How to report a phishing site to GitHub

Hosting provider — Code hosting and GitHub Pages sites.

How to reach them

Abuse report page

Sites on these addresses

GitHub owns the parent domain, so it can remove a page on any of these directly — no registrar involved.

  • *.github.io

What to include

  • Include the full URL, not just the domain.
  • Attach a screenshot and the date/time you saw it.
  • State plainly that it is phishing or fraud, and what it impersonates.

Not sure who hosts the site?

Scan it — we'll identify the host and registrar and give you the routes that apply.

Scan a website

These details have not been re-checked against GitHub's official page recently. Confirm before relying on them.