krahhq[.]abvdk[.]cn

Analysis indicates that the domain krahhq.abvdk.cn was registered on 11 November 2024 through Web Commerce Communications Limited. The authoritative name servers are a11.share-dns.com and b11.share-dns.net, which are commonly used by disposable hosting services. DNS resolution points to the IPv4 address 101.251.179.35. No public SSL certificate information is available for the host, and no HTTP response codes have been observed, suggesting that the site may be deliberately transient or that probing has been limited. The domain appears on two independent phishing blocklists—PhishDestroy and SEAL—both of which have classified it as a malicious phishing resource.

The same listings are reflected in commercial threat feeds, reinforcing the likelihood of malicious intent. VirusTotal reports indicate that the site was submitted to 91 scanning engines, none of which flagged the content at the time of analysis; however, the absence of detections does not constitute a validation of safety, as many phishing pages evade static detection. Registrar information shows that the domain is tied to Web Commerce Communications Limited, a registrar known to host a variety of short‑lived domains used in malicious campaigns. The creation date of less than two years and the lack of historical reputation further support a risk assessment. No evidence of brand impersonation, page title, or specific phishing kit has been disclosed, leaving the exact lure unknown.

Given the current evidence, defenders should treat krahhq.abvdk.cn as a high‑confidence phishing indicator. Recommended actions include adding the domain to outbound and inbound deny lists, monitoring DNS queries for the associated IP address, and correlating any login credential submissions with this host. Continuous re‑scanning with dynamic analysis tools is advised to capture any payload changes.