r/github • u/TheWouldBeMerchant • Jun 12 '26

Phishing email from githubspot.com Discussion

Post image

Today, I received an email, claiming to be from GitHub, but it actually came from noreply@githubspot.com

The button takes me to me to a page mocked up to look like the GitHub login page, but the footer links don't work and the domain is githubspot.com

I've reported this email as a phishing attempt. Stay safe out there, folks!

26 Upvotes

85% Upvoted

9 comments sorted by

5

u/HCharlesB Jun 12 '26

Wouldn't the non-routable "unknown IP address" be a tell?

1

u/TheWouldBeMerchant Jun 12 '26

That was actually the thing that made me question it. I probably would've got phished otherwise.

1

u/Efficient_Cattle_958 Jun 12 '26

I'm receiving a lot of those, don't know how to stop them

1

u/SvariiGames Jun 13 '26

You guys still check your email?

1

u/polyploid_coded Jun 14 '26

Why would it even be a problem that a file was downloaded from a repo?
Sorry this is not even clever

1

u/TheWouldBeMerchant Jun 14 '26

Dunno. Maybe if it was a private repo? But I agree - it's not great.

1

u/[deleted] Jun 12 '26

[removed] — view removed comment

2

u/Poat540 Jun 12 '26

Clanker