Just a heads up. I noticed a bunch of American Express Statements in our quarantine. My guess is because they are using m.amex and go.amex links in the emails.
DKIM and SPF pass so these definitely seem to be legit AMEX emails. >From address is "American Express" <americanexpr...@welcome.aexp.com> Sincerely, Eric Tykwinski TrueNet, Inc. P: 610-429-8300 _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
