Check out SaneSecurity: https://sanesecurity.com/usage/signatures/ <https://sanesecurity.com/usage/signatures/> Specifically: phish, winnow_phish_complete_url I’m sure there’s others as well.
Sincerely, Eric Tykwinski TrueNet, Inc. P: 610-429-8300 > On Feb 8, 2019, at 6:07 PM, Gene Heskett <ghesk...@shentel.net> wrote: > > Hello all; > > Has anyone rigged clamd to check what looks like questionable links > contained in incoming emails? It seems over the last 2 weeks my spam has > tripled, and I suspect the real payload is in the urls in the message. > > Or is this so time consuming and bandwidth wasting its not worth it? > > > Cheers, Gene Heskett > -- > "There are four boxes to be used in defense of liberty: > soap, ballot, jury, and ammo. Please use in that order." > -Ed Howdershelt (Author) > Genes Web page <http://geneslinuxbox.net:6309/gene> > > _______________________________________________ > clamav-users mailing list > clamav-users@lists.clamav.net > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > > > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml
_______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml