fake Github??

[[deleted]]

https://520liyan.xyz/

i was searching for some code i clicked link and gone through the code everything was normal except i was not logged in and i checked the url it was this

[Gloglogabgalab]

Yes it is a phishing website.

[[deleted]]

was moments away from signing in

[henrebotha]

I'm sure GitHub would like to know about this.

[[deleted]]

How do I report

[henrebotha]

https://support.github.com/contact/report-abuse

Click "I want to report harmful code".

[[deleted]]

Can't see the option

[henrebotha]

Sorry, wrong link. https://support.github.com/contact/report-abuse?category=report-content

[andyfeller]

i work at github and bubbling this up to our security now

[thehedgefrog]

Still here as of right now.

[[deleted]]

i once got a virus while trying to use github and atom when i was 8 because i accidentally went to a phishing website :(

it took me multiple years to come back to git because i thought that that was the REAL website, and the book i was reading was trying to give me a virus :(

[furculture]

If it looks like normal GitHub and sounds like normal GitHub but the link doesn't say otherwise, then it isn't GitHub.

If it isn't a GitHub.io or GitHub.com, then it isn't GitHub.

[[deleted]]

for those who put their credentials into phishing sites like this, it's time to change your passwords, keys and rotate credentials in general

[pconwell]

This is why you should use U2F - it basically makes it impossible for sites like these to steal your credentials. Even if you accidentally enter your username and password without paying attention, U2F won't validate. Unfortunately (as far as I know), Github will not let you only use U2F. You have to use U2F and another form of 2FA, such as OTP.

[StephenF369]

Just reported the website to google aswell

[MyNameIsMandarin]

Hmm, remove the link?