Hi, recently there has been many impersonation campaigns targeting users of open source projects using generated websites and it seems Omarchy has likely fallen victim, too. I don't know, the website currently instructs to download from this GitHub project, but this could change at any time.
The fake website ranks second on Bing and, by extension, on DuckDuckGo, which can put actual users at some nonzero level of risk.
Similar incidents:
- Is https://czkawka.com/ a legit site? --CZKAWKA.COM/NET/ORG ARE NOT THE OFFICIAL PROJECT SITES AND CONTAINS MALWARE!-- qarmin/czkawka#1583
- https://gist.github.com/zerobitflux/57f3791086e18481030df9c204b323fe
- https://github.com/search?q=%22this+project+is+being+impersonated%22&type=issues
- https://thehackernews.com/2026/06/fake-sites-mimicking-open-source-tools.html
- https://news.ycombinator.com/item?id=46106623
Initial OSINT:
$ whois omarchy.net
Domain Name: OMARCHY.NET
Registry Domain ID: 3091537358_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.spaceship.com
Registrar URL: http://www.spaceship.com
Updated Date: 2026-04-24T04:44:03Z
Creation Date: 2026-04-24T04:42:42Z
Registry Expiry Date: 2027-04-24T04:42:42Z
Registrar: Spaceship, Inc.
Registrar IANA ID: 3862
Registrar Abuse Contact Email: abuse@spaceship.com
Registrar Abuse Contact Phone: +1.9854014545
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: DNS1.NAMECHEAPHOSTING.COM
Name Server: DNS2.NAMECHEAPHOSTING.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2026-07-02T09:34:27Z <<<
The website in question (omarchy[.]net):
