gsed279-lin389-o0n.stationguard.su
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of gsed279-lin389-o0n.stationguard.su
The domain gsed279-lin389-o0n.stationguard.su appears to host a page styled to resemble a YouTube video watch page. Based on the screenshot and metadata, it presents a video titled about Rep. Ro Khanna and child-protection legislation, with branding and layout that imitate a mainstream video-sharing platform. The domain itself does not appear to match the official domain normally associated with that service, and the hostname structure looks autogenerated rather than brand-owned.
From the available page elements, this site may be functioning as a cloned or embedded media-style landing page rather than an official news or video platform. The use of a subdomain under stationguard.su, combined with a very recent registration date and lack of ranking data, suggests it may be a disposable or low-established web property rather than a long-standing publisher-operated website.
Safety Assessment for gsed279-lin389-o0n.stationguard.su
Security scan results were mixed at the time of this scan. On the positive side, 0 out of 89 security engines detected malware, the malware scan reported no flagged files, and several threat databases returned clean results. However, one blacklist-style source did list the domain under a generic malicious-object label, which introduces some caution even though it was not corroborated by the broader engine set.
The larger concern is contextual rather than malware-based: the page visually resembles YouTube while being hosted on an unrelated, newly registered .su subdomain. That mismatch may indicate a look-alike page or unauthorized reuse of a familiar interface. Newly created domains with no traffic ranking can carry elevated uncertainty because reputation systems have had limited time to observe them.
Based on these findings, this website may pose potential risks to visitors. No direct malware was detected at the time of this scan, but the combination of a very young domain, an unrelated host presenting familiar branding, and a blacklist flag warrants caution.
Technical Description
The site was reachable over HTTPS with a valid TLS certificate issued by a mainstream certificate authority, and it appears to be served through Cloudflare infrastructure on IP address 104.21.16.170. Nameservers also point to Cloudflare, suggesting the domain uses a reverse-proxy/CDN setup. The page assets include Next.js-style static paths under /_next/, which may indicate a modern JavaScript web application or template-based deployment.
DNSSEC status was not confirmed in the provided data. No malicious files, flagged external links, or iframes were identified by the malware scan at the time of analysis. The main technical concern is not the TLS setup itself, but the mismatch between the domain identity and the branded content being displayed.
Share your experience with this website. Was it safe? Did you encounter any issues?