Security Scan Report: bnmsc.com

Redirected to:
https://accounts.intuit.com/app/sign-in?redirect_uri=https%3A%2F%2Facc...
Site favicon
Submitted: Jul 9, 2026, 9:42:34 PMCompleted: Jul 9, 2026, 9:43:48 PMpubliccompleted
Loading additional data...

Summary

This website contacted 32 IPs in 3 countries across 26 domains to perform 194 HTTP transactions. The main domain is accounts.intuit.com and was registered NaN years ago.

Submitted URL: https://bnmsc.com/8nda63/?prd.intuit.com/ss/tid=ace901a6262e-f0498f4c2691-92c1da5d9b64-bb197da20710&redirect_uri=app-account-over

Effective URL: https://accounts.intuit.com/app/sign-in?redirect_uri=https%3A%2F%2Faccounts.intuit.com%2Fapp%2Faccount-manager%2Foverview%3FpiuInFlyout%3Dtrue%26openBlueDot%3Dtrue%26accountSwitcherInFlyout%3Dtrue%26rgn%3DUS%26prgn%3DUS&single_sign_on=false&appfabric=trueRedirected

AI Security Verdict

Low Risk

Confidence: 95%

3
Risk Score

Phishing site impersonating Intuit, harvesting credentials via fake login form.

Risk Factors
Brand impersonation of Intuit on unrelated domain
Credential collection form (email/phone) without proper authentication
Threat‑intel match on hosting IP
High JavaScript obfuscation (eval, base64, Function constructor)
Unranked domain despite brand claim
Safety Factors
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 9 to 3
Domain age information unavailable

Details

Page Title

Intuit Accounts - Sign In

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(77%)

Domain Information

Domain 'bnmsc.com' uses the commercial generic top-level domain (.com). The core label 'bnmsc' covers 5 characters with zero vowels and 5 consonants. Splitting it apart reveals two words: bn, msc. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bnmsc.com/8nda63/?prd.intuit.com/ss/tid=ace901a6262e-f0498f4c2691-92c1da5d9b64-bb197da20710&redirect_uri=app-account-over

Page Load Overview

5.33s
Total Load Time
194
HTTP Requests
26
Domains
2.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:709 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software77% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
77%
corporate business
26%
government public service
25%
social_media
25%
corporate
25%

Detected Features

Login Form
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8179.43.178.110Rümlang, Zurich, Switzerland
AS51852Private Layer INC
6104.26.1.100Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.20.44.133Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6151.101.129.229Fastly · CDNUnited States
AS54113Fastly, Inc.
6208.95.112.1United States
AS53334Total Uptime Technologies, LLC
699.84.152.22Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
699.84.152.2Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6151.101.193.229Fastly · CDNUnited States
AS54113Fastly, Inc.
623.215.20.26Frankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
6192.178.183.95Google · CDNUnited States
AS15169Google LLC
19432--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CE04FA92A914583A7B1B0AFEB471F906D37875DBC0C0C8C87DDD901E5BDF9AA1332629

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:hcZ7Z8qdQrni17wRGoxYZBgsPgxggKgtgUgkGT3HGa4B:uZ7Z8qdQrni7wRdqZbAfb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:185955:ECIgZgAgDoCEQzBQkEQAKwMhggdbgJJAmnyVvwqIJDECiQJASYDKESkQkScAw4wZCfWygFEwIyBZcHAFABQAA4ZgsCCSkDQC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7dbffff81
Perceptual Hash:b39b8ccccc263399
Difference Hash:20324c0c3208000b
Wavelet Hash:1f1f071f3838bc80
Color Hash:#d46ce0

Other Hashes

Crop Resistant:20324c0c3208000b

Scan History

Scan history not available

Unable to load historical scan data