[clamav-users] Heuristics.Phishing.Email.SpoofedDomain false positive desjardins.com

[Mathieu Morier]

Hi,

desjardins.com<http://desjardins.com> is a Québec Canada Coop Bank Institution and for a couple weeks, all their email to our email server as flag my CLAM for Heuristics.Phishing.Email.SpoofedDomain .

It might be something in the signature of their email.

But it’s starting to be problematic to exclude so many Desjardins.com<http://Desjardins.com> email from Clam.

Any Idea ?

Thanks,
Math
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20220530/20fc6b05/attachment.htm>