prjx[.]co[.]com

Analysis of prjx.co.com shows that the domain was registered on 21 February 2026 and now resolves to the IPv6 address 2a02:4780:27:2006:0:12f2:5473:e, which is allocated to Hostinger International Limited in France under ASN 47583. The site presented a single HTML page with the title “Home” before being taken offline. VirusTotal recorded a single positive detection out of 93 scanning engines, indicating that at least one security vendor identified malicious behavior. The domain is listed on one external blocklist and has been actively blocked by the PhishDestroy mitigation service.

An SSL certificate identified as “WR1” was observed, suggesting the use of a weak or self‑signed certificate. No additional metadata such as brand targeting, specific phishing kit, or detailed page content was available from the limited snapshot. The offline status prevents further live probing, and the lack of more extensive detection coverage leaves uncertainty about the full scope of the campaign.

Defenders should continue to monitor the IPv6 host for any re‑activation, enforce blocklist rules against the address and domain, and consider adding the domain to internal phishing and malware filters. Attribution to a particular threat actor cannot be made based on current evidence, but the combination of recent registration, hosting on a shared provider, minimal page content, and detection by at least one vendor aligns with typical generic phishing infrastructure. Organizations should advise users to avoid unsolicited communications that reference the domain and to report any related phishing attempts to appropriate incident response teams.