Public Security and Domain Clarification: nitrux.org

Key points

Nitrux warns that nitrux.org, a website using the project's name and logo, is not affiliated with the distribution. The project says the site is AI-generated, impersonates Nitrux, draws traffic away from its real website through search results and confuses potential users. The project has filed abuse reports and calls the situation still developing.

What the site is

• nitrux.org shows Nitrux branding, hardware guides and links to downloads hosted elsewhere, and presents itself as a guide to the distribution.
• Nitrux found it on 28 October 2026 during a routine reverse web search, after noticing the site had taken over Google search results.
• The project classifies it as an exact-match domain (EMD) hijack, meaning a domain chosen because it matches a search query people are likely to type.
• Nitrux does not review, maintain or endorse any content, configuration guides or software links on the site.

Domain and hosting details

• Hosted on Hetzner Online GmbH (Germany) infrastructure, resold by Middlehost on a LiteSpeed web server.
• Registrar: Dynadot Inc (USA); other WHOIS details are redacted.
• Registered 2026-04-12, last updated 2026-10-24, expires 2028-04-12.

Actions taken on 28 October

• 8:23: Nitrux contacted the party behind the site; there has been no reply so far.
• 8:57: Reports filed with Google.
• 11:25: Abuse report submitted through the Hetzner Abuse Portal.
• 11:32: Abuse report submitted through the Dynadot Abuse Portal.

What users should do

• Treat https://nxos.org/ as the only official Nitrux website; news, documentation and announcements appear only there and in the project's official repositories.
• Do not download installation media, archives or packages from unofficial domains. Get ISOs only from nxos.org or verified Nitrux mirrors.
• Check every download against the published SHA512 checksums and GPG signatures.
• Email addresses ending in @nitrux.org are not run by the Nitrux team and do not reach official support. Use the contact channels listed on nxos.org instead.
• Verify sources before installing software or following setup instructions.

Summary by DistroNews, based on the original post.