cnkstore[.]ru

This domain cnkstore.ru was created on April 14 2026 and continues to resolve actively with an HTTP 200 response as of July 12 2026. Infrastructure analysis reveals it points to IP 85.198.85.152 hosted by Beget LLC in Russia and serves a page titled Cnkstore - магазин телеграмм аккаунтов. The site loads content through Nginx on Ubuntu while incorporating Tailwind CSS, Chart.js, Unpkg, and jsDelivr resources along with a Let's Encrypt certificate. These elements establish a functional storefront appearance that aligns with the reported generic phishing classification and high risk level.

Detection data shows the domain listed in 22 AlienVault OTX pulses and present on one security blocklist. VirusTotal records indicate one out of 95 vendors flags the domain while Gridinsoft assigns a trust score of zero out of one hundred. The combination of recent registration, persistent availability, and multiple intelligence hits provides concrete indicators of malicious intent without relying on any single source. No additional brand impersonation details or exploit kit signatures are recorded in the available data.

What remains uncertain is the precise transaction flow or account delivery mechanism once visitors interact with the storefront. The page content suggests sales of Telegram accounts yet direct behavioral analysis would be required to confirm whether accounts are fabricated, stolen, or used for further credential harvesting. Defenders reviewing this domain should block the IP 85.198.85.152 at network perimeters, add the hostname to internal watchlists, and correlate any inbound traffic with the known page title to identify potential victim attempts. Regular rechecks of the same IP range for newly registered domains can further limit exposure to similar infrastructure.