How to report a phishing site to GitHub

How to reach them

Write the report

Paste the link, phone number or email address and we'll write the message for GitHub. You send it yourself.

Sites on these addresses

GitHub owns the parent domain, so it can remove a page on any of these directly — no registrar involved.

• *.github.io

What to include

• Include the full URL, not just the domain.
• Attach a screenshot and the date/time you saw it.
• State plainly that it is phishing or fraud, and what it impersonates.

Not sure who hosts the site?

Scan it — we'll identify the host and registrar and give you the routes that apply.