It doesn't have to be youtube.com

plenty of sites get hacked and hackers phish their users, it's very real