Is ghost.io legit or a scam?
Legitimate publishing platform by Ghost Foundation (UK non-profit, 2013) with 100M+ installs and $10.8M ARR; clean security scan but low Trustpilot rating reflects customer service complaints, not fraud.
Analysis Summary
No threats detected
All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.
MT Intelligence
Ghost.io is the official managed-hosting domain for Ghost, a well-established open-source publishing platform operated by Ghost Foundation, a UK-registered non-profit (company 08540663) founded in 2013. Our antivirus network and browser blocklists show no malicious flags, and the domain ranks in the global top-100k by traffic. The push-notification spam detection reflects the open nature of the platform — individual user-created subdomains on *.ghost.io can be abused for spam, but the core operator does not distribute malware or engage in credential harvesting. Business registration confirms the foundation is active and self-funded via Ghost(Pro) hosting with transparent financials ($10.8M ARR, 100M+ installs). an independent review aggregator ratings are low (2.7/5 from 6 reviews) and spam.org records 102 complaints, but these centre on customer service delays, billing disputes, and newsletter spam signups by individual users — not outright fraud by the operator. Positive reviews from independent publishers and the foundation's public financials support legitimacy.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for ghost.io, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- ghost.io is the official managed hosting domain (Ghost(Pro)) for the open source Ghost blogging/newsletter platform operated by the Ghost Foundation, a UK-registered non-profit (company 08540663) founded in 2013.
- The foundation is self-funded with ~$10.8M ARR from hosting, publishes transparent financials, has a remote international team, and reports 100M+ installs and significant publisher revenue.
- Trustpilot shows low rating (2.7/5 from 6 reviews for ghost.io; similar for ghost.org), primarily reflecting customer service or billing complaints rather than outright fraud.
- spam.org records 102 complaints against the domain, mostly for unsolicited emails ('Not Subscribed'); one specific registrar complaint was auto-resolved; Ghost maintains a strict anti-spam policy and terminates violating accounts.
- Common user issues include spam signups to newsletters (hurting sender reputation), pricing concerns for larger sites, and technical limitations, but numerous positive reviews praise it as a legitimate professional publishing tool used by e
- Subdomains on *.ghost.io are sometimes abused for phishing or spam by individual users (e.g. startledgeer.ghost.io flagged), consistent with the 'Push-Notification Spam' detection and open platform nature.
- No evidence of malware distribution, brand impersonation, or exit-scam activity by the core operator; page title and description accurately reflect the legitimate service.
Ghost Foundation, company number 08540663 (Companies House), registered as non-profit organisation / company limited by guarantee; remote team, self-funded via Ghost(Pro) hosting
Spam.org records 102 complaints against ghost.io, mostly for unsolicited newsletter signups and 'Not Subscribed' issues — typical of an open platform where individual users can abuse subdomains for spam. an independent review aggregator shows a low rating (2.7/5 from 6 reviews), but complaints focus on customer service delays and billing concerns rather than fraud or security breaches. Independent reviews and the Ghost Foundation's public business registration (UK non-profit, company 08540663, established 2013, $10.8M ARR, 100M+ installs) confirm the platform is legitimate and widely used by professional publishers including Platformer, 404Media, Lever News, Tangle, and The Browser. No evidence of malware, credential harvesting, or exit-scam activity by the core operator.
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Contact Verification
We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.
- No contact email found anywhere on the page.
- No phone number listed on the page.
- No postal address visible on the page.
- Page requests browser push-notification permission — common malvertising vector.
- Scam family match: Push-Notification Spam.
- Links to 2 social profiles.
Domain & Encryption
Redirect Chain
- 1308http://ghost.io/
- 2200https://ghost.org/cross-domain
Server Reputation
Still, stay alert
No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.
- Double-check the exact URL in your address bar
Confirm you are actually on ghost.io and not a lookalike like g-host.io.com or an IDN homoglyph.
- Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
- OpenDiscuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
Safety FAQ
Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.
- Our automated security review found no threat indicators on ghost.io. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
- ghost.io passed our automated security checks with a trust score of 78/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
- Yes. ghost.io presents a valid TLSv1.3 certificate issued by Let's Encrypt · R13, expiring in 40 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- No. All 92 antivirus engines in our malware network report ghost.io as clean.
- No. ghost.io is not currently listed on the major browser blocklist feeds that modern browsers use.
- ghost.io resolves to an IP operated by Fastly, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- Yes. ghost.io sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.
- This is a permanent record of the scan run on June 10, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around ghost.io have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.