d-feiishu[.]com[.]cn

This domain, d-feiishu.com.cn, poses as an official Feishu web login portal to deceive users into entering corporate credentials. The site mimics the legitimate Feishu open platform, displaying the page title '飞书开放平台官方下载｜飞书网页端登录入口·智能办公解决方案' to appear authentic. Users tricked into submitting login details risk unauthorized access to sensitive work accounts, internal communications, and proprietary data stored within Feishu or integrated enterprise systems. Analysis indicates this is a calculated phishing operation. The domain was registered on May 12, 2026, through 万商云集（成都）科技股份有限公司, a registrar frequently associated with suspicious registrations. It resolves to the IP address 38.76.168.119 and is flagged by 15 out of 95 security vendors on VirusTotal, including entries on two major blocklists. Technical indicators reveal the use of Nginx for hosting, HTTP/3 protocol support, and HSTS headers, suggesting an attempt to appear legitimate while maintaining operational security. If you or someone in your organization visited d-feiishu.com.cn and entered login credentials, immediate action is required. First, reset the compromised Feishu password and any reused credentials across other platforms. Enable multi-factor authentication on all accounts if not already active. Notify your IT or security team to monitor for unauthorized access or anomalous activity. If corporate devices were used, scan them for malware using updated security tools. Finally, report the incident to internal security teams and consider submitting the domain to additional threat intelligence platforms to aid in broader detection efforts.