claims[.]ftx[.]click
“Deployment Unavailable”
claims.ftx.click — Não verificado. Tipo de golpe: Crypto Scam. Resumo das evidências: VirusTotal 2/95 (alphaMountain.ai, G-Data); 1 external blocklist match (ScamSniffer); PhishDestroy score 58/100. Registrador: Dynadot.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
Analysis indicates that the domain claims.ftx.click was registered through Dynadot LLC on 2025-08-03. The authoritative name servers are jade.ns.cloudflare.com and major.ns.cloudflare.com, both operated by Cloudflare, suggesting the domain leverages Cloudflare’s DNS infrastructure. DNS resolution points to the address 198.18.68.169, which is associated with a Vercel hosting environment that presents HTTP Strict Transport Security headers. An HTTPS endpoint is secured with a Let’s Encrypt certificate (R13) and responds with HTTP status 451, indicating the request is blocked for legal reasons.
The page title returned by the server is "Deployment Unavailable", a generic placeholder rather than a brand‑specific landing page. Two of ninety‑five VirusTotal scanners have flagged the domain, and the domain currently appears on two public blocklists. Independent phishing‑filter services PhishDestroy and ScamSniffer list the domain as malicious and categorize it as a crypto‑drainer scam. The combination of a recent creation date, Cloudflare DNS, Vercel hosting, HSTS enforcement, and the "Deployment Unavailable" title is consistent with infrastructure used by actors that host temporary drop‑sites for cryptocurrency‑draining campaigns.
Because the site is presently offline, active network interaction cannot be observed, leaving the exact phishing payload or wallet addresses unknown. Defenders should continue to block the domain at the DNS and proxy layers, monitor the IP address 198.18.68.169 for any re‑use, and add the domain to internal blocklists. Additional scrutiny of any future TLS certificates issued for this name is recommended, as is periodic re‑scanning with multi‑engine services to detect any changes in detection scores.
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, SANs do SSL, carimbos de data e hora
ICANN OVERSIGHT
Registration: ftx.click
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain ftx.click behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologias · 2 identified
Cloud platform for frontend deployment, optimized for Next.js.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Análise do VirusTotal
Evidências arquivadas
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo