Fake Website Found
The website found at https://aurorastore.org/ is not the real website for Aurora store and should be avoided.
How can you tell?
There are many red flags for this website
- Incorrect spelling for Nightly
- The domain was created this year while the project is much older
- The gitlab repo of the project never links to this site.
Questions
I tried to download the apk on my vm to scan it but found something odd. The link was to the actual Aurora store apk downloads. The links didn’t work because they were referring to old versions. While it links to the real site for downloading the apk right now, it could easily have linked to malicious apks prior to me finding this website.
Where to find the real website?
The best place to look is on the gitlab repo or on fdroid
How to report the website?
If you want to report the website for phishing, you can go to the domain registrar for the site and submit a ticket. The registrar for this website is namecheap.com and the link to creating a ticket is here.