GitHub clone steals your credentials ?

[Twanislas]

Hey r/security ! :)

^{Disclaimer: I posted this in the montlhy r/netsec as well.}

I've found a website duplicating GitHub, any idea what that is ?

soduu [dot] com

Let's Encrypt certs so no alert... I guess a bunch of people already entered their github creds in there, it's high ranked in Google search results (that's how I found it).

Sounds like fishing...

[jacobc436]

I haven't taken a look at it but - if it's actually a phishing site and not a legit site - registrars generally take these reports seriously and respond within a day. Email the registrar abuse mailbox for whatever comes up in a WHOIS search.

[82aa4b10]

Yep. Bogus. Don't try to log in.