reward-prjx[.]com

PhishDestroy identifies reward-prjx.com as an active crypto drainer masquerading under the guise of 'Project X'. The domain remains operational and is currently being used to deceive users into approving malicious cryptocurrency transactions. Analysis confirms this is not mere phishing but a specialized crypto-draining operation targeting unsuspecting victims with counterfeit reward schemes.

This domain was flagged by 1 out of 95 VirusTotal security vendors, indicating limited but concerning detection. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 22, 2026, and resolves to IP 188.114.97.3. The domain operates with a Let's Encrypt SSL certificate and has not been identified on any known blocklists or trust-score platforms, suggesting it is a recently activated threat with low historical reputation.

As the site remains active and unlisted in most threat intelligence feeds, organizations and users must proactively block network access to reward-prjx.com and monitor for any outgoing connections to 188.114.97.3. Implement DNS sinkholing or firewall rules to prevent accidental exposure. Security teams are advised to inspect endpoint logs for any signs of communication with this domain or IP, particularly in relation to cryptocurrency wallet activities or web3 interactions. Immediate takedown requests should be submitted to hosting providers and registrars given the high-risk nature of this crypto drainer.