Security Scan Report: intbnsd.com

Redirected to: https://accounts.intuit.com/app/sign-in

Submitted: Jan 27, 2026, 3:21:26 AMCompleted: Jan 27, 2026, 3:22:44 AMpubliccompleted
Loading additional data...

Summary

This website contacted 26 IPs in 3 countries across 21 domains to perform 186 HTTP transactions. The main domain is accounts.intuit.com and was registered NaN years ago.

Submitted URL: https://intbnsd.com/627lhd/#verify_asset_alias=quickbooks.cto.iam.ius

Effective URL: https://accounts.intuit.com/app/sign-inRedirected

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Phishing page impersonating Intuit; do not submit any credentials.

Risk Factors
Brand impersonation on an untrusted domain
Credential harvesting form on a domain unrelated to the brand
Domain not in Cisco Umbrella top 1 M (unranked)
Mismatch between displayed brand (Intuit) and domain (intbnsd.com)
Domain age information unavailable

Details

Page Title

Intuit Accounts - Sign In

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(75%)

Domain Information

The domain 'intbnsd.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'intbnsd' spans 7 characters split between 1 vowel and 6 consonants. Tokenizing the label suggests four words: in, tb, ns, d. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://intbnsd.com/627lhd/#verify_asset_alias=quickbooks.cto.iam.ius

Page Load Overview

4.70s
Total Load Time
186
HTTP Requests
21
Domains
2.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:663 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software75% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
75%
corporate business
26%
social_media
25%
corporate
25%

Detected Features

Login Form
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
718.172.112.7United States
AS16509Amazon.com, Inc.
7111.90.156.187Malaysia
AS45839Shinjiru Technology Sdn Bhd
744.241.113.4Boardman, Oregon, United States
AS16509Amazon.com, Inc.
7138.199.37.230Frankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
795.100.73.61Frankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
744.240.100.182Boardman, Oregon, United States
AS16509Amazon.com, Inc.
723.56.203.110Frankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
718.172.112.68United States
AS16509Amazon.com, Inc.
723.37.50.92Frankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
723.56.205.21Frankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
18626--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CFF3D892EA14443A7B1B07FEB060E947D338B59BC4C0C9C87DDD805E6BDB9EA1372A15

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:1OZvVO2s85fUjPUc1JBZiNz4nSqAMbCHpYJIMWkOT1gbrarU4DWX4:1OZo2s85oUcz6N81CHpYJIMWF5Qraj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:162586:CSQYKEAaNYASQ8AkkkEakKBDVSMViMSFOGYIIGEKGIIuJAFIQUYODGQBEBASJEnNUQECSAFCQh9ANFCAkCQAhaUkQzTDJCDD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7dbffff81
Perceptual Hash:b39b8ccccc263399
Difference Hash:20324c0c3208000b
Wavelet Hash:1f1f071f3838bc80
Color Hash:#68862d

Other Hashes

Crop Resistant:20324c0c3208000b

Scan History

Scan history not available

Unable to load historical scan data