Phishing: accounts.intuit.com.app-sign-in-redirect-uri-account-manager.overview-iux-intuit-tid-single-sign-on-auth-check.1-6a7d4b9f-4c18126013af9d6d6237acb0a7f3e9c2b1d84b7d2f1a8e.session-token-9b2e4f7a1c8d3e6f0a5b9c2d7e1f4a8b-true.legacy-redirect.newclient.click — Grizzly

Recent phishing

Phishing

https://accounts.intuit.com.app-sign-in-redirect-uri-account-manager.overview-iux-intuit-tid-single-sign-on-auth-check.1-6a7d4b9f-4c18126013af9d6d6237acb0a7f3e9c2b1d84b7d2f1a8e.session-token-9b2e4f7a1c8d3e6f0a5b9c2d7e1f4a8b-true.legacy-redirect.newclient.click/

Redirected from quickbooks-account.com

Impersonating Intuit

Intent: Sensitive personal information collection

Domain is not operated by Intuit
TLS certificate has no organization information
Domain not registered through Intuit's usual registrar
SPF record does not reference Intuit's infrastructure

Screenshot of accounts.intuit.com.app-sign-in-redirect-uri-account-manager.overview-iux-intuit-tid-single-sign-on-auth-check.1-6a7d4b9f-4c18126013af9d6d6237acb0a7f3e9c2b1d84b7d2f1a8e.session-token-9b2e4f7a1c8d3e6f0a5b9c2d7e1f4a8b-true.legacy-redirect.newclient.click

Intuit sign-in page with email, password, and MFA code fields

Scanned 44 days ago · Aug 16, 2026, 21:54 UTC

Think this verdict is wrong?

Check a suspicious URL yourself — free to try.

Phishing: accounts.intuit.com.app-sign-in-redirect-uri-account-manager.overview-iux-intuit-tid-single-sign-on-auth-check.1-6a7d4b9f-4c18126013af9d6d6237acb0a7f3e9c2b1d84b7d2f1a8e.session-token-9b2e4f7a1c8d3e6f0a5b9c2d7e1f4a8b-true.legacy-redirect.newclient.click — Grizzly