# en-projectpage.ghost.io — SUSPICIOUS

> Domain en-projectpage.ghost.io is a newly uncovered crypto-wallet phishing page detected by PhishDestroy with 0/95 VirusTotal misses.

## Summary
This domain poses a direct threat as a cryptocurrency wallet theft portal designed to trick visitors into entering their private seed phrases. Once submitted, attackers can drain wallet funds in minutes with no recovery options.  PhishDestroy identifies this site as a generic phishing domain currently under investigation. Intelligence shows it received 0 detections out of 95 VirusTotal engines, was created on October 01, 2011, and is registered through 1API GmbH. The page resolves to IP 151.101.3.7 and uses a legitimate Let’s Encrypt SSL certificate to appear trustworthy.  If you visited en-projectpage.ghost.io, stop using any wallet connected to that browser immediately. Disconnect the device from the internet, clear browser cache and cookies, and inspect any connected wallets for unauthorized transactions. Report the domain to your wallet provider and run a full malware scan to ensure no keyloggers remain active.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2011-10-01 23:06:09
- Registrar: 1API GmbH
- IP: 151.101.3.7

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/be497daa-cb18-4391-80d3-d045ab8d7d3a
- PhishDestroy: https://phishdestroy.io/domain/en-projectpage.ghost.io/
- LLM endpoint: https://phishdestroy.io/domain/en-projectpage.ghost.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/en-projectpage.ghost.io/
Last updated: 2026-03-23