grouped by hostname

  1. youtube-downloader-mp3.com US · AS46475 · Limestone Networks, Inc.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 y ago
    DetailsHide
    Hostname
    youtube-downloader-mp3.com
    First seen
    2026-11-05 09:07 UTC
    DNS
    Resolves · checked 2026-11-05 09:07 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 208.115.249.234.
    1. Phishing-host list fetched with the address
    2. Resolved to 208.115.249.234
    Brand
    YouTube
    Addresses
    208.115.249.234 · United States · AS46475 LIMESTONENETWORKS - Limestone Networks, Inc.
    192.157.56.141 · Canada · AS55286 SERVER-MANIA - B2 Net Solutions Inc.
    Domain
    youtube-downloader-mp3.com
    Registered
    2018-08-06 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:36 UTC

    Suggest a correction

  2. youtuberewards.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    youtuberewards.site
    First seen
    2026-11-04 09:10 UTC
    First published
    2026-11-04 10:38 UTC
    DNS
    Resolves · checked 2026-11-05 10:49 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-04 08:05 UTC to 2027-02-02 08:05 UTC
    Logged 2026-11-04 09:04 UTC in Google ParcelYard2027h1, entry 605,617,908
    SHA-256 4bfcf8e50625448586a93d8c1f084d9fe77d89a8c1bedf971a2aa8a1e6587caa
    Public key SHA-256 f4431187aa3c58904c978fa0c4967f1b252cc4eb3c4318a811208af503d78d20
    Brand
    YouTube
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    youtuberewards.site
    Registered
    2026-05-22 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:32 UTC

    Suggest a correction

  3. www.youtuberewards.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.youtuberewards.site
    First seen
    2026-11-04 09:10 UTC
    First published
    2026-11-04 10:38 UTC
    DNS
    Resolves · checked 2026-11-05 10:49 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-04 08:05 UTC to 2027-02-02 08:05 UTC
    Logged 2026-11-04 09:04 UTC in Google ParcelYard2027h1, entry 605,617,908
    SHA-256 4bfcf8e50625448586a93d8c1f084d9fe77d89a8c1bedf971a2aa8a1e6587caa
    Public key SHA-256 f4431187aa3c58904c978fa0c4967f1b252cc4eb3c4318a811208af503d78d20
    Brand
    YouTube
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    youtuberewards.site
    Registered
    2026-05-22 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:32 UTC

    Suggest a correction

  4. youtubede.lol DE · AS24940 · HETZNER-AS Hetzner Online G…
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    youtubede.lol
    First seen
    2026-11-04 01:16 UTC
    First published
    2026-11-04 01:42 UTC
    DNS
    Resolves · checked 2026-11-05 01:47 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.98.101.145.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.98.101.145
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-04 00:14 UTC to 2027-02-02 00:14 UTC
    Logged 2026-11-04 01:13 UTC in Google PlumbersArms2027h1, entry 600,381,826
    SHA-256 8705319d19d2429bd9fb8786ce7b5c007aa6831f7d969ea40e77422864604f41
    Public key SHA-256 0b8816fd21efe38dad425c1d5bfd32143a1895debf2a042c402cc4d92ba4b4c5
    Brand
    YouTube
    Addresses
    91.98.101.145 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (91.98.101.145): a cloud provider. It rents servers and addresses to its customers.
    Domain
    youtubede.lol
    Registered
    2025-11-06 · Dynadot Inc
    MX
    Receives mail at mx.domainparking.de
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 02:04 UTC

    Suggest a correction

  5. www.youtubede.lol DE · AS24940 · HETZNER-AS Hetzner Online G…
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 12 mo ago
    DetailsHide
    Hostname
    www.youtubede.lol
    First seen
    2026-11-04 01:16 UTC
    First published
    2026-11-04 01:42 UTC
    DNS
    Resolves · checked 2026-11-05 01:47 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.98.101.145.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.98.101.145
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-04 00:14 UTC to 2027-02-02 00:14 UTC
    Logged 2026-11-04 01:13 UTC in Google PlumbersArms2027h1, entry 600,381,826
    SHA-256 8705319d19d2429bd9fb8786ce7b5c007aa6831f7d969ea40e77422864604f41
    Public key SHA-256 0b8816fd21efe38dad425c1d5bfd32143a1895debf2a042c402cc4d92ba4b4c5
    Brand
    YouTube
    Addresses
    91.98.101.145 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (91.98.101.145): a cloud provider. It rents servers and addresses to its customers.
    Domain
    youtubede.lol
    Registered
    2025-11-06 · Dynadot Inc
    MX
    Receives mail at mx.domainparking.de
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 02:04 UTC

    Suggest a correction

  6. youtube-meta-generator.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 10 mo ago
    DetailsHide
    Hostname
    youtube-meta-generator.com
    First seen
    2026-11-02 13:06 UTC
    First published
    2026-11-02 14:21 UTC
    DNS
    Resolves · checked 2026-11-04 14:41 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-02 12:06 UTC to 2027-01-31 12:06 UTC
    Logged 2026-11-02 13:04 UTC in Geomys Tuscolo2027h1, entry 445,474,677
    SHA-256 5cdee3aea5725b04d1bba3adfff16b4da99e9dda25ac288b1cab23ee5b21071f
    Public key SHA-256 bc96cf69859a4520e5ba45c82182da4184e5cd77978f9dd7253fab5a90a1f0d6
    Brand
    YouTube
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    youtube-meta-generator.com
    Registered
    2026-01-20 · HOSTINGER operations, UAB
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 14:34 UTC

    Suggest a correction

  7. www.youtube-meta-generator.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 10 mo ago
    DetailsHide
    Hostname
    www.youtube-meta-generator.com
    First seen
    2026-11-02 13:06 UTC
    First published
    2026-11-02 14:21 UTC
    DNS
    Resolves · checked 2026-11-04 14:41 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-02 12:06 UTC to 2027-01-31 12:06 UTC
    Logged 2026-11-02 13:04 UTC in Geomys Tuscolo2027h1, entry 445,474,677
    SHA-256 5cdee3aea5725b04d1bba3adfff16b4da99e9dda25ac288b1cab23ee5b21071f
    Public key SHA-256 bc96cf69859a4520e5ba45c82182da4184e5cd77978f9dd7253fab5a90a1f0d6
    Brand
    YouTube
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    youtube-meta-generator.com
    Registered
    2026-01-20 · HOSTINGER operations, UAB
    MX
    Receives mail at mx1.hostinger.com, mx2.hostinger.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-04 14:34 UTC

    Suggest a correction

  8. youtube-rewards.online DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…5 addresses
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    youtube-rewards.online
    First seen
    2026-10-31 00:47 UTC
    First published
    2026-10-31 01:50 UTC
    DNS
    Resolves · checked 2026-11-05 01:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.78.156.59.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 5.78.156.59
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-30 23:44 UTC to 2027-01-28 23:44 UTC
    Logged 2026-10-31 00:42 UTC in Google PlumbersArms2027h1, entry 531,788,255
    SHA-256 12964fa1d4c846555f868649ccaf38cb7c641e9afa8c24cad67b9675215c7504
    Public key SHA-256 e75a666dfe6f112e8d889acb870aab868a6f19474c6e65748b1fb3dfd842a249
    Brand
    YouTube
    Addresses
    5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH
    5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers.
    Domain
    youtube-rewards.online
    Registered
    2026-01-05 · VIRTUA DRUG Kutatási Szolgáltató Korlátolt Felelősségű Társaság
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  9. youtube.alamostrategicmfg.cfd VG · AS200313 · ProHoster-AS IT WEB LTD
    ListedUnder alamostrategicmfg.cfd, listed by MetaMaskMX presentSPF ~allDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    youtube.alamostrategicmfg.cfd
    First seen
    2026-10-30 16:00 UTC
    First published
    2026-10-30 17:03 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 17:13 UTC
    Listed
    MetaMask, listing alamostrategicmfg.cfd and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-30 14:58 UTC to 2027-01-28 14:58 UTC
    Logged 2026-10-30 15:56 UTC in Google ParcelYard2027h1, entry 524,934,509
    SHA-256 35c78bc8e5e060c797d0a7530ea8721e6bb008a0639b8086c26a5daddcd9268a
    Public key SHA-256 bc1031525a819f4bf60a356e5e7a739a45ec2d4615713bc445a99b47ae37183b
    Brand
    YouTube
    Addresses
    195.242.118.180 · British Virgin Islands · AS200313 ProHoster-AS IT WEB LTD
    Domain
    alamostrategicmfg.cfd
    Registered
    2026-07-06 · NameSilo, LLC
    MX
    Receives mail at mx1.emailsrvr.com, mx2.emailsrvr.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  10. youtube-wanli.com US · AS393437 · KLAYER LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    youtube-wanli.com
    First seen
    2026-10-29 06:32 UTC
    First published
    2026-10-31 07:18 UTC
    DNS
    Resolves · checked 2026-11-05 07:23 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 72.244.91.252.
    1. Resolved to 72.244.91.252
    2. Phishing-host list fetched with the address
    3. Latest DNS check
    Brand
    YouTube
    Addresses
    72.244.91.252 · United States · AS393437 KLAYER - KLAYER LLC
    Domain
    youtube-wanli.com
    Registered
    2026-10-29 · Dominet (HK) Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  11. www.youtube-wanli.com US · AS393437 · KLAYER LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    www.youtube-wanli.com
    First seen
    2026-10-29 06:32 UTC
    First published
    2026-10-31 07:18 UTC
    DNS
    Resolves · checked 2026-11-05 07:22 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 72.244.91.252.
    1. Resolved to 72.244.91.252
    2. Phishing-host list fetched with the address
    3. Latest DNS check
    Brand
    YouTube
    Addresses
    72.244.91.252 · United States · AS393437 KLAYER - KLAYER LLC
    Domain
    youtube-wanli.com
    Registered
    2026-10-29 · Dominet (HK) Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  12. www.youtubr.cz CZ · AS15685 · CASABLANCA-AS CASABLANCA IN…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF all omittedDMARC missingRegistered 14 y ago
    DetailsHide
    Hostname
    www.youtubr.cz
    First seen
    2026-10-28 15:22 UTC
    First published
    2026-10-28 16:14 UTC
    DNS
    Resolves · checked 2026-11-04 16:21 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.78.104.3.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 77.78.104.3
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-28 14:19 UTC to 2027-01-26 14:19 UTC
    Logged 2026-10-28 15:18 UTC in IPng Networks Gouda2027h1, entry 249,342,812
    SHA-256 a1cca992df3b97ffa87909ff1ce3a97020c0b7f7150aae8e21626112a333a324
    Public key SHA-256 e0e8d26b41726d1766ead2e594b4743dc8c52ecee5e2d6dea4ea3c2fe9df2b1c
    Brand
    YouTube
    Addresses
    77.78.104.3 · Czechia · AS15685 CASABLANCA-AS CASABLANCA INT a.s.
    Domain
    youtubr.cz
    Registered
    2012-09-23 · Gransy s.r.o.
    MX
    Receives mail at mail.youtubr.cz
    SPF
    SPF record without an "all" mechanism
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 19:27 UTC

    Suggest a correction

  13. youtubr.cz CZ · AS15685 · CASABLANCA-AS CASABLANCA IN…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF all omittedDMARC missingRegistered 14 y ago
    DetailsHide
    Hostname
    youtubr.cz
    First seen
    2026-10-28 15:21 UTC
    First published
    2026-10-28 16:14 UTC
    DNS
    Resolves · checked 2026-11-04 16:21 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.78.104.3.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 77.78.104.3
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-10-28 14:19 UTC to 2027-01-26 14:19 UTC
    Logged 2026-10-28 15:18 UTC in IPng Networks Gouda2027h1, entry 249,342,812
    SHA-256 a1cca992df3b97ffa87909ff1ce3a97020c0b7f7150aae8e21626112a333a324
    Public key SHA-256 e0e8d26b41726d1766ead2e594b4743dc8c52ecee5e2d6dea4ea3c2fe9df2b1c
    Brand
    YouTube
    Addresses
    77.78.104.3 · Czechia · AS15685 CASABLANCA-AS CASABLANCA INT a.s.
    Domain
    youtubr.cz
    Registered
    2012-09-23 · Gransy s.r.o.
    MX
    Receives mail at mail.youtubr.cz
    SPF
    SPF record without an "all" mechanism
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 19:27 UTC

    Suggest a correction

  14. youtube-akademiya.uz UZ · AS35326 · SUVAN-NET "SUVAN NET" LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC policy noneRegistered 4 y ago
    DetailsHide
    Hostname
    youtube-akademiya.uz
    First seen
    2026-10-28 02:21 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 37.153.159.13.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 37.153.159.13
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-28 01:19 UTC to 2027-01-26 01:19 UTC
    Logged 2026-10-28 02:17 UTC in Google PlumbersArms2027h1, entry 481,927,406
    SHA-256 92e06b1260bb3c3ab4380d4a4d734bcb1da6783a324101b2b46820baedc587bc
    Public key SHA-256 2b9f87888fa982e56f91db20a406ecb8a70809b42e348d4dbc688edc6b072361
    Brand
    YouTube
    Addresses
    37.153.159.13 · Uzbekistan · AS35326 SUVAN-NET "SUVAN NET" LLC
    Domain
    youtube-akademiya.uz
    Registered
    2022-12-10 · Суванов А.А.
    MX
    Receives mail at youtubeakademiya-uz01i.mail.protection.outlook.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 08:42 UTC

    Suggest a correction

  15. youtubelive.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    youtubelive.online
    First seen
    2026-10-28 00:06 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-27 23:06 UTC to 2027-01-25 23:06 UTC
    Logged 2026-10-28 00:04 UTC in Google ParcelYard2027h1, entry 479,632,976
    SHA-256 288c94b914a4b554e882a4b2dfc65a35d2a5235f7e5de9ba90acb2a9b15a0ac6
    Public key SHA-256 8442d5fb76f82d986fe907457c203fce22840d0a2d21df340629b33f6560283b
    Brand
    YouTube
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    youtubelive.online
    Registered
    2026-05-15 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:35 UTC

    Suggest a correction

  16. www.youtubelive.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.youtubelive.online
    First seen
    2026-10-28 00:06 UTC
    DNS
    Resolves · checked 2026-11-05 09:00 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-27 23:06 UTC to 2027-01-25 23:06 UTC
    Logged 2026-10-28 00:04 UTC in Google ParcelYard2027h1, entry 479,632,976
    SHA-256 288c94b914a4b554e882a4b2dfc65a35d2a5235f7e5de9ba90acb2a9b15a0ac6
    Public key SHA-256 8442d5fb76f82d986fe907457c203fce22840d0a2d21df340629b33f6560283b
    Brand
    YouTube
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    youtubelive.online
    Registered
    2026-05-15 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:35 UTC

    Suggest a correction

  17. youtu.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    youtu.site
    First seen
    2026-10-27 13:07 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Resolved to 2.57.91.91
    3. Latest DNS check
    Certificate
    Logged in Google PlumbersArms2027h1, entry 472,289,205
    SHA-256 1b3b40067a844d5b0a848a29bbbafedb351cee94bf55bf00d6cddbd93dfe2d63
    Brand
    YouTube
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    youtu.site
    Registered
    2025-11-29 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:31 UTC

    Suggest a correction

  18. www.youtu.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    www.youtu.site
    First seen
    2026-10-27 13:07 UTC
    DNS
    Resolves · checked 2026-11-05 09:00 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Resolved to 2.57.91.91
    3. Latest DNS check
    Certificate
    Logged in Google PlumbersArms2027h1, entry 472,289,205
    SHA-256 1b3b40067a844d5b0a848a29bbbafedb351cee94bf55bf00d6cddbd93dfe2d63
    Brand
    YouTube
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    youtu.site
    Registered
    2025-11-29 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:31 UTC

    Suggest a correction

  19. www.download-youtube.ru RU · AS198610 · BEGET-AS Beget LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF all omittedDMARC missing
    DetailsHide
    Hostname
    www.download-youtube.ru
    First seen
    2026-10-26 08:06 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 87.236.16.13.
    1. Phishing-host list fetched with the address
    2. Resolved to 87.236.16.13
    3. Latest DNS check
    Certificate
    Logged in DigiCert Sphinx2027h1, entry 277,035,322
    SHA-256 7631d984834ce77a6334925d92f74ff4fd751c8fd7f1e5bcd87c55284284a4a3
    Brand
    YouTube
    Addresses
    87.236.16.13 · Russia · AS198610 BEGET-AS Beget LLC
    Domain
    download-youtube.ru
    MX
    Receives mail at mx1.beget.com, mx2.beget.com
    SPF
    SPF record without an "all" mechanism
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

  20. download-youtube.ru RU · AS198610 · BEGET-AS Beget LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF all omittedDMARC missing
    DetailsHide
    Hostname
    download-youtube.ru
    First seen
    2026-10-26 08:06 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 87.236.16.13.
    1. Phishing-host list fetched with the address
    2. Resolved to 87.236.16.13
    3. Latest DNS check
    Certificate
    Logged in DigiCert Sphinx2027h1, entry 277,035,322
    SHA-256 7631d984834ce77a6334925d92f74ff4fd751c8fd7f1e5bcd87c55284284a4a3
    Brand
    YouTube
    Addresses
    87.236.16.13 · Russia · AS198610 BEGET-AS Beget LLC
    Domain
    download-youtube.ru
    MX
    Receives mail at mx1.beget.com, mx2.beget.com
    SPF
    SPF record without an "all" mechanism
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches YouTube when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Streaming & media

All brands →