kravn[.]abvdk[.]cn

Analysis of kravn.abvdk.cn shows that the domain was registered on 11 November 2024 through Web Commerce Communications Limited. The authoritative name servers listed are a11.share-dns.com and b11.share-dns.net, and DNS resolution points to the IPv4 address 101.251.179.35. Both nameservers and the IP remain reachable as of the report date, confirming that the hosting infrastructure is still active. The domain appears on two external blocklists—PhishDestroy and SEAL—indicating that at least two independent threat‑intel feeds have flagged it as malicious.

No additional public profiling such as SSL certificate details, HTTP response codes, or Safe Browsing status is currently available. The only observable attributes are the registration metadata, DNS configuration, and the blocklist entries. Because the domain is classified as a generic phishing site, the primary risk is credential harvesting directed at unsuspecting users, although the specific target brand or lure has not been disclosed in the available data. The current risk level is marked “under investigation,” and the status is listed as active, meaning the domain may still be serving malicious payloads or phishing pages.

Defenders should block DNS resolution to 101.251.179.35 and add kravn.abvdk.cn to local deny lists. Network monitoring rules that trigger on outbound connections to this host should be enabled, and any email or web gateway that references the domain should be set to quarantine. Continuous re‑evaluation is advised, as further evidence such as page content, SSL fingerprints, or additional blocklist reports could change the threat posture.