# wapi.foundation.pm — SUSPICIOUS > PhishDestroy flags wapi.foundation.pm as a crypto drainer domain. Flagged by 0 of 95 VirusTotal vendors. Avoid this site immediately. ## Summary PhishDestroy identifies wapi.foundation.pm as an active crypto drainer domain posing as a legitimate foundation service. This domain was flagged by 0 of 95 VirusTotal vendors and is currently under investigation by security researchers. The domain resolves to IP address 88.222.222.53, is registered through Realtime Register B.V., and holds a Let's Encrypt SSL certificate. No further blocklist or trust score data is publicly available at this time. Given its active status and crypto drainer classification, PhishDestroy strongly recommends that users block this domain at network and browser levels, avoid any cryptocurrency-related interactions with its pages, and report the domain through their cybersecurity channels. Exercise extreme caution if this domain appears in search results or advertisements. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registrar: Realtime Register B.V. - IP: 88.222.222.53 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/a10c031c-8cd6-4981-b020-5cf6fd951bbe - PhishDestroy: https://phishdestroy.io/domain/wapi.foundation.pm/ - LLM endpoint: https://phishdestroy.io/domain/wapi.foundation.pm/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/wapi.foundation.pm/ Last updated: 2026-03-29