⚠️
이 도메인은 악성 도메인으로 표시되었습니다.
Detected by 3 security vendors. Exercise extreme caution — do not enter credentials or personal information. Create a complaint draft from this stored evidence, review it, and submit it yourself to the appropriate authority.
Domain security & threat intelligence

webprograms[.]ghost[.]io

webprograms.ghost.io 피싱 및 보안 점검

“Official Trezor™ Suite — Desktop & Web App for Hardware Wallets”

Threat verdict Critical 74/100 stored risk score
Availability Last known active Latest stored reachability observation
Risk signals
VirusTotal: 3/91 detections Brand impersonation: Foundation Last known active
3/91 VT Dec 25, 2025 Unavailable since Jun 06, 2026 Foundation Wallet/Seed Phishing CDN + more
보고서 요약

webprograms.ghost.io: VirusTotal 엔진 91개 중 3개가 이 도메인을 탐지했습니다. DNS, SSL, 등록기관, 차단 목록, 위협 정보를 확인하세요.

원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.

Evidence Summary
CRITICAL
Ref
9C134A23
Score
74/100
Mode
Evidence v1

PhishDestroy first recorded webprograms.ghost.io on Dec 25, 2025. This English evidence brief is rebuilt from the current structured observations stored for the report. The current stored risk score is 74/100.

The latest stored availability state is “Last known active” (HTTP 301) on Aug 2, 2026 at 00:20 UTC. This is a reachability snapshot, not proof of the cause of any outage, restriction, or status change.

VirusTotal returned 3 detections from 91 scanners in the stored check on Jul 27, 2026 at 04:28 UTC. The independent blocklist snapshot recorded 0 matches across 10 configured external sources on Aug 2, 2026 at 00:20 UTC. PhishDestroy's own listing is excluded from that count. A zero-match snapshot is not a safety verdict.

Other stored evidence. Google Safe Browsing stored no positive flag on Mar 2, 2026 at 21:36 UTC. This time-bound result is not evidence of safety. AlienVault OTX stored 0 pulse references on Mar 1, 2026 at 14:59 UTC. OTX pulses are community-intelligence references, not vendor verdicts. The Spamhaus DBL snapshot stored no positive result on Jul 14, 2026 at 16:33 UTC. That result is not evidence of safety. A URLScan capture is stored from Feb 25, 2026 at 02:16 UTC.

Stored context lists registrar 1API GmbH, IP address 151.101.131.7, registration date Oct 1, 2011, apparent target Foundation. Except for the registration date, these fields do not share a source timestamp in this report and may change.

Treat these as stored, time-bound observations rather than a live safety guarantee. Source verdicts and reachability can change, and zero or missing vendor matches never prove that a domain is safe. Avoid interacting with the domain while uncertainty remains, and use the appeal process if this report is inaccurate.

VirusTotal
VirusTotal
3 det.
URLScan
URLScan
Gridinsoft
0/100
TLS certificate
Expired or unverified -73d
연령
14.8 yr
Observed status
Last known active 301
PhishDestroy
DestroyList
Listed
데이터 적용 범위 VirusTotal 3 / 91 URLQuery checked — no match OTX no pulses CF 레이더 clean URLScan capture stored report URLScan verdict malicious DNS 차단 not checked TLS expired or unverified WHOIS 181 mo old Screenshot external capture 리디렉션 체인 not probed Gridinsoft 0/100

위협 대응 Pipeline

Discovery
Checks
Reports
Availability
13/15
사전 탐색 및 수집
위협 탐지됨
1/1 ✓
위협 탐지됨
webprograms.ghost.io 탐지되어 전체 분석을 위해 대기열에 추가됨
Dec 25, 2025
Threat Intelligence Checks
URLScan.io Capture · URLScan Verdict · Cloudflare Radar · Web Archive · VirusTotal · Google Safe Browsing · Brand Impersonation · Forensic Evidence Collected · Technical Analysis Recorded · VT Detection +2 · Cloudflare Radar Scan
11/11 ✓
URLScan.io Capture
Stored URLScan report with capture artifacts
Feb 25, 2026
URLScan Verdict
URLScan returned a malicious verdict · score 100
Jul 29, 2026
Cloudflare Radar
Scanned via Cloudflare Radar — DNS, certificates & network data
Web Archive
Preserved in 웨이백 머신 — historical evidence archived
VirusTotal
3 / 91 vendors flagged on VirusTotal
Jul 27, 2026
Google Safe Browsing
Mar 02, 2026
Brand Impersonation
Impersonation of Foundation
Forensic Evidence Collected
Stored evidence from URLScan.io, stored screenshot
Feb 25, 2026
Technical Analysis Recorded
The report contains stored technology or forensic-analysis results
Aug 02, 2026
VT Detection +2
+2 new detections (2 → 4): Chong Lua Dao, Gridinsoft
Jun 27, 2026
Cloudflare Radar Scan
Scanned via Cloudflare Radar — network analysis completed
Feb 27, 2026
Notification Records
Complaint Draft Available
PENDING
Complaint Draft Available
No submission is recorded. You can create a draft, review it, and submit it yourself to the appropriate authority.
게시 및 가용성
DestroyList Published · Monitoring Continues
1/2
DestroyList 게시됨
Dec 25, 2025
Monitoring Continues
The domain remains reachable or access-restricted; future checks may update this observation

공개 차단 목록 상태

증거 수집

Stored Capture
2025-12-25 12:29 UTC
Malicious · 3/91 engines
Forensic screenshot of webprograms.ghost.io showing the phishing page layout
IP: 151.101.131.7
1API GmbH
5,418d old

도메인 인텔리전스

Domainwebprograms.ghost.io
URLScan Verdict Malicious score 100 report ↗
Server / ASN openresty · AS54113 FASTLY, US
IP Reputation abuse score 0/100 1 report checked Jul 17, 2026
Registrar 1API DE(DE)
IP Address 151.101.131.7 CDN
GeoUS San Francisco, US
NetworkASAS54113 · AS54113 Fastly, Inc.
Origin IP is hidden behind a CDN proxy. Reverse-IP on the edge IP returns unrelated tenants — origin discovery requires passive-DNS or CT cross-reference.
Registration생성됨 Oct 01, 2011 Expires Oct 01, 2028
HTTP 상태301 Moved Permanently
Elapsed Since First Report 80 days
What we count Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Last known active.
What each report contains Stored outgoing report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
기술적 세부 사항DNS, SSL SAN, 타임스탬프
최초 발견Dec 25, 2025
Nameserverssara.ns.cloudflare.comwoz.ns.cloudflare.com
TLS Fingerprint015fe124633494e0f12ca559184431eeb45d2255…
TLS SAN Domainsghost.io
Page Title
Official Trezor™ Suite — Desktop & Web App for Hardware Wallets
Impersonates
Foundation Trezor
TLS Certificate
Expired or unverified · Issued by Let's Encrypt / R12
사용 기술 · 3 identified
Varnish
Caching

Varnish is a reverse caching proxy.

www.varnish-cache.org 100% confidence
Nginx
Web servers Reverse proxies

Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.

nginx.org 100% confidence
OpenResty
Web servers

OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.

openresty.org 100% confidence
Detected via Cloudflare Radar · Wappalyzer engine
이 도메인 신고하기 증거를 제출하고 다른 사람들을 보호하는 데 힘을 보태주세요

VirusTotal 분석

3 / 91 security vendors flagged this domain
View on VT
alphaMountain.ai
Gridinsoft
Webroot

보관된 증거

Wayback Machine Snapshot
A historical snapshot is available for evidence review
View Archive
사이트 성능 분석

Google PageSpeed Insights — mobile performance audit of webprograms.ghost.io · checked Jun 27, 2026

100
Good
Performance
FCP
0.79s
First Contentful Paint
LCP
0.79s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
0ms
Total Blocking Time
SI
0.79s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
증거 및 외부 보고서 Open external tools
Third-Party Detection — ChainAbuse
2 reports filed for webprograms.ghost.io · category: Phishing
Flagged by PhishFort Detection System on Dec 31, 2025 — automated submission, not a user testimony. Source: ChainAbuse (TRM Labs).

이 사이트로 인해 영향을 받으셨나요?

당신은 혼자가 아니며, 부끄러워할 것은 전혀 없습니다. 사기꾼들은 신뢰를 악용하는 교묘한 범죄자들입니다. 사기 피해를 신고하는 것이 사기에 맞서 싸우는 가장 강력한 무기입니다. 여러분의 신고는 다른 사람들이 피해자가 되는 것을 막을 수 있을 뿐만 아니라, 수사 당국이 조치를 취하는 데도 도움이 됩니다. 침묵은 사기꾼에게 가장 큰 이점이다. 부숴버려.

If you entered account credentials, personal or payment information, or downloaded a file from this domain, take immediate action. Below are resources to help you report the incident and protect yourself.

회복 사기꾼들을 조심하세요! Criminals may contact victims again while pretending to be investigators, lawyers, or recovery agents. Do not pay upfront fees or share credentials. 회복 관련 사기에 대해 자세히 알아보기 →

지역 당국에 신고하십시오

다음 정보를 확인하려면 국가를 선택하세요 사이버 범죄 관련 공식 연락처, or create a complaint draft →

국가 선택...
180개 이상의 국가
Zero-PII — 사용자의 데이터는 브라우저를 절대 벗어나지 않습니다 Review and submit it yourself

About This Report: webprograms.ghost.io

This report presents the latest stored evidence available to PhishDestroy. Source timestamps are shown where available; availability and vendor verdicts can change after collection.

The site displays a page titled “Official Trezor™ Suite — Desktop & Web App for Hardware Wallets”, which may be designed to impersonate Foundation.

webprograms.ghost.io has been flagged by 3 security vendors as of August 1, 2026.

이 목록의 내용이 부정확하다고 생각되시면, 다음을 하실 수 있습니다. 이의 신청하기. 당사의 방법론에 대한 자세한 내용은 다음을 참조하십시오. 자주 묻는 질문(FAQ) 페이지.

모든 도메인 확인

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

지금 스캔하기

피싱 신고

의심스러운 도메인을 당사의 위협 데이터베이스에 신고해 주세요 — 커뮤니티를 보호해 주세요

Report

실시간 위협 정보

Recent phishing reports and observed availability changes

Monitor

최신 정보를 확인하고, 안전을 지키세요

실시간 위협을 모니터링하거나, 오탐이라고 판단될 경우 이 목록에 이의를 제기하십시오.

실시간 위협 정보 이 목록에 이의 제기하기
HTML · IFRAME

이 보고서 삽입하기

이 위협 정보를 귀하의 웹사이트나 블로그에 공유하세요

embed.html
<iframe
  src="https://phishdestroy.io/ko/embed/domain/webprograms.ghost.io"
  title="PhishDestroy threat report for webprograms.ghost.io"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>