Security Report: bnmsc.com - Analysis

Summary

This website contacted 31 IPs in 3 countries across 26 domains to perform 194 HTTP transactions. The main domain is accounts.intuit.com and was registered NaN years ago.

Submitted URL: https://bnmsc.com/8nda63/?prd.intuit.com/ss/tid=ace901a6262e-f0498f4c2691-92c1da5d9b64-bb197da20710&redirect_uri=app-account-over

Effective URL: https://accounts.intuit.com/app/sign-in?redirect_uri=https%3A%2F%2Faccounts.intuit.com%2Fapp%2Faccount-manager%2Foverview%3FpiuInFlyout%3Dtrue%26openBlueDot%3Dtrue%26accountSwitcherInFlyout%3Dtrue%26rgn%3DUS%26prgn%3DUS&single_sign_on=false&appfabric=trueRedirected

AI Security Verdict

Low Risk

Confidence: 82%

Risk Score

The site impersonates Intuit on an unrelated, unranked domain and is linked to a known‑malicious IP, indicating a high‑risk phishing attempt.

Risk Factors

Brand impersonation on a non‑official domain

Indicators of Compromise on hosting IP

Unranked domain with no reputation

Mismatched domain and brand

Safety Factors

Domain age >30 years (well‑established)

No malicious JavaScript YARA matches

No credential exfiltration detected

No password or payment fields

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 7 to 3

Domain age information unavailable

Details

Page Title

Intuit Accounts - Sign In

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Screenshot

Page Load Overview

4.56s

Total Load Time

194

HTTP Requests

Domains

2.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:80%

Script Type:Latin

HTML Lang Attribute:en

Text Length:709 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software77% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

77%

corporate business

26%

government public service

25%

social_media

25%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	142.251.14.95Google · CDN	United States	AS15169Google LLC
6	172.67.70.233Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	172.67.74.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	91.235.134.131	United States	AS30286ThreatMetrix Inc.
6	23.215.18.114	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
6	172.67.69.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	34.117.59.81Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
6	91.235.132.130	United States	AS30286ThreatMetrix Inc.
6	99.84.152.84Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
6	104.26.4.15Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
194	31	-	-