Mailing List Archive

Intuit servers sending paypal phishes
Hi, Intuit's servers are being used to send Paypal phishing invoices
combined with the "evil numbers" scam.

https://pastebin.com/iad07S8N

Received: from o4.e.notification.intuit.com
(o4.e.notification.intuit.com [167.89.82.160])
X-Spam-Status: No, score=-15.691 tagged_above=-200 required=5
tests=[.DKIMWL_WL_HIGH=-0.592, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001,
SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01,
T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001,
USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5]

Authentication-Results: orion.example.com;
dkim=pass (2048-bit key; unprotected) header.d=notification.intuit.com
header.i=@notification.intuit.com header.a=rsa-sha256 header.s=s1
header.b=p9xDPEcU

--


DaveWreski

President & CEO

Guardian Digital, Inc.

We Make Email Safe






640-800-9446 <tel:640-800-9446>

dwreski@guardiandigital.com <mailto:dwreski@guardiandigital.com>

https://guardiandigital.com <https://guardiandigital.com>

103 Godwin Ave, Suite 314, Midland Park, NJ 07432



facebook <https://www.facebook.com/gdlinux>
twitter <https://twitter.com/gdlinux>
linkedin <https://www.linkedin.com/company/guardiandigital>
Re: Intuit servers sending paypal phishes [ In reply to ]
Oh joy.

On 5/6/2022 11:19 AM, Dave Wreski wrote:
> Hi, Intuit's servers are being used to send Paypal phishing invoices
> combined with the "evil numbers" scam.

--
Kevin A. McGrail
KMcGrail@Apache.org

Member, Apache Software Foundation
Chair Emeritus Apache SpamAssassin Project
https://www.linkedin.com/in/kmcgrail - 703.798.0171
Re: Intuit servers sending paypal phishes [ In reply to ]
Just got one as well, deciding how to handle it...

On Fri, May 6, 2022 at 1:52 PM Kevin A. McGrail <kmcgrail@apache.org> wrote:

> Oh joy.
> On 5/6/2022 11:19 AM, Dave Wreski wrote:
>
> Hi, Intuit's servers are being used to send Paypal phishing invoices
> combined with the "evil numbers" scam.
>
> --
> Kevin A. McGrailKMcGrail@Apache.org
>
> Member, Apache Software Foundation
> Chair Emeritus Apache SpamAssassin Projecthttps://www.linkedin.com/in/kmcgrail - 703.798.0171
>
>