blowfishxyz[.]github[.]io

blowfishxyz.github.io is a tenant hostname on Fastly, not a separately registered domain. PhishDestroy first recorded this hostname on Jun 14, 2026. The hostname explicitly references Blowfish; stored content metadata identifies the same apparent target. The stored content classification is credential phishing. The assembled evidence scores 100/100 (critical).

Four independent sources are positive: VirusTotal, MetaMask, SEAL, and Google Safe Browsing. VirusTotal recorded 10 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, Fortinet, G-Data, Google Safe Browsing, Kaspersky, Lionic, Sophos on Jul 27, 2026 at 03:30 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 18:20 UTC. Google Safe Browsing flagged the domain: Social Engineering on May 16, 2026 at 05:00 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 10:01 UTC. Fastly is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 185.199.111.153 on AS54113 (Fastly, Inc.). The associated network metadata labels the endpoint as GitHub, Inc in San Francisco, US. This is shared platform infrastructure; the IP and ASN are hosting context, not attribution to unrelated tenants. The stored server header is GitHub.com. Captured page title: “Blowfish - Proactive defense for web3 wallets”. The platform TLS certificate was issued by Let's Encrypt / R12 with validity through Jul 5, 2026; checked May 12, 2026 at 17:00 UTC.

Taken together, the page content and independent findings support classifying this hostname as Blowfish-themed credential phishing.