[clamav-users] Heuristics.Phishing.Email.SpoofedDomain...

2021-04-01 Thread eric-list
Just a heads up. I noticed a bunch of American Express Statements in our quarantine. My guess is because they are using m.amex and go.amex links in the emails. DKIM and SPF pass so these definitely seem to be legit AMEX emails. >From address is "American Express" Sincerely, Eric Tykwinski True

Re: [clamav-users] Heuristics.Phishing.Email.SpoofedDomain...

2021-04-01 Thread G.W. Haywood via clamav-users
Hi there, On Thu, 1 Apr 2021, eric-l...@truenet.com wrote: Just a heads up. I noticed a bunch of American Express Statements in our quarantine. My guess is because they are using m.amex and go.amex links in the emails. DKIM and SPF pass so these definitely seem to be legit AMEX emails. From a