travel tourism

corporate

English

optimizelyEndUserId

dd_sf_sdk_popped_up

crumb

ss_cvr

optimizelySession

ss_cvt

_fbp

dd_sf_vid

Within the commercial generic top-level domain (.com), 'www.tonysnyc.com' is registered and includes subdomain 'www'. Count 8 characters in 'tonysnyc' holding one vowel versus 7 consonants. Word splitting yields three words: tony, s, nyc. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

email

html/23/77/2377d93e-7dc0-4683-ba14-96264e2f8f9a.html.gz

default-src 'self' blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;script-src 'nonce-oqYDxB9L' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self';style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com;font-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;img-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;media-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;child-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;frame-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;manifest-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;object-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;worker-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';

default-src 'self' blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;script-src 'nonce-TnwkWkPV' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self';style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com;font-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;img-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;media-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;child-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;frame-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;manifest-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;object-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;worker-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-1il22gT6' blob: 'self' 'wasm-unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-yDIk4gLK' blob: 'self' 'wasm-unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

application/x-www-form-urlencoded; charset=UTF-8

report-uri https://sentry.io/api/5175049/security/?sentry_key=c269bf7b8bc44929b43bbb29e11cece5&sentry_environment=prod_enforcement; script-src 'self' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' https: http: 'nonce-5260f76cdd6b20d8c7bec250785fce27' 'sha384-7uqQfGVKWAthYOKjE4CToVZDjNGO+rxLDL5sFo1HUI3u+vwLmAinEM0/LcURoj1h' 'sha256-spTpc4lvj4dOkKjrGokIrHkJgNA0xMS98Pw9N7ir9oI=' 'sha384-4FS9nLDjKOPIgz/SgGvZV4C8RHHRyRP1Fb6ZW/XH/o8PFaviPmgzLc6kOS2GQ87x' 'sha384-3vojR0D/VZNPM9rutbkAQlVZeDVrc50TkyBVfVpqoZzVQpWA65x5mQXOij0vt2Cu' 'sha384-VI5+XuguQ/l3kUhh4knz7Hxptx47wpQbVRDnp8v7Vvuhzwn1PEYb/uvtH6KLxv6d' 'report-sample'; object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://identity.doordash.com; worker-src 'self' blob:

report-uri https://sentry.io/api/5175049/security/?sentry_key=c269bf7b8bc44929b43bbb29e11cece5&sentry_environment=prod_enforcement; script-src 'self' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' https: http: 'nonce-928ac30d23d725e2bb96bf11bc58288f' 'sha384-7uqQfGVKWAthYOKjE4CToVZDjNGO+rxLDL5sFo1HUI3u+vwLmAinEM0/LcURoj1h' 'sha256-spTpc4lvj4dOkKjrGokIrHkJgNA0xMS98Pw9N7ir9oI=' 'sha384-4FS9nLDjKOPIgz/SgGvZV4C8RHHRyRP1Fb6ZW/XH/o8PFaviPmgzLc6kOS2GQ87x' 'sha384-3vojR0D/VZNPM9rutbkAQlVZeDVrc50TkyBVfVpqoZzVQpWA65x5mQXOij0vt2Cu' 'sha384-VI5+XuguQ/l3kUhh4knz7Hxptx47wpQbVRDnp8v7Vvuhzwn1PEYb/uvtH6KLxv6d' 'report-sample'; object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://identity.doordash.com; worker-src 'self' blob:

Optimizely Internal Frame

6f1b820b23751dd854f969610a0cba03ca1070c9fdb99647bede78ab93082734

54e832663426c696b1f603379026e5e15720e8c812bbbc60d63aa2ad8a479f75

1543d7c079e44ac2231ee88d10740e73fe4e3c2d05cf43b52e3c52d352ff7264

9bbfb612cddafcaaa425ab5f1772d58d0d01102fd8496e4b5adaab65c014d3ae

f782ac98c12a72c08066bd8df00573b52f165e6d7f0092ce960eeda352ef647a

86a8103c1148d1636e86405f7484559f95fbf2a4839404051a1e535f3d1f6e97

2078b127fc9fac67033453a44dd4f1f83a056e99266a76d346c5b19523597f83

b29651931ccaabaa5107e47a1a8360e635cc10d1798bc13e05c31ee0f031462e

eead4554bb3d5119591a6b847c6d55fe3abb6dd5c91ae3bf9a25cf017a6c8086

4641c76635a7ae660dec9dfa267c969e1b495ea501d434a728320b9e3f38b1f4

763b9ead6ea8bd49203a7c06ee4af4ae0e2479e3f1937a7ad504d2783dc7f633

21ccb214252c04984f3b878ad28a3d00b47df21a535bf64232290cd72ad6d727

ac619f451d3d0022840a3fcb91645258177a00d2ae2a746b77e9605404d33cbd

4c8595c8fea62d44d4496000de2e84d872aec1226adc09eb5f3eccbc9c4527e8

22a548a7fb29d44e1d1da38c2229a134605619c701a83aa2192650e3fb38585d

dc9af03e969f5de26380b8b0c333b4ed54c714fa695c3ec8e8148f2348198ac8

b5ad384c80b8ed7a500e751478779d933f921851938116caeef1d12fa5827e5b

f3ace2509e83c249df90735feb25d48d363679584c66f60d717dde197a41eb00

d73048fa3e7a541bec934a037888080ccf73d8108b32043dd8454519af4d0872

4e72e387e3dca4ec27fa4922d964d3da91639f8ad8a4941596db0bba54ba2d13

c951c36c69954976cdcf738d1a2394e2b080fddb18551aa5f1642820249f51ce

c90040cd9f5c23645aafa1f628fec2e90b1da3a905a64fe676885bfd6ec31ea6

bf80e12ef5aedecdeadbf75a4314768b7ab5537ec9bdab2aecad406daf42b428

21fe60b9480ad904693f6246d93996b857b9db36893d8e9808736dca7d945e95

c8bb1c28a3a7e9421ef526d9d30ccad103f28ba9a3c57c4da93d732ae8790355

05e8f7a9a14bfe6d0f8485cef7e13dc01e220a3c99e8bc027ced2144baec167f

1b7e492754babf86a84991d9e4aa1094333c6607dbb57414a964773ccb9dca46

cca8e70897ae7925dc787e8e2452d7fd4b9e9e94d839b5be1a25bf7dceba6809

9e7da835d5e1033c85c8f5229d7d9309c3e5c88014a4df60d3617258707cb327

5f09da8fc957e549706f45152bdca12189d663ce9701f32374477687cb0e111c

ad7713a82c5e63807272f666ebe1e3354ddf35519395e08a8a7c1c9e28c50391

d8a726794c62bfd353658b66b151f1adf819c724abd57f16522c40ae36d34d8e

82261eadbc7bc3aa41492e33b15e5c4f28239dd78ac87d7e6186b773b217c0f5

170cac65ee3afbfda2ac965dbce7c04182e660768d322aaddc5b04a4cdff746a

bc258b90f0040552d98efad7bde22d0a8137439bbe9ea2fb1225a1ca91bb0214

83794a09d7a7400d382e4cb639d9d5e1366dedce414d0406cc13ff73d957b25a

13fb777d7d0341fcc47b59cab4af4f41a628099260f2a69230bcd23bec6f867b

9e9a4d26bdfefe18b6f26e6b12439f5a0d9d73ce5b96e20444ba9c64a6d800a1

20f8600ab480a8bff52bfb40664d6957de6a16cbc27de2fc82fa885f04894d35

5a830022487c27576e89c16dbdddd902d399e2b6505027bb03b1b0d23164d973

viewport

Sec-CH-UA-Platform-Version, Sec-CH-UA-Model

Family Style Italian New York City | Tony's Di Napoli

http://static1.squarespace.com/static/5fbe10dbc6d9645836108177/t/5fbe11c7eaf37e3b646379ab/1606291915726/2020_tonys_logo.png?format=1500w

twitter:title

twitter:image

twitter:url

twitter:card

description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

GoDaddy.com, LLC

TONYSNYC.COM

document.documentElement.classList.add('wf-loading')


  !function(e,t,r,n){var o,c,s;o=e.document,c=t.children[0],s=o.createElement("script"),e.StorefrontSDKObject="StorefrontSDK",e[e.StorefrontSDKObject]={executeCommand:function(t,r){e[e.StorefrontSDKObject].buffer.push([t,r])},buffer:[]},s.async=1,s.src="https://web-apps.cdn4dd.com/webapps/sdk-storefront/latest/sdk.js",t.insertBefore(s,c)}(window,document.head);
  StorefrontSDK.executeCommand('renderFloatingButton', 
    { 
      businessId:17046, 
      businessSlug: 'Tony’sDiNapoli', 
      floatingBar: true,
      position: 'bottom',
      buttonAlignment: 'center',
      backgroundColor: 'transparent', 
      buttonBackgroundColor: '#E12639',
      borderColor: 'transparent',
      buttonText: 'Order Online',
      buttonTextColor: '#FFFFFF',
      buttonRadius: '20px',
      subDomain: 'tonysdinapoli',
      fontFamily:'Lato sans-serif important', 
      showModal: {

          titleText: 'Order Now',

          bodyText: 'Track and manage your order online.',

          titleColor: 'inherit',

          bodyColor: 'inherit',

          style: {

            color: '#191919',

          },

          button: {

            style: {

              borderRadius: '200px',

              color: '#ffffff',

              backgroundColor: '#E12639'

            },

            text: {

              pickup: 'Order Pickup',

              delivery: 'Order Delivery',

            },

          },

          innerModal: {

            style: {

              borderRadius: '20px',

              backgroundColor: '#E7E7E7',

            },

          },

        },

      }

)



!function(f,b,e,v,n,t,s){if(f.fbq)return;n=f.fbq=function(){n.callMethod?n.callMethod.apply(n,arguments):n.queue.push(arguments)};if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0';n.agent='plsquarespace';n.queue=[];t=b.createElement(e);t.async=!0;t.src=v;s=b.getElementsByTagName(e)[0];s.parentNode.insertBefore(t,s)}(window,document,'script','https://connect.facebook.net/en_US/fbevents.js');fbq('init', '2604946559716150');fbq('track', "PageView");

Requests	IP Address	Location	AS Autonomous System
4	157.240.253.1	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
2	104.18.161.45	United States	AS13335CLOUDFLARENET
2	146.75.120.237	Frankfurt am Main, Hesse, Germany	AS54113FASTLY
2	34.49.241.189	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
2	198.49.23.144	United States	AS53831SQUARESPACE
2	146.75.120.238	Frankfurt am Main, Hesse, Germany	AS54113FASTLY
2	104.18.65.57	United States	AS13335CLOUDFLARENET
2	184.24.77.144	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	157.240.202.35	Saint-Denis, Île-de-France, France	AS32934FACEBOOK
2	198.185.159.144	New York, New York, United States	AS53831SQUARESPACE
64	31	-	-

Security Scan Report: www.tonysnyc.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History