krasn[.]abvdk[.]cn

This analysis documents the observable infrastructure for the domain krasn.abvdk.cn, which is currently listed as an active generic phishing site. The domain was registered on 11 November 2024 through Web Commerce Communications Limited and resolves to the IPv4 address 101.251.179.35. Authority for DNS resolution is provided by the nameservers a11.share-dns.com and b11.share-dns.net.

The domain appears on two independent security blocklists, specifically PhishDestroy and SEAL, indicating that at least two threat‑intelligence feeds have flagged it as malicious. A VirusTotal scan has been performed by 91 antivirus vendors, and none of the scanners raised an alert; however, the lack of detections does not constitute evidence of benign behavior and should be interpreted with caution. No public information is available regarding SSL/TLS certificates, HTTP response codes, Safe Browsing status, or any observed page title, so the content served by the host remains unverified.

The limited data set prevents definitive conclusions about the exact phishing payload or the targeted brand, but the infrastructure footprint aligns with typical abuse patterns observed for credential‑harvesting campaigns. Defenders should consider adding the IP address 101.251.179.35 to network‑level deny lists, enforce DNS filtering for krasn.abvdk.cn, and monitor traffic for any outbound connections to the associated nameservers. Continuous re‑assessment is advised, as future scans may reveal additional indicators such as malicious binaries, altered page content, or new blocklist entries.