Security Scan Report: intsbw.com

Redirected to:
https://accounts.intuit.com/app/sign-in?redirect_uri=https%3A%2F%2Facc...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 26 domains to perform 195 HTTP transactions. The main domain is intsbw.com and was registered 10 months ago.

Submitted URL: https://intsbw.com/doeslc/?prd/ss/redirect_uri=app-account-over

Effective URL:
https://accounts.intuit.com/app/sign-in?redirect_uri=https%3A%2F%2Facc...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Entry domain intsbw.com redirects to the genuine Intuit sign-in on accounts.intuit.com. No malicious form, IoC, hunting rule or phishing alert found; unverified/unknown entry domain alone caps this at moderate risk.

Risk Factors (1)
Entry domain intsbw.com is unranked and has no visible ownership link to the Intuit brand it forwards to — the entry domain, not the destination, is what the user clicked
Safety Factors (5)
Final destination is the authentic Intuit sign-in on accounts.intuit.com, an established domain of the named brand
No credential or payment form served by the scanned entry domain
No Indicators of Compromise, hunting-rule matches, kit-roster or Safe-Browsing threats
Login submission is a same-brand SSO flow, not cross-origin credential exfiltration
Legal terms/privacy references and standard Google reCAPTCHA consistent with the real Intuit page
Domain age information unavailable

Details

Page Title

Intuit Accounts - Sign In

Scan Type

public

Domain Name Analysis

The domain 'intsbw.com' uses the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'intsbw' spans 6 characters split between 1 vowel and five consonants. Segmentation suggests three words: in, tsb, w. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

INTUIT Let's get you in to Intuit Phone number, email, or user ID Standard call or SMS rates may apply. Remember me By selecting Sign in for your Intuit Account, you agree to our ‘Terms. Our Friva...

Page Load Overview

7.97s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:709 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software77% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
77%
corporate business
26%
government public service
25%
social_media
25%
corporate
25%

Detected Features

Login Form
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
39104.17.207.5United States
AS13335Cloudflare, Inc.
39160.119.64.19Seychelles
AS49870Alsycon B.V.
39172.64.147.188United States
AS13335Cloudflare, Inc.
39151.101.1.155United States
AS54113Fastly, Inc.
39142.251.20.95United States
AS15169Google LLC
1955--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B904FAD2E914583A7B1B0BFEB061E906D378759BC4C0C8C87DDD901E6BDF9AA1332A15

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:VJ5yKvn6QXYxIXBgsPgxggOgrgCgweHqCg6wbQrbEGTGi:D5yan6QIeXbA1/6wbQrb9

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:183980:bRYMBAAKBUcBBQhIVAgKAiKBHSGCNaSsKIoEkP5WEEGBaAQipIBBQJAZAnnImKM6GKJSEgwqBdIEGAgwUAKKgA4QlKwYFgxM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7dbffff81
Perceptual Hash:b39b8ccccc263399
Difference Hash:20324c0c3208000b
Wavelet Hash:1f1f071f3838bc80
Color Hash:N/A

Other Hashes

Crop Resistant:20324c0c3208000b

Scan History

Scan history not available

Unable to load historical scan data