# 1API GmbH: phishing domains and abuse response PhishDestroy reported 32 phishing domains registered with 1API GmbH between 2026-01-02 and 2026-06-18, sending 33 abuse reports. Median time from the first report until a domain stopped resolving: 8.5 days (n = 11). 14 of 25 domains were still active 90 days after the first report. The database holds 587 1API GmbH domains in total. 32Domains reported (window) 33Abuse reports sent 8.5 daysMedian time to unavailable 587In the database now ## Abuse-report outcome Status of the reported domains at the last check of the Registrar Scoreboard dataset (2026-09-09): Live 21 (66%); Offline 11 (34%). 90th percentile time to unavailable: 48.2 days. Response time starts at the first stored report and ends at the first observation that the domain no longer resolved; it is not proof of registrar action. ## What is registered there ### Impersonated brands - [Ledger](https://phishdestroy.io/brand/ledger/)126 - [Trezor](https://phishdestroy.io/brand/trezor/)65 - [Google](https://phishdestroy.io/brand/google/)48 - [Trezor](https://phishdestroy.io/brand/trezor/)30 - [Ledger](https://phishdestroy.io/brand/ledger/)22 - [Ethereum](https://phishdestroy.io/brand/ethereum/)15 - [MetaMask](https://phishdestroy.io/brand/metamask/)14 - [Exodus](https://phishdestroy.io/brand/exodus/)8 ### Top-level domains - [.io](https://phishdestroy.io/tld/io/)449 - [.com](https://phishdestroy.io/tld/com/)38 - [.app](https://phishdestroy.io/tld/app/)14 - [.link](https://phishdestroy.io/tld/link/)12 - [.gg](https://phishdestroy.io/tld/gg/)10 - .tc7 - [.co](https://phishdestroy.io/tld/co/)6 - [.net](https://phishdestroy.io/tld/net/)5 ### Most reported domains - [b-offer.link/admin](https://phishdestroy.io/domain/b-offer.link/admin/) - [ag-dkb.site44.com](https://phishdestroy.io/domain/ag-dkb.site44.com/) - [app.securesphereholdings.com](https://phishdestroy.io/domain/app.securesphereholdings.com/) - [asociacion-felina-argentina.com](https://phishdestroy.io/domain/asociacion-felina-argentina.com/) - [bafkreid5akqsjzkofrb2xmhytj3bpeevrvgm3gh2k7v44ucvv2el4m67oe.ipfs.w3s.link](https://phishdestroy.io/domain/bafkreid5akqsjzkofrb2xmhytj3bpeevrvgm3gh2k7v44ucvv2el4m67oe.ipfs.w3s.link/) ## Latest 1API GmbH phishing domains The 30 most recently detected domains at 1API GmbH Domain | First detected | Status at last check | Registrar | [faydd.com](https://phishdestroy.io/domain/faydd.com/) | 2026-10-11 | Online | 1API | [almaei-hr.com](https://phishdestroy.io/domain/almaei-hr.com/) | 2026-10-08 | Online | 1API | [bybgrupoconsultor.com](https://phishdestroy.io/domain/bybgrupoconsultor.com/) | 2026-09-27 | Online | 1API | [sssssksjs.onemob.com](https://phishdestroy.io/domain/sssssksjs.onemob.com/) | 2026-09-17 | Online | 1API | [shor.tf](https://phishdestroy.io/domain/shor.tf/) | 2026-09-17 | Online | 1API | [myatomicwallet.readme.io](https://phishdestroy.io/domain/myatomicwallet.readme.io/) | 2026-09-17 | Online | 1API | [bridge-trezre.readme.io](https://phishdestroy.io/domain/bridge-trezre.readme.io/) | 2026-09-17 | Online | 1API | [suite-intro.readme.io](https://phishdestroy.io/domain/suite-intro.readme.io/) | 2026-09-17 | Online | 1API | [home-suite.readme.io](https://phishdestroy.io/domain/home-suite.readme.io/) | 2026-09-17 | Online | 1API | [public-ensuite.readme.io](https://phishdestroy.io/domain/public-ensuite.readme.io/) | 2026-09-17 | Online | 1API | [homepage-terzor.readme.io](https://phishdestroy.io/domain/homepage-terzor.readme.io/) | 2026-09-17 | Online | 1API | [index-suite.readme.io](https://phishdestroy.io/domain/index-suite.readme.io/) | 2026-09-17 | Online | 1API | [web-trazerio.readme.io](https://phishdestroy.io/domain/web-trazerio.readme.io/) | 2026-09-17 | Online | 1API | [io-setup.readme.io](https://phishdestroy.io/domain/io-setup.readme.io/) | 2026-09-17 | Online | 1API | [suites-trezo.readme.io](https://phishdestroy.io/domain/suites-trezo.readme.io/) | 2026-09-17 | Online | 1API | [startio-trezreio.readme.io](https://phishdestroy.io/domain/startio-trezreio.readme.io/) | 2026-09-17 | Online | 1API | [web-iostart.readme.io](https://phishdestroy.io/domain/web-iostart.readme.io/) | 2026-09-17 | Online | 1API | [global-trezer.readme.io](https://phishdestroy.io/domain/global-trezer.readme.io/) | 2026-09-17 | Online | 1API | [new-iostart.readme.io](https://phishdestroy.io/domain/new-iostart.readme.io/) | 2026-09-17 | Online | 1API | [startio-suit.readme.io](https://phishdestroy.io/domain/startio-suit.readme.io/) | 2026-09-17 | Online | 1API | [webiostart.readme.io](https://phishdestroy.io/domain/webiostart.readme.io/) | 2026-09-17 | Online | 1API | [new-startsio.readme.io](https://phishdestroy.io/domain/new-startsio.readme.io/) | 2026-09-17 | Online | 1API | [suitesapp-trezo.readme.io](https://phishdestroy.io/domain/suitesapp-trezo.readme.io/) | 2026-09-17 | Online | 1API | [startio-trezer.readme.io](https://phishdestroy.io/domain/startio-trezer.readme.io/) | 2026-09-17 | Online | 1API | [trezo-bridgeen.readme.io](https://phishdestroy.io/domain/trezo-bridgeen.readme.io/) | 2026-09-17 | Online | 1API | [io-suiteapps.readme.io](https://phishdestroy.io/domain/io-suiteapps.readme.io/) | 2026-09-17 | Online | 1API | [ensuite-trezo.readme.io](https://phishdestroy.io/domain/ensuite-trezo.readme.io/) | 2026-09-17 | Online | 1API | [startio-trezr.readme.io](https://phishdestroy.io/domain/startio-trezr.readme.io/) | 2026-09-17 | Online | 1API | [starten-trezrio.readme.io](https://phishdestroy.io/domain/starten-trezrio.readme.io/) | 2026-09-17 | Online | 1API | [eng-trezroio.readme.io](https://phishdestroy.io/domain/eng-trezroio.readme.io/) | 2026-09-17 | Online | 1API | ## Related - [Registrar Scoreboard](https://phishdestroy.io/registrar-accountability/) - [Registrar risk statistics](https://phishdestroy.io/registrar-stats/) - [EPP status codes](https://phishdestroy.io/glossary/epp-status/) - [Bulletproof hosting](https://phishdestroy.io/glossary/bulletproof-hosting/) - [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [All registrars](https://phishdestroy.io/registrar/) Sources: Registrar Scoreboard dataset (/assets/data/registrar-accountability.json, reports 2026-01-02 to 2026-06-18) and the PhishDestroy domain-report database, built 2026-10-22. Registrar names are matched to stored registration data on a best-effort basis. Canonical: https://phishdestroy.io/registrar/1api-gmbh/