How to report a phishing site to GitHub

How to reach them

GitHub's report form needs a signed-in GitHub account.

GitHub owns the parent domain of these addresses, so it can remove a page on any of them directly:

• *.github.io

• On a repository page you can also use Report repository in the About sidebar

Reporting to GitHub, step by step

1. GitHub's report form requires a signed-in GitHub account. support.github.com/contact/report-abuse (and github.com/contact/report-abuse) both redirect to a "Sign in to GitHub Help" page.
2. On a repository page, click Report repository in the right sidebar under About, then fill in the contact form.
3. To report an account, open its profile, click Block or Report in the left sidebar, then Report abuse.

What happens after you report

• GitHub's docs say reports go to GitHub Support.

Write the report

Paste the link, phone number or email address and we'll write the message for GitHub. You send it yourself.

Not sure who hosts the site?

Scan it: we'll identify the host and registrar and give you the routes that apply.