Hi, Intuit's servers are being used to send Paypal phishing invoices
combined with the "evil numbers" scam.
https://pastebin.com/iad07S8N
Received: from o4.e.notification.intuit.com
(o4.e.notification.intuit.com [167.89.82.160])
X-Spam-Status: No, score=-15.691 tagged_above=-200 required=5
tests=[DKIMWL_WL_HIGH=-0.592, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001,
SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01,
T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001,
USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5]
Authentication-Results: orion.example.com;
dkim=pass (2048-bit key; unprotected) header.d=notification.intuit.com
header.i=@notification.intuit.com header.a=rsa-sha256 header.s=s1
header.b=p9xDPEcU
--
DaveWreski
President & CEO
Guardian Digital, Inc.
We Make Email Safe
640-800-9446 <tel:640-800-9446>
dwre...@guardiandigital.com <mailto:dwre...@guardiandigital.com>
https://guardiandigital.com <https://guardiandigital.com>
103 Godwin Ave, Suite 314, Midland Park, NJ 07432
facebook <https://www.facebook.com/gdlinux>
twitter <https://twitter.com/gdlinux>
linkedin <https://www.linkedin.com/company/guardiandigital>
