Homeβ€Ί Infrastructureβ€Ί ftp.nc.debian.org
This site failed important safety checks β€” please read this before going any further.
Be careful β€” Suspicious

No β€” ftp.nc.debian.org doesn't look safe

30/ 100 trust score
Industry: Infrastructure Checked Jul 15, 2026 Infrastructure average: 47 16 signals

In plain English

This site has serious problems. The SSL certificate is invalid and the domain redirects to a completely different business. While it has a long history and no blacklist issues, the misconfiguration makes it unsafe to use as a Debian mirror. I would look for an alternative source.

What you should do now

Don't panic. These steps limit the damage, and the sooner you take them the better.

1

Don't enter any details

No passwords, card numbers or personal information β€” even if the site looks professional.

2

Close the tab

Especially if you got here from an email, text message or social media ad.

3

Already paid? Call your bank

Contact your bank or card provider right away. They can often stop or reverse a recent payment.

4

Warn others

Report the site and share this check with anyone who sent you the link.

N Partner pick
Better safe than sorry. Stay covered everywhere: NordVPN's Threat Protection blocks known scam sites before they load.
Try NordVPN β†’
Cross-referenced 16 live signals from Google Safe Browsing, VirusTotal, WHOIS and more on Jul 15, 2026. How we score β†’

Where the score comes from

We look at six areas. Here's how ftp.nc.debian.org did in each.
25
Security

The SSL certificate is invalid for this domain, and the site cannot be reached securely. For any server infrastructure, valid TLS is a baseline requirement that has not been met.

35
Identity

The domain's ownership is unclear due to a malformed WHOIS record, and the site redirects to a commercial domain instead of serving its own content. This is unusual for a long-standing subdomain of debian.org.

80
Reputation

The domain has a clean blacklist record, no threats from Google Web Risk, and a 16-year web archive history. These are positive signs of long-term presence.

30
Transparency

There is no contact information or about page associated with this domain. The site immediately redirects to a different business, making it unclear who operates it.

60
Compliance

Legal pages are absent, but this is a non-commercial FTP server that does not collect user data, so the lack of policies is not a concern.

40
Infrastructure

DNS resolution works and DNSSEC is enabled, but the SSL certificate does not match the domain and the site is unreachable. The absence of email services is normal for an FTP server.

What we checked

The 16 signals behind this report.
Security & Transport
Certificate Issuer
Let's Encrypt
Google Web Risk
Clean
SSL Certificate
Invalid
Site Reachable
Unreachable
Identity & WHOIS
Branding
Missing
Infrastructure & DNS
DNS Blacklists
Clean
DNS Resolution
4 IP(s)
DNSSEC
Enabled
Email (MX Records)
None
Hosting Network (ASN)
AS45345 NAUTILE-NC-AS-AP Nautile
Reputation & Reach
Sitemap
Misconfigured
Tranco Rank
Not ranked
Trustpilot
No Trustpilot profile
Web Archive History
16 years
robots.txt
Present
Other
Site Redirect
Redirects to www.nautile.nc

Think this verdict is wrong?

Site owners can request a fresh scan. Scores update automatically as signals change.

This domain is supposed to be a Debian FTP mirror, but it doesn't behave like one. Instead of serving software updates, it redirects to a web hosting company, Nautile. That is a major red flag. Even if the redirect is a leftover from an old configuration, the SSL certificate is for Nautile's domain, not for ftp.nc.debian.org. That means any secure connection to this server fails.

For Linux users looking for official Debian repositories, this site is not trustworthy. A legitimate mirror would have a valid certificate for its own domain and would not redirect to a commercial homepage. The domain has been around for years and isn't on any blacklists, but the technical misconfigurations outweigh those positives. I would stick with the main Debian mirrors or known official mirrors.

When assessing any FTP mirror, always check that the SSL certificate matches the domain you're connecting to. A mismatch like this one means you can't be sure you're getting genuine files. The question "is ftp.nc.debian.org safe" has a clear answer: not in its current state.

More Infrastructure sites

How similar sites score. See all β†’