2

Through some odd Google rabbit hole, I ended up at what appeared to be the GitHub website. I reflexively tried logging in to view my repositories. Upon attempting to log in, it said my browser did something "odd", and the login failed.

I checked the browser URL and it had instead, at the top https://hzb.world/. Fearing this was some sort of phishing expedition, I immediately went and changed my password on GitHub and set up 2FA.

Googling https://hzb.world/ came up with literally nothing. What is going on here?

Improve this question
4
  • 7
    It's almost certainly a phishing site. (It could be a publicly available staging site, but but this is extremely unlikely.) You did the right thing by immediately changing your password and setting up 2FA. If you re-used that password, change it everywhere and start using a password manager.
    – Ghedipunk
    Jul 25, 2019 at 22:45
  • Thank you. I have reported the website to Google as a phishing website. I checked the Whois record, but of course nothing particularly illuminating. SSL certificate is different from GitHub, so it's basically confirmed that it's a phishing website.
    – Colin Basnett
    Jul 25, 2019 at 22:51
  • 1
    It's being fronted through CloudFlare; I submitted a phishing report to them as well.
    – Gordon Davisson
    Jul 25, 2019 at 23:38
  • 2
    For what it's worth, even if it was legitimate, it'd still have a different cert -- it's a different domain. It's still pretty obviously a phishing site (you can't actually log in, it looks just like the real thing, etc. -- you clearly know what the signs are) but that particular piece of evidence isn't relevant.
    – anon
    Jul 26, 2019 at 0:26

1 Answer 1

Reset to default
1

The site seems inoperable right now, but it was likely either a phishing site or a mirror.

If it were just a mirror, it's likely that the login forms were broken or else redirected to GitHub properly. However, you likely wouldn't know, so you must treat it as hostile. Your decision to change your password on the real GitHub was wise.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .