[clamav-users] Heuristics.Phishing.Email.SpoofedDomain

[micah anderson]

micah anderson <micah at riseup.net> writes:

> X:.+safelinks\.protection\.outlook\.com([/?].*)?:.*([/?].*)?:17
>
> but people are still complaining. Did I do this wrong? Looking again at
> the documentation, it appears that it should be '17-' instead of '17',
> but I'm not sure that matters.

Anyone have any insight about the missing hyphen? I can't find any
documentation about these supported levels and how to properly indicate
them.

thanks!