I was thinking that it could be an older version of the client…
Could you try with the EICAR test-virus? Try with both HTTP and HTTPS links.