prjx[.]us[.]com

Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.

The domain prjx.us.com was registered on May 05, 2026 through Instra Corporation Pty Ltd. It is delegated to the four CentralNic name servers ns1.centralnic.net through ns4.centralnic.net. The WHOIS record shows a recent creation date and no further registrant details beyond the corporate entity. The domain resolves to a single IPv4 address, 188.114.96.3, which is associated with Cloudflare, Inc. and appears to be hosted in Canada. Network analysis shows that the IP address 188.114.96.3 returns HTTP status code 200 and serves a page whose title is “Project X”. The site presents a valid TLS certificate issued by Let’s Encrypt (certificate identifier E8), indicating that encryption is in place but does not provide any authentication of the underlying content. The combination of a recent domain, Cloudflare front‑end, and a generic project‑related title is consistent with a credential‑harvesting landing page. Threat intelligence feeds have already flagged prjx.us.com as a high‑risk generic phishing vector. The domain is listed on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. Independent reputation scoring assigns a Gridinsoft trust score of 0 out of 100, reinforcing the malicious classification. VirusTotal currently reports 0 detections out of 95 scans, which should not be interpreted as a safety signal given the early stage of the campaign. Defenders should incorporate prjx.us.com into URL filtering and DNS sinkhole policies, and monitor for any associated C2 traffic or credential submissions targeting the “Project X” theme. Continuous re‑evaluation of the IP address and certificate transparency logs is advised, as the infrastructure may be repurposed or expanded. Given the high risk rating and active status, proactive blocking is recommended to mitigate potential user compromise.