ScanMalware.com

Security Scan Report: hmsfirst.com

Redirected to:
https://axiomehr.com/
Site favicon
Submitted: Sep 8, 2026, 12:58:38 AMCompleted: Sep 8, 2026, 12:59:26 AMpubliccompleted

Summary

This website contacted 33 IPs in 2 countries across 36 domains to perform 2 HTTP transactions. The main domain is axiomehr.com and was registered 18 years ago.

Submitted URL: https://hmsfirst.com

Effective URL: https://axiomehr.com/Redirected

The Cisco Umbrella rank of the primary domain is #301,632 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 92%

1
Risk Score

The page appears to be a legitimate marketing site for AxiomEHR with no phishing or malware indicators.

Safety Factors
Self‑branding aligns with domain
Absence of credential/password fields
No malicious IoC or YARA detections
Only informational email capture form
No suspicious external redirects beyond standard marketing links
Domain age information unavailable

Details

Page Title

AxiomEHR: Leading EHR Software for Behavioral Health

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(84%)

Domain Information

The domain name 'hmsfirst.com' uses the commercial generic top-level domain (.com). Its registrable label 'hmsfirst' stretches across 8 characters with 1 vowel and 7 consonants. Word splitting yields two words: hms, first. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hmsfirst.com

Page Load Overview

5.21s
Total Load Time
135
HTTP Requests
36
Domains
1.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:11,079 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software84% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
84%
healthcare medical
75%
government public service
61%
education learning
27%
corporate
25%

Detected Features

Articles
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7104.18.12.86Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.16.5.65Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.14.97Google · CDNUnited States
AS15169Google LLC
418.244.18.81Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4104.18.4.178Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.16.53.78Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.16.138.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.17.24.24Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.127.97Google · CDNUnited States
AS15169Google LLC
4150.171.27.10Azure · CLOUDUnited States
AS8075Microsoft Corporation
13533--

Page Statistics

135
Requests
28
Unique Domains
2.5 MB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EAF275B9705A126B676FCB9B708BBA085A0C5301EE51F9F931BC616CC0DC7A610DE727

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:9KDzWHVvhEb830LkHSA9I25r/ZdSZUaAhDkWx/LabJfFfXepq2mN:igK8R9bNZdypaRMbJfwpqx

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:36380:AoQRIQAggyIwQ4GSdaQhs8IGqDCEMbGByLwWA0aolUleACgNRgk5jIAF0GkAJIPIiIBJA4kqgoQYNwIAQAdFQIAgJEtARwQE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data