In this day and age with phishing and other impersonation sites running rampant, I wish large corporations would leverage their root domain appropriately and us

In this day and age with phishing and other impersonation sites running rampant, I wish large corporations would leverage their root domain appropriately and use subdomains. Why isn't this theworknumber.equifax.com to provide legitimacy? Why can't I use my equifax login to check it? And why does it redirect to yet another domain: https://secure.theworknumber.talx.com https://secure.theworknumber.talx.com?