You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Dave Wreski <dw...@guardiandigital.com> on 2022/05/06 15:19:20 UTC

Intuit servers sending paypal phishes

Hi, Intuit's servers are being used to send Paypal phishing invoices 
combined with the "evil numbers" scam.

https://pastebin.com/iad07S8N

Received: from o4.e.notification.intuit.com 
(o4.e.notification.intuit.com [167.89.82.160])
X-Spam-Status: No, score=-15.691 tagged_above=-200 required=5
tests=[DKIMWL_WL_HIGH=-0.592, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001,
SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01,
T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001,
USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5]

Authentication-Results: orion.example.com;
dkim=pass (2048-bit key; unprotected) header.d=notification.intuit.com 
header.i=@notification.intuit.com header.a=rsa-sha256 header.s=s1 
header.b=p9xDPEcU

-- 


      DaveWreski

President & CEO

Guardian Digital, Inc.

We Make Email Safe

	
	
	
	

	640-800-9446 <tel:640-800-9446>

	dwreski@guardiandigital.com <ma...@guardiandigital.com>

	https://guardiandigital.com <https://guardiandigital.com>

	103 Godwin Ave, Suite 314, Midland Park, NJ 07432


	
facebook <https://www.facebook.com/gdlinux> 	
	twitter <https://twitter.com/gdlinux> 	
	linkedin <https://www.linkedin.com/company/guardiandigital> 	


Re: Intuit servers sending paypal phishes

Posted by Shawn Iverson <sh...@gmail.com>.
Just got one as well, deciding how to handle it...

On Fri, May 6, 2022 at 1:52 PM Kevin A. McGrail <km...@apache.org> wrote:

> Oh joy.
> On 5/6/2022 11:19 AM, Dave Wreski wrote:
>
> Hi, Intuit's servers are being used to send Paypal phishing invoices
> combined with the "evil numbers" scam.
>
> --
> Kevin A. McGrailKMcGrail@Apache.org
>
> Member, Apache Software Foundation
> Chair Emeritus Apache SpamAssassin Projecthttps://www.linkedin.com/in/kmcgrail - 703.798.0171
>
>

Re: Intuit servers sending paypal phishes

Posted by "Kevin A. McGrail" <km...@apache.org>.
Oh joy.

On 5/6/2022 11:19 AM, Dave Wreski wrote:
> Hi, Intuit's servers are being used to send Paypal phishing invoices 
> combined with the "evil numbers" scam.

-- 
Kevin A. McGrail
KMcGrail@Apache.org

Member, Apache Software Foundation
Chair Emeritus Apache SpamAssassin Project
https://www.linkedin.com/in/kmcgrail  - 703.798.0171