https://www.quickbooks-enterprises.com/

Impersonating QuickBooks

Intent: Credential collection

• Domain is not operated by QuickBooks
• TLS certificate has no organization information
• Domain not registered through QuickBooks's usual registrar
• SPF record does not reference QuickBooks's infrastructure

QuickBooks sign-in page requesting user credentials to access Intuit account