Security Scan: Work Wallet

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f0c051f7-c739-4cfc-be60-50d3c51fa22b Domain and IP registration (RDAP)/api/v1/rdap/f0c051f7-c739-4cfc-be60-50d3c51fa22b Certificate Transparency/api/v1/ct/identity.work-wallet.com How often this domain was scanned/api/v1/domain/stats/portal.work-wallet.com Scan history for this domain/api/v1/domain/history/portal.work-wallet.com?limit=15

This website contacted 6 IPs in 2 countries across 7 domains to perform 26 HTTP transactions. The main domain is identity.work-wallet.com and was registered 21 years ago.

Submitted URL: https://portal.work-wallet.com

Effective URL:

https://identity.work-wallet.com/Account/Login?ReturnUrl=%2Fconnect%2F...

Redirected

The Cisco Umbrella rank of the primary domain is #318,314 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 90%

Risk Score

Legitimate Work Wallet company SSO login on a 10-year-old domain. The portal→identity subdomain redirect is a standard OpenID Connect flow, not exfiltration. No forms, IoCs, or malware signals.

Safety Factors (6)

Established 10-year-old domain

Same-organization subdomain redirect (portal → identity) forming a coherent SSO chain

Cross-origin form submission verified as legitimate SSO, not credential exfiltration

Zero threat-intelligence matches across all feeds

No credential-harvesting artifacts: no password or payment inputs, no disguised fields, no unicode confusion

Standard anti-CSRF token (__RequestVerificationToken) and OIDC state/nonce parameters consistent with a genuine identity provider

Domain age information unavailable

Details

Page Title

Work Wallet

Scan Type

public

Favicon Hash

MMH3: -2118242192

MD5: 146d13c2bb6052e3d54c7467561a4fbe

Domain Name Analysis

The domain 'portal.work-wallet.com' uses the commercial generic top-level domain (.com) and includes subdomain 'portal'. Count 11 characters in 'work-wallet' split between three vowels and seven consonants, notching 1 hyphen. Tokenizing the label suggests two words: work, wallet. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.59s

Total Load Time

582 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:63%

Script:Latin

Direction:ltr

Detection Details

Text Length:96 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking38% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

finance banking

38%

government public service

31%

technology software

30%

healthcare medical

28%

news media journalism

25%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	150.171.110.54Azure · CLOUD	United States	AS8075Microsoft Corporation
4	150.171.110.56Azure · CLOUD	United States	AS8075Microsoft Corporation
4	142.251.127.97Google · CDN	United States	AS15169Google LLC
4	150.171.109.105Azure · CLOUD	United States	AS8075Microsoft Corporation
4	142.251.14.139Google · CDN	United States	AS15169Google LLC
4	20.50.88.233Azure · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
26	6	-	-