additionalfile[.]ghost[.]io

The domain additionalfile.ghost.io was observed hosting a generic phishing page designed to harvest user credentials or sensitive information. This site does not impersonate a specific brand and is not linked to a known crypto drainer kit. As of the latest verification, additionalfile.ghost.io has been taken offline, though it previously posed a phishing risk to visitors.

Technical indicators show that additionalfile.ghost.io had 0 of 95 VirusTotal vendors flagging it as malicious, and Google Safe Browsing did not list it as a threat. The domain appears on 1 security blocklist (PhishDestroy) and was registered through 1API GmbH on October 01, 2011. It resolved to the IP address 151.101.131.7, hosted on AS54113 (Fastly, Inc.) in the US, with an SSL certificate issued by Let's Encrypt (R12). Detected technologies included Varnish, Nginx, and OpenResty, and the observed page title was 'additionalfile'. The Gridinsoft trust score for this domain was 0/100.

Users who may have interacted with additionalfile.ghost.io should immediately change any passwords entered on the site and enable two-factor authentication (2FA) on affected accounts. Monitor accounts for unauthorized activity and report any suspected fraud to relevant financial institutions. To report the domain, submit it to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities for further investigation.