user[.]accuro-group[.]digital

PhishDestroy identifies a live credential-phishing site hosted at user.accuro-group.digital designed to steal usernames and passwords by mimicking a legitimate corporate login page. The domain resolves to IP 104.21.14.185 and uses a Google Trust Services SSL certificate to appear trustworthy, increasing the likelihood that victims will enter sensitive information without suspicion. Because no antivirus engines currently flag the site on VirusTotal, users cannot rely on endpoint protection alone to block the threat.

This domain was flagged by PhishDestroy on 2024-06-03 with zero detections out of 95 engines on VirusTotal at the time of analysis. The registrar is NameBright.com, and the site was registered within the last 30 days, indicating a recently stood-up infrastructure intended for short-term malicious operations. The combination of a freshly registered domain, a Google-issued certificate, and zero detections creates a deceptive yet highly effective trap for unsuspecting visitors.

If you visited user.accuro-group.digital and entered any credentials, change those passwords immediately on a separate, trusted device and enable multi-factor authentication wherever possible. Run a full antivirus scan and monitor accounts for unusual activity. Avoid re-entering credentials on this domain and report the URL to your security team or to PhishDestroy for takedown assistance.