fdis[.]api[.]lifesecretary[.]com

This domain, fdis.api.lifesecretary.com, operates as a credential harvesting phishing site specifically designed to impersonate Discord, a widely used communication platform. Analysis of the page title, 'Discord - Group Chat That’s All Fun & Games,' indicates an attempt to deceive users into entering login credentials on a fraudulent interface mimicking the legitimate Discord service. The threat primarily targets individuals seeking to access Discord group chats, exploiting trust in the brand to capture sensitive authentication details. Technical evidence confirms the malicious nature of this domain. As of the latest assessment, 19 out of 95 security vendors on VirusTotal have flagged the domain as malicious. The domain was registered on July 10, 2023, through Alibaba Cloud Computing Ltd. d/b/a HiChina and is currently hosted on IP address 47.242.108.218, located in Hong Kong under AS45102. It appears on two security blocklists and has been blocked by multiple threat intelligence platforms. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites due to its accessibility. Users who have visited fdis.api.lifesecretary.com or entered credentials on the site should take immediate action. First, revoke any entered credentials by changing passwords for Discord and any other accounts where the same credentials may have been reused. Enable multi-factor authentication (MFA) on all critical accounts to mitigate unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or messages sent from the account. If financial or personally identifiable information was entered, consider reporting the incident to relevant authorities and credit monitoring services. Network administrators should block the domain and associated IP address within their security infrastructure to prevent further exposure.