auratg[.]app

This domain, auratg.app, is identified as an active phishing site designed to harvest user credentials, financial information, or other sensitive data. Phishing sites of this nature typically mimic legitimate login portals, payment gateways, or corporate intranet pages to deceive victims into submitting confidential information. The domain may also distribute malware or redirect users to secondary malicious infrastructure, increasing the risk of account compromise or identity theft. Analysis indicates auratg.app was registered on June 25, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar often associated with high-risk domains. The domain resolves to the IP address 172.67.134.44 and uses an SSL certificate issued by Google Trust Services, which may lend a false sense of legitimacy. While only 1 out of 95 security vendors on VirusTotal currently flag the domain, its Gridinsoft trust score of 0/100 and recent creation date suggest it is part of a newly deployed phishing campaign. The low detection rate may reflect limited exposure or evasion techniques employed by the threat actors. If you have visited auratg.app or entered any information on the site, immediate action is required. Disconnect the affected device from the network to prevent potential data exfiltration. Change passwords for all accounts accessed from the device, prioritizing email, banking, and work-related credentials. Enable multi-factor authentication where available. Scan the device using updated security tools to detect and remove any malware. Monitor financial statements and credit reports for unauthorized activity. Report the incident to relevant authorities or your organization’s security team to assist in tracking and mitigating the threat.