0cean273-mea6sui34.infomechanics.su
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of 0cean273-mea6sui34.infomechanics.su
This domain appears to host a page designed to resemble a YouTube video watch page, including familiar layout elements such as a video player, search bar, sidebar recommendations, and sign-in controls. The page metadata references an ABC News interview clip, suggesting the content may be presented as a news video or media-streaming page.
Based on the domain structure and the visible page content, this does not appear to be an official YouTube-owned domain. Instead, it may be a third-party site imitating a well-known video platform interface, potentially to attract clicks, capture credentials, or redirect visitors. The domain itself is newly registered and uses an unusual subdomain pattern, which can be associated with disposable or short-lived campaign infrastructure.
Safety Assessment for 0cean273-mea6sui34.infomechanics.su
Multiple risk indicators were present at the time of this scan. The domain was flagged by 16 out of 91 security engines, with many of those detections classifying it as phishing or otherwise malicious. In addition, the page visually appears to imitate YouTube while operating from an unrelated domain, which may indicate an attempt to mislead visitors about the site's identity or purpose.
Additional scan context also raises concern. The domain is only 39 days old, has no established traffic ranking, and one malware scan associated the domain and several linked static assets with a generic malicious-object label. While generic heuristic labels can sometimes be low-confidence on their own, they are more concerning here because they appear alongside broad multi-engine phishing detections. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal than content-based detections but still adds minor caution.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid TLS certificate issued by a mainstream certificate authority, and it appears to be served through Cloudflare infrastructure on IP address 172.67.205.149 in Toronto, Canada. Use of a valid certificate and a major CDN does not by itself indicate legitimacy, as these services are commonly used by both legitimate and abusive sites. DNSSEC status was reported as unknown, and the domain uses Cloudflare nameservers.
From a technical perspective, the domain is very new and uses a randomized-looking hostname pattern under a .su domain, which may be consistent with disposable phishing infrastructure. The scanned resources include multiple Next.js static JavaScript and CSS assets, suggesting a modern web application framework. No explicit file-based malware was confirmed in the file scan, but several linked assets were heuristically flagged at the time of analysis.
Share your experience with this website. Was it safe? Did you encounter any issues?