publicapp[.]ghost[.]io

The domain publicapp.ghost.io presents itself as a legitimate site but is a phishing attempt aimed at stealing user credentials. It currently holds a VirusTotal score of 14 out of 95, indicating a significant level of concern among cybersecurity analysts. This domain impersonates legitimate services, making it a potential threat for unsuspecting users seeking access to web-based applications.

Registered with 1API GmbH, the domain has been active for approximately 14 years, which adds to its credibility. The IP address 151.101.131.7 shows that it is hosted on a reputable network; however, it manages to evade detection by exploiting this trust. The domain has been blocklisted once, which reflects its malicious intent. Moreover, the long registration period suggests a potential established presence in phishing activities.

Currently, the domain remains active, and PhishDestroy is closely monitoring its activity. Immediate actions have been taken to report the domain and include it in blocklists to prevent further credential theft incidents. Continued vigilance is essential as the threat landscape evolves.