Security Advisors · OSINT Screening Report
YouTube
Open-source screening of the youtube.com service identity, public corporate references, selected regulatory history, and perimeter technical signals. Report pack: youtube-4 · purpose: third-party / platform counterparty triage (not legal advice).
Data access: 2026-05-26
Type: Online video-sharing platform (Alphabet / Google group)
Jurisdiction: United States (Delaware / California — public corporate context)
Infrastructure: Google authoritative DNS · IPv4 in 172.253.115.0/24 (Google allocations)
Final verdict
✅ Clear to proceed
18 / 100
0–20 · Low risk: DNS/RDAP signals align with Google-operated production infrastructure; no open-source indicators equivalent to sanctions hits, insolvency, or anonymous high-risk hosting. Scale-related regulatory and litigation exposure is normal for the class and should be mapped to your contracting entity and policies.
📋 Request data
FieldContent
NameYouTube (subject token: youtube) · apex domain youtube.com
Registration No.California SOS shows Youtube, LLC document no. 200631510396 (filed 2006-11-09, formed in Delaware) per third-party business-profile mirrors — verify in CA SOS if required
CountryUnited States
Websitehttps://www.youtube.com/
Contact personNeal Mohan — CEO of YouTube since February 2023 (Alphabet investor relations materials) confirmed fact
PurposePre-contract OSINT-style screening; English UI labels per lang=en
Documents providedNone (open sources only)
Data collected2026-05-26
Open questionsWhich exact Alphabet subsidiary signs your agreement; whether your workflow requires broadcast / media regulatory checks beyond baseline platform DD
⚖️ Risk assessment
Criterion Triggered Points Factual basis
Sanctions (official lists) no 0 No OFAC-style deterministic hit in this pass; roster screening remains requires manual check in your sanctions workflow
Connection to RF / RB / occupied territories no 0 US-headquartered platform; Google publisher policies restrict services in OFAC-sanctioned territories (Crimea, Cuba, Iran, DNR/LNR, North Korea)
Bankruptcy / insolvency no 0 not found in available sources as an insolvency signal for the brand-level operator
Tax debt n/a 0 Ukraine DPS / similar tax-debt portals are n/a for this US platform subject
Enforcement proceedings n/a 0 ASVP / national judgment-enforcement DB checks are n/a for this subject and jurisdiction mix
High litigation activity yes 10 confirmed fact Alphabet / Google and YouTube participate in substantial global civil/regulatory dockets (FTC COPPA matter, 2025 class-action settlement, EU DMA proceedings)
Frequent director changes n/a 0 Registry-style director turnover not evaluated from RDAP alone; CEO transition Wojcicki → Mohan (2023) is public
Recent UBO change n/a 0 Public-U.S. UBO graph is equity-market driven; reconcile with SEC filings, not RDAP
Related companies with issues no 0 No unrelated problem-subsidiary linkage attempted beyond noting consolidated Alphabet grouping and EU DMA gatekeeper status
Negative media coverage yes 8 confirmed fact FTC 2019 COPPA settlement ($170M); 2025 preliminary approval of $30M class-action settlement (Hubbard v. Google); EU DMA gatekeeper designation and ongoing probes
Tender violations / competition authority n/a 0 n/a (Prozorro / AMCU style procurement checks not applicable to this subject)
Intermediate sum 18 Sum of numeric rows above equals the stated score for this workbook.
Final risk score 18 / 100 COMPLETE — Range: 0–20 · Low risk

Negative points per rubric are expressed as additive risk-pressure scoring for worksheet consistency; thresholds follow the briefing: 0–20 Low, 21–40 Moderate, etc.

🚩 Main red flags
1 Scale-class regulatory and litigation surface (context, not a counterfeit-domain finding)

confirmed fact Major platforms attract persistent regulatory attention. The FTC resolved a COPPA matter naming Google LLC and YouTube, LLC with a record $170 million penalty (2019). A separate class action (Hubbard v. Google) received preliminary court approval for a $30 million settlement in September 2025 covering children under 13 who viewed child-directed content (July 2013 – April 2020).

  • Treat as policy/compliance context for children's privacy, creator obligations, ad tech, and content moderation — not as proof of ongoing identical misconduct.
2 EU Digital Markets Act gatekeeper obligations

confirmed fact The European Commission designated Alphabet Inc. as a DMA gatekeeper on 5 September 2023; YouTube is explicitly listed as a core platform service (Case DMA.100005). Ongoing EU investigations cover self-preferencing, data-sharing, and interoperability — relevant for EU-facing integrations.

3 Dependency on platform Terms, product policies, and enforcement discretion

probable link Operational counterparts (MCN integrations, OAuth clients, broadcasting workflows) inherit platform rule changes, geo-restrictions, and monetization eligibility constraints.

4 Sanctions roster confirmation still mandatory in regulated workflows

requires manual check Even when DNS/RDAP strongly indicate authenticity, AML/CFT programmes typically require verbatim screening hits against officially published consolidated lists naming the contractual entity.

🛡️ Sanctions & registries (summary)
RegistryResult
OFAC Sanctions Search (methodology anchor) No open-source substitution performed — route the exact legal name through the U.S. Treasury tool in your programme. requires manual check
EU consolidated financial sanctions (methodology anchor) not executed in this technical pass requires manual check
UK OFSI list (methodology anchor) not executed in this technical pass requires manual check
Ukraine NSDC / NAZK instruments (ЄДРПОУ-driven) n/a — subject is not a Ukrainian registered company in this intake
Ukraine ЄДР / Prozorro n/a for this US platform identity screen
COM Registry RDAP (Verisign) Domain youtube.com shows standard lock statuses and Google NS delegation confirmed fact
Registrar RDAP (MarkMonitor) Registrant organization published as Google LLC (contact fields redacted) confirmed fact
EU DMA Gatekeepers Portal YouTube listed as designated core platform service under Alphabet Inc. confirmed fact
⚙️ Technical infrastructure

Technical summary

A records (Cloudflare DoH sample)
172.253.115.190, 172.253.115.91, 172.253.115.93, 172.253.115.136
NS delegation
ns1.google.com — ns4.google.com
MX
0 smtp.google.com
SPF (TXT)
v=spf1 include:google.com mx -all
DNSSEC at COM delegation
delegationSigned: false (Verisign RDAP)
IP allocation org
Google LLC · GOOGLE · 172.253.0.0/16 range (ARIN-derived)
Registry RDAP handle
142504053_DOMAIN_COM-VRSN
Registration / expiry (Verisign events)
2005-02-15 → 2027-02-15 (UTC)
Registrar
MarkMonitor Inc. · IANA 292
Registrant org (MarkMonitor RDAP)
Google LLC
Wayback CDX (sample)
Earliest sampled capture: 2005-04-28 for http://www.youtube.com:80/
📑 OSINT Report — Sections 1–13
1. Subject of review

Object: Brand and service commonly referred to as YouTube, associated public web property youtube.com. Corporate layer (open sources): operational entity YouTube, LLC (Delaware LLC, foreign-qualified in California) under the Alphabet / Google group. Acquired by Google in November 2006 for $1.65 billion.

Identifiers sampled: DNS names; Verisign/MarkMonitor RDAP handles; CA SOS document number 200631510396; principal address 901 Cherry Ave, San Bruno, CA 94066requires manual check in primary state registry if material.

2. Summary

DNS and RDAP data present youtube.com as a MarkMonitor-registered, heavily locked COM name delegated to Google authoritative nameservers, resolving to IPv4 space in Google's 172.253.0.0/16 allocation. That technical chain is consistent with authentic production infrastructure rather than impersonation. Official FTC materials document past COPPA-related regulatory exposure; a 2025 class-action settlement and EU DMA gatekeeper designation add policy context but do not imply the platform is fictitious or non-operational.

3. Risk Score

18 / 1000–20 · Low risk. Driven mainly by scale litigation visibility and verified historical U.S./EU regulatory references; offset by strong technical authenticity signals and absence of sanctions-style findings in this OSINT pass.

4. Main red flags

No evidence in this pass of typosquat hosting, anonymous bulk registrar patterns, or sanctions-list assertions. Residual flags are primarily governance and programme-level: confirm sanctions screening, map regulatory history to your use case, and document dependency on platform policies and EU DMA obligations.

5. Registration data

confirmed fact COM RDAP (Verisign): creation 2005-02-15, expiry 2027-02-15, status flags include client/server transfer & update prohibitions, nameservers NS1–NS4.GOOGLE.COM, DNSSEC delegationSigned=falserdap.verisign.com.

confirmed fact Registrar RDAP (MarkMonitor): registrant org field lists Google LLC with GDPR-style redaction on personal elements — rdap.markmonitor.com.

confirmed fact California registration mirrors: aggregators list Youtube, LLC as active (document 200631510396, filed 2006-11-09, formed in Delaware), principal address 901 Cherry Ave, San Bruno, CA, manager Google LLC.

probable link Delaware entity originally incorporated 2005-10-03, converted to LLC 2006-11-08 per secondary corporate-history sources.

6. Owners / UBO

confirmed fact MarkMonitor RDAP exposes Google LLC as registrant organization for the domain.

confirmed fact Ownership chain: Alphabet Inc. (NASDAQ: GOOGL/GOOG) → Google LLC → YouTube, LLC. SEC Exhibit 21 filings list YouTube, LLC among Google subsidiaries.

confirmed fact Alphabet proxy materials (2026 cycle) indicate Larry Page and Sergey Brin retain majority voting control (~52.7% combined) through Class B super-voting shares.

requires manual check Ultimate beneficial ownership for contracting should be derived from current SEC EDGAR disclosures and corporate counsel review.

7. Related persons & companies

confirmed fact Neal Mohan — CEO of YouTube since February 2023; reports through Sundar Pichai (CEO, Google and Alphabet).

probable link Related entities include Google LLC, broader Alphabet Inc. subsidiaries (Waymo, DeepMind, etc.); no attempt to chart the full graph here.

8. Sanctions risks

requires manual check Perform official-list screening against the name(s) appearing on invoices and contracts (e.g., "YouTube, LLC", "Google LLC", regional payer entities).

confirmed fact Google publisher policies document OFAC compliance restrictions for sanctioned territories (Crimea, Cuba, Iran, DNR/LNR, North Korea) — Google Publisher Policies.

confirmed fact Methodologically, critical sanctions conclusions must cite official roster entries with decision metadata — absent that, status is "not determined" rather than "cleared".

9. Litigation risks

confirmed fact FTC COPPA settlement (2019): $170 million ($136M FTC + $34M NY AG) — FTC press release.

confirmed fact Class action Hubbard v. Google: preliminary approval of $30M settlement (Sept 2025) for children under 13 who viewed child-directed YouTube content (July 2013 – April 2020).

confirmed fact EU DMA: Alphabet designated gatekeeper; YouTube listed as core platform service; multiple ongoing Commission investigations.

requires manual check Evaluate materiality via PACER / court APIs / counsel if precedent affects your contractual risk.

10. Debts / enforcement proceedings

requires manual check Tax-delinquency and judgment-enforcement lookups were not interpreted for this multinational group in this pass; treasury health is evidenced by SEC filings, not DNS records.

confirmed fact Alphabet reported YouTube revenue exceeding $50 billion (Q3 2024 earnings call, per investor relations materials).

11. Reputational background

confirmed fact FTC publishes case materials for Google LLC and YouTube, LLC alleging COPPA Rule issues, resolved with stipulated orders and monetary components (2019).

confirmed fact EU Commission gatekeeper portal lists YouTube under Alphabet with Case DMA.100005.

probable link Routine press and NGO commentary on moderation, recommendation systems, copyright, and international compliance continues to be voluminous — treat narratives as directional unless tied to authoritative orders.

12. Tender history

n/a — Prozorro / AMCU procurement history is outside the applicability set for "YouTube" as screened here.

13. Conclusion

✅ Clear to proceed for baseline counterparty authenticity: technical registries corroborate operation under Google-managed naming and addressing, and there is no OSINT-derived indication in this package matching fraud-hosting archetypes.

Escalate to policy / regulatory review if your deployment touches children's data, influencer monetization pipelines, copyrighted media distribution, EU DMA-regulated integrations, or sector-specific media licensing.

📚 Sources
Limitations of this review
  • Snapshot queries can differ from your future observations (Anycast addressing, DNS load balancing).
  • Sanctions and export-control answers require official tools and sometimes human analyst adjudication for name variants.
  • Ukraine-specific registries (ЄДР, РНБО, Prozorro) were not used as primary evidence because the intake subject is a U.S. platform brand rather than a Ukrainian legal person.
  • Social media sentiment, creator disputes, and copyright claims are not exhaustively surveyed.
  • GLEIF LEI search returned no direct match for "YouTube" entity name; corporate identity should be confirmed via SEC/state registries.
Recommended next steps
  • 🛡️Run the contracting entity through your official sanctions workflow (e.g., OFAC Sanctions List Search as required by policy).
  • 📄Pull the current Alphabet / Google subsidiary exhibit from SEC EDGAR to match signatories.
  • ⚖️If processing children's or student data, align with COPPA/GDPR-Kids programme requirements and YouTube's published kids/parental controls documentation.
  • 🇪🇺For EU-facing integrations, review DMA gatekeeper obligations and Alphabet compliance reports on the EU DMA portal.
  • 🌐Save TLS/DNS evidence with timestamps for audit trail (RDAP JSON, DNS answers) should authentication disputes arise.

Brief report

Subject
YouTube (youtube.com) · U.S.-based Alphabet / Google platform; YouTube, LLC (Delaware, CA doc 200631510396); RDAP registrant Google LLC.
Risk Score
18 / 100 — 0–20 · Low risk
Limited rubric penalties from scale litigation/regulatory-history categories; authentic Google infrastructure fingerprints.
License
n/a — no single sovereign platform licence summarised here; sector-specific licences (broadcast, childcare advertising, gambling promos, etc.) may still apply downstream.
Regulator
Material touchpoints include FTC (COPPA 2019), U.S. federal courts (2025 class-action settlement), and EU Commission (DMA gatekeeper designation for YouTube, Case DMA.100005).
Infrastructure
Google NS; IPv4 in 172.253.115.0/24; MarkMonitor registrar; registrant org Google LLC; domain registered 2005-02-15, expires 2027-02-15.
Similar entities
Vimeo, TikTok (ByteDance — also EU DMA gatekeeper), Dailymotion, Twitch — compare only after defining content and compliance parallels for your thesis.
Verdict
✅ Clear to proceed for standard authenticity screening; escalate if data flows implicate minors, EU DMA-regulated integrations, or regulated media obligations.
Actions
Execute formal sanctions scans; reconcile legal signatory from SEC disclosures; review EU DMA obligations for EU-facing use; archive DNS/RDAP evidence for procurement files.
This report is a preliminary OSINT screening based on publicly available sources and does not constitute a legal opinion, accusation, or final compliance assessment. Critical findings require manual verification and confirmation from official sources. | 2026-05-26 | Security Advisors · OSINT Due Diligence Agent