started-get[.]ghost[.]io

PhishDestroy first recorded started-get.ghost.io on Feb 26, 2026. This English evidence brief is rebuilt from the current structured observations stored for the report. The current evidence score, computed from those stored observations, is 74/100.

The latest stored availability state is “Last known active” (HTTP 301) on Aug 5, 2026 at 01:18 UTC. This is a reachability snapshot, not proof of the cause of any outage, restriction, or status change.

VirusTotal returned 3 detections from 93 scanners in the stored check on Jul 9, 2026 at 02:14 UTC. The independent blocklist snapshot recorded 0 matches across 10 configured external sources on Aug 5, 2026 at 06:20 UTC. PhishDestroy's own listing is excluded from that count. A zero-match snapshot is not a safety verdict.

Other stored evidence. Google Safe Browsing stored no positive flag on Mar 2, 2026 at 21:00 UTC. This time-bound result is not evidence of safety. AlienVault OTX stored 0 pulse references on Mar 1, 2026 at 02:28 UTC. OTX pulses are community-intelligence references, not vendor verdicts. The Spamhaus DBL snapshot stored no positive result on Jul 14, 2026 at 02:37 UTC. That result is not evidence of safety. A stored Cloudflare Radar snapshot labels the domain malicious. No source check timestamp is stored for this field. A URLScan capture is stored, but no capture timestamp is available.

Stored context lists registrar 1API GmbH, IP address 2a04:4e42:200::775, registration date Feb 21, 2026, apparent target Ledger. Except for the registration date, these fields do not share a source timestamp in this report and may change.

Treat these as stored, time-bound observations rather than a live safety guarantee. Source verdicts and reachability can change, and zero or missing vendor matches never prove that a domain is safe. Avoid interacting with the domain while uncertainty remains, and use the appeal process if this report is inaccurate.