be aware i see it's not your domain but it's hosted owner can login into your admin and steal your api key = you lose btc