Security Scan Report: itavolo.com

Submitted: Completed: publiccompleted
This website contacted 11 IPs in 2 countries across 9 domains to perform 66 HTTP transactions. The main domain is itavolo.com and was registered 11 years ago.

Submitted URL: https://itavolo.com

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Aged self-branded restaurant site whose page traffic fires multiple CRITICAL EtherHiding/ClickFix malware IDS alerts and loads flagged third-party resources — appears compromised as a malware loader. Avoid.

Risk Factors (5)
CRITICAL IDS malware alerts (EtherHiding exfiltration, ClickFix domain) triggered by page traffic
Primary domain reported as hosting a malware loader
Blockchain RPC connections from page scripts to four endpoint hosts (EtherHiding pattern)
Third-party resource checkyoubrowse.codes flagged malicious by 2 independent feeds
Obfuscation-oriented JS primitives present (3 eval() calls, 15 Function() constructor calls)
Domain age information unavailable

Details

Page Title

Itavolo – eat live laugh

Scan Type

public

Domain Name Analysis

Domain 'itavolo.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Count 7 characters in 'itavolo' holding four vowels versus 3 consonants. Splitting it apart reveals 4 words: it, a, vol, o. Median word length comes out to 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://itavolo.com

Page Load Overview

16.01s
Total Load Time
15.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:775 chars
Detector Agreement:75%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6206.225.80.198United States
AS18501CyberCloud Professionals LLC
6142.251.14.95Google · CDNUnited States
AS15169Google LLC
6142.251.20.95Google · CDNUnited States
AS15169Google LLC
6188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6192.178.183.94Google · CDNUnited States
AS15169Google LLC
6188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
635.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
6178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
6172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6611--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C523C6316ABD4876051F31C6F019A748A6A7E327FB455BF1F29D50785FC8EAA180B2CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:qzjRBc9CzYe8ZwJ/fZinKuP95InvRcISXntDEw1gsyEqBr1BZx56fybsAXf3G:qlzYe8m9uNmJytEwCtBTxdsAXf3G

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:47496:iApxIUAyBCADaQASGyAQAhBIACQwWgfgPJgBKCBTBbILwIAQ0QC4gNcqRBwgShpfAQGYRhBNeIAV4nIBYClAhPIIIjZkoKAo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7e7efefefefeff8f
Perceptual Hash:9501020105efffff
Difference Hash:c0c0000000000010
Wavelet Hash:0202c2c23232f282
Color Hash:#ac6953

Other Hashes

Crop Resistant:c0c0000000000010

Scan History

Scan history not available

Unable to load historical scan data