hl-xunlei[.]com[.]cn

hl-xunlei.com.cn was registered on May 25 2026 through 浙江贰贰网络有限公司. The domain uses the authoritative name servers ns1.22.cn and ns2.22.cn and resolves to the IPv4 address 156.247.33.57. Current WHOIS data shows the domain remains active as of 16 July 2026. VirusTotal scans have identified the domain as malicious in 3 of 91 security vendor detections, which aligns with its classification as a generic phishing site. The short registration period and the use of a single IP address are typical of infrastructure used for short‑lived credential‑harvesting campaigns. No additional infrastructure, such as CDN or fast‑flux, is observable from the available data. Defenders should add hl‑xunlei.com.cn to blocklists, enforce DNS sinkholing, and monitor outbound traffic for connections to 156.247.33.57. Continuous re‑scanning of the domain on multi‑engine services is advised to detect any changes in detection rate. Organizations that receive suspicious emails referencing this domain should treat any credential request as fraudulent.