Security Scan Report: bottomline.legal-x.com

Redirected to:
https://billreviewiq.legal-x.com/auth/realms/LSID/protocol/openid-conn...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 3 domains to perform 30 HTTP transactions. The main domain is legal-x.com and was registered 12 years ago.

Submitted URL: https://bottomline.legal-x.com

Effective URL:
https://billreviewiq.legal-x.com/auth/realms/LSID/protocol/openid-conn...
Redirected

The Cisco Umbrella rank of the primary domain is #148,765 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Established Legal-X/Bill ReviewiQ login portal using a standard Keycloak SSO flow. No impersonation, malware, or threat-intel hits; cross-origin credential submission is consistent with legitimate identity-provider infrastructure.

Risk Factors (1)
Login form submits credentials cross-origin to legalspend.io, an external identity-provider domain
Safety Factors (5)
Established 12-year-old domain
Self-branding matches the domain (Legal-X)
No brand impersonation of a different entity
No malware, phishing-kit, or IDS evidence
Standard SSO redirect pattern with redirect_uri back to the originating domain
Domain age information unavailable

Details

Page Title

Legal-X

Scan Type

public

Domain Name Analysis

You're looking at domain 'bottomline.legal-x.com' on the commercial generic top-level domain (.com), featuring subdomain 'bottomline'. The second-level label 'legal-x' is 7 characters long containing 2 vowels alongside four consonants, along with one hyphen. It segments into two words: legal, x. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Log in to Legal-X Welcome to Legal LOGIN NAME | THE LEADER IN SPEND MANAGEMENT. PASSWORD Forgot your password? Registration for new Vendors Existing users login to register new Client Programs ©....

Page Load Overview

4.39s
Total Load Time
791 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:333 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software43% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
43%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1045.60.34.175Incapsula · WAFUnited States
AS19551Incapsula Inc
1045.60.104.175Incapsula · WAFUnited States
AS19551Incapsula Inc
1045.60.32.175Incapsula · WAFUnited States
AS19551Incapsula Inc
303--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T183A2C781AAA80112B61FC19CB95D9747F76D9002314DEE78B7FC1178BFDEA40AD6638C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:oVri7NcqNzxT8MQMGFMroMLEGZmVflqnXEFoz13IvkDsbjJefceGt0a7M1Y:oV+HNzxT4FMroMLEGZmVflal3IvkQnJp

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:21451:BIRTmChAkYgMEGWARKSoRRRKhTylk5QlFRBZFQCuABV5iACqWAeKgAGiAICCKq6SgBMKoAiwAAAAAyDVgSAQGSCoCAnpYYsk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f8f8f8f8f8f8f8f8
Perceptual Hash:c9b6954db249b44d
Difference Hash:1212321333321292
Wavelet Hash:f0f0f0f0f0f0f0f0
Color Hash:060000001c0

Scan History

Scan history not available

Unable to load historical scan data