lyncons[.]com

Analysis of the domain lyncons.com indicates it was associated with generic phishing infrastructure prior to being taken offline on or before July 24, 2026. The domain, registered on November 19, 2025, through Cosmotown, Inc., resolved to the IP address 91.230.49.19, hosted under AS62068 (SpectraIP B.V.) in the Netherlands. No SSL certificate was detected, increasing the likelihood of unencrypted data transmission. The page title 'Index of /' suggests an exposed directory listing, a common misconfiguration that may have facilitated unauthorized access to phishing resources or payloads.

Infrastructure review reveals the domain was flagged by two security blocklists and detected by five of 95 vendors on VirusTotal, though the specific nature of the phishing content remains unconfirmed. Gridinsoft assigned a trust score of 0/100, further indicating malicious intent. The domain was also blocked by PhishDestroy and ScamSniffer, reinforcing its classification as phishing-related. Nameservers ns1.damgold.com and ns2.damgold.com were used, though their direct involvement in malicious activity is not established.

As of the report date, lyncons.com is offline, limiting further analysis. Defenders should treat this domain as part of a broader phishing campaign, particularly given its hosting provider and lack of encryption. Historical DNS and IP logs should be reviewed for connections to this infrastructure, and any residual artifacts (e.g., emails, redirects) should be blocked. No brand or specific scam type was identified in the available data, so categorization remains generic.