accounts-google-signin.duckdns.org
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of accounts-google-signin.duckdns.org
This domain appears to be a subdomain hosted under duckdns.org, a dynamic DNS platform commonly used to map changing IP addresses to easy-to-remember hostnames. The specific hostname, "accounts-google-signin," strongly suggests an attempt to reference account login functionality associated with a major web brand, rather than representing an independent business, publisher, or service with its own established identity.
Based on the domain wording and scan context, the site may be intended to present a login-related page or account portal. It does not appear to be a mainstream, ranked website, and the use of a free dynamic DNS subdomain instead of an official branded domain may be notable when assessing legitimacy. No clear evidence in the provided data identifies a legitimate operator behind this hostname.
Safety Assessment for accounts-google-signin.duckdns.org
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 11 out of 92 security engines, with several classifying it as phishing or otherwise malicious. In addition, it was listed by a major threat database for social-engineering activity. The hostname closely resembles a sign-in page for a well-known internet brand and may be a look-alike intended to capture user credentials.
Other contextual factors also increase concern. The site is not ranked among popular domains, uses a dynamic DNS subdomain rather than an official branded domain, and does not present a valid SSL/TLS configuration in the scan results. Although one malware scan reported no flagged files, that result does not outweigh the broader phishing-related detections and blacklist listing. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The scan indicates that the site either lacks a valid SSL/TLS certificate or did not present one correctly at the time of testing, which can be a significant concern for any page that may request login credentials. DNSSEC appears to be unsigned, so there is no additional DNS integrity protection indicated in the provided records.
The hostname resolves through DuckDNS nameservers and appears to be hosted on an AWS EC2 IP address in Stockholm, Sweden. The web server software was not identified in the scan output. While the parent DuckDNS domain is old, that age does not by itself establish trust for this specific subdomain, since dynamic DNS hostnames can be created and repurposed independently.
Share your experience with this website. Was it safe? Did you encounter any issues?