blackfriday.x10.mx
Category: Phishing, Dynamic Dns
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of blackfriday.x10.mx
The domain blackfriday.x10.mx appears to host a Portuguese-language page themed around "Cartões Renner," presenting itself as an account-access portal for a Brazilian retail or financial-card service. The page title, on-page branding, and linked assets reference Renner-related names and financial-service elements, including card access and CPF entry, which suggests the site is attempting to collect login or identity information associated with a consumer credit or store-card account.
Based on the domain structure, this does not appear to be an official primary corporate domain for the brand shown on the page. Instead, it is hosted on an x10.mx subdomain under a free-hosting style environment, while also linking out to legitimate third-party resources such as Google libraries, app-store pages, and the real retailer domain. The overall presentation indicates a login-focused landing page rather than a full retail or banking website.
Safety Assessment for blackfriday.x10.mx
Multiple independent security signals indicate elevated risk at the time of this scan. The domain was flagged by 14 out of 91 security engines, with several classifying it as phishing, fraud, or a known infection source. In addition, multiple web-classification providers associated the site with phishing-related categories, while the screenshot shows a credential-entry form asking for a CPF on a domain that does not appear to match the brand being presented. That mismatch may indicate brand impersonation or credential harvesting behavior.
The malware file scan itself did not detect flagged files at the time of analysis, and major content-malice databases listed in the scan were largely clean. However, that does not outweigh the broader phishing-related consensus from security engines, the deceptive branding pattern, and the fact that the domain's IP address is listed on one mail-reputation blocklist. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt certificate that was set to expire in late 2026. It is hosted on IP address 198.91.81.14, served by LiteSpeed, and appears to be on infrastructure operated by X10HOSTING, LLC in Chicago, United States. DNSSEC status was reported as unknown.
From a technical-risk perspective, the use of TLS only confirms encrypted transport and does not validate the trustworthiness of the page content. The domain is relatively old, but it is operating as a subdomain on shared hosting rather than a clearly branded primary domain, which can make abuse easier to stage. The page also embeds reCAPTCHA iframes and references legitimate external services, a pattern sometimes seen on phishing pages attempting to appear credible.
Share your experience with this website. Was it safe? Did you encounter any issues?