Security Report: 2legendsnyc.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8b0800be-55dc-4b6b-8018-751d7155a283 Domain and IP registration (RDAP)/api/v1/rdap/8b0800be-55dc-4b6b-8018-751d7155a283How often this domain was scanned/api/v1/domain/stats/2legendsnyc.com Scan history for this domain/api/v1/domain/history/2legendsnyc.com?limit=15

This website contacted 5 IPs in 2 countries across 4 domains to perform 146 HTTP transactions. The main domain is 2legendsnyc.com and was registered 4 years 6 months ago.

Submitted URL: https://2legendsnyc.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate NYC gym site compromised and injected with a ClickFix Windows kit: fake Cloudflare overlay plus EtherHiding blockchain loader, confirmed by CRITICAL YARA/IDS alerts. Do not follow the on-screen Terminal instructions.

Risk Factors (4)

Injected fake Cloudflare 'I'm not a robot' overlay instructing Windows users to open Terminal (Win+X) and paste a command — ClickFix social-engineering malware delivery

Obfuscated script with EtherHiding: stage host retrieved from a blockchain contract, evading static blocklists

Unranked third-party script host browse-codes-enter.beer serving code to a compromised site

Page content is a legitimate NYC gym, indicating the site was compromised and injected with attacker code

Domain age information unavailable

Details

Page Title

Home Page - 2Legends

Scan Type

public

Favicon Hash

MMH3: -796525861

MD5: 24ed0ec3e1dc71a41b9bafb4a98919b8

Domain Name Analysis

Domain '2legendsnyc.com' uses the commercial generic top-level domain (.com) and has no subdomain. The second-level label '2legendsnyc' is 11 characters long holding two vowels versus eight consonants, plus one digit. Breaking it apart gives 3 words: 2, legends, nyc. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.95s

Total Load Time

9.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:5,389 chars

Detector Agreement:50%

Website Classification

Primary Category

corporate70% confidence

Type: spa

Method: structural

All Detected Categories

corporate

70%

Detected Features

Products

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
30	141.193.213.10Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
29	96.125.171.41	Ashburn, Virginia, United States	AS19871Network Solutions, LLC
29	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
29	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
29	141.193.213.11Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
146	5	-	-