fiverr-projectsale[.]pro

This domain, fiverr-projectsale.pro, is actively engaged in credential theft by impersonating Fiverr, a popular freelance services platform. The site presents itself as a legitimate marketplace for project sales, tricking users into entering their account credentials under false pretenses. Once obtained, these credentials can be used to hijack accounts, steal personal information, or conduct further fraudulent activities, including unauthorized transactions or identity theft. The threat primarily targets freelancers and clients who frequently engage with the Fiverr platform, exploiting their trust in the brand to facilitate the attack. Analysis indicates that fiverr-projectsale.pro was registered on April 27, 2026, through NameSilo, LLC, a domain registrar commonly used for both legitimate and malicious purposes. The domain resolves to the IP address 104.21.34.60, which is hosted on Cloudflare's infrastructure (AS13335). This IP address is geolocated in the United States and is currently flagged by 7 out of 95 security vendors on VirusTotal, a clear indicator of its malicious nature. Additionally, the domain appears on at least one security blocklist, further corroborating its classification as a high-risk credential theft site. Notably, the domain lacks an SSL certificate, which is unusual for legitimate sites and raises additional red flags about its authenticity. If you or someone you know has visited fiverr-projectsale.pro or entered any credentials on the site, immediate action is required to mitigate potential damage. First, change the passwords for any accounts that may have been exposed, prioritizing those linked to financial or personal data. Enable multi-factor authentication (MFA) wherever possible to add an extra layer of security. Monitor your accounts for any suspicious activity, such as unauthorized logins or transactions, and report these incidents to the platform's support team. If financial information was entered, contact your bank or payment provider to flag potential fraud. Finally, consider running a full antivirus scan on any devices used to access the site to ensure no malware was inadvertently downloaded. Users should also report the domain to their organization's IT security team or relevant authorities to help prevent further victimization.