pizzadelivery[.]cfd

This domain, pizzadelivery.cfd, is assessed as an elevated-risk delivery scam designed to deceive users into placing fake food orders. Analysis indicates the site impersonates legitimate pizzerias, specifically using the name 'La Bella Pizzaria,' to harvest payment card details and personal information under false pretenses. The threat type is classified as a delivery scam, a subset of fraud where attackers exploit trust in food delivery services to commit financial theft. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain is flagged by 9 out of 95 security vendors on VirusTotal, a notably high detection rate for a newly registered site. It appears on at least one security blocklist, further corroborating its fraudulent nature. The domain was registered on February 22, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 104.21.47.201, which is part of a cloud hosting range often utilized for bulletproof or low-reputation infrastructure. The SSL certificate, issued by Google Trust Services (WE1), provides encryption but does not validate the legitimacy of the site’s operations. The page title, 'La Bella Pizzaria - Delivery,' directly mimics a genuine restaurant brand, reinforcing the impersonation tactic. Mitigation steps for users and organizations include immediate blocking of the domain and its associated IP address at the network level. Users who may have interacted with the site should monitor their payment accounts for unauthorized transactions and consider replacing any exposed payment cards. Organizations in the food delivery sector should proactively monitor for brand impersonation attempts, particularly domains registered through high-risk registrars or hosted on cloud IPs with poor reputation histories. Endpoint protection and email filtering systems should be updated to include this domain and its indicators in threat intelligence feeds. Given the elevated risk, affected individuals are advised to report the incident to relevant financial institutions and consumer protection authorities to mitigate potential fraud losses.