Domain Security Reports

Search tracked domains and review stored evidence, detections, and the latest observed availability.

0
Total Tracked
0
VT Detected
0
Last Seen Active
0
Unavailable at Last Check
0
VT Pending
1API GmbH

1API GmbH

332
Phishing Domains
268
Still Alive
64
Taken Down
94%
Detection Rate
6.5
Avg VT Score
80.7%
Alive Rate
33 Abuse Reports Sent to 1API GmbH
PhishDestroy has filed 33 abuse reports covering 33 phishing domains registered through 1API GmbH. Reports sent since Jan 5, 2026. 812% of reported domains remain active, suggesting inadequate enforcement of abuse policies.
94% of domains flagged by VirusTotal 168 domains with VT ≥ 5
Tracking since Aug 2025 — latest: Jul 22, 2026

clean Drainer High Threat

157,607 domains tracked
157,607
Total Domains
51,199
Still Alive
104,908
Taken Down
92.4%
Detection Rate
7.9
Avg VT Score
32.5%
Alive Rate
32.5% of domains still active 86,701 domains with VT ≥ 5
Tracking since Oct 2023 — latest: Jul 22, 2026
1API GmbH 332 domains
Screenshot of bafybeibdyr3vrviyiqdrraxyk5dxy5fb6subupjbgqwyvki3b7pn2h32lm.ipfs.w3s.link
bafybeibdyr3vrviyiqdrraxyk5dxy5fb6subupjbgqwyvki3b7pn2h32lm.ipfs.w3s.link
21 VTUnknownbase
Screenshot of bafybeibdyr3vrviyiqdrraxyk5dxy5fb6subupjbgqwyvki3b7pn2h32lm.ipfs.w3s.link
bafybeibdyr3vrviyiqdrraxyk5dxy5fb6subupjbgqwyvki3b7pn2h32lm.ipfs.w3s.link
xioamigpscar.cheetahcar.shop
21 VTUnknown
Screenshot of bafkreiehjatmkhv5y2zkeaj2idmdb5w5mhl6mljeo34tmuhgam2vjzh6ya.ipfs.nftstorage.link
bafkreiehjatmkhv5y2zkeaj2idmdb5w5mhl6mljeo34tmuhgam2vjzh6ya.ipfs.nftstorage.link
20 VTLive
Screenshot of bafkreiehjatmkhv5y2zkeaj2idmdb5w5mhl6mljeo34tmuhgam2vjzh6ya.ipfs.nftstorage.link
bafkreiehjatmkhv5y2zkeaj2idmdb5w5mhl6mljeo34tmuhgam2vjzh6ya.ipfs.nftstorage.link
Screenshot of bafkreiekbtzmshtc237taav2aevej2xm7rbnt5f4vkc5vavwijjg44m7vi.ipfs.w3s.link
bafkreiekbtzmshtc237taav2aevej2xm7rbnt5f4vkc5vavwijjg44m7vi.ipfs.w3s.link
20 VTLive
Screenshot of bafkreiekbtzmshtc237taav2aevej2xm7rbnt5f4vkc5vavwijjg44m7vi.ipfs.w3s.link
bafkreiekbtzmshtc237taav2aevej2xm7rbnt5f4vkc5vavwijjg44m7vi.ipfs.w3s.link
Screenshot of bafkreihutfgjtpky7yd2pvyguyuau4wck2h4ilz4myanzwjetcdko4jrtm.ipfs.w3s.link
bafkreihutfgjtpky7yd2pvyguyuau4wck2h4ilz4myanzwjetcdko4jrtm.ipfs.w3s.link
20 VTUnknown
Screenshot of bafkreihutfgjtpky7yd2pvyguyuau4wck2h4ilz4myanzwjetcdko4jrtm.ipfs.w3s.link
bafkreihutfgjtpky7yd2pvyguyuau4wck2h4ilz4myanzwjetcdko4jrtm.ipfs.w3s.link
Screenshot of bafkreih3pbvbttbaqeuucxqnsmc6vt32fshfzwsdx7jnlru4idcxedz3si.ipfs.w3s.link
bafkreih3pbvbttbaqeuucxqnsmc6vt32fshfzwsdx7jnlru4idcxedz3si.ipfs.w3s.link
19 VTLiveApple
Screenshot of bafkreih3pbvbttbaqeuucxqnsmc6vt32fshfzwsdx7jnlru4idcxedz3si.ipfs.w3s.link
bafkreih3pbvbttbaqeuucxqnsmc6vt32fshfzwsdx7jnlru4idcxedz3si.ipfs.w3s.link
gor.emiraride.com
19 VTLiveCloudflare
Screenshot of maniventresync.on-fleek.app
maniventresync.on-fleek.app
19 VTLive
Screenshot of maniventresync.on-fleek.app
maniventresync.on-fleek.app
Screenshot of vnzloj.iilustriousdate.com
vnzloj.iilustriousdate.com
18 VTUnknown
Screenshot of vnzloj.iilustriousdate.com
vnzloj.iilustriousdate.com
Screenshot of bafkreiezz7szm2v5hdurd4odopuw42wyqmyqeo4kmdafhzuhdqmshljdpa.ipfs.w3s.link
bafkreiezz7szm2v5hdurd4odopuw42wyqmyqeo4kmdafhzuhdqmshljdpa.ipfs.w3s.link
17 VTLive
Screenshot of bafkreiezz7szm2v5hdurd4odopuw42wyqmyqeo4kmdafhzuhdqmshljdpa.ipfs.w3s.link
bafkreiezz7szm2v5hdurd4odopuw42wyqmyqeo4kmdafhzuhdqmshljdpa.ipfs.w3s.link
Screenshot of shrilling-byte-full.on-fleek.app
shrilling-byte-full.on-fleek.app
17 VTLiveMetaMask
Screenshot of shrilling-byte-full.on-fleek.app
shrilling-byte-full.on-fleek.app
Screenshot of asociacion-felina-argentina.com
asociacion-felina-argentina.com
16 VTCloaked · Liveargent
Screenshot of asociacion-felina-argentina.com
asociacion-felina-argentina.com
Screenshot of bafkreid5akqsjzkofrb2xmhytj3bpeevrvgm3gh2k7v44ucvv2el4m67oe.ipfs.w3s.link
bafkreid5akqsjzkofrb2xmhytj3bpeevrvgm3gh2k7v44ucvv2el4m67oe.ipfs.w3s.link
16 VTLive
Screenshot of bafkreid5akqsjzkofrb2xmhytj3bpeevrvgm3gh2k7v44ucvv2el4m67oe.ipfs.w3s.link
bafkreid5akqsjzkofrb2xmhytj3bpeevrvgm3gh2k7v44ucvv2el4m67oe.ipfs.w3s.link
Screenshot of bafybeialhrwzqxqwwecyjmub6gn4ehoajt64dcpsaxtu6b5ier4zowx3de.ipfs.w3s.link
bafybeialhrwzqxqwwecyjmub6gn4ehoajt64dcpsaxtu6b5ier4zowx3de.ipfs.w3s.link
16 VTLive
Screenshot of bafybeialhrwzqxqwwecyjmub6gn4ehoajt64dcpsaxtu6b5ier4zowx3de.ipfs.w3s.link
bafybeialhrwzqxqwwecyjmub6gn4ehoajt64dcpsaxtu6b5ier4zowx3de.ipfs.w3s.link
Screenshot of bafybeiehgfy5gxgf7mv34zs3kih7iatowo7n46jifuwsdozbpi23wnp64u.ipfs.w3s.link
bafybeiehgfy5gxgf7mv34zs3kih7iatowo7n46jifuwsdozbpi23wnp64u.ipfs.w3s.link
16 VTLive
Screenshot of bafybeiehgfy5gxgf7mv34zs3kih7iatowo7n46jifuwsdozbpi23wnp64u.ipfs.w3s.link
bafybeiehgfy5gxgf7mv34zs3kih7iatowo7n46jifuwsdozbpi23wnp64u.ipfs.w3s.link
Screenshot of bifrost.pe
bifrost.pe
16 VTLive
Screenshot of bifrost.pe
bifrost.pe
Screenshot of dextoolwallets.on.fleek.co
dextoolwallets.on.fleek.co
16 VTLive
Screenshot of dextoolwallets.on.fleek.co
dextoolwallets.on.fleek.co
Screenshot of keplrwallet.app
keplrwallet.app
16 VTLivekeplr
Screenshot of keplrwallet.app
keplrwallet.app
Screenshot of superai.app
superai.app
16 VTLivefoundation
Screenshot of superai.app
superai.app
Screenshot of 3651234.com
3651234.com
15 VTUnknownBet365
Screenshot of 3651234.com
3651234.com
Screenshot of ag-dkb.site44.com
ag-dkb.site44.com
15 VTLive
Screenshot of ag-dkb.site44.com
ag-dkb.site44.com
Screenshot of demo.venturetracker.net
demo.venturetracker.net
15 VTTaken Down
Screenshot of demo.venturetracker.net
demo.venturetracker.net
Screenshot of itcommunication.co.za
itcommunication.co.za
15 VTUnknown
Screenshot of itcommunication.co.za
itcommunication.co.za
Screenshot of publicstart.ghost.io
publicstart.ghost.io
15 VTTaken DownLedger
Screenshot of publicstart.ghost.io
publicstart.ghost.io
Screenshot of riverscounselling.com
riverscounselling.com
15 VTUnknownGoogle
Screenshot of riverscounselling.com
riverscounselling.com
Screenshot of tradeservice.help
tradeservice.help
15 VTLive
Screenshot of tradeservice.help
tradeservice.help
Screenshot of bankman.gd
bankman.gd
14 VTLivePayPal
Screenshot of bankman.gd
bankman.gd
Screenshot of briviochaintrades.com
briviochaintrades.com
14 VTLiveGoogle
Screenshot of briviochaintrades.com
briviochaintrades.com
Screenshot of collab-land.help
collab-land.help
14 VTUnknown
Screenshot of collab-land.help
collab-land.help
Screenshot of createwebsite.ghost.io
createwebsite.ghost.io
14 VTLiveTrezor
Screenshot of createwebsite.ghost.io
createwebsite.ghost.io
Screenshot of cryptomixer.to
cryptomixer.to
14 VTUnknownLedger
Screenshot of cryptomixer.to
cryptomixer.to
Screenshot of legion.click
legion.click
14 VTUnknown
Screenshot of legion.click
legion.click
Screenshot of logi-sisse-902939759030902258.bankkort.co.za
logi-sisse-902939759030902258.bankkort.co.za
14 VTUnknownamerican express
Screenshot of logi-sisse-902939759030902258.bankkort.co.za
logi-sisse-902939759030902258.bankkort.co.za
Screenshot of mail.resul.team
mail.resul.team
14 VTLiveacross
Screenshot of mail.resul.team
mail.resul.team
Screenshot of mymone.ro
mymone.ro
14 VTUnknown
Screenshot of mymone.ro
mymone.ro
Screenshot of pjcarrental.com
pjcarrental.com
14 VTLive
Screenshot of pjcarrental.com
pjcarrental.com
Screenshot of publicapp.ghost.io
publicapp.ghost.io
14 VTLivecoinbase
Screenshot of publicapp.ghost.io
publicapp.ghost.io
Screenshot of reconnectweb.on-fleek.app
reconnectweb.on-fleek.app
14 VTLive
Screenshot of reconnectweb.on-fleek.app
reconnectweb.on-fleek.app
Screenshot of treziostart.ghost.io
treziostart.ghost.io
14 VTLiveEthereum
Screenshot of treziostart.ghost.io
treziostart.ghost.io
Screenshot of us09-zoom.us
us09-zoom.us
14 VTUnknown
Screenshot of us09-zoom.us
us09-zoom.us
Screenshot of wailing-vegetable-low.on-fleek.app
wailing-vegetable-low.on-fleek.app
14 VTLiveMetaMask
Screenshot of wailing-vegetable-low.on-fleek.app
wailing-vegetable-low.on-fleek.app
Screenshot of downloadapps.ghost.io
downloadapps.ghost.io
13 VTLiveTrezor
Screenshot of downloadapps.ghost.io
downloadapps.ghost.io
Screenshot of guidance.ghost.io
guidance.ghost.io
13 VTLivetrezor
Screenshot of guidance.ghost.io
guidance.ghost.io
Screenshot of initiatepage.ghost.io
initiatepage.ghost.io
13 VTLive
Screenshot of initiatepage.ghost.io
initiatepage.ghost.io
Screenshot of webhub.ghost.io
webhub.ghost.io
13 VTLiveLedger
Screenshot of webhub.ghost.io
webhub.ghost.io
Screenshot of webportal.ghost.io
webportal.ghost.io
13 VTLiveEthereum
Screenshot of webportal.ghost.io
webportal.ghost.io
Screenshot of app-hpointservice.soulexport.com
app-hpointservice.soulexport.com
12 VTUnknown
Screenshot of app-hpointservice.soulexport.com
app-hpointservice.soulexport.com
Screenshot of bafybeifk4ns4njv6aax6j6re76ehsfljl6mz4z5kadqsuew27snjarnvwu.ipfs.w3s.link
bafybeifk4ns4njv6aax6j6re76ehsfljl6mz4z5kadqsuew27snjarnvwu.ipfs.w3s.link
12 VTUnknown
Screenshot of bafybeifk4ns4njv6aax6j6re76ehsfljl6mz4z5kadqsuew27snjarnvwu.ipfs.w3s.link
bafybeifk4ns4njv6aax6j6re76ehsfljl6mz4z5kadqsuew27snjarnvwu.ipfs.w3s.link
Screenshot of basedbrett.on-fleek.app
basedbrett.on-fleek.app
12 VTLiveWallet Connect Abuse
Screenshot of basedbrett.on-fleek.app
basedbrett.on-fleek.app
Screenshot of qfs-nesara-gesara-system-backup.qpon
qfs-nesara-gesara-system-backup.qpon
12 VTUnknownEthereum
Screenshot of qfs-nesara-gesara-system-backup.qpon
qfs-nesara-gesara-system-backup.qpon
Screenshot of startrezorio.ghost.io
startrezorio.ghost.io
12 VTLiveTrezor
Screenshot of startrezorio.ghost.io
startrezorio.ghost.io
Screenshot of supporthelp.ghost.io
supporthelp.ghost.io
12 VTLivecoinbase
Screenshot of supporthelp.ghost.io
supporthelp.ghost.io
Screenshot of swift-oxygen-wide.on-fleek.app
swift-oxygen-wide.on-fleek.app
12 VTLive
Screenshot of swift-oxygen-wide.on-fleek.app
swift-oxygen-wide.on-fleek.app
Screenshot of webhelp-1.ghost.io
webhelp-1.ghost.io
12 VTLiveLedger
Screenshot of webhelp-1.ghost.io
webhelp-1.ghost.io
Screenshot of arzhangtoys.com
arzhangtoys.com
11 VTLive
Screenshot of arzhangtoys.com
arzhangtoys.com
Screenshot of decentralizedchain.on.fleek.co
decentralizedchain.on.fleek.co
11 VTLivediscord
Screenshot of decentralizedchain.on.fleek.co
decentralizedchain.on.fleek.co
Screenshot of engstart-live.ghost.io
engstart-live.ghost.io
11 VTLive
Screenshot of engstart-live.ghost.io
engstart-live.ghost.io
Screenshot of enus-user.ghost.io
enus-user.ghost.io
11 VTLive
Screenshot of enus-user.ghost.io
enus-user.ghost.io
Screenshot of home-learn.ghost.io
home-learn.ghost.io
11 VTTaken Down
Screenshot of home-learn.ghost.io
home-learn.ghost.io
Screenshot of homepageledger.ghost.io
homepageledger.ghost.io
11 VTLiveLedger
Screenshot of homepageledger.ghost.io
homepageledger.ghost.io
Screenshot of officialstarts.ghost.io
officialstarts.ghost.io
11 VTLivecoinbase
Screenshot of officialstarts.ghost.io
officialstarts.ghost.io
Screenshot of redronic.com
redronic.com
11 VTCloaked · Live
Screenshot of redronic.com
redronic.com
Screenshot of swiftnodifiedrpc.on-fleek.app
swiftnodifiedrpc.on-fleek.app
11 VTLive
Screenshot of swiftnodifiedrpc.on-fleek.app
swiftnodifiedrpc.on-fleek.app
Screenshot of userstarted.ghost.io
userstarted.ghost.io
11 VTTaken Down
Screenshot of userstarted.ghost.io
userstarted.ghost.io
Screenshot of webassetsapp.ghost.io
webassetsapp.ghost.io
11 VTLiveTrezor
Screenshot of webassetsapp.ghost.io
webassetsapp.ghost.io
Screenshot of www.chainlist.one
www.chainlist.one
11 VTUnknown
Screenshot of www.chainlist.one
www.chainlist.one
api.tabulosesverlangen.com
10 VTTaken Down
Screenshot of faqconnectapp.ghost.io
faqconnectapp.ghost.io
10 VTLiveEthereum
Screenshot of faqconnectapp.ghost.io
faqconnectapp.ghost.io
Screenshot of livesupport.ghost.io
livesupport.ghost.io
10 VTUnknown
Screenshot of livesupport.ghost.io
livesupport.ghost.io
Screenshot of maficheclasse.com
maficheclasse.com
10 VTLiveCloudflare
Screenshot of maficheclasse.com
maficheclasse.com
Screenshot of newdesktop.ghost.io
newdesktop.ghost.io
10 VTLivetrezor
Screenshot of newdesktop.ghost.io
newdesktop.ghost.io
Screenshot of startio-eng.ghost.io
startio-eng.ghost.io
10 VTLiveTrezor
Screenshot of startio-eng.ghost.io
startio-eng.ghost.io
Screenshot of startprimary.ghost.io
startprimary.ghost.io
10 VTLive
Screenshot of startprimary.ghost.io
startprimary.ghost.io
Screenshot of trainingcap.cl
trainingcap.cl
10 VTLive
Screenshot of trainingcap.cl
trainingcap.cl
Screenshot of userportal.ghost.io
userportal.ghost.io
10 VTUnknown
Screenshot of userportal.ghost.io
userportal.ghost.io
Screenshot of webapplication.ghost.io
webapplication.ghost.io
10 VTLiveLedger
Screenshot of webapplication.ghost.io
webapplication.ghost.io
Screenshot of weblearn.ghost.io
weblearn.ghost.io
10 VTLivebase
Screenshot of weblearn.ghost.io
weblearn.ghost.io
Screenshot of websection.ghost.io
websection.ghost.io
10 VTLive
Screenshot of websection.ghost.io
websection.ghost.io
Screenshot of webstartapp.ghost.io
webstartapp.ghost.io
10 VTLive
Screenshot of webstartapp.ghost.io
webstartapp.ghost.io
Screenshot of connect-started.ghost.io
connect-started.ghost.io
9 VTLive
Screenshot of connect-started.ghost.io
connect-started.ghost.io
Screenshot of globalapp.ghost.io
globalapp.ghost.io
9 VTLivebase
Screenshot of globalapp.ghost.io
globalapp.ghost.io
Screenshot of homeportal.ghost.io
homeportal.ghost.io
9 VTLive
Screenshot of homeportal.ghost.io
homeportal.ghost.io
Screenshot of ledgorapp.ghost.io
ledgorapp.ghost.io
9 VTLiveLedger
Screenshot of ledgorapp.ghost.io
ledgorapp.ghost.io
Screenshot of livehelp.ghost.io
livehelp.ghost.io
9 VTLiveLedger
Screenshot of livehelp.ghost.io
livehelp.ghost.io
orticcargo.com
9 VTCloaked · Live
Screenshot of premierwallet.ghost.io
premierwallet.ghost.io
9 VTLiveLedger
Screenshot of premierwallet.ghost.io
premierwallet.ghost.io
Screenshot of publiclive.ghost.io
publiclive.ghost.io
9 VTUnknown
Screenshot of publiclive.ghost.io
publiclive.ghost.io
Screenshot of publicwebportal.ghost.io
publicwebportal.ghost.io
9 VTLivetrezor
Screenshot of publicwebportal.ghost.io
publicwebportal.ghost.io
Screenshot of shiba.on-fleek.app
shiba.on-fleek.app
9 VTLive
Screenshot of shiba.on-fleek.app
shiba.on-fleek.app
Screenshot of started-en-us.ghost.io
started-en-us.ghost.io
9 VTLive
Screenshot of started-en-us.ghost.io
started-en-us.ghost.io
Screenshot of systemweb.ghost.io
systemweb.ghost.io
9 VTLiveLedger
Screenshot of systemweb.ghost.io
systemweb.ghost.io
Screenshot of unijoin.me
unijoin.me
9 VTLiveEthereum
Screenshot of unijoin.me
unijoin.me
Screenshot of webtrack.ghost.io
webtrack.ghost.io
9 VTLivebybit
Screenshot of webtrack.ghost.io
webtrack.ghost.io
Screenshot of appsstarted.ghost.io
appsstarted.ghost.io
8 VTTaken DownLedger
Screenshot of appsstarted.ghost.io
appsstarted.ghost.io
Screenshot of appstartedtrezr.ghost.io
appstartedtrezr.ghost.io
8 VTLiveacross
Screenshot of appstartedtrezr.ghost.io
appstartedtrezr.ghost.io
autodiscover.orticcargo.com
8 VTLive
Screenshot of beginsite.ghost.io
beginsite.ghost.io
8 VTLiveLedger
Screenshot of beginsite.ghost.io
beginsite.ghost.io
cpanel.orticcargo.com
8 VTLive
Screenshot of defiapp.app
defiapp.app
8 VTUnknownfoundation
Screenshot of defiapp.app
defiapp.app
Screenshot of fxalogistics.com
fxalogistics.com
8 VTUnknownacross
Screenshot of fxalogistics.com
fxalogistics.com
1 2 3 4 Next » Page 1 of 4

Browse by Registrar

Select a registrar to see all flagged domains registered through them.

NiceNIC International ... 27,993 Cloudflare, Inc. 20,794 GoDaddy.com, LLC 9,529 PDR Ltd. d/b/a PublicD... 8,062 DYNADOT LLC 7,403 Gname.com Pte. Ltd. 7,074 NameSilo, LLC 5,726 NameCheap, Inc. 5,525 Web Commerce Communica... 4,120 Fewmoretaps OU d/b/a T... 4,109 Global Domain Group LLC 3,933 Tucows Domains Inc. 3,670 Dynadot Inc 3,274 HOSTINGER operations, UAB 3,124 MarkMonitor, Inc. 2,134 GitHub, Inc. 2,112 Dominet (HK) Limited 2,022 OwnRegistrar, Inc. 1,840 Vercel Inc. 1,770 Spaceship, Inc. 1,743 CSC Corporate Domains,... 1,618 Cloudflare Pages 1,569 MAT BAO CORPORATION 1,489 Hosting Concepts B.V. ... 1,389 Key-Systems GmbH 1,354 REGRU-RU 1,316 Netlify 1,176 Name.com, Inc. 1,123 Webflow 1,119 Porkbun LLC 1,101

Showing 332 domains above

Browse by Drainer Type

Wallet drainer kits detected on phishing domains.

Angel Drainer 4,431 Solana Drainer 2,627 Wallet Connect Abuse 1,682 Inferno Drainer 41 Ice Phishing 40 wallet_drainer 23 Unknown Drainer 7 known_drainer_kit 1 MS Drainer 1 Venom Drainer 1

Showing 157,607 domains above

Browse by Scam Kit

Common scam campaign types detected by page title analysis.

Gambler Scam 9,920 Airdrop Scam 6,393 Seed Phrase Phishing 926 Wallet Connect Abuse 602 Token Presale 230 Recovery Scam 97 Verification Scam 64 Giveaway Scam 55 NFT Mint 51 Credential Phishing 31 Staking Scam 7 Prize Scam 3 Steam Phishing 3

Browse by Target Brand

Legitimate brands being impersonated by phishing sites.

Ledger 6,661 Google 5,355 across 5,054 Coinbase 3,900 Solana 2,788 Trezor 2,609 Ethereum 2,530 Kraken 2,510 MetaMask 2,333 Binance 2,210 Facebook 1,520 x.com 1,360 Bet365 1,172 Trust Wallet 1,169 Apple 1,158 sui 1,092 SushiSwap 1,086 aave 1,077 discord 1,057 base 1,035

Browse by Scam Type

Classification of phishing campaigns by attack methodology and social engineering technique.

AML Scam 1,968 Seed Phrase Theft 18 Airdrop Scam 8,155 Investment Scam 269

Site links