# buytrx.uk — SUSPICIOUS

> Caution advised when visiting buytrx.uk, a domain involved in low-risk phishing. Avoid sharing sensitive info and verify site legitimacy before proceeding.

## Summary
PhishDestroy identifies buytrx.uk as an active phishing domain exhibiting generic phishing behavior with a low risk level. The domain attempts to deceive users to collect sensitive information, though the overall threat severity is currently assessed as low based on available intelligence. Users should remain cautious and avoid interacting with suspicious content originating from this domain.

Technical analysis reveals buytrx.uk was registered recently on March 16, 2026, through Internet Domain Services BS Corp (Internet.bs). The domain resolves to the IP address 104.21.52.121, which is hosted on a shared infrastructure commonly used by multiple websites. VirusTotal data shows a single security vendor out of 95 flags this domain, indicating a low detection rate but warranting attention. These factors suggest the domain might be newly created or employing evasive tactics to avoid widespread detection.

Currently, buytrx.uk remains active and poses a continuing risk to users who might be targeted by phishing attempts. PhishDestroy recommends users avoid entering any personal or financial details on this site and to use trusted security tools to block or report suspicious domains. Organizations should update their threat intelligence feeds accordingly to prevent potential phishing campaigns leveraging buytrx.uk.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 403)

## Domain Intelligence
- Registered: 2026-03-16 00:00:00
- Registrar: Internet Domain Services BS Corp t/a Internet.bs [Tag = IDS-BS]
- IP: 104.21.52.121
- Nameservers: maleah.ns.cloudflare.com miles.ns.cloudflare.com

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cfb9f-7b6f-76b9-a068-a623f0017774.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/9d5c27fd-f78f-4b89-8425-6cd4f4df6d49
- PhishDestroy: https://phishdestroy.io/domain/buytrx.uk/
- LLM endpoint: https://phishdestroy.io/domain/buytrx.uk/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/buytrx.uk/
Last updated: 2026-03-19