pizza-token[.]pages[.]dev

Analysis indicates pizza-token.pages.dev was registered on 23 April 2026 and is hosted behind Cloudflare’s network (IP 172.66.45.3, location CA). The site presents a TLS certificate from Let’s Encrypt (E7) and enforces HSTS and HTTP/3 security headers. The page title “$PIZZA – Bitcoin Pizza Memecoin” and the classification as a Brand Impersonation campaign suggest the operator is attempting to lure victims into a fraudulent cryptocurrency offering. The domain is currently active, returns HTTP 200, and is listed on a single security blocklist with a Gridinsoft trust score of 0/100. It has already been blocked by an external phishing mitigation service. No additional technical artifacts such as malicious payloads, redirect chains, or credential‑stealing forms have been disclosed. Defenders should treat the domain as high‑risk: deny outbound connections, add the hostname to DNS and web‑filter block lists, monitor for any new indicators that reference the same IP range or similar naming patterns, and consider proactive threat‑intel sharing with peers. Ongoing investigation is required to confirm whether the site hosts active phishing pages or cryptocurrency scams.