apicode.cfd
Appeared in the .cfd zone on Friday, September 18, 2026; by the end of that day the census found active website about ai software. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Russian-language shop selling "unlimited" Claude/GPT/Gemini API keys at a flat monthly price, advertising models that do not exist ("GPT-6 Astra", "Claude Fable 5.1", "Gemini 3.8 Flash"), with Telegram as the only operator contact, a disposable .cfd name and Aeza hosting — a grey-market/pay-and-vanish API reseller rather than brand impersonation, since it uses its own APICODE branding and does not present itself as OpenAI or Anthropic.
The site claims to sell discounted API keys for OpenAI, Claude, and Gemini under its own 'APICODE' brand, with a form posting to itself and Telegram contact for operators. This is a credential-harvesting and payment-theft scam impersonating an API reseller, not phishing of a specific brand—the page presents itself as APICODE, not as OpenAI/Claude/Gemini, but deceives users into believing they can buy legitimate API access when the actual intent is to collect payment and credentials.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Friday, September 18, 2026
Same data as JSON: /api/zone/domain/apicode.cfd. This page is not indexed by search engines and does not link to the site it describes.