Highscore 55 · flagged Saturday, September 19, 2026

update-intuit-support.solutions

Appeared in the .solutions zone on Saturday, September 19, 2026; by the end of that day the census found redirects elsewhere. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: intuit
+30
lure words (login, verify, secure…)
matched: support,update
+32
brand name and brand-styled page
matched: intuit
+15
Registrar
Nameserver provider
Nameservers
ns1.openprovider.nl, ns2.openprovider.be, ns3.openprovider.eu
First-day state
redirects elsewhere
HTTP status
200
Page title
Intuit®: Outdo your financial goals—all in one place
Has a form
no
Brand echoed
intuit

Model opinions

Second opinionlooks like abusetarget: Intuitconfidence 68%· claude-opus-5

Non-corporate registration (Openprovider NL/BE/EU nameservers, .solutions TLD) combining the Intuit brand with classic support-scam lure words 'update' and 'support', serving no content of its own but 302-ing to the genuine intuit.com — the typical aging/cloaking posture of a brand-squat awaiting a phishing or fake-support payload.

First passlooks like abusetarget: Intuitconfidence 92%· claude-haiku-4-5

The domain name 'update-intuit-support.solutions' is a clear typosquat combining Intuit's brand with lure words ('update', 'support') designed to deceive visitors into trusting it as an official support channel. The redirect to the legitimate www.intuit.com does not legitimize the domain itself—this is a classic squat setup where the attacker controls a deceptive subdomain to harvest credentials or distribute malware before redirecting; the .solutions TLD and OpenProvider nameservers are typical

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Saturday, September 19, 2026

Screenshot of update-intuit-support.solutions taken by the zone census on 2026-09-19

Same data as JSON: /api/zone/domain/update-intuit-support.solutions. This page is not indexed by search engines and does not link to the site it describes.