Reminds of KoiPhish relay proxy: https://github.com/wunderwuzzi23/KoiPhish https://github.com/wunderwuzzi23/KoiPhish There is also another one called Medlischka

Reminds of KoiPhish relay proxy: https://github.com/wunderwuzzi23/KoiPhish https://github.com/wunderwuzzi23/KoiPhish There is also another one called Medlischka I believe. FIDO and U2FA is addressing this, but it needs browser support. And Google Chrome had some bad bugs in their WebUSB implementation that allowed any site to read keys - not sure if all those issues are addressed by now.