Let me clarify a little. The after purchasing TurboTax through my Intuit account (like I always do), and then downloading the available package to my Mac, I commenced installation. Once installed and starting to run, my personal firewall (LittleSnitch) started to fire off notifications on my screen asking to approve outgoing connections to a variety of domains having nothing to do with Intuit. I blocked them, since TurboTax doesn't need to go to genealogy sites, nor do my tax files have anything associated with any of those domains.
Subsequent upgrades from TurboTax never triggered these notifications.
So this appears to be part of the initial installation process.
Unfortunately, the default "deny" action was used until the installation quit (as opposed to forever), and I didn't have a chance to look in the LittleSnitch logs to see what domains I blocked. From a couple of domains I could recall, I searched my hard drive, searching in .plist files, libraries, etc., basically anywhere. I checked browser preferences for domains I may have given particular permissions to, bookmarks, etc. Nothing obvious. Guessing this must be a hidden file the operating system or Safari browser uses (Safari is my default browser, but I do have FireFox and Chrome that I use sparingly) and would vary from user to user.
I hope this helps to better describe the process to reproduce.
