pizzeintermatico[.]shop

This domain, pizzeintermatico.shop, is flagged as a brand impersonation phishing site targeting Polygon, a major blockchain platform. Analysis indicates the site likely hosted a token drainer kit designed to compromise cryptocurrency wallets by tricking users into signing malicious transactions under the guise of legitimate Polygon services. The page title, matching the domain name, suggests minimal effort to mimic authentic branding, increasing the likelihood of targeted social engineering tactics. Infrastructure analysis reveals the domain was registered on February 21, 2026, through an undisclosed registrar. Detection metrics show 13 out of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on two independent security blocklists. No associated IP address or Google Safe Browsing (GSB) status is currently available in public threat feeds. The domain's creation date, combined with its rapid detection and takedown, suggests a short-lived but high-impact campaign. As of the latest assessment, pizzeintermatico.shop has been taken offline, likely due to registrar enforcement or hosting provider intervention. Despite its inactive status, residual risk remains for users who may have interacted with the domain prior to takedown, particularly those who connected wallets or executed transactions. Organizations and individuals are advised to monitor wallet activity for unauthorized transactions, revoke any suspicious smart contract approvals, and verify domain authenticity before engaging with blockchain-related services. Continuous vigilance is recommended, as similar domains may emerge using comparable tactics.