en-projectpage[.]ghost[.]io

The domain en-projectpage.ghost.io is a generic phishing site designed to deceive users into disclosing sensitive information, such as login credentials or personal data. No specific brand impersonation or crypto drainer kit was identified. As of the latest verification, en-projectpage.ghost.io has been taken offline, but its prior activity poses an elevated risk to users who may have interacted with it.

Technical analysis reveals that en-projectpage.ghost.io was flagged by 1 of 95 VirusTotal security vendors, including Netcraft, and appeared on 1 security blocklist (PhishDestroy). The domain was registered through 1API GmbH on March 23, 2026, and resolved to the IP address 151.101.3.7, hosted by Fastly, Inc. in Canada. The SSL certificate was issued by Let's Encrypt (R12), and the observed page title was 'en.projectpage'. Detected technologies include Ghost, Node.js, Varnish, Nginx, and OpenResty. Google Safe Browsing did not flag the domain, and Gridinsoft assigned it a trust score of 0/100.

Users who may have entered credentials on en-projectpage.ghost.io should immediately change passwords for any accounts accessed during the interaction, enable two-factor authentication (2FA) where available, and monitor accounts for unauthorized activity. If financial or crypto-related details were shared, contact the relevant institution and consider additional fraud protection measures. Report the domain to platforms like PhishTank, Google Safe Browsing, or local cybersecurity authorities to aid in broader mitigation efforts.