Since the clone site isn't doing anything obviously malicious like spreading malware or blatantly illegal content none of those parties will take any action whatsoever, nor should they.
Just do a bit of risk assessment if something like this were to be shipped to people that have come to blindly trust the source and you'll see why letting this slip is a very bad idea.
Just because you have pocksuppet.org and I hack pocksuppet.net doesn't mean that one of us is phishing.
Build the audience first, attack comes later