cnurcnc[.]com

The domain cnurcnc.com is currently flagged as a high-risk generic phishing site, impersonating the well-known fast-food brand Church’s Texas Chicken. Analysis indicates that the domain has been registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and was created on March 23, 2026. The domain resolves to the IP address 188.114.97.3 and appears on two security blocklists, including PhishDestroy and BLP-Malware. This suggests that the domain has been identified and reported by multiple security vendors as a potential threat. The domain is protected by a Let's Encrypt SSL certificate, which is a common practice among both legitimate and malicious websites. The presence of this certificate does not inherently indicate safety and should not be used as a sole determinant of the site's legitimacy. The site is also using several technologies and services, including Azure, reCAPTCHA, OneTrust, and Cloudflare, which could be indicative of an effort to appear more trustworthy or to evade detection. Infrastructure analysis reveals that the domain is currently active and has been flagged by 6 out of 95 security vendors on VirusTotal, indicating a moderate level of consensus among security professionals regarding its malicious nature. The domain has also been referenced in 23 threat intelligence pulses on AlienVault OTX, further corroborating its involvement in malicious activities. The exact content of the site has not yet been fully analyzed, but the page title suggests that it may be attempting to mimic the official Church’s Texas Chicken website. Defenders should be cautious and implement additional layers of security, such as enhanced monitoring and user education, to protect against potential phishing attacks. Organizations should also consider blocking access to this domain at the network level to prevent users from inadvertently accessing it.