feijime[.]com

This domain, feijime.com, is identified as a phishing site impersonating the Paper Airplane Messenger (纸飞机), a purported private chat application. The site claims to offer downloads for desktop and mobile versions of the software, targeting users seeking secure communication tools. Analysis indicates the domain is designed to harvest credentials, distribute malware, or conduct fraudulent activities under the guise of a legitimate service. The page title explicitly references "纸飞机官网 - 纸飞机软件下载|中文电脑版及手机版|全球私密聊天软件," reinforcing its impersonation of the legitimate brand.

Infrastructure analysis reveals multiple indicators of malicious activity. The domain is flagged by 13 out of 95 security vendors on VirusTotal, including detection as a phishing or malicious site. It appears on one security blocklist and has a trust score of 0/100. Registered through TuringSign Inc. d/b/a Cosmotown on April 07, 2026, the domain resolves to the IP address 172.67.130.186. The SSL certificate is issued by Let's Encrypt, a common tactic to appear legitimate, while technologies such as HSTS, Cloudflare, and HTTP/3 are employed to evade detection and enhance perceived credibility.

Users who visited feijime.com should immediately cease all interaction with the site. If credentials were entered, reset passwords for all associated accounts, particularly those using the same or similar passwords. Scan the device for malware using updated security tools, as the site may have distributed malicious payloads. Monitor financial and communication accounts for unauthorized activity, and report the incident to relevant security teams or authorities if sensitive data was exposed. Avoid downloading any software from the domain, as it is confirmed to be fraudulent.