krajjc[.]abvdk[.]cn

Analysis as of July 24 2026 flags the domain krajjc.abvdk.cn as an active generic phishing infrastructure. The domain was registered on 11 November 2024 through Web Commerce Communications Limited and uses the authoritative name servers a11.share-dns.com and b11.share-dns.net. DNS resolution points to the single IPv4 address 101.251.179.35. No additional A or AAAA records were observed. VirusTotal records indicate that the domain has been submitted to 91 scanning engines; none of the engines returned a positive detection at the time of the scan.

The report explicitly notes that the lack of detections does not constitute evidence of benign behavior. The domain is listed on two external blocklists, specifically PhishDestroy and SEAL, both of which categorize it as a phishing source. Public reputation services have not published a Safe Browsing status, and no SSL certificate details or HTTP response codes are available in the current intelligence set. Page‑title metadata and any observed brand targeting have not been captured, so the precise content of the hosted page remains unknown.

Given the observed infrastructure, defenders should block DNS resolution to 101.251.179.35 and add the domain to local deny lists. Network‑level filters that reference the PhishDestroy and SEAL blocklists should already be denying traffic, but verification of those feeds is recommended. Continuous monitoring of the name servers a11.share-dns.com and b11.share-dns.net for additional record changes is advised, as adversaries frequently update pointing addresses. Re‑scanning the domain with dynamic analysis platforms is encouraged to obtain current behavioral indicators, especially if the site begins serving login capture pages or other credential‑stealing payloads.