kradza[.]abvdk[.]cn

Analysis of the domain kradza.abvdk.cn indicates that it is currently active and associated with a generic phishing campaign. The domain was created on November 11, 2024 and is registered through Web Commerce Communications Limited. It resolves to the IPv4 address 101.251.179.35 and uses the authoritative nameservers a11.share-dns.com and b11.share-dns.net. The domain appears on two security blocklists and has been explicitly blocked by PhishDestroy and SEAL, confirming that at least two independent threat‑intel feeds consider it malicious.

VirusTotal records show that the domain has been scanned by 91 antivirus and URL‑reputation vendors, none of which have raised a detection flag as of the latest scan; this lack of detections does not imply safety and should be weighed against the blocklist evidence. No SSL certificate details, HTTP status codes, page title, or content snapshots are available in the current intelligence set, leaving the exact phishing lure or targeted brand undefined. The absence of observed page content means that the specific tactics, such as credential‑harvesting forms or redirects, cannot be confirmed at this time.

Defenders should treat kradza.abvdk.cn as a high‑confidence indicator of phishing activity based on its blocklist presence and registrar profile. Recommended actions include adding the domain to network and DNS block policies, monitoring DNS queries for the associated IP address, and employing URL‑filtering solutions to prevent user access. Continuous re‑evaluation is advised, as further analysis of the web payload may reveal additional indicators of compromise or victim targeting.