startb[.]ghost[.]io

This domain startb.ghost.io was registered on February 21 2026 through 1API GmbH and currently resolves to IP address 104.21.63.62 located in the United States under AS13335. The nameservers are configured as woz.ns.cloudflare.com and sara.ns.cloudflare.com while the SSL certificate is issued by Let's Encrypt R12. Infrastructure analysis reveals the use of Varnish Nginx and OpenResty technologies along with an HTTP status code of 301 redirecting to a page titled Site unavailable. The domain remains active with a high risk classification tied to generic phishing and appears on one security blocklist. VirusTotal reports detections from 6 out of 95 vendors. Analysis indicates that the registration date falls within the normal operational timeframe for 2026 and no anomalous timing indicators are present in the available data. The exact content served by the domain has not been examined directly and the page title provides the only visible indicator of current response behavior. It is uncertain whether the site has hosted additional resources beyond the observed redirect or whether the generic phishing classification stems from behavioral patterns detected by external feeds. Defenders should incorporate the IP address 104.21.63.62 the nameserver pair and the domain itself into blocklists and monitoring rules. Regular checks of the 301 response chain and certificate details can help track any infrastructure changes while cross-referencing against the single known blocklist entry supports ongoing validation of the active status. Technical teams are advised to correlate these indicators with internal logs to identify any attempted connections or redirects originating from this domain.