Security Report: bnmsc.com - Analysis

Summary

This website contacted 32 IPs in 3 countries across 26 domains to perform 194 HTTP transactions. The main domain is accounts.intuit.com and was registered NaN years ago.

Submitted URL: https://bnmsc.com/8nda63/?prd.intuit.com/ss/tid=ace901a6262e-f0498f4c2691-92c1da5d9b64-bb197da20710&redirect_uri=app-account-over

Effective URL: https://accounts.intuit.com/app/sign-in?redirect_uri=https%3A%2F%2Faccounts.intuit.com%2Fapp%2Faccount-manager%2Foverview%3FpiuInFlyout%3Dtrue%26openBlueDot%3Dtrue%26accountSwitcherInFlyout%3Dtrue%26rgn%3DUS%26prgn%3DUS&single_sign_on=false&appfabric=trueRedirected

AI Security Verdict

Low Risk

Confidence: 82%

Risk Score

The site impersonates Intuit on an unrelated, unranked domain and is linked to a known‑malicious IP, indicating a high‑risk phishing attempt.

Risk Factors

Brand impersonation on a non‑official domain

Indicators of Compromise on hosting IP

Unranked domain with no reputation

Mismatched domain and brand

Safety Factors

Domain age >30 years (well‑established)

No malicious JavaScript YARA matches

No credential exfiltration detected

No password or payment fields

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 7 to 3

Domain age information unavailable

Details

Page Title

Intuit Accounts - Sign In

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Screenshot

Page Load Overview

5.36s

Total Load Time

194

HTTP Requests

Domains

2.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:80%

Script Type:Latin

HTML Lang Attribute:en

Text Length:709 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software77% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

77%

corporate business

26%

government public service

25%

social_media

25%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	142.250.154.95Google · CDN	United States	AS15169Google LLC
6	99.84.152.84Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
6	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
6	2.23.244.16	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
6	91.235.132.130	United States	AS30286ThreatMetrix Inc.
6	104.18.40.68Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	91.235.134.131	United States	AS30286ThreatMetrix Inc.
6	52.42.39.14Aws · CLOUD	Boardman, Oregon, United States	AS16509Amazon.com, Inc.
6	3.132.189.46Aws · CLOUD	Columbus, Ohio, United States	AS16509Amazon.com, Inc.
6	208.95.112.1	United States	AS53334Total Uptime Technologies, LLC
194	32	-	-