Hi,
I've found at least two websites impersonating the Let's Encrypt website.
They look like identical copies of the real site, are right up to date (including the current donation/t-shirt offer). I don't think they're staging, infrastructure, or official language versions.
One is even serving over plain HTTP with no SSL cert on the domain itself, which seems odd for anything legitimate.
I don't want to post the URLs publicly here yet. Is this the right forum to report it, or should these reports still go to press@
Welcome back @Sparrow... Good to see you posting again.
There's simply not enough information here for anyone to evaluate what's being reported. A screenshot and the URLs (or partially obfuscated URLs if you prefer not to post them publicly) would help determine whether these are legitimate mirrors, scraped copies, or something more concerning.
Please report any misuse of the ISRG Marks to press@abetterinternet.org, and provide us with as much information as you can about the use you think might be infringing. We’ll investigate the use, and take appropriate action, if warranted.
Thanks for engaging on this, and sorry the original post came across a bit vague or clickbait-y at first glance. That was intentional. I didn’t want to post the actual URLs publicly, since these appear to be compromised or spoofed sites, and I’d rather not risk propagating the links further or driving traffic to them.
Re: screenshots, they wouldn’t add much here, since the pages are identical mirrors of the real site: same CSS, same images, same asset paths, same content, all cloned. A screenshot of a copy would look indistinguishable from the original, so it’s not really useful to the diagnosis.
But as I mentioned the information has been forwarded.