Threat Landscape Q3 2026: Italy
54,430,739 threats blocked in Q3 2026
That is about 605,000 blocked requests on Italian ISP networks every day, and 2% of the 3.1 billion threats Whalebone stopped across six European markets in the quarter. Every one of them was a device inside an ISP's network reaching for a malicious domain.
What you will find in the report:
- What Italian networks blocked: malware 62%, blacklist 21%, phishing 12%, and other 5%
- Three global threat domains Whalebone blocked in every market it monitors
- Local threat of the quarter: a fake Mattia Capezzani store built to trap Italian shoppers
Why it matters for ISPs
- Malware works in the background: infected devices contact their servers automatically and repeatedly.
- Every one of those contacts is a DNS request, which is why malware outnumbers the phishing people actually notice.
- Whalebone Peacemaker blocks the DNS request before the page loads, so the customer never reaches the site.
Local threat of the quarter
A fake Mattia Capezzani store targeting Italian shoppers. This domain operates as a fraudulent e-commerce site that impersonates the Italian luxury footwear brand Mattia Capezzani, collecting card details from shoppers who believe they are buying from the real store.
Domain, defanged for safety: mattiacapezzani[.]shop
About the report
Where does the data come from?
Whalebone threat intelligence: DNS requests blocked on customer networks in Italy in Q3 2026 (UTC). Shares are of all blocked threats in the market and are rounded to whole percent.
Do I need to fill in a form?
No. The report is free to download, no registration needed.
How can my ISP get the same protection?
Start a free 30-day trial of Whalebone Peacemaker at whalebone.io/peacemaker-trial.


