apro-8vl[.]pages[.]dev

This domain, apro-8vl.pages.dev, is currently under investigation for generic phishing activity targeting users of the APRO portal. The site presents itself as a legitimate APRO interface, as evidenced by its page title, 'Home | APRO,' which directly mimics the branding of the authentic service. Analysis indicates the domain is designed to deceive visitors into disclosing sensitive credentials or financial information under false pretenses. Infrastructure analysis reveals the domain is registered through Cloudflare, Inc., and resolves to the IP address 172.66.47.160. Despite its active status, the domain has not been flagged by any of the 95 vendors on VirusTotal, suggesting it may still be operating below detection thresholds. The SSL certificate is issued by Google Trust Services, which, while legitimate, does not mitigate the underlying malicious intent. No historical blocklist records or trust scores are available, further complicating early identification efforts. Current findings confirm the domain remains active and unblocked, posing an ongoing risk to unsuspecting users. Organizations and individuals are advised to implement immediate network-level blocks for 172.66.47.160 and the domain apro-8vl.pages.dev. Security teams should monitor for credential harvesting patterns associated with APRO-themed phishing campaigns and conduct retroactive log analysis to identify potential prior exposure. Users who may have interacted with the site should reset credentials for any associated accounts and enable multi-factor authentication as a precautionary measure.