api66ledak[.]sbs

PhishDestroy identifies api66ledak.sbs as a live phishing portal masquerading as a financial-services platform claiming to offer dramatic credit-growth solutions through a digital API. The site’s deception hinges on a professionally crafted page title—“API66LEDAK : Evolusi Platform Digital Mendorong Pertumbuhan Kredit Secara Drastis”—which promises unrealistic credit-boost outcomes to trick visitors into entering sensitive personal or banking data. At least one victim has already reported the domain, and the page remains accessible, indicating an ongoing operation rather than a short-lived campaign.

This domain was flagged by PhishDestroy after it appeared on multiple industry blocklists and triggered detections at just 1 out of 95 VirusTotal security vendors. Technical analysis shows api66ledak.sbs resolves to 104.21.38.159, a hosting address linked to fraudulent financial services in the past. The domain was registered on April 29, 2026—merely weeks ago—through NAMECHEAP INC, a registrar frequently abused for bulletproof hosting and rapid domain churn. A Let’s Encrypt SSL certificate has been provisioned to lend an air of legitimacy, but the site’s content and title remain the primary red flags.

If you visited api66ledak.sbs, cease any interaction immediately and avoid entering personal data, passwords, or financial credentials. Disconnect from the site and clear your browser cache and cookies for that domain. Run a full antivirus scan and consider resetting passwords for critical accounts, especially banking or email services you may have accessed from the same device. Report the incident to your bank if you submitted payment details, and file a complaint with your national cybercrime unit or CERT. Monitor bank statements for unauthorized transactions and enable two-factor authentication on all sensitive accounts. Share the domain with your organization’s SOC or security provider so they can add it to internal blocklists and protect others from the same lure.