cloudvault-api[.]com is classified as high with a risk score of 76/100: elevated-risk posture; converging signals indicate intent. The recommended downstream action is alert_only.
The risk model observed 7 signals (including 4 core signals) across 4 taxonomy groups (HTTP Crawling, DNS History, Threat Intelligence, and others). The strongest indicators are Self-Signed SSL Certificate, Newly-Activated Domain, Shared Tracker ID, plus 4 additional supporting signals. Each signal carries its own trigger evidence and direction; signal fusion drives the calibrated tier assignment.
Recommended response. Surface to analyst review or SIEM correlation. Evidence is strong enough to warrant attention but not strong enough to block without context. For active investigation, run POST /enrichwith the indicator to confirm the verdict against the current state of the domain. VerdictIQ's scoring recomputes today's signals on every call.