browser-360[.]hl[.]cn

This domain, browser-360.hl.cn, is flagged as a generic phishing site targeting users of the legitimate 360安全浏览器 (360 Secure Browser). The page title, '360安全浏览器 - 安全极速双核AI浏览器官方下载,' mimics the official branding to deceive visitors into downloading malicious software under the guise of a trusted browser update. No specific drainer kit signatures were identified, but the domain's infrastructure and content align with distribution campaigns for trojanized installers or adware bundles. Analysis indicates the domain resolves to IP address 38.6.164.66 and is registered through 北京新网数码信息技术有限公司. VirusTotal reports 6 out of 95 security vendors flagging the domain as malicious, while it appears on three independent security blocklists. AlienVault OTX records the domain in two threat intelligence pulses, suggesting prior involvement in coordinated phishing or malware distribution operations. The site employs Tengine web server software alongside jQuery and enforces HSTS, which may be used to lend an appearance of legitimacy to the fraudulent page. Currently, browser-360.hl.cn is offline, likely following takedown actions or suspension by the registrar. However, residual risk persists due to the potential for infrastructure reuse or migration to newly registered domains. Organizations are advised to block the domain and associated IP at the perimeter, while users should verify browser downloads exclusively through official vendor channels. Monitoring for related domains registered under the same registrar or resolving to the same IP range is recommended to preemptively mitigate follow-up threats.