fedex-mx.top
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of fedex-mx.top
The domain fedex-mx.top appears to present itself as a FedEx-branded shipping or delivery page aimed at Spanish-speaking users, likely referencing Mexico through the “mx” portion of the domain. The screenshot shows FedEx logos, navigation items such as shipping, tracking, help, and account options, plus a delivery-problem message in Spanish stating that the recipient could not be contacted and that action is required.
Based on the page design and wording, the site appears intended to mimic a parcel-delivery notification workflow and may be trying to persuade visitors to update contact details or interact with a shipment-related prompt. Although one web-classification source labeled it under transportation, the domain itself does not appear to match the official primary FedEx web presence, and the branding shown suggests it may be leveraging the reputation of a well-known logistics company.
Safety Assessment for fedex-mx.top
This domain shows multiple high-risk indicators at the time of this scan. It was flagged by 19 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. In addition, a major safe-browsing database listed the site for social-engineering activity, which materially increases concern beyond a single heuristic alert.
The screenshot also raises concern because the domain closely resembles FedEx branding while using a separate, newly registered .top domain rather than an expected official company domain. The page content appears designed to create urgency around a delivery issue and prompt user action, a pattern commonly associated with credential theft, payment harvesting, or personal-data collection.
While the malware scan did not detect malicious files in the limited content checked, that does not offset the broader phishing signals. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid TLS certificate issued by a mainstream certificate authority, and it appears to be served through Cloudflare infrastructure with nameservers also delegated to Cloudflare. A valid certificate only indicates encrypted transport and should not be treated as proof of legitimacy.
From a domain-security perspective, the registration is extremely recent at 0 days old, the domain is not ranked, and DNSSEC is unsigned. The combination of very recent registration, brand-like naming, phishing classifications, and blacklist presence may indicate a short-lived impersonation setup rather than an established business website.
Share your experience with this website. Was it safe? Did you encounter any issues?