No Security Risks Detected
This domain appears to be safe and secure
100%
Score
Disclaimer: This assessment is based on automated analysis of publicly available information. Results are for informational purposes only. For critical applications, consult security professionals.
Scan Information
Last checked:December 26, 2025 13:35:40
Scan Complete
Refresh page after 10 minutes
for updated results
Page Information
Target URL
https://st-johns-county-florida.us.workdayspend.com/mail_link/Cnhdsi2IrLyCuINx7Yapy2GmEfJdDUAqKgg1%252FE3nUkxMj2jsuWpwhzP5FOkaqJUYTPs4vNaZ0kwTQmwAZx197f%252BaSVB0TAl8xAx2%252Be37RJbasDVu%252FhrAaTIVa7OektxCY0KNqCBAKPAq2ksFm2FYhylYFHiCrUdR%252B5kySkdmHbRmNNauUftJmYYi--PzQHk%252B6dtkUK1orU--iZi9%252F4Ey5tVVd%252FbgTfJgBA%253D%253D?redirect_to=/bids/3844422
Page Title
Workday Strategic Sourcing
Site FaviconStatus
Active
Host Information
Domain
auth.workdayspend.com
Server
nginx
Country
United States
IP Address
52.205.23.22
ASN Information
14618
AMAZON-AES
Technologies
Nginx
Web servers
Pendo
Analytics
HSTS
Security
SSL Certificate
HTTPS Enabled
Secure
Certificate Issuer
N/A
Valid From
2025-12-25 13:35:46
Valid Until
2026-12-26 13:35:46
Subject Name
auth.workdayspend.com
Performance Statistics
15
Total Requests
6
Domains
6
IP Addresses
252.36 KB
Transfer Size
Content Size688.85 KB
HTTP Headers
Connection
keep-alive
Content-Encoding
gzip
Content-Type
text/html; charset=utf-8
Date
Fri, 26 Dec 2025 13:35:47 GMT
Server
nginx
Strict-Transport-Security
max-age=31536000; includeSubDomains
Transfer-Encoding
chunked
cache-control
max-age=0, private, must-revalidate
content-security-policy-report-only
default-src 'none'; script-src 'self' https://js-agent.newrelic.com https://bam.nr-data.net https://bam-cell.nr-data.net cdn.pendo.io pendo-io-static.storage.googleapis.com pendo-static-5634909528915968.storage.googleapis.com data.pendo.io app.pendo.io auth.workdayspend.com assets.auth.workdayspend.com 'unsafe-inline' 'unsafe-eval' 'nonce-COHwdhz2TUMzkbSJoruAwA=='; style-src cdn.pendo.io pendo-io-static.storage.googleapis.com pendo-static-5634909528915968.storage.googleapis.com app.pendo.io auth.workdayspend.com assets.auth.workdayspend.com 'unsafe-inline'; img-src 'self' data: wd5.myworkday.com cdn.pendo.io data.pendo.io pendo-static-5634909528915968.storage.googleapis.com app.pendo.io storage.googleapis.com/pendo-static-5634909528915968/ auth.workdayspend.com assets.auth.workdayspend.com; connect-src 'self' sentry.wss.tools https://bam.nr-data.net https://bam-cell.nr-data.net data.pendio.io pendo-static-5634909528915968.storage.googleapis.com app.pendo.io; font-src 'self' data: design.workdaycdn.com; frame-src app.pendo.io pendo-io-extensions.storage.googleapis.com workdayinc.qualtrics.com pendopartner.ca1.qualtrics.com; object-src 'none'; report-uri /csp?sentry_environment=production-doormate; base-uri 'self'
etag
W/"6ff3df562afe997f73248e52648be118"
referrer-policy
strict-origin-when-cross-origin
strict-transport-security
max-age=31556952; includeSubDomains
x-content-type-options
nosniff
x-frame-options
SAMEORIGIN
x-permitted-cross-domain-policies
none
x-request-id
2e735c49-0aa0-444a-b5e3-8fe1122b856c
x-runtime
0.004054
x-xss-protection
0
18 headers detected
Technology Stack Analysis
Nginx
Web serversReverse proxies
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
Pendo
AnalyticsUser onboarding
Pendo is a product analytics platform used in release to enrich the product experience and provide insights to the product management team.
HSTS
Security
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
Website Cookies 2
_doormate_session
auth.workdayspend.com
HttpOnly Secure
Value
[_doormate_session redacted]
Expires:Session
_doormate_xsrf
auth.workdayspend.com
Secure Strict
Value
QNe8ZrZssaZ4eTRqyo_8NvI6VxJNN239pTZ61Jbsj9YKY9gIisu6MxUDPVfvK1ZAftYgP0Txs8a5J8MS3FORqw
Expires:Session
External Links 0
Requested Domains 6
app.pendo.io
Unknown Type
No category information available
assets.auth.workdayspend.com
Unknown Type
No category information available
auth.workdayspend.com
Subdomain
No category information available
cdn.pendo.io
Unknown Type
No category information available
pendo-static-5634909528915968.storage.googleapis.com
Unknown Type
No category information available
st-johns-county-florida.us.workdayspend.com
Unknown Type
No category information available