web3-remittixx[.]github[.]io

Analysis of the domain web3-remittixx.github.io indicates that it was hosted on GitHub Pages and served through Fastly’s edge network (ASN 54113). The site resolved to the IP address 185.199.108.153, which is owned by Fastly in the United States. TLS was provided by Let’s Encrypt using the R12 certificate, confirming that HTTPS was correctly negotiated despite the site returning an HTTP 404 status at the time of testing. The page title returned by the server was “Remittix™ | official Website”, and the associated scam type has been catalogued as an investment scam. The infrastructure fingerprint shows Varnish caching, GitHub Pages hosting, and Fastly CDN components, all of which are typical for legitimate static‑site deployments but are also frequently abused for phishing pages.

The domain was submitted to VirusTotal and examined by ninety‑five antivirus and URL‑reputation engines; none of the scanners raised a detection. Absence of a detection does not constitute a safety guarantee, especially given that the content was not publicly available when the scan was performed. The domain appears on a single external blocklist and is actively blocked by the PhishDestroy service, indicating that at least one security consortium has deemed the site malicious. No nameserver information is provided, which is consistent with GitHub Pages’ default DNS handling. Current evidence does not reveal the specific content that was hosted, nor does it disclose any credential‑harvesting forms or malicious payloads.

The site’s offline status (HTTP 404) suggests that the malicious page may have been removed or taken down, but the infrastructure remains in place and could be re‑activated. Defenders should continue to monitor the IP address and associated Fastly edge nodes for any resurgence of the domain, enforce blocklist rules that include web3‑remittixx.github.io, and consider adding the domain to internal URL filtering policies.