Hi Alex, There is a plugin that may help in here... https://spamassassin.apache.org/full/3.4.x/doc/Mail_SpamAssassin_Plugin_URIDetail.html
so a rule like this as a first protoype may help: uri_detail FAKE_URL_FILE_TYPE text =~ /\.pdf\b/i cleaned =~ /\.(zip|docx)\b/i Regards/Saludos, -----PedroD
