Seems a continuation of (the real) TamperedChef, leveraging hidden characters and encoding. The certificate "CROWN SKY LLC" was reported to issuer and added to CertCentral, were we notice they continue the same certificate behaviors as before.