It's GitHub, using GitHub Pages for docs,

  https://github.github.com/gh-aw/ 

served as GitHub Pages from

  https://github.com/github/gh-aw

Why is it phishy? Github.io has been the domain they use for all GH pages for a long time with subdomains mapping to GH usernames. It’s standard practice to separate user generated content from the main domain so that it doesn’t poison SEO.

Agreed, but looks like it: https://github.com/github/gh-aw

Very weird of them to not use github.com but instead use the domain they otherwise use for non-github/user content. Phishy indeed, and then people/companies go ahead and blame users for not taking care/checking, yet banks and more continuously deploy stuff in a way to train users to disregard those things.

How is it not confirmed? GitHub cannot use their own product? Them using GitHub pages changes something? I don’t get it