krauo[.]abvdk[.]cn

Analysis of the domain krauo.abvdk.cn indicates active phishing infrastructure targeting user credentials through a generic login portal. Registered on November 11, 2024, via Web Commerce Communications Limited, the domain resolves to the IP address 101.251.179.35 and utilizes nameservers a11.share-dns.com and b11.share-dns.net. As of July 24, 2026, the domain remains operational, with no confirmed brand impersonation identified in available data.

Two security blocklists have flagged the domain, though vendor detection on VirusTotal remains at zero across 91 scans, a metric that does not confirm safety but reflects current vendor assessments. Infrastructure analysis reveals no SSL certificate anomalies or HTTP status errors, though the absence of widespread detections suggests either evasion tactics or recent activation. The registrar, Web Commerce Communications Limited, has been associated with prior phishing campaigns, though no direct attribution to this domain is confirmed.

Defenders are advised to monitor network traffic to 101.251.179.35 and review logs for connections to krauo.abvdk.cn, particularly from endpoints handling sensitive credentials. Blocklist integration is recommended pending further analysis, as the domain’s content and exact targeting remain unverified. Additional scrutiny of the hosting provider and nameserver patterns may reveal broader campaign linkages.