If you've come across api.sales.ldpform.net and wondered whether it's a scam or safe to use, here's what the data actually tells us. This domain doesn't appear to be a typical consumer-facing store or service. The homepage itself returns a 401 unauthorized error in Vietnamese, and there's no clear description of what the site does. That alone makes it hard to classify, but the trust signals are consistent across the board: someone went through the effort of adding a legal disclosure page and a privacy policy, yet completely hid their identity in the WHOIS database and left no contact information on the site. That contradiction is a serious concern for any site, regardless of its industry. For comparison, a legitimate business operating in 2026 nearly always lists a visible way to reach them. The absence here isn't just sloppy — it's a structural choice that undermines accountability. The site has been around for about three years and passes basic security checks like Google Safe Browsing, but those positives don't make up for the opacity. Before interacting with api.sales.ldpform.net — entering any personal data, filling forms, or making a purchase — you should know exactly who runs it and how to get help if something goes wrong. Right now, that information simply isn't available.
No — api.sales.ldpform.net doesn't look safe
In plain English
I'd keep my distance from this site. The lack of any publicly registered ownership means there's no real accountability if something goes wrong, and a legitimate business selling a service or product would make itself findable. While some basics like SSL and legal pages are in place, the hidden identity and missing contact info are serious warning signs that outweigh the positives.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The site has a valid SSL certificate and decent protections like clickjacking prevention. But the acceptance of outdated TLS versions is a real risk for any site handling data, and security headers are thin. This isn't alarming but it's not where a business site should be.
This is the biggest red flag. The domain has no WHOIS record at all, meaning the registrant is completely hidden behind a privacy shield or nonstandard registration. For any site that presents itself as a business, having zero public ownership information seriously undermines trust.
There's a clean bill of health from Google Web Risk and DNS blacklists, and the site has been archived for 3 years, which gives some history. But there are no external credibility signals like Trustpilot, social media, or high traffic rank. It's neutral at best.
The site has an about page and legal disclosure (Impressum), which is good. But there's no contact info anywhere, no social media links, and no favicon. A legitimate business should at least put an email or address front and center. The current opacity makes it hard to know who's behind it.
Privacy policy and terms of service are present, and the site has a legal-entity disclosure page required in the EU. That's a solid baseline. However, without knowing what kind of data this site actually collects, it's hard to say if they're fully compliant.
The site loads fast and is hosted on Amazon's reliable infrastructure. But it has no email setup, no DNSSEC, and the sitemap is misconfigured. These are not major security risks, but they hint at a setup that wasn't carefully built or maintained.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.