https://rbz.com
172.67.149.48 · Cloudflare, Inc.
Toronto, Canada
11153 days
200 · 25.1s
Valid· WE1, Google Trust Services, US
COMPLETED

Title: "Armanino - Accounting, Business Consulting and Technology Solution Experts"
No KB/IOK detections were recorded for this scan.
finance | technology | professional_services · 4/15/2026
The final URL redirects to the official-looking Armanino site (armanino.com) and shows branding consistent with Armanino LLP. However, the scanner evidence indicates off-domain API calls, a suspicious iframe, and a mismatch between the initial domain (rbz.com) and the displayed brand. The page appears to be the legitimate Armanino website but the presence of off-domain calls and embedded third-party widgets raises questions about potential opaque data collection or misused assets. The evidence does not conclusively indicate credential harvesting/phishing, but there are indicators of unusual integration with external domains that warrant closer review.
Capture
Stages: 2
Canonical: Settled Render
Changed: No
Credential Signals
Forms: 3
Password fields: 0
Late-stage login UI: No
Resource Signals
Resources: 192
Hosts: 13
Domains: 10
Suspicious Endpoints
hxxps://partners[.]clym[.]io/api/query/domain?id=8429e7385d43434181106a0fxoyfehrt&slim=true&_version=latest&_build=2.26.0
hxxps://www[.]armanino[.]com/search-results/
hxxps://www[.]armanino[.]com/formbuilder?sc_site=Armanino&fxb.FormItemId=85f5dd6f-6524-486c-93e9-1109ce8671ac&fxb.HtmlPrefix=fxb.00000000-0000-0000-0000-000000000000
hxxps://www[.]armanino[.]com/api/forms/renderleaderform?formId=
Off-Domain Posts
hxxps://partners[.]clym[.]io/api/query/domain?id=8429e7385d43434181106a0fxoyfehrt&slim=true&_version=latest&_build=2.26.0
No suspicious indicators identified
The scan indicates likely integration with third-party widgets (Clym SDK) and tracking scripts, plus an off-domain API call and hidden form inputs. Although the visible branding matches Armanino, the presence of external endpoints and an iframe suggests complex third-party integrations that could facilitate data exfiltration or user tracking. The final URL is the official Armanino domain, but the combination of off-domain endpoints and hidden inputs warrants monitoring for potential data leakage or misuse. Recommend heightened monitoring and a deeper review of third-party integrations and data flows.
Monitor