If I was a ftx user I would also be extremely careful with fishing attempts and co.
And indeed looks suspicious.
But, the domain name looks like to be explicitly listed on the Cyprus sec website:
https://www.cysec.gov.cy/en-GB/entities/investment-firms/cyp...
And it would make sense that if they cut off the system/backend that were using before, they would need something like the password reset.
Previously auth might even have been handled by ftx main service.
