https://projectxcompetitions.com/
172.67.150.6 · Cloudflare, Inc.
Toronto, Canada
289 days
403 · 24.5s
Valid· E7, Let's Encrypt, US
COMPLETED
Domain Intelligence: projectxcompetitions.com
Scanned 2 times since Mar 21, 2026, 10:15 AM UTC
Linked Phishing Report
This scan is attached to a vendor submission report
Brand
Unknown
Vendors
29/31
Status
partial
No KB/IOK detections were recorded for this scan.
Scanner blocked by cloudflare
This scan likely captured a block/challenge page, so the AI analysis may not reflect the real site victims see.
technology | ecommerce | finance | other · 4/5/2026
The domain projectxcompetitions.com is accessed, but the page title shown is 'Just a moment...' and the HTML indicates a Cloudflare challenge/verification block rather than an impersonated brand login. Network data shows Cloudflare and Turnstile-related endpoints, suggesting the scanner was blocked by WAF. No concrete brand impersonation signals are observable from the static content due to the BLOCK PAGE, but the domain appears newly active with a Let's Encrypt certificate and Cloudflare hosting, which is common for phishing domains attempting to evade analysis. Given the block, brand determination from page content is inconclusive; rely on domain intelligence and non-page signals for escalation.
Capture
Stages: 3
Canonical: Late Render (+3s)
Changed: No
Credential Signals
Forms: 0
Password fields: 0
Late-stage login UI: No
Resource Signals
Resources: 15
Hosts: 3
Domains: 3
The domain projectxcompetitions.com is likely a malicious/impersonation target, using a Cloudflare/WAF challenge to evade automated scanners. The page content appears to be a WAF block rather than a legitimate brand login, but the presence of SPA-like resources and a valid TLS certificate on a new domain increases suspicion of credential-collection attempts once the block is bypassed. The URL path and the use of orchestration and Turnstile verification indicate an attempt to differentiate human traffic from bots while potentially hosting phishing content elsewhere. Given the combination of a suspicious, relatively new domain, obfuscated form behavior, and blocking by a WAF, this domain should be treated as high risk and escalated for takedown review.
Monitor