Security Scan Report: andresjost.com

Site favicon
Submitted: Oct 8, 2026, 12:21:18 PMCompleted: Oct 8, 2026, 12:21:56 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Established site has been compromised: analyst-vetted ErrTraffic/Exvicy loader and ClickFix fake 'Cloudflare verification' overlay push visitors to paste malware commands into Terminal, with EtherHiding exfiltration and injected gambling spam.

Risk Factors (5)
ClickFix fake CAPTCHA / fake 'Human Verification' overlay instructing visitors to paste shell commands into Windows Terminal
ErrTraffic/Exvicy obfuscated WordPress loader injected into page markup
EtherHiding malware exfiltration and blockchain RPC command-and-control contact
Injected gambling spam SEO content unrelated to the site's subject matter
Malicious third-party script hosts flagged by multiple threat-intel feeds
Domain age information unavailable

Details

Page Title

andresjost |

Scan Type

public

Domain Name Analysis

Domain 'andresjost.com' uses the commercial generic top-level domain (.com) with no subdomain. Count 10 characters in 'andresjost' holding 3 vowels versus seven consonants. Breaking it apart gives two words: andres, jost. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://andresjost.com

Page Load Overview

3.66s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇹🇷Turkish
Code: tr
Confidence:29%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,608 chars
Detector Agreement:50%
Language mismatch: Declared as en-US but detected as tr

Website Classification

Primary Category

gambling betting53% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

gambling betting
53%
cryptocurrency blockchain
36%
documentation technical
35%
technology software
32%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6128.65.195.152Switzerland
AS29222Infomaniak Network SA
3195.58.146.210Denmark
AS9009M247 Europe SRL
3172.67.130.228Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
3142.251.110.94Google · CDNUnited States
AS15169Google LLC
3178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
3104.21.3.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.171.128Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
278--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CD93C44E677635F8B2078719F991B728939CD623960209E6BC31D26CCBC36B3017636E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:+XDJmISjWpZdaph1rVMB2bsEO1wAGj/HsP:+XDY5jWZapfr+QowxEP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:89601:IrAkREAwImiQ8gcwQokSkAmGgkCaAeTQqAWJ7wAwF0tkkkaD6ADsECCAIygGUAIES/XhwBDTMwxECYCAYAT6JOUPIJQyJCAF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefefefeffffffff
Perceptual Hash:d55555aaaa5455aa
Difference Hash:0000000000000000
Wavelet Hash:0e0e0e0e0e0e0e0e
Color Hash:#783a3c

Other Hashes

Crop Resistant:0000000000000000

Scan History

Scan history not available

Unable to load historical scan data