https://quickbooks.thebizwizards.com/

Impersonating QuickBooks

Intent: Data collection

• Domain is not operated by QuickBooks
• TLS certificate has no organization information
• Domain not registered through QuickBooks's usual registrar
• SPF record does not reference QuickBooks's infrastructure

QuickBooks-branded lead capture form requesting first name, last name, and email for instant access