# devrubey.github.io — MALICIOUS

> devrubey.github.io involved in credential theft phishing with 14/95 VirusTotal detections. High risk domain flagged by Google Safe Browsing. Avoid use.

## Summary
PhishDestroy identifies devrubey.github.io as an active credential theft phishing domain hosted on GitHub Pages. The site is designed to steal user credentials, employing social engineering tactics to deceive visitors. No specific drainer kit is noted, but the threat focuses on harvesting sensitive login details.

The domain resolves to IP address 185.199.108.153 and is registered through GitHub, Inc. It holds an SSL certificate issued by Let's Encrypt, lending some false legitimacy. VirusTotal analysis shows that 14 out of 95 security vendors flag this domain as malicious. Google Safe Browsing categorizes it under SOCIAL_ENGINEERING threats, reinforcing the risk. While the domain creation date is not provided, it remains active and listed on multiple blocklists.

Currently, devrubey.github.io is active and poses a high risk to users, particularly those who might unknowingly enter credentials. Security teams should ensure this domain is blocked in organizational filters and users educated on the threat. Continuous monitoring is advised as the domain may be reused or altered. Users should avoid interacting with this domain to prevent credential compromise.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: GitHub, Inc.
- IP: 185.199.108.153

## Detection Status
- VirusTotal: 14 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/14cc5af6-98b4-44b9-941e-ff87a3004be9
- PhishDestroy: https://phishdestroy.io/domain/devrubey.github.io/
- LLM endpoint: https://phishdestroy.io/domain/devrubey.github.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/devrubey.github.io/
Last updated: 2026-03-26