Likely impersonation at omarchy[.]net

[Arusekk]

Hi, recently there has been many impersonation campaigns targeting users of open source projects using generated websites and it seems Omarchy has likely fallen victim, too. I don't know, the website currently instructs to download from this GitHub project, but this could change at any time.

The fake website ranks second on Bing and, by extension, on DuckDuckGo, which can put actual users at some nonzero level of risk.

Similar incidents:

• Is https://czkawka.com/ a legit site? --CZKAWKA.COM/NET/ORG ARE NOT THE OFFICIAL PROJECT SITES AND CONTAINS MALWARE!-- qarmin/czkawka#1583
• https://gist.github.com/zerobitflux/57f3791086e18481030df9c204b323fe
• https://github.com/search?q=%22this+project+is+being+impersonated%22&type=issues
• https://thehackernews.com/2026/06/fake-sites-mimicking-open-source-tools.html
• https://news.ycombinator.com/item?id=46106623

Initial OSINT:

$ whois omarchy.net
   Domain Name: OMARCHY.NET
   Registry Domain ID: 3091537358_DOMAIN_NET-VRSN
   Registrar WHOIS Server: whois.spaceship.com
   Registrar URL: http://www.spaceship.com
   Updated Date: 2026-04-24T04:44:03Z
   Creation Date: 2026-04-24T04:42:42Z
   Registry Expiry Date: 2027-04-24T04:42:42Z
   Registrar: Spaceship, Inc.
   Registrar IANA ID: 3862
   Registrar Abuse Contact Email: abuse@spaceship.com
   Registrar Abuse Contact Phone: +1.9854014545
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Name Server: DNS1.NAMECHEAPHOSTING.COM
   Name Server: DNS2.NAMECHEAPHOSTING.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2026-07-02T09:34:27Z <<<

Legit website:

The website in question (omarchy[.]net):