# ftx.case-debtors.com — SUSPICIOUS

> PhishDestroy identifies ftx.case-debtors.com as a fake FTX creditor phishing portal. VirusTotal shows 0/95 detections. Check the full report.

## Summary
PhishDestroy has flagged ftx.case-debtors.com as a fraudulent FTX creditor portal designed to steal user credentials under the guise of an official debt collection site. This domain mimics legitimate FTX bankruptcy proceedings to trick victims into entering sensitive login details, financial data, or personal information. The threat is active and under investigation, posing a direct risk to anyone who interacts with it.  This domain was registered on March 11, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to IP address 162.244.92.2. VirusTotal currently shows 0 out of 95 security engines detecting it, indicating it remains under the radar for most automated scanners. The use of a Let's Encrypt SSL certificate is a common tactic to appear legitimate, but it does not guarantee safety. The domain's recent creation and obscure registrar should raise immediate suspicion for anyone expecting official FTX bankruptcy communications.  If you visited ftx.case-debtors.com, do not enter any credentials or personal information. Disconnect from the site immediately and run a full antivirus scan on your device. Change passwords for all online accounts, especially those related to cryptocurrency or financial services, from a separate, trusted device. Report the domain to your local cybercrime unit or platforms like PhishDestroy to help block its spread. Stay vigilant for follow-up phishing attempts, as scammers often use initial visits to target victims with further fraud.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-11 00:11:32
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 162.244.92.2

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2261ba2a-27b1-4adc-a1c8-1ae93416c506
- PhishDestroy: https://phishdestroy.io/domain/ftx.case-debtors.com/
- LLM endpoint: https://phishdestroy.io/domain/ftx.case-debtors.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ftx.case-debtors.com/
Last updated: 2026-03-24