Diego Russo @diegor.it · Nov 12

It looks like a very well made phishing website. The certificate is valid for the domain, meaning the connection between you and yong.hu is encrypted. Nowadays you can get a certificate for a few bucks. It is written nowhere that the certificate belongs to GitHub. I would raise it with them.

0 likes 1 replies

?

Replies

Fernando Pérez · Nov 12

Yup, the scary part is that it showed up for me as the #1 result of a Google search for a Github project that exists. Which means they did their SEO homework first. I wouldn't be surprised to see folks fall for it.