lyncdiscover.pb3.duckdns.org
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of lyncdiscover.pb3.duckdns.org
This domain appears to host a login page themed around financial services, with the screenshot showing a Portuguese-language account access form and branding that resembles a banking or investment portal. The page references account login, password entry, and points redemption, which suggests it is presenting itself as a customer account portal for a financial institution.
However, the hostname is a subdomain under duckdns.org rather than a primary corporate domain, which is unusual for a mainstream financial brand. Based on the domain structure, page presentation, and third-party categorization, the site appears to be attempting to imitate a legitimate financial-services login experience rather than operating as an official standalone business website.
Safety Assessment for lyncdiscover.pb3.duckdns.org
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 13 out of 91 security engines, and several web-classification providers categorized it as phishing or fraud-related. In addition, major threat-database checks showed social-engineering listings, and another phishing database also listed the domain. While one malware scan reported no directly flagged files, it still noted a generic suspicious-object heuristic tied to the domain and a referenced stylesheet.
The domain also closely resembles discover.com in its naming pattern and may be a look-alike intended to exploit brand familiarity, even though the page screenshot visually imitates a different financial brand. That mismatch between the domain name and the branding shown on the page is itself a notable warning sign. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal than phishing detections but still adds some caution.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt certificate that, at the time of this scan, was set to expire on 2026-11-09. DNSSEC appears to be unsigned, and the domain uses DuckDNS nameservers, indicating dynamic-DNS style infrastructure rather than the kind of dedicated naming setup commonly associated with established financial institutions.
The server IP resolved to 15.235.30.84 and was geolocated to São Paulo, Brazil, with hosting identified generically as OneClick/Hosting. The exact web server software and protocol details were not disclosed in the scan output. From a technical-risk perspective, the combination of dynamic-DNS hosting, unsigned DNSSEC, phishing-related detections, and brand-like login presentation may be concerning at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?