prjx[.]finance

The domain prjx.finance, hosted on an Amazon IP in the US, is a cryptocurrency phishing scam. Despite being taken down, it was flagged by 3 out of 91 vendors on VirusTotal, reflecting its malicious intent. Detected by PhishDestroy on June 18, 2026, it was operational for a brief period before being deactivated.

Registered through Dynadot Inc, the domain utilized Let's Encrypt for its SSL certificate, indicating a level of sophistication in its setup. The platform risk score of 56 out of 100 and an abuse score of 21 out of 100 highlight the threat level it posed during its active phase. The domain's presence on a public blocklist further underscores its malicious nature.

PhishDestroy's early detection pipeline identified prjx.finance during the critical window before widespread antivirus coverage. This proactive approach helps mitigate the risks associated with fresh phishing domains, which often exploit the lag in AV database updates. The site's swift takedown limits potential harm, but the incident serves as a reminder of the persistent threats in the cryptocurrency space.