Security Report: pickabagelnyc.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/be468d5e-e044-4c83-9b16-9e313f89a801 Domain and IP registration (RDAP)/api/v1/rdap/be468d5e-e044-4c83-9b16-9e313f89a801How often this domain was scanned/api/v1/domain/stats/pickabagelnyc.com Scan history for this domain/api/v1/domain/history/pickabagelnyc.com?limit=15

This website contacted 9 IPs in 2 countries across 7 domains to perform 57 HTTP transactions. The main domain is pickabagelnyc.com and was registered 12 years ago.

Submitted URL: https://pickabagelnyc.com

AI Security Verdict

High Risk

Confidence: 95%

Risk Score

Legitimate Pick-A-Bagel restaurant site, but its pages are compromised with a ClickFix 'Human Verification' overlay and an EtherHiding loader that pulls stage-two code from a Polygon contract. Do not follow its Terminal instructions.

Risk Factors (5)

Compromised page injects a ClickFix fake 'Human Verification' overlay that instructs Windows users to open Terminal and run commands

EtherHiding loader retrieves its overlay host from a Polygon smart contract (evasion-resistant C2)

Malicious third-party script loaded from cloud-browse.codes, flagged as an exploit kit by multiple threat feeds

Multiple CRITICAL IDS EtherHiding exfiltration alerts on page traffic

Obfuscated JavaScript with packed loader code and 22 Function() constructor calls

Domain age information unavailable

Details

Page Title

Pick-A-Bagel – We make bagels. We ship Nationwide Shipping on Goldbelly

Scan Type

public

Domain Name Analysis

You're looking at domain 'pickabagelnyc.com' on the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'pickabagelnyc' is 13 characters long split between 4 vowels and nine consonants. It segments into 4 words: pick, a, bagel, nyc. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

10.39s

Total Load Time

2.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:1,144 chars

Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence

Type: dynamic

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	206.225.80.198	United States	AS18501CyberCloud Professionals LLC
6	74.125.29.95Google · CDN	United States	AS15169Google LLC
6	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
6	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
6	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
57	9	-	-