Security Report: bnmsc.com - Analysis

Summary

This website contacted 31 IPs in 3 countries across 26 domains to perform 195 HTTP transactions. The main domain is accounts.intuit.com and was registered NaN years ago.

Submitted URL: https://bnmsc.com/8nda63/?prd.intuit.com/ss/tid=ace901a6262e-f0498f4c2691-92c1da5d9b64-bb197da20710&redirect_uri=app-account-over

Effective URL: https://accounts.intuit.com/app/sign-in?redirect_uri=https%3A%2F%2Faccounts.intuit.com%2Fapp%2Faccount-manager%2Foverview%3FpiuInFlyout%3Dtrue%26openBlueDot%3Dtrue%26accountSwitcherInFlyout%3Dtrue%26rgn%3DUS%26prgn%3DUS&single_sign_on=false&appfabric=trueRedirected

AI Security Verdict

Low Risk

Confidence: 85%

Risk Score

The page impersonates Intuit, collects credentials, and is linked to a known attacker IP – confirmed phishing scam.

Risk Factors

Known attacker IP associated with the site

Brand impersonation of a major financial service

Credential collection field without password (email/phone)

Cross‑origin form submission to official Intuit domain

High JavaScript obfuscation

Safety Factors

Domain age is well established (over 30 years)

No password or payment fields detected

No malicious YARA patterns or IDS critical malware alerts

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 9 to 3

Domain age information unavailable

Details

Page Title

Intuit Accounts - Sign In

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Screenshot

Page Load Overview

5.90s

Total Load Time

195

HTTP Requests

Domains

3.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

Language Code:en

Detection Confidence:80%

Script Type:Latin

HTML Lang Attribute:en

Text Length:709 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software77% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

77%

corporate business

26%

government public service

25%

social_media

25%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	104.26.9.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	91.235.133.106	United States	AS30286ThreatMetrix Inc.
6	91.235.132.130	United States	AS30286ThreatMetrix Inc.
6	99.84.152.22Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
6	104.102.61.67	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
6	23.212.202.200	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
6	18.172.112.5Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
6	54.148.96.187Aws · CLOUD	Boardman, Oregon, United States	AS16509Amazon.com, Inc.
6	179.43.178.110	Rümlang, Zurich, Switzerland	AS51852Private Layer INC
6	104.18.40.68Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
195	31	-	-