Apologies if I have not been clear: The "From" field on the email I received IS from (at)intuit.com . . . it is NOT just claming to be from intuit in the message body . . . the ACTUAL email address in the FROM FIELD is actually ....(at)INTUIT.COM
That's why this is so concerning. . . you keep saying that legit emails come from (at)Intuit.com, and this IS, in fact, from (at)Intuit.com (in the From field itself).
I have forwarded this to spoof, but I want to be clear to other readers of this thread--just because the from field SAYS that its from (at)Intuit.com may not ACTUALLY mean that it is a legitimate email. Perhaps an explanation of how this happens (that the actual FROM field shows (at)intuit.com vs just a signature line in the message body) would be helpful for people to see so that they question even messages that show From: ....(at)intuit.com . . . reading your comments, plenty of poeple may see an email with (at)intuit.com in the FROM field and thing it's legit, and therefore click the links and wind up with malware or giving their login credentials. Clarity would be helpful.
