The site at projectxcompetitions.com is a high-risk impersonation attempt of ProjectX Competitions. The domain appears to clone the brand’s visual identity and uses a SPA architecture capable of rendering credential capture forms at runtime, evidenced by 0 static forms but extensive JS bundles and POST requests to the root. The SSL certificate is recent and issued by Let’s Encrypt, which is common in phishing deployments. The page loads multiple external scripts and tracking endpoints (including Facebook analytics), which obscures the credential capture logic and facilitates exfiltration. This combination indicates deliberate masquerading to harvest user credentials or other data; escalate to takedown and containment immediately.