osta-trx[.]com

The domain osta-trx.com is a generic phishing site posing as a cryptocurrency exchange platform, specifically targeting users with a 'Buy TRX for USDT' scam. It does not impersonate a known brand or use a recognized drainer kit but operates as a crypto scam designed to deceive victims into transferring funds. As of the latest verification, osta-trx.com has been taken offline, though its prior activity warrants caution.

Technical indicators for osta-trx.com show limited but notable detection. The domain is flagged by 2 of 95 security vendors on VirusTotal, including SOCRadar and Webroot, while appearing on 1 security blocklist (PhishDestroy). Registered through Tucows Domains Inc. on July 20, 2025, it resolves to the IP address 188.114.96.3, hosted by Cloudflare, Inc. (AS13335) in the US. The SSL certificate is issued by WE1, and the observed page title was 'Buy TRX for USDT'. Gridinsoft assigns it a trust score of 0/100, and the site returned an HTTP 429 status before being taken offline.

Users who interacted with osta-trx.com should immediately revoke any token approvals associated with the site and transfer remaining funds to a new, secure wallet. Monitor transaction histories for unauthorized activity and report the domain to platforms like Google Safe Browsing, PhishTank, or local cybercrime units. If credentials were entered, change passwords for all related accounts and enable two-factor authentication. Reporting osta-trx.com to the registrar (Tucows Domains Inc.) may also aid in preventing further abuse.