fiverr-projects[.]pro

This domain, fiverr-projects.pro, is identified as a generic phishing site designed to harvest user credentials and sensitive financial information. Analysis indicates it impersonates a legitimate freelance platform, likely targeting users through fraudulent job offers or payment requests. No specific drainer kit has been confirmed, but the infrastructure aligns with common credential theft campaigns observed in similar phishing operations. Infrastructure analysis reveals the domain was registered on April 27, 2026, through NameSilo, LLC, and resolves to the IP address 172.67.139.77. It holds a VirusTotal detection score of 19/95, with security vendors flagging it for phishing-related activity. The domain appears on one security blocklist and uses a Let's Encrypt SSL certificate (serial number E7). Google Safe Browsing (GSB) does not currently list the domain, but its elevated risk status is supported by the vendor detections and historical phishing patterns. The domain is currently offline, likely due to takedown actions or infrastructure changes. Despite its inactive status, residual risk remains for users who may have interacted with the site prior to its removal. Organizations are advised to block the domain and associated IP at the network level, monitor for credential reuse, and conduct user awareness training to mitigate potential follow-on attacks. Continuous monitoring of related indicators is recommended due to the possibility of reemergence under new infrastructure.