kramna[.]abvdk[.]cn

Analysis of the domain kramna.abvdk.cn indicates it is currently active and has been observed on two independent security blocklists. The domain resolves to the IPv4 address 101.251.179.35 and is served by the authoritative name servers a11.share-dns.com and b11.share-dns.net, both of which are typical of shared DNS services used by disposable or fast‑flux infrastructures. Registration information shows the domain was created on 11 November 2024 through Web Commerce Communications Limited, a registrar that frequently appears in abuse reports for low‑cost bulk registrations.

The domain is listed as blocked by PhishDestroy and SEAL, confirming that at least two reputable phishing‑tracking services have flagged it as malicious. VirusTotal records indicate the domain has been scanned by 91 vendor engines, yet none have issued a detection at the time of the latest scan; this absence of detections does not constitute a safety assurance and may reflect evasion or limited visibility of the payload. No public SSL certificate details, HTTP status codes, page titles, or content snapshots are available, leaving the exact phishing lure, targeted brand, or credential‑collection method unconfirmed.

Consequently, defenders should treat the domain as high‑risk until further forensic evidence is obtained. Recommended mitigations include immediate network‑level blocking of the domain and its resolved IP address, inclusion of the host in URL‑filtering and DNS‑sinkhole policies, and continuous monitoring for any changes in DNS resolution or appearance on additional blocklists. Analysts should also request live page captures, examine TLS certificates if presented, and query threat‑intel feeds for potential associations with known phishing kits or campaigns to refine detection rules.