Security Report: e-mod.firstcloudit.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/06a8f03e-cf5e-4406-99b9-3bb062ae6a17 Domain and IP registration (RDAP)/api/v1/rdap/06a8f03e-cf5e-4406-99b9-3bb062ae6a17 Certificate Transparency/api/v1/ct/drivehq.com How often this domain was scanned/api/v1/domain/stats/e-mod.firstcloudit.com Scan history for this domain/api/v1/domain/history/e-mod.firstcloudit.com?limit=15

This website contacted 2 IPs in 1 country across 2 domains to perform 28 HTTP transactions. The main domain is drivehq.com and was registered 21 years ago.

Submitted URL: https://e-mod.firstcloudit.com

Effective URL:

https://www.drivehq.com/help/hosting/FileNotFound.aspx?filePath=/e-mod...

Redirected

AI Security Verdict

Moderate Risk

Confidence: 72%

Risk Score

Entry domain e-mod.firstcloudit.com carries a multi-feed APT Sofacy malware IoC; redirect lands on DriveHQ's own error page with no forms or phishing content. Risky infrastructure — avoid interaction.

Risk Factors

Primary domain e-mod.firstcloudit.com carries a multi-feed malware-family IoC (apt sofacy)

Cross-domain redirect funnels an entry host with malicious reputation to a third-party hosting error page

Dynamic code execution (eval) present on the served page

Safety Factors

Page rendered is the brand owner's own DriveHQ error page — no brand impersonation (destination www.drivehq.com is the brand's established site, #843610 in Cisco Umbrella)

No credential, password, or payment form; no cross-origin form submission or credential exfiltration

No JavaScript YARA malware patterns, no known kit-roster hits, no native-YARA hits, and no network IDS alerts

Established domain (7861 days old) with no strong malicious indicators — risk clamped from 7 to 5

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5

Domain age information unavailable

Details

Page Title

File not found - DriveHQ Web and File Hosting Servicesecondary capture

Scan Type

public

Favicon Hash

MMH3: 1703324444

MD5: a35b4945fb1c8f7bc7e357563a1141e9

Domain Name Analysis

The domain 'e-mod.firstcloudit.com' uses the commercial generic top-level domain (.com) and includes subdomain 'e-mod'. Count 12 characters in 'firstcloudit' split between four vowels and eight consonants. It segments into three words: first, cloud, it. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.50s

Total Load Time

749 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:69%

Script:Latin

Direction:ltr

Detection Details

Text Length:12,587 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software71% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

71%

documentation technical

42%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	66.220.9.57	Salinas, California, United States	AS6939Hurricane Electric LLC
14	66.220.9.47	Salinas, California, United States	AS6939Hurricane Electric LLC
28	2	-	-