Security Scan Report: workstep.com

Redirected to:
https://www.confirm.com/frontline/products/engage
Submitted: Sep 27, 2026, 11:25:58 AMCompleted: Sep 27, 2026, 11:26:35 AMpubliccompleted

This website contacted 41 IPs in 3 countries across 4 domains to perform 12 HTTP transactions. The main domain is confirm.com and was registered 14 years ago.

Submitted URL: https://workstep.com

Effective URL:

https://www.confirm.com/frontline/products/engage
Redirected

The Cisco Umbrella rank of the primary domain is #547,364 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Interstitial verification page on confirm.com reached via a normal redirect from workstep.com. No forms, no impersonation, no malware or threat-intel hits. No malicious evidence; low risk.

Safety Factors (4)
No credential-harvesting or payment form present on the page
No brand impersonation — page presents its own product branding (Frontline / Engage)
No threat-intelligence matches, malware patterns, or network IDS alerts
Redirect chain is a normal cross-domain move/rebrand, not a phishing pattern
Domain age information unavailable

Details

Page Title

Security Verification

Scan Type

public

Domain Name Analysis

You're looking at domain 'workstep.com' on the commercial generic top-level domain (.com) with no subdomain. The core label 'workstep' covers 8 characters containing 2 vowels alongside six consonants. Splitting it apart reveals two words: work, step. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://workstep.com

Page Load Overview

1.03s
Total Load Time
49 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:173 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content52% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content
52%
healthcare medical
51%
news media journalism
48%
government public service
47%
documentation technical
42%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12172.67.72.136Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
034.149.25.183Google · CDNKansas City, Missouri, United States
AS396982Google LLC
0184.24.77.134Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
0142.251.110.97Google · CDNUnited States
AS15169Google LLC
02.16.168.123Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
0172.67.68.85Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
018.66.102.106Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
02.21.20.137Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
0104.18.19.62Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0150.171.28.10Azure · CLOUDUnited States
AS8075Microsoft Corporation
1241--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B794AD73E19824BF521B53C5B1B2EB1820AB7977CF0644E8F2FA8194C7C9EE5195720E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:/Xs4wNP2c4inM0DEJh0O2/h7v5FvSqFNwKWofNwKWo+tqUVKxiryihUXMS94jVz:/s4wNdhNw1ofNw1oAZz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:426346:QRCCQeooVyGgIBG4A3UkESJARRFgMMQMUCbIgNBAWxBIElxy1ZhBMgyES0AEQBAhRgESB0UIXIIAAILQES7CQEEWcRSqSiDE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e9fd988c8c90f8bf
Perceptual Hash:de68ef6033656541
Difference Hash:1369303c3c344168
Wavelet Hash:e1bd988c8c80f8bf
Color Hash:#bfd279

Other Hashes

Crop Resistant:1369303c3c344168

Scan History

Scan history not available

Unable to load historical scan data