chickfarmers[.]com

The domain chickfarmers.com was registered on March 11, 2026 through Tucows Domains Inc. and currently resolves to 188.114.96.3, an address owned by Cloudflare (AS13335). The site returns HTTP 200 and serves content over Cloudflare’s edge network, using Cloudflare Browser Insights and HTTP/3. Its SSL certificate is issued by Google Trust Services under the WE1 identifier, indicating a valid TLS termination at the CDN edge.

Analysis of the landing page shows the title "ChickFarmers — Crypto Chicken Tycoon | Earn CFF raising chickens" and the site explicitly markets a cryptocurrency‑related game. The page is flagged as an impersonation of the Telegram brand, matching the declared threat type of brand_impersonation. Independent reputation services assign low trust scores—Scamadviser 31/100 and Gridinsoft 1/100—supporting the malicious classification. The domain appears on a single known blocklist, PhishDestroy, which has already listed it as a malicious resource.

Technical indicators reinforce the risk assessment. The domain is served from Cloudflare nameservers elijah.ns.cloudflare.com and paityn.ns.cloudflare.com, a common pattern for fast‑flux or abuse‑friendly hosting. VirusTotal scans show that 2 of 95 security vendors have flagged the domain, indicating at least limited detection across the ecosystem. No additional infrastructure, such as command‑and‑control endpoints, is observable at this time, leaving the broader payload delivery chain uncertain.

Defenders should add chickfarmers.com to URL filtering and domain‑blocking policies, especially for users accessing Telegram services. Continuous monitoring of the IP address 188.114.96.3 and associated Cloudflare zones is recommended to catch any future repurposing. Security teams should also update threat intelligence feeds with the current indicator set and consider sharing the findings with industry‑wide blocklist providers to improve coverage.