I received an email with a sales receipt from HW Co. I have never heard of this company and I'm curious if spam is ever sent through intuit emails?

It is a common type of a phishing scam. If you see the domain email address is the same with the website address, it means the criminal has hijacked the email account to spread the bait. Don't click any link in body email nor attachment. Make sure your machine is protected with an updated endpoint protection solution. Should you be aware of the victim, you may send a message to their email address if you can notice any of it on their website. They must not use that compromised email address any longer and inform all of their contacts. For the last 10 years, criminals have been shifting their primary targets to SMB with a limited IT security awareness or negligence attitude.