Security Report: bnmsc.com - Analysis

Summary

This website contacted 30 IPs in 3 countries across 26 domains to perform 194 HTTP transactions. The main domain is accounts.intuit.com and was registered NaN years ago.

Submitted URL: https://bnmsc.com/8nda63/?prd.intuit.com/ss/tid=ace901a6262e-f0498f4c2691-92c1da5d9b64-bb197da20710&redirect_uri=app-account-over

Effective URL: https://accounts.intuit.com/app/sign-in?redirect_uri=https%3A%2F%2Faccounts.intuit.com%2Fapp%2Faccount-manager%2Foverview%3FpiuInFlyout%3Dtrue%26openBlueDot%3Dtrue%26accountSwitcherInFlyout%3Dtrue%26rgn%3DUS%26prgn%3DUS&single_sign_on=false&appfabric=trueRedirected

AI Security Verdict

Low Risk

Confidence: 85%

Risk Score

The site impersonates Intuit, collects login identifiers, and is flagged by threat intel; treat as high‑risk phishing.

Risk Factors

Brand impersonation of Intuit on unrelated domain

Unranked/low‑reputation domain

Credential collection field (email/phone) without password

Threat‑intel indicator on hosting IP

High JavaScript obfuscation

Safety Factors

Final URL redirects to legitimate Intuit login page

Cross‑origin form submission is a standard SSO flow

Domain age is 11829 days (well‑established)

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 8 to 3

Domain age information unavailable

Details

Page Title

Intuit Accounts - Sign In

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Screenshot

Page Load Overview

6.76s

Total Load Time

194

HTTP Requests

Domains

3.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:80%

Script Type:Latin

HTML Lang Attribute:en

Text Length:709 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software77% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

77%

corporate business

26%

government public service

25%

social_media

25%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
20	34.117.59.81Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
6	91.235.132.130	United States	AS30286ThreatMetrix Inc.
6	104.26.4.15Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	18.172.112.5Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
6	104.20.44.133Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	172.67.74.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	172.67.69.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	54.148.96.187Aws · CLOUD	Boardman, Oregon, United States	AS16509Amazon.com, Inc.
6	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
6	3.131.177.160Aws · CLOUD	Columbus, Ohio, United States	AS16509Amazon.com, Inc.
194	30	-	-