# ftxltd-krollra.net — SUSPICIOUS

> ftxltd-krollra.net is linked to phishing threats. Users should avoid interacting with this domain and ensure their credentials remain secure.

## Summary
PhishDestroy identifies ftxltd-krollra.net as a medium-risk generic phishing domain. This assessment reflects the domain's intent to deceive users into divulging sensitive information through fraudulent means.

Supporting evidence includes its registration through NiceNIC International Group Co., Limited and its presence on seven separate security blocklists. The domain, created on February 21, 2026, resolves to IP address 172.67.196.167. VirusTotal flags it by 4 out of 95 security vendors, indicating a moderate detection rate consistent with phishing activity.

Currently, ftxltd-krollra.net is offline, reducing immediate risk to users. To mitigate exposure, users should avoid visiting this domain and ensure any suspicious communications referencing it are reported. Maintaining updated security software and awareness of phishing tactics further helps protect against related threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 172.67.196.167
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["dell.ns.cloudflare.com", "piers.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 4 vendors flagged
  Vendors: ["alphaMountain.ai", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet"]
- Google Safe Browsing: clean
- Blocklists: 7 hits
  Lists: ["PhishDestroy", "MetaMask", "ScamSniffer", "Polkadot", "SEAL", "Enkrypt", "Codeesura"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019b48c1-f8bd-722c-9340-b05b1c6a07e3.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/d38b9976-498c-4bfc-907c-635365a1bce8
- PhishDestroy: https://phishdestroy.io/domain/ftxltd-krollra.net/
- LLM endpoint: https://phishdestroy.io/domain/ftxltd-krollra.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ftxltd-krollra.net/
Last updated: 2026-03-19