buytrx[.]vip

PhishDestroy identifies buytrx.vip as a generic phishing domain with an elevated risk level, specifically a crypto drainer that targets users' cryptocurrency assets.

This domain was flagged by 1 security blocklist and has a low trust score, with 2 out of 95 security vendors on VirusTotal flagging it as malicious, it was registered through Tucows Domains Inc. and resolves to the IP address 2a06:98c1:3121::3, the domain was created on September 11, 2025, and its page title is Buy TRX for USDT, which may indicate an attempt to impersonate a legitimate cryptocurrency exchange.

The domain's current status is offline, but users who may have interacted with it should take immediate action to secure their accounts and protect their assets, as crypto drainers can cause significant financial losses, PhishDestroy recommends that users who have visited this domain monitor their accounts for suspicious activity and consider taking steps to mitigate potential damage, such as changing passwords and enabling two-factor authentication.