# eng-starts.ghost.io — MALICIOUS

> Beware of eng-starts.ghost.io, a high-risk phishing domain still active and flagged by multiple security sources. Stay protected with PhishDestroy.

## Summary
PhishDestroy identifies eng-starts.ghost.io as a high-risk generic phishing domain registered on February 21, 2026. It is designed to deceive users by impersonating legitimate services.

The domain is currently active and listed on two security blocklists. VirusTotal flags it with 10 detections out of 95 security vendors, indicating suspicious behavior consistent with phishing campaigns.

Due to its ongoing activity and confirmed malicious intent, users and organizations are advised to block eng-starts.ghost.io to prevent credential theft and other phishing-related attacks.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 402)
- Page title: Site unavailable

## Domain Intelligence
- Registered: 2026-02-21 07:01:08

## Detection Status
- VirusTotal: 10 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "CRDF", "CyRadar", "Emsisoft", "Fortinet", "Gridinsoft", "Lionic", "Netcraft", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content

### Page Text
Site unavailable What is Ghost? Site unavailable. If you're the owner, email us on support@ghost.org

### External Links
- https://ghost.org/

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/eb6135d1-8b63-4531-8629-db51ba57e313
- PhishDestroy: https://phishdestroy.io/domain/eng-starts.ghost.io/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/eng-starts.ghost.io/
Last updated: 2026-03-14