[clamav-users] Mail from Paypal wrongly identified as phishing by ClamAv

[Outreach at epsilon.com]

Hello,

Mail from our client Paypal is being wrongly flagged as phishing by ClamAv.

We get this type of bounce erros:
554 Your email was rejected because it contains the Heuristics.Phishing.Email.SpoofedDomain virus

Mailing IPs: 142.54.244. [96-110]
Mailing domains:mail.paypal.at, mail.paypal.nl, mail.paypal.com, mail.paypal.pl
Date of issue: 09 May 2017

Please make the necessary changes to your product ASAP.

These emails are legitimate, sent to optin customers of Paypal, and authenticate with SPF, DKIM and DMARC.


Please contact me if you need any additional information.

Regards,

Anne-Sophie Marsh, Sr Email Deliverability Manager EMEA
 T   +44 2086143219   M +44 7469352383   Epsilon, 67 Broad Street, Teddington TW11 8QZ, UK  epsilon.com<http://epsilon.com/>
[http://help.epsilon.com/images/logo.png]