# PhishDestroy domain threat record: chickenfrance.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/chickenfrance.com/ Machine-readable companion: https://phishdestroy.io/domain/chickenfrance.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 12:57:03 UTC - Last availability or vendor check: 2026-10-22 12:57:03 UTC - Stored record updated: 2026-10-22 16:30:30 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 172.67.184.85 - Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED - Last stored HTTP status: 200 - Registration date (registry RDAP, chickenfrance.com): 2026-10-17 21:00:12 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a163ae-db86-70ef-87a7-421712c74297/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/chickenfrance.com - Certificate Transparency search: https://crt.sh/?q=%25.chickenfrance.com - Web Archive lookup: https://web.archive.org/web/*/https://chickenfrance.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added chickenfrance.com to its internal blocklist on 2026-10-22 following an admin report. The recorded page title is “BRABUS STORE”. An HTTP 200 response was observed on the same date. The prior automated assessment recorded an “unknown” verdict because page content was insufficient for analysis. How the scam works No concrete malicious behavior was observed on the page, so the listing does not confirm a particular scam technique. Domains flagged as suspicious may be used for phishing, credential harvesting, or fraudulent offers, but the available evidence does not identify any specific mechanism for this site. Evidence VirusTotal scanned the domain on 2026-10-18 (retrieved 2026-10-22) and reported 0 malicious and 0 suspicious detections out of 92 engines. Google Safe Browsing checked on 2026-10-22 and did not flag the site. OTX showed 0 pulses on 2026-10-22. urlscan.io captured the site on 2026-10-22; its machine‑learning engine flagged the URL as malicious with a score of 28, while the overall verdict was non‑malicious. Cloudflare Radar scanned the same day and labeled the site with a phishing tag. PhishDestroy’s internal blocklist records the domain as present, and external blocklists reported no entries. Infrastructure The domain was registered with NICENIC INTERNATIONAL GROUP CO., LIMITED on 2026-10-17 and is set to expire on 2027-10-17. The recorded DNS records listed Cloudflare IP addresses 172.67.184.85 and 104.21.36.31 (and IPv6 addresses 2606:4700:3032::ac43:b855 and 2606:4700:3031::6815:241f) at the time of observation. TLS was provided by Let’s Encrypt, valid from 2026-10-17 to 2027-01-15, and no DNSSEC signatures were present. Open ports 80, 443 and 8080 were observed during the scan. What to do Visitors should avoid entering credentials or personal data on the site and treat it as potentially unsafe. If any credentials were submitted, change the associated passwords immediately. Defenders can block the exact domain in web filters, monitor outbound connections to the recorded IP addresses, and log any access attempts for further investigation. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a163ae-db86-70ef-87a7-421712c74297/ Cloudflare Radar report: https://radar.cloudflare.com/scan/b08aefaa-3695-45ca-8999-df14219587df Stored capture screenshot: https://i.ibb.co/qY5Dy8PL/46d8c4aeeeae.png Cloudflare Radar screenshot (2026-10-22T12:58:24Z): https://screenshots.phishdestroy.io/cf/b08aefaa-3695-45ca-8999-df14219587df.png VirusTotal report: https://www.virustotal.com/gui/domain/chickenfrance.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=chickenfrance.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 13:01:23 UTC ## Stored page captures - Primary capture: https://i.ibb.co/qY5Dy8PL/46d8c4aeeeae.png Captured: 2026-10-22 12:57:03 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a163ae-db86-70ef-87a7-421712c74297.png Captured: 2026-10-22 12:57:03 UTC Source report: https://urlscan.io/result/01a163ae-db86-70ef-87a7-421712c74297/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/b08aefaa-3695-45ca-8999-df14219587df.png Captured: 2026-10-22 12:58:24 UTC Source report: https://radar.cloudflare.com/scan/b08aefaa-3695-45ca-8999-df14219587df SHA-256: cdea201401e33ea956b2da13b7f70b8bf79cd87c45dc2a71a06c995c1f73e5c0 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T13:00:23Z", "uuid": "01a163ae-db86-70ef-87a7-421712c74297", "scanned_at": "2026-10-22T12:56:12Z", "final_url": "https://chickenfrance.com/", "status": 200, "ip": "104.21.36.31", "domains": [ "fonts.googleapis.com", "telegram.org" ], "ips": [ "142.251.127.95", "149.154.167.99", "104.21.36.31" ], "asns": [ "15169", "62041", "13335" ], "countries": [ "US", "NL" ], "doc_hash": "45d6a382ac693b11ccdf421a098619cadbe73c563445403c7d5e7730f0f64446", "globals": [ "Telegram", "TelegramGameProxy_receiveEvent", "TelegramGameProxy", "debugLog", "clearEarlyTimeout", "initTelegram", "showToast", "preloadImage", "preloadCardImages", "timeAgo", "syncState", "startSync", "stopSync", "refreshBalance", "switchView", "loadBoxSettings", "updateBoxUI", "getBoxBankAvailableCount", "updateBoxBankPrice", "populateBoxBankSelect", "onBoxBankChange", "changeBoxQuantity", "updateBoxQuantity", "purchaseBox", "closeConfirmModal", "confirmBoxPurchase", "fetchWithTimeout", "init", "loadFilters", "displayCards", "getCardFallback", "renderPage", "updateCartButtons", "nextPage", "prevPage", "loadPageFromServer", "toggleCart", "loadCardsRefresh", "loadCart", "removeFromCart" ], "storage_keys": [ "__telegram__initParams" ], "tls": { "san": [ "*.chickenfrance.com", "chickenfrance.com" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "chickenfrance.com", "protocol": "TLS 1.3", "valid_to": "2027-01-15T20:08:09Z", "valid_from": "2026-10-17T20:08:10Z" }, "domain_age_days": 483, "apex_age_days": 483, "tls_age_days": 4, "tls_valid_days": 89, "requests": 4, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 28, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T13:00:25Z", "uuid": "b08aefaa-3695-45ca-8999-df14219587df", "scanned_at": "2026-10-22T12:58:24Z", "final_url": "https://chickenfrance.com/", "status": 200, "history": [ { "url": "https://chickenfrance.com/", "status": 200 } ], "dom_hash": "fb91ba04b610390a8908e4a308fd998e1ecc324801c3b18ad67f1d7b10bcd1bb", "doc_hash": "e5cb023280c9ebf04a1712d3f8680d12ceda27140ba28eef15d8f11a9eb19b3b", "phishing_v2": [ "phishing" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "chickenfrance.com", "type": "A", "value": "172.67.184.85" }, { "name": "chickenfrance.com", "type": "A", "value": "104.21.36.31" }, { "name": "chickenfrance.com", "type": "AAAA", "value": "2606:4700:3032::ac43:b855" }, { "name": "chickenfrance.com", "type": "AAAA", "value": "2606:4700:3031::6815:241f" } ], "dnssec_valid": false, "ip": "172.67.184.85", "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-10-17T21:00:12Z", "updated": "2026-10-17T21:04:47Z", "expires": "2027-10-17T21:00:12Z", "nameservers": [ "liv.ns.cloudflare.com", "rory.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T12:58:11Z", "analysis_at": "2026-10-18T07:00:39Z", "stats": { "timeout": 0, "harmless": 56, "malicious": 0, "suspicious": 0, "undetected": 36 }, "reputation": 0, "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-10-17T21:00:12Z", "expires": "2027-10-17T21:00:12Z", "updated": "2026-10-17T21:04:47Z", "first_seen": "2025-06-26T12:15:14Z", "dns": [ { "ttl": 300, "type": "A", "value": "104.21.36.31" }, { "ttl": 300, "type": "A", "value": "172.67.184.85" }, { "ttl": 21600, "type": "NS", "value": "rory.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3032::ac43:b855" }, { "ttl": 21600, "type": "NS", "value": "liv.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "liv.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3031::6815:241f" } ], "dns_at": "2026-10-18T07:12:58Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.chickenfrance.com", "chickenfrance.com" ], "issuer": "Let's Encrypt / YE2", "serial": "6e16af4d144209ef06612a0e368b0d11875", "sha256": "758b745a71021dca462bd54c40d6e0683df27bee2daabd09b052d8c5b7fdc52e", "subject": "chickenfrance.com", "valid_to": "2027-01-15T20:08:09Z", "valid_from": "2026-10-17T20:08:10Z" }, "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "registrar_iana_id": "3765", "registrar_url": "https://nicenic.com", "created": "2026-10-17T21:00:12Z", "updated": "2026-10-17T21:00:12Z", "expires": "2027-10-17T21:00:12Z", "status": [ "clientDeleteProhibited", "clientTransferProhibited" ], "nameservers": [ "liv.ns.cloudflare.com", "rory.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client delete prohibited", "client transfer prohibited" ], "events": { "expiration": "2027-10-17T21:00:12Z", "registration": "2026-10-17T21:00:12Z", "registrar expiration": "2027-10-17T21:00:12Z", "last update of RDAP database": "2026-10-17T21:00:12Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T13:00:37Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "chickenfrance.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-22T12:59:15Z", "first": "2025-07-10T00:37:56Z", "changes": 1, "days_archived": 2, "scans_per_day": 0, "avg_page_bytes": 43709 }, "social_tags": { "title": "BRABUS STORE" }, "trackers": { "requests": 3, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://telegram.org/js/telegram-web-app.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 30, "wait": 67, "connect": 11, "download": 62 }, "response_ms": 172 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 239873, "co2_grams": 0.0088, "cleaner_than": 3 }, "dns_server": { "ns": [ { "ip": "162.159.44.166", "host": "rory.ns.cloudflare.com" }, { "ip": "108.162.192.188", "host": "liv.ns.cloudflare.com" } ], "zone": "chickenfrance.com" }, "location": { "ip": "2606:4700:3031::6815:241f", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "chickenfrance.com" }, "dns": { "A": [ "104.21.36.31", "172.67.184.85" ], "NS": [ "rory.ns.cloudflare.com", "liv.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"liv.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417769048, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2606:4700:3031::6815:241f", "2606:4700:3032::ac43:b855" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3031::6815:241f", "family": 6 }, "redirects": { "chain": [ "https://chickenfrance.com" ] }, "tech_stack": { "technologies": [ "Google Font API", "Cloudflare", "HTTP/3" ] }, "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-10-17T21:00:12Z", "updated": "2026-10-17T21:04:47Z", "expires": "2027-10-17T21:00:12Z", "status": [ "clientDeleteProhibited https://icann.org/epp", "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "liv.ns.cloudflare.com", "rory.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } } } } ```