# Ruleset: BAZA_CALL.cf # License: GPL # Version: 215159157 # Created: Mon Oct 26 07:25:58 AM EDT 2026 # Author: Jared Hall # Contact: jared@jaredsec.com # Generated By: jbuild ################### BAZA CALL ################### # These rules filter Baza Call subscription schemes based upon combinations of # Non-Relational Objects. Designed for use by Small and Medium-sized businesses. ############# BAZA CALL RULES ############ ################################## ## ENUMERATE FREEMAIL ADDRESSES ## ################################## ifplugin Mail::SpamAssassin::Plugin::FreeMail header __JR_BZ_FREE_BODY eval:check_freemail_body() header __JR_BZ_FREE_FROM eval:check_freemail_from() header __JR_BZ_FREE_REPLYTO eval:check_freemail_replyto() meta T_JR_BZ_FREE_ANYWHERE (__JR_BZ_FREE_BODY || __JR_BZ_FREE_FROM || __JR_BZ_FREE_REPLYTO) describe T_JR_BZ_FREE_ANYWHERE Baza Call: Body or From/ReplyTo headers contains a Freemail Address endif ########################## ## BAZA CALL FROM NAMES ## ########################## header __JR_BZ_RAW_NAME From:raw =~ /\=\?utf\-8\?B\?TWFya8OpdGEgVmFjdWzDrWtvdsOh\?\=|\=\?utf\-8\?B\?R2Vla15TcXVhZMKuIEN1c3RvbWVyIHN1cHBvcnQgKzEgODEzIDc3NiAxNDEwIHZpYSA\=\?\=|\=\?utf\-8\?B\?Ny4xIE5nw7QgTWluaCDEkOG7qWM\=\?\=|\=?utf\-8\?B\?SE\/DgE5HIE3huqBOSCBLSEnDik0\=\?\=|\=\?UTF\-8\?B\?4LiB4Lik4LiV4Li04LiZIOC4q\+C4tOC4meC4meC4reC4gQ\=\=\?\=|\=\?UTF\-8\?B\?5ZCz56mO5biM5bCP5YWt55SyIFA2QSA2\?\=|\=\?UTF\-8\?B\?VsWoIFBI4bqgTSBOR1VZ4buETiBBTkg\=\?\=|\=\?UTF\-8\?Q\?Dami\=C3\=A1n_Alejandro_Bahamondes_Toro\?\=|\=\?UTF\-8\?Q\?ADELIN_IULIAN_BORTE\=C8\=98\?\=|\=\?UTF\-8\?B\?15nXldeR15wg15LXoNea\?\=|\=\?UTF\-8\?B\?4LmA4LiU4LmH4LiB4LiK4Liy4Lii4LiY4Li14Lij4Lie4LiH4Lip4LmMIOC4luC4meC4reC4oQ\=\=\?|\=\?UTF\-8\?B\?QXN0b24gUMOpcmV6\?\=|\=\?UTF\-8\?B\?6Zmz552\/5buJ\?\=|\=\?UTF\-8\?B\?6buD6Iul5Yeh\?\=|\=\?windows\-874\?B\?ytTD0sDDs\+wgytKkww\=\=\?\=|\=\?UTF\-8\?Q\?Augusto_Nahuel_Viola_M\=C3\=A9ndez\?\=|\=\?UTF\-8\?Q\?Emanuel_\=C3\=82ngelo_dos_Santos_Anacleto\?\=|\=\?UTF\-8\?B\?6rmA7J6s7JuQ\?\=|\=\?UTF\-8\?Q\?LORENA_MARIA_C\=C4\=82LINOIU\?\=/ header __JR_BZ_NAME0 From:name =~ /^([Oo]rder\s[Cc]onfirm(ed|ation)[,.:;]?|Thank\sYou|PAYMENT\sINVOICE|BBY_Team_Billing_[0-9]{3}|Renewal_Confirmation|Invoice|Geeks\sSquad|Services|Service\sUpdates|Mcafee|ORDER\sCONFRIMATION|cPanel\sHosting\sNotification|Norton\sStore\s\#[0-9]{6}|Sales\sTeam|Order\s(Status|Invoice|Details|Receipt|Update|update|Confirmed|Info|Cofirmation)[,.:;]?|Customer\sRepresentative[,.:;]?|Billing\sTeam|Firewall\sdefender\spremium|Paypal\sBillings|Windows\sDefender\sOrder|Delivery\sUpdate|rere\srert|Order\sInfo|Walmart\sSupport|[A-z_\-]{2,20}\s\|\sBilling\sDept|Billing\sTeam|Norton|BillD\xC3\xA9sk|Standard\sNotes|Service\sUpdate|We\sare\sobliged\sto\syou|Order\sUpdate|Billing\sDept|AVC\s0rder\sConfirmation|INFO\sREFERENCE|Moses|Aron|hetmyer\sSmith|Omar\,\sDiab|Bertha\sL\.\sKelly|Dave|jessikatsa\sThomson|View\sdetails\.|Windows\sDefender\s[0-9]{4}|Online\sdelivery|Sarenity\sWood|Adobe\sAcrobat|Norton|Alex\sQuickBooks\sTeam|Geek\sServices|Protection\sService|Geek\sServies|Rsht\sThomas|John\sSmi|Selik\sLane|Windows\sDefender\s[0-9]{4}|Kaitlin\sWelter|Joseph\sVogel|Geek\sSquad\sServices|Your\sOrder\s?\#[0-9]{4,8}|Darren\sWallace|Leandro\sM\sMcMann|Geek\sSquad|Carri\sPreisser|jhbjhb\sr6u56u5|NIKI\sBRETTYS\s\-\sService\sClients\sEmailtree|Geeks\sSQD\s2241|Toccara\sKacic|Cheryl\sChavez|Bill_Desk|Piu|ftdynx)$/ header __JR_BZ_NAME1 From:name =~ /^(Hajar\s(Muhammad\sShalaby\sBayoumi|Mahmoud\sMohamed\sSayed)|tyryi|Lynn\sLazalde|wweqa|fgjgvhkhj|Microsoft\sSecurity|Evan\sBrock\sTimm|Jennifer\sSmith|John\|\sBilling\sDept|Henryj\sHenryj|Maxwellio\sCleveland|Lacy\sWilliams|Renewal\sConfirmation[0-9]{9}|Jasmine\sGreen|Malik\sMassey|sdfe\sdfvfd|Bf\sFg|Hernando\aPuerta|Geek\sServices|Tyler\sJoek|Selma\sS\.\sLane|May\sKimyr|No\-Reply|Eliel\sShelleyudhhd|Lil\sCutiep|Billing\sSupport|Clintonw\sCookbowdhuryk|Ddc\sDdcg|Vincenty\sApplegatplegatem|Nora\sJ\.\sNewman|Debbie|Andrew\sRoedig|Bill\sDesk|CUSTOMER\sCARE\s\#[0-9]{5}|.{1,4}Intuit\sE\-Commerce\sService{1,4}|Alex\sModonxjc|Kelly\sKimnd|billdesk_|John\sF\.\sEdwards|Tom\sDayoekdn|The\sCoca\-Cola\sTeam|Cali\sParkjh|kazang\ssing|Geek\-Squad\sBilling|imp_updates_|\[no\-reply\]|GeeK\sSquad\steam|Bill_geek|Solomon\sStewartgh|Team\sQuickbooks\*|Deborah\sMoua|Christian\sL\sSchilling|billing|Anne\sT\sRobinson|Heidi\sJ\sGayden|James\sE\sHolcomb|E\-Reciept\slD|Madisyn\sM\.\sRoy|Bates\sJim|William\sMrozowicz|Klley\sKimbhj|Account_Team|Invoice_[0-9]{5}|Latanya\sP\sMapes|Dorian\sG\sGonzalez|Your\sOrder\s\#[0-9]{10}|Billing\sTeam\sDarren|Matthew\sA\sRamos|Albert\sJ\sPorter|Michelle\sD\sJackson|Product\sSpecifics\s\#\d{5}|Lara\sDoylefty|Bill\sdebts|Samantha\sM\sRoach|Essie\sPerry|Tyler\sAlexandra\sMiles)$/ header __JR_BZ_NAME2 From:name =~ /^(GeekSquad\xC2\xAE\s\+1\s802\s636\s0657|Ah\sChar|Minerva\sD\sWatson|KENNETH\sGAUL|Megan\sEvans|James\sJ\sJankowski|Nathan\sD\.\sRiley|Michael\sSmith|Help\sEach\sOthers|Katherine\sJ\sRuiz|DetaiIs\s24UGO|Ramy\sTttyfff|Juan\sP\sRicketts|Flora\sJ\sMartinez|GeekSquad\+1\-813\-776\-1443\sTeam\svia\sDocuSign|Dropbox|Flavio\sBaku|Britney\sShanettaBurley|Joyce\sG\sMuniz|(_Geek_Squad_|GeekSquad_Inc\xC2\xAE_USA\s)\+[0-9\s\-]{14}|Robert\sH\.\sMcGowan|Teri\sD\sLear|Christopher\sR\sJackson|Kevin\sJ\sBuckley|Your\sPayment\scheckout|GEEK\sSQUAD\svia\sDocuSign|Greetings\sYour\s\sSubsc\sId\s[0-9]{7}|Rosario\sPolash|support\@invgkk\.click|Abbie\sPaige|Lee\sM\sWynn|Michael\sMartens|Betty\sJ\sClark|Jason\sQuijada|Paid\s(User|Customer)|Mary\sW\.\sGooch|Best\sBuy\sTeam|Bestbuy\.com\s\+1\s813\s776\s1400|E_Bill|Joanne\sPak|Shein\sDepartment|Sarah\sPrendergast|Bligh\sTom\&Elaine|Greg\sDileonardo|Carl\sBollig|Support\sDesk|Johnnie\sBeckham|PayPal\sService|Mateusz\sMaszczy\xC5\x84ski|Jared\sParkinson|Sandra\sSmith|Elena\sParker|Melva\sCoddington|Industrial\sInstallations\sServices|najat\sEl\skhaloufi|Sanjita\s\sTHAPA|Louis\sADU\-AMOAH|Your\sOrder\s\#[0-9]{9}|James\sSpalding|Kevin\sC\.\sSimpson|Irving\sS\.\sJohnson|invoice|Vera\sJ\sJetton|Hudson\sLee|KRA\sPHILIPPE|BRYAN\sIVAN\sMARQUEZ\sABAD|Charles\sN\.\sBlass)$/ header __JR_BZ_NAME3 From:name =~ /^(Account_Dept\.|Auto_Renewal|E_Invoice|Lashonda\sShamp|GeeksComputer\s\(717\)\s525\-5913\svia\sDocuSign|Angeline\sValcin|Marvin\sWilson|Alan\sRamp|Lisa\sPoole|Penelope\sCarter|zexo|Annette\sR\.\sLaney|Cynthia\sO\.\sWhite|Sofia\sVergara|Cynthia\sO\.\sWhite|Nora\sMartinez|Beckett\sCampbell|Caitlyn\sZ\sTorr|Rachel\sZ\sAunger|Hannah\sTurner|Patrick\sD\.\sRogers|Scarlett\sV\.\sWard\s.*|Mastercard\sSecurecode|Claudia\sJimenez|David\sS\.\sMartinez|Sadie\sB\.\sRoss|Sherri\sPowers|Daniel\sDaly|Friedrich\sShuttlesw|Marilyn\.?Lewis881\@icloud\.com|Andrew\sNewburg|Orders|Nathan\s+Stewart|Customer|Lois\sHarris|Sallmankhan\sKhs|Kathryn\sStapleton|Mariano\sBizzell|Sherry\sBassey|Tina\sNewberry|ORDER\sT\sCONFIRMATION\svia\sDocusign|.*\sCustomer\sSupport\svia\sDocusign|Jared|Jerry|Lovely\sCustomer|Dear\scustomer|Rsilva|Premium_Steak\s?\.|Rachel|Bates\sJim|Veronica\sMacias|Jerry\sHernandez|Jill\sGunn\s610418|Mario\sSpikes|Gail\sLee|LifeLock\sTechnical\sSupport\sServices|Compliance\sPayPal\sOffice|\/Paypal|Norton\sSecurity\sand\sLifeLock|Faith\sJones|Leland\sHowe|noreply|Emir\sSanford|Scottie\sGriffin|Robert\sRobertson|lorenza\sgooch|David\sRyan|Joann\sHodapp|PP\sBill|Pauline\sGoodwin|PAUL\sMOEN|Paulfrahm|Jpolt|Bbuckley|Logistilla\sLouis|Leone\sDesrosiers|megan\.morrison\-Customer\sSupport|Connor\sRees)$/ header __JR_BZ_NAME4 From:name =~ /^(Victor\sSkinner|Helping\sCommunity6274ufps|Ruby\sR\sNesmith|Nguyen\sThi\sLy\sPhuong|Order\sBilling\sTeam\sLydia\sNunez|Deirdre[\s\t]Peake|Valdez\sJoann|Dan\sPayne|Jane\-Vaughan|Alan[\s\t]Wright|MATHEW\sCROSBY|Dusan\sCakarmis|Ava[\s\t]Forsyth|Boris\sPaige|Angela\sReid|Wendy\sLewis|Webster\sHickle\sSr\.|Amazon\'\s?\'|Marcia\sKunze|DONNA\sSEYEDKAZEMI|Elijah\sP\sMiller\sP11IO\.FT|William\sChapman|Dorothy\sO\.\sHayward|Andrew\sVance|Trevor\sSharp|Phil\sMartin|Keith\sBuckland|Leah\sKing|Keith\sRampling|Loren\sPaterno|Jake\sNolan|Edith\sParsons|Jasmyn\sThomas|Theresa\sWhiteman|Carolyn\sMitchell|Tamara\sRiddick|Ryan\sButler|Assumpta\sWIMS|Shabana\sLabarr|JACOB\sAGWA|Philip\sF\.\sGonzalez|Anthony\sBailey|Justin\sMcLean|LAURA\sVANESSA\sAPONTE\sARANDA|Kevin\sVance|DIOGENES\sBECKHAM\sLOPEZ\sYUCRA|Katie\sCook|Marsha\sCote|MARIA\sALEJANDRA\sJIMENEZ\sRAMIREZ|Olivia\sSilva|Phyllis\sHernandez|Yari\sSantiago|Daria\sMuller|Jennifer\sWhite|Tiffany\sMoody|Roger\sLane|Jessica\sFowler|Linda\sFontenot|Mohammed\sAdnan|Freda\sE\.\sKinman|Pawel\sOscar\sDuda|Co\sTho|Eduardo\sFontes\sBaltazar\sDa\sSilveira|Jennifer\sLyman|Thelma\sJ\.\sEstrada|Invoice\sOffer\!+|Lala\sApt|Kwadjo\sAsante\sNyante|Michael\sLee|Bishop\sMaddox|Heath\sJavier|LAVERNE\sR\.|Bradford\sEmily|Morrison\sAmbrose|Hamma\sFaye|Susan\sPerez)$/ header __JR_BZ_NAME5 From:name =~ /^(Dennis\sBannister|Briar\sH\.\sJexley|Aisha\sS\.\sWharton|Erika\sAk|kenny\sFrom\sBilling|Christian\sTaylor|Jzavori\sMalcolm|Micer\sL\.\sWestport|Isaac\sRandall|Schroeder\sOrion|irving\skarten|RONNIE\sBENNETT|Danny\sQUISPE\sVILCA|Diana\sRayda\sQuispe\sDe\sLa\sCruz|Daisy\sKing|David\sMiller|ACARO\sMENDOZA\,\sJoaquin\sRafael|Bima\sDr|Estelle\sV\.\sLockridge|Dylan\sTerry|Jennifer\sLawson|Rosie\sN\.\sPatchell|AlexusNunez\siggi|Harrison\sK\.\sWinslet|Harry\s\(via\sCalendly\)|Brendan\sPoston|Estrella\sLacey|mr\sgiansur|Grace\sBlanchard|Chyynia\sReeder|Katherine\sTerry|Luis\sFilipe\sFerreira\sSoares|Service\sUpdates|James\sA\.\sParent|Premalatha\sK\sJ\sK|Forrest\sA\.\sMarshall|Ramiro\sHyatt|(Jordyn|Yoon)\sMickaylaxyz|(Wiseman|Malik|Drummond)\sSkipperz|Marco\sR\.\sBanuelos|Kogcharkorn\sPogjanarch|Temira\sCarroll|Ryland\sBarker|Khusnur\sRofiq|Maryam\sLockman|Wendy\sLyman|Adam\sStefanelli|Rafael\sYu|Selena\sPennington|Loris\sFinocchiaro|Walter\sAustin|Beloningen|Alice\sS\.\sRich|Wanda\sLyman|Paul\sHunter|Julian\sF\.\sArkwright|AlejandroXMax|BHERNICE\sSANJANA\sJ\s\@|JILL\sMORLEY|Calvin\sC\.\sThornbury|Therese\sGeary|Zachary\sJohnson|Cayetana\sOrtega\sGarc\xC3\xADa|Alyssa\sRamirez|Jadaba|Charles\sRodriguez|Billy\sDelancey|Guilianno\sBarnes|Kelly\sFerguson|Michael\sBarton|Anspach\sboldon|Amadeu\sBarrus)$/ header __JR_BZ_NAME6 From:name =~ /^(Jonerluc\sEler|Jackson\sGabriel|RENJEL\sDEL\sROSARIO|Duane\sVincent|Dennis\sLarson|FARIHA\sSafavi\sCampus|Jon\sBall|Al\-qayimah\syandt|Grace\sLewis|Jason\sBeck|Victoria\sBurns|Agora\szeitulaev|Adco\szoila|Anatolio\sWolzmuth|Kimberly\sMcdonald|flores|Ashraf\sSobhy\sIsmail\sShalaby|Adriana\sK\.\sBroome|Kelly\sTucker\sMD|Caleb\sRodriguez|ZEDRICK\sBALOTA|Paid\sUser|Lea\sMarie\sDawson|Mary\sAnn\sHapin|Michael\sBengard|Johnny\sCid\sdel\sPrado|kristen\sbrown|Defoe\sDegal|Danielle\sBlackburn|Cheryl\sAllen|Andraa\sBhagwan|Jason\sWhite|STEVE\sPELLO|Mary\sBaker|Sierra\sE\.\sHouston|Karen\sHansen|LYNN\sLEWIS|Stuart\sPorter|nema\-nadia\schamshama|Anna\sBaker|shaun\sloomis|Chris\sColeman|Sofia\sManuela\sSantos\sOliveira\s\(a3308\)|Pyetro\sNeves\sdos\sAnjos\sSoares|Alexis\sPhillips|THADDEUS\sRUNNELS|Gloria\sGutierrez|Y\.\sDavid\sClark|Anya\sGrady|Christine\sWeeks|Jamie\sKulas|KAREN\svaligura|VINCENT\sbeer|STEVEN\sNUSSEN|Sherry\sSolis|Erin\sWarren|GARY\sCHINN|PayMonitor\sServices|SANTOS\sZUMA|Sonia\sMussaw|Catherine\sJones|Nathaniel\sSmith|Steven\sBell|Jason\sHamilton|virginia\.?nolan\-Customer\sHelpline\sCenter|Ags\sZeinfeld|Annmarja\sWimmerlin|Mary\sAlvarado|allysa\syatooma|Adrian\sS\.\sClarke|Sebastian\sE\.\sVane|AKIHIKO\sZambri|Neila\sHaua\sALBERTO|DIEGO\sPAGLIARO|Piotr\sSedkowski|MARK\sZIMMERMAN)$/ header __JR_BZ_NAME7 From:name =~ /^(Stacy\sGrant|Alkeam\sYellock|Angeli\swittkopf|ANEYSA\swiyono|Amarender\sReddy\sRekula|Breonna\sWilliams|Adrew\sZiedman|aleksondra\sYouse|Abdallah\sAlzyoud|ROGELIO\sDE\sJESUS\sMONTALVO\sPALMER|MALAN\sSAGNAY\,\sLUIS|Kira\sM\.\sEvans|Maria\sLambert|ALONDRA\sGUADALUPE\sLOPEZ\sMORALES|Sophia\sM\.\sBrown|Kel\sMac|Video\sCart|Scott\sM\.\sPotter|Evan\sMackenzie|Katelynn\sKeeling|Salma\sSchinner|Victoria\sGarrett|Giulio\sSemenzato|Maryjane\sGaylord|Adeline\sT\.\sGoodman|ARENTI\sDEWI\sPUSVITA\sSARI|Nicholas\sFernandez|A\sDeering|Trish\sShepard|ZALFA\sALFIAH|BUTRAGUENO\sGLORIOUS\sPUTRA\sPOLII\sS1\sTeknik\sMesin|NICK\sSHOSHILOS|Cole\sGarcia|Andrea\sMay|Transaction\sMonitoring\sTeam|Pay\sProcessing\sSupport\sTeam|angela\.metcalfe\-Customer\sHelpline\sCenter|Dominic\sCastro|DHRUV\sTOMAR\sNEERAJ\sKUMAR|Brandon\sJohary\sCruz\sVazquez|Harald\sSchmitz|Rafik\sKah|Ella\sFoster|LUCAS\sRODRIGUES\sDA\sSILVA|Audrey\sChurchill|Paul\sGreen|Julia\sBurke|Wayne\sDriscoll|Carleton\sKoss|ALEXANDRU\sLUCA\sPANTILIE|Johannah\sRicklefs|Nattanicha\sYucharoen|John\sJohnson|Randolf\sBlanchette|Joseph\sThayer|Nina\sGaither|Nathan\sWilson|Kathryn\sSparks|Diana\sJumahat|Tracey\sMiller|Laura\sTaylor|Audrey\sVance|Alina\sPoczo|Megan\sMathis|Jan\sLazich|Brandon\sWhitney|Victor\sOgden|Jerry\sMoreno|Maksim\sMaloskin|Katherine\sKelly)$/ meta __JR_BZ_NAME (__JR_BZ_RAW_NAME || __JR_BZ_NAME0 || __JR_BZ_NAME1 || __JR_BZ_NAME2 || __JR_BZ_NAME3 || __JR_BZ_NAME4 || __JR_BZ_NAME5 || __JR_BZ_NAME6 || __JR_BZ_NAME7) ######################## ## BAZA CALL SUBJECTS ## ######################## header JR_BZ_SUBJ0A Subject:raw =~ /\=\?UTF\-8\?Q\?\=CE\=8Crder|=?UTF-8?Q?R=D0=B5=D5=B8=D0=B5=D4=9D=D0=B0=E2=85=BC_C=D0=BE=D5=B8f=D1=96r?=|=?UTF\-8?Q\?\=E2\=85\=BF\=D0\=B5d:_A\=D1\=81\=D1\=81\=D0\=B5\=D1\=95\=D1\=95_GS_P\=D0\=B5r\?\=/m describe JR_BZ_SUBJ0A Raw subject contains Baza Call UTF8 signatures score JR_BZ_SUBJ0A 5 header JR_BZ_SUBJ0 Subject =~ /Thanks\sFor\sRenewal|Request\sof\syour\smember_ship|up\-garadtion\shas\sbeen\saccepted|Order\sConfirmation\.|IN_VOICE\sNUMBER\s:|Antivirus\sValidation\s\#[0-9A-Z]{6,8}\#|Order\sID:\s[A-z]{3}_[0-9]{4}\-[0-9A-Z_]{4,6}|Thanks\sfor\sSubscription|Invoice_No\#\s[A-z]{3}[0-9A-Z]{5,7}|PAYMENT\sRECEIPT|ThankYou\sFor\sYour\sPurchase|Payment\sConfirmation\s\#[0-9A-Z{16,18}\s\#|Invoice_Number\s\-\s[A-Z[{2}[0-9]{2}[A-Z]{2}[0-9]{3}|Your\ssubscription\s[0-9]{7,9}\shad\sbeen\srenewed|Your\sOrder\sIs\sProcessed\sSuccessfully|renewal\sdebit|Receipt\s[0-9]{6}|Success!\sYour\sService\sUpdated\s\#[A-Z[{3}\-[A-Z[{2}\-[0-9]{5,7}|0rder\-no\.[0-9]{6,8}\smembership\srenewed|Order\sID:\s[A-Z]{3}\-[0-9]{4}\-[A-z][0-9][0-9]{1,2}_[A-z0-9_]{8}|Glad\sto\ssee\syou\srenewed\syour\ssubscription\sagain|.{11,50}\sDOC\-[0-9]{8,10}_[A-Z{3}\-[0-9]{4}|In_Voice\sNumber:\s[A-Z]{1,2}\-[0-9]{4}\-[0-9]{4}\.{1,4}|Mc\-Afee\sPremium\sPlan|In_Voice\sID:\s[A-Z]{4}\-[0-9]{5,7}|Thank\syou\sfor\sregistering\sto\sour\swebsite|INVOICE\sID:\#NOR[0-9]{7}|RENEWED\!\sService\sPlan\s\(GS|Your\sOrdered\sis\sbeing\sProcessed|Plan\sStatus\s\#[A-Z]{2}[0-9]{2}\-[A-Z]\-[0-9]{7}\sfor|Your\sGeeks\sSquad\sService\sPlan\sis\sRenewed|Thank\syou\sfor\syour\ssubscription\>\>NOR|Paypal\s\|\sYou\spaid\sto\s[A-z0-9\-]{2,20}\sfor\sInvoice\s[0-9]{6}\-[0-9]{10}/ describe JR_BZ_SUBJ0 Subject contains Baza Call signatures score JR_BZ_SUBJ0 5 header JR_BZ_SUBJ1 Subject =~ /Renewed\!\sYour\sservice\splan\s[0-9]{8}\swith\sus\s\.\.\.|Norton\sInvoice\s\#\s[0-9]{10}|Your\saccount\shas\sb\xC3\xA9\xC3\xA9n\sd\xC3\xA9bit\xC3\xA9d|Standard\sNotes\sLM\-[0-9]{10}|Billing\sDepartment\sof\sPayPal\supdated\syour\sinvoice\s\(\s[0-9]{8}\s\)|Your\sservice\srenewal\s\#GS10\-RENEW\-[0-9]{8}|Your\sTransaction\scode\#[0-9][A-Z]{6}[0-9][A-Z]\*|Service\sRenewal\s\#GKSD\-[0-9]{7}|Norton\splan\spayment\sdone\!|Thankyou\sfor\sYour\sorder:\s\#K[0-9]{10}|Product\sKey\s\#\s\%_RTXT_8-8_A1:\~\!\@\#\$\^\&\*\(\)_\=\+\\\|\/\>\<\,\._\%|Regarding\sYour\sSubscription\sMembership\sPlan\sUpgrade\s\#[0-9]{6}\s\-[0-9]{6}|Your\sRenewal\sReceipt\sOrder\sfrom\s(Aug|Sep|Oct)\s[0-9]{1,2}\,\s202[0-9]|In\-Voice\sId\sAPE\-[0-9]{5}\sSent\sFrom|Geek\sTransaction\sAlert__[0-9]{6}|Your\sDevice\sCurrent\sService\srenewing\!|Service\srequired\#[0-9]{7}|Membership\splan\sactivated\#[0-9]{6}|ORDEER\sHAS\sBEEN\sPROCESS|your\sdevice\shas\sbeen\sinfected\s\([0-9]\)|Thanks\sFor\sRENEWAL|Geek\-Squad\sRenewal\sService\sUpdate\sInfo\s[A-Z]{3}\-[A-Z][0-9]{2}\-[0-9]{7}|Your\ssales\sinvoice\sis\sprepared\s\@[A-Z]{5}\-[0-9]{5}\-[0-9]{5}|Account\srenewed\skey\*[0-9]{7}|Billing\salert\#[0-9]{5}\-[0-9]{5}\#[A-Z]\#|YOUR\sPLUS\sMEMBERSHIP\sWILL\sAUTO\sRENEW\#|Network\sServices\#\#[0-9]{5}|HI\sTHE\sUSER\,YOUR\sSUBSCRIPTION/ describe JR_BZ_SUBJ1 Subject contains Baza Call signatures score JR_BZ_SUBJ1 5 header JR_BZ_SUBJ2 Subject =~ /Renewal\sReminder\s[0-9]{7,8}\sof\sservice|Confirm\syour\sorder\,\splease\s\@[A-Z]{10}\-[0-9]{11}|^Charge\swill\sappear\son\syour\sbank$|Your\sInvoice\s\#\#\sINV\-[0-9]{5}39204\sPayment\sSuccessfully|Account\shas\sbeen\sre\-subscribed\!\sby\s\s?successfully\!|Here\'s\sYour\sAccount\sRenew\sSuccessfully\sFrom\sGeek\sSquad\.|Receive\sa\sprompt\scompensation\sfor\syour\sprior\spurchases\.|PayPal\sOrders\s\+1|Invoice\sInfo\s[A-Z]{3}\-[A-Z][0-9]{2}\-[0-9]{7}|A\srefund\srequest\sfor\sthe\sannual\splan\shas\sbeen\sapproved\.|Your\smoney\sis\sbeing\sprocessed\sby\sour\sstaff\sright\snow\.|Order\sConfirmed\!\sThank\syou\!\s\#[A-Z]{3}\-[0-9]{4}|Thank\sYou\sFor\sYour\sPayment\-NO\:\-QUAL\-OPQ9\-LLP|REGARDING\sYOUR\sRECENT\sPURCHASE\sORDER|Norton\sBill\sWas\sGenerated\sof\sYour\sYearly\sPlan\.|Your\sorder\supdates[A-Z]{5}[0-9]{11}|Thank\syou\sfor\sconfirming\syour\sorder\!\s\#[A-Z]{2}\-[0-9]{4}|Thanks\!\sYour\spayout\sfor\sthe\srenewal\shas\sbeen\sfinally\sobtained\.|Retrieve\syour\spremium\sID\sprofile\,\skindly\scheck\.\s\!\!\s[0-9]{12}\s\!\!|ORDER\sHAS\sBEEN\sPLACED\sINVOCIE\s\#\#\#|Your\sInvoice\s\#\s[0-9]{5}\-[0-9]{5}|DDFR\-[0-9]{9}$|Get\sYour\sRenewal\sSubscription\sRight\sNow\!{2,3}|your\sorder\shas\sbeen\sprocessed\ssuccessfully\swith\samazon\.|New\sPlan\sHas\sBeen\sAuto\sRenew\sOn\sYour\sDemand/ describe JR_BZ_SUBJ2 Subject contains Baza Call signatures score JR_BZ_SUBJ2 5 header JR_BZ_SUBJ3 Subject =~ /AFFILIATION\sID\-[0-9]{9}[A-Z]{3}[0-9][A-Z]\-[0-9]{9}[A-Z]{4}[0-9]{3}|Membership\sPlans\sDocument\sFile\.[A-Z]{3}\-[0-9]{3}|Shield\sProtection\sActivated\#|Conveyance\scharge\sadded\s[0-9]{9}\sfor\s[0-9]{4}\-[0-9]{1,2}\-[0-9]{1,2}|Renewal\sBilling\sNotification|\-\-Auto\-Renewed\sYour\sPlan|Invoice\s[A-Z]{3}\-[0-9]{5}\s\;\sWe\sattempted\sto\scharge\sit|Today\sInvoice\s\#586988\s\!{2,3}|We\sappreciate\syour\spurchase\.\sToday\'s\sBill\'s|sales\sinvoice\sis\sprepared\.\s\#[A-Z]{4}\-[0-9]{4}\-[A-Z]{3}\-[0-9]{3}|Your\sInvoice\s\#[A-Z]{2}\-[0-9]{6}\s\~Payment\sProcessed|PLAN_UP\-GRADED_\#_[0-9]{6}_|Order\sConfirmation\s?[A-Z]{5}[0-9]{11}\s?of\sPlan|Refund\srequest\sstatus\s\@[0-9]{12}\-[A-Z]{10}[\#\!]{2,3}|Your\sRenewal\sPayment\sfor\sYour\sConfirmation\.\s[A-Z]{7}\-[0-9]{4}\-[A-Z]{5}|Your\sGeek\sreceipt\s[A-Z]{5}\/|Your\sGeek\sreceipt\sGSS[0-9]{7}|Thanks\sf\xE1\xBB\x8Dr\sp\xC4\xBCac\xC3\xADng\s\xE1\xBB\x8Crder|An\supdated\spurchase\scopy\shere\.|The\srecurring\scharges\sto\syour\scard\swere\sprocessed\ssuccessfully\.|Confirmation\sreceipts\sof\sitem\sno\-\#[0-9]{6}\-|We\sappreciate\syour\sbusiness\s\-\spayment\sreceived\.\#[A-Z]{3}\s\-\s[A-Z0-9]{7}\s\-\s[A-Z]{3}|Product\spIaced\ssuccessfuIIy|Renewal\sProcessed\,\sThank\sYou\sfor\sYour\sLoyalty\.\#|Transact\sfor\sArrangement\sno\s|Your\sGS\sPersonal\sRenewal:/ describe JR_BZ_SUBJ3 Subject contains Baza Call signatures score JR_BZ_SUBJ3 5 header JR_BZ_SUBJ4 Subject =~ /Payment\sprocessed\s\-\sthank\syou\sfor\syour\spurchase\s[A-Z]{3}\s\-\s[A-Z0-9]{6}\s\-\s[A-Z]{3}|Confirmation:\sYou\shave\srenewed\syour\ssubscription\swith\sus\!\#|Next\srenewal\sshall\sbe\sdiscounted\s\#[A-Z]{4}[0-9]{8}|Thanks\sfor\sPIacing\s0rder\sID\s\#[0-9]{5}|New\sExpected\sDelivery\sDate\sGS[0-9]{6}[A-z]{2}|We\sacknowledge\sthe\ssuccessful\scompletion\sof\sthe\sinvoice\spayment\.|From\sBilling\sDepartment\sSafeGuard|Issued\sE\-Receipt:\sConfirming\sYour\sTransaction|Payment\sprocessed\ssuccessfully,\sthank\syou\sfor\syour\strust\.|Reminder:\sInvoice\s\#\[[A-Z]{3}\-[0-9]{4}\]\sPayment\sDue|Electronic\sInvoice:\sArranged\sand\sSet\#[A-Z]{6}\-[A-Z]{3}|GET\sYOUR\sUPDATED\sINVOICE\sORDER\sBILL\s\#[0-9]{10}|Renewal\sConfirmation\d{1,2}\-\d{1,2}\-\d{4}|Success\!\sYour\sOrder\sRenewal\sis\sConfirmed\s\#[A-Z]{7}|Delivering\sYour\sE\-Receipt:\sPurchase\sVerified\s\#[A-Z0-9]{7}|\+1\s802\s636\s0657|Auto_Renewal\sConfirmation|Purchase\sConfirmation\s\#No\-\s[A-Z0-9]{6}\-[A-Z0-9]{6}\-[A-Z0-9]{6}|Invoice\s\#\sNRS[0-9]{6}\-\sGeekSquad|^Receipt\sIncluded:$|Your\sorder\sis\sbeen\sProcessed|E\-Statement\sProcessed:\sCheck\sInside\s[0-9A-Z]{12}|Your\sOrder\sReceipt\s[0-9]{9}|Confirmation\sof\sSuccessful\sRenewal\s\xE2\x80\x93\sE\-Receipt\sInside\s\#[A-Z]{2}[0-9]{2}[A-Z]|New\smessage\s[A-Z]{7}[0-9][A-Z]{3}[0-9]/ describe JR_BZ_SUBJ4 Subject contains Baza Call signatures score JR_BZ_SUBJ4 5 header JR_BZ_SUBJ5 Subject =~ /Thank\sYou\sfor\sYour\sPayment\s\-\sReceipt\sEnclosed:|[A-z]{2,20}\,\sOrder\sNo\.\s[0-9]{6}[A-Z]{2}\sis\supdated|Your\sGeek\sSquad\sSubscription\sis\sLocked\sand\sLoaded|Your\sTicket\sNo\.\s[0-9]{8}\spayment\sis\scompleted|Invoice\s[A-Z]{3}\-[0-9]{4}\sfrom\sGeek\sSquad\,\sInc|Confirmation:\sYour\sRecent\sOnline\sPurchase\s\#[A-Z][0-9][A-Z][0-9][A-Z][0-9]|we\sappreciate\syour\sorder\swith\sus\s_[0-9]{5}|Your\sService\sConfirmaton\s[0-9][A-Z]{2}[0-9]{2}[A-Z]|Receipt\sof\sPurchase:\sDetailed\sView\s[A-Z0-9]{12}\s\=\s[A-Z0-9]{7}|GeekSquad\,Inc\s1\.858\.926\.7874|^Payment\sSuccessful:$|REMINDER\(RECEIPT\)\*\*\*\*[A-Z0-9]{4}\*\*\*[A-Z0-9]{2}\*\*\*\*[A-Z0-9]{2}|E\-Receipt\sNotice:\sTransaction\sNoted|Charge\sSummary:\sDigital\sLookover|INVOICE\sALERT\#[A-Z0-9]{4}\-[A-Z0-9]{4}\$[A-Z0-9]{3}|Renewal\sFinalized:\sConfirmation\sof\sService\sContinuation|Thank\syou\sfor\syour\spayment\s\(Invoice\#:\s[0-9]{3}\-[0-9]{4}\-[0-9]{7}\)|[0-9]{5}\#\sSubscriptionID\-TechWorld|\#\sINV\-[0-9]{7}\s\-\sGeekSquad|Invoice\sfrom\sfgbhg|[a-z0-9]{6,10}\sthe\sinvoice\sfor\sPaid|New\smessage\s[A-Z]{10}|Your\sTicket\sNo\.\s[A-Z0-9]{7}\spayment\sis\scompleted|Invoice\s[0-9]{7}\sfrom\sBestbuy\.com\s\+|We\sreceived\spayment\,your\sReceipt\sno\s[A-Z0-9]{8}\son|Alert:\sYour\sE\-Bill\sConfirmation\sIs\sHere|Renewal\sID_\#[0-9]+/ describe JR_BZ_SUBJ5 Subject contains Baza Call signatures score JR_BZ_SUBJ5 5 header JR_BZ_SUBJ6 Subject =~ /transaction\swas\snot\sby\syou\sQuickly\sreach\sus|Invoice\sfrom\sNotification\s:If\sthis|Completed:\sInvoice_[0-9]{9}\-:BestBuy|BillingTeam\sGeekSquad\ssent\syou|\+1\s813\s776\s1460|Prime\sMembership\sis\srenewal\sscheduled\son|Geek\-Squad\s.*\sTeam\ssent\syou\sa\sfile|Has\sBeen\sCharged\sfor\sGeek\sMembership|Your\sProduct\sreference\snumber\s[0-9]{5}\swill\sbe\scompleted|Invoice\sfrom\sIf\sthis\sis\snot\syou\squickly\scall|paid\sinvoice\sfor\sorder\sno\.\s[0-9]{5}$|Order\sProcessed|Invoice\s[0-9]{9}\sfrom\sGeek\-Squad|Paid\sinvoice\sfor\sorder\s[A-Z][0-9][A-Z]{2}[0-9]{3}[A-Z]\shas\sbeen\sreceived|Recent\sPurchase\sInvoice:\sYour\sPayment\sDetails|Invoice\s[0-9]{9,10}\sfrom\s_Geek_Squad|Invoice\s[0-9]{9,10}\sfrom\sGeekSquad_Inc|\+1\-818\-453\-1583|\+1\s818\s453\s1583|invoice\spaid\sfor\sorder\sno\.\s[A-Z0-9]{8}|Action\sNeeded\sfor\sAccount\sVerification\s[0-9A-Z]{10}|payment\sfor\sorder\sno\.\s[A-Z][a-z][A-z]{6}\swas\ssuccessful|Payment\sfor\sorder\s[0-9][A-Z]{2}[0-9][A-Z]{4}\smade\sby|Order\sDispatched\s[A-Z]{2}[0-9]{6}[A-Z]{2}|Alert:\sE\-Bill\sNow\sAvailable\sfor\sViewing|Your\srequest\s[0-9]{5}\sis\sbeing\sprocessed\sfor\s[A-z]{2,15}|Final\sReminder\sBefore\sLegal\sActions\s[A-Z0-9]{10}|Shipment\sUpdate\s[A-Z]{2}[0-9]{6}[A-Z]{2}|Payment\sConfirmation:\sInvoice\s\#[0-9]{6}\sUpdated/ describe JR_BZ_SUBJ6 Subject contains Baza Call signatures score JR_BZ_SUBJ6 5 header JR_BZ_SUBJ7 Subject =~ /Invoice\sand\sPurchase\sDetails\s\-\sOrder\sID\~[0-9]{4}[A-Z]\-[0-9][A-Z][0-9]{3}\-[0-9]{2}[A-Z]{3}|It\shas\sbeen\supdated\sto\sOrder\sNo\.|Your\sOrder\sNo\.\s[a-z0-9]{16}\shas\sbeen\sprocessed|Number\s[0-9]{6}\sis\sbeing\sprocessed$|We\shope\syou\sare\sas\sexcited\sas\swe\sare\.|\spIacing\s|Has\sBeen\sCharged\sfor\sGeek\sSubscription|\+1\s813\s776\s1410|E\-renewal\s[a-f0-9]{4}\-[a-f0-9]{4}\-[a-f0-9]{4}|0rder\sdetails\swith\sGS|E\-renewal\s[0-9a-f]{4}\-[0-9a-f]\-[0-9a-f]|updated\sOrder\sNo\.\s[0-9]{4}\-[0-9]{3}\-[0-9]{5}\shere|order\sin\sthe\samount\sof\s?\$[0-9]{3}\.[0-9]{2}\sfrom\syour\saccount|Thank\sYou\sfor\schoosing\sGS\sTotal\sProtection|Order\sNo\s\#[0-9A-Z]{22}\sConfirmed\.|Gratitude\sfor\syour\sorder:\sYour\sRenewal\sIs\sVerified|Thank\syou\sfor\syour\spayment\!\sID\-[A-Z]{3}[0-9]{2}[A-Z]{7}[0-9]{2}|from\sGeeks\sComputer|Confirmed\s[0-9]{3}\s[0-9]{2}\sDelivered|Your\sGS\sPersonal\sRenewal\sis\sConfirmed|Your\sOrder\sNo\.\s[0-9]{2}\-[0-9]{4}\-[0-9]{4}\spayment\sis\scompleted|Your\srequest\s[0-9]{5,6}\sis\sbeing\sprocessed\sfor|payment\sof\sUSD\s[0-9]{3}\s\(via\sRazorpay\)|Your\s[A-Fa-f0-9]{4}\-[A-Fa-f0-9]{4}\-[A-Fa-f0-9]{4}\sorder\sreceipt|Here\sis\sconfirmation\sof\sa\s\$[0-9]{3}\.[0-9]{2}\sorder\swe\sreceived|are\sconfirming\san\sorder\swe\sreceived\sfor\s\$[0-9]{3}\.[0-9]{2}/ describe JR_BZ_SUBJ7 Subject contains Baza Call signatures score JR_BZ_SUBJ7 5 header JR_BZ_SUBJ8 Subject =~ /Membership\sINUM\-[0-9]{4}\-UTN\sexpiration\sday\semail|[pP]lease\scontact\s(\b|\s|\:)(\+1|1)?[\.\-),(\s\[\]`{}]*(?:[0-9]{3})[\.\-),(\s\[\]`{}]*(?:[0-9]{3})[\.\-),(\s\[\]`{}]*(?:[0-9]{4})\shas\swithdrawn\sits\sfunding\srequest|Purchase\sDetails:\sYour\sInvoice\sis\sReady\s[0-9][A-Z]{8}|Success:\sRenewal\sDetails\sUpdated\s[A-Z]{6}[0-9]$|Invoice\sGZ[A-Z][0-9]{3}[A-Z]{2}\spayment\sis\snow\scomplete$|Delivery\sfor\sorder\sno\s[0-9]{7}\son$|Order\sConfirmed:\s[0-9]{3}[A-Z]{6}\-[0-9]{4}\-[A-Z]{4}$|Request\s[0-9]{3}[A-Z]{7}\-[0-9]{4}\-[A-Z]{4}\sin\sProcess$|Charge\sis\snot\sfor\syour\sSubs\-cription|You\swill\sbe\smoved\sto\sthe\sPremium\smembership\,\sas\sthe\sdemo\speriod\sis\sending|Your\sVerification\sAccount\sis\sconfirmed|Payment\sMade:\sInvoice\s[0-9]{3}[A-Z]{4}\-[0-9]{4}\-[A-Z]{4}[0-9]{4}|Dear\sCustomer\,\sOrder\sNo\.\s[0-9]{6}[A-Z]{2}\sis\supdated|Payment\sDone:\sOrder\s[0-9]{4}[A-Z]{7}\-[0-9]{4}\-[A-Z]{7}[0-9]{6}|Payment\scompleted\sfor\sTransaction\snumber\s\#[0-9]{2}\-[0-9]{3}\-[0-9]{4}|Thank\syou\sfor\scompleting\sorder\sToken|Payment\sHas\sBeen\sProcessed\sSuccessfully\sAnd\sVerified:\s\#[A-Z]{3}\-[A-Z][0-9][A-Z]|Hello\sSIr\/Mam\,\sYour\sExclusive\sInvoice\s\#[\d]{7}\sJust\sfor\sYou|Special\sEdition\sInvoice\s\#[0-9]{4}\-[A-Z]{2}\-[0-9]{4}/ describe JR_BZ_SUBJ8 Subject contains Baza Call signatures score JR_BZ_SUBJ8 5 header JR_BZ_SUBJ9 Subject =~ /Your\srequest\s[0-9a-f]{7,8}\-[0-9a-f]{3,4}\sis\sbeing\sprocessed\sfor\s[A-z]{2,20}|Norton\salert:\sYour\stotal\sdebt|This\swill\snever\sbe\srepeated\sCAG\-[0-9]{8}|[a-z]{2,25}\,\sYour\sPayment\sof\s\$[0-9]{3}\.[0-9]{1,2}\sfor\sPersonal\sProtection\sAntivirus|Review\sYour\srecent\sAcknowledgement\s[0-9]{4}\-[0-9]{3}\-[0-9]{4}\swith\sus|^Your\srequest\sNo\.\s[0-9]{5}\sis\sbeing\sprocessed\sfor\s[A-Z][a-z]{1,20}|Paid\sAcknowledgement\sfor\sAcknowledgement\sNumber|[a-z]{2,25}\,\sReceipt\sfor\sorder\sno\s[A-Z]{3}[A-Z0-9]{15}[A-Z]{2}|Your\sTicket\s[A-Z][A-Z0-9]{15}\shas\sbeen\sdelivered|Payment\sUpdate:\sInvoice\s\#[A-Z0-9]{16}\]\sStatus|Success\!\sYour\sOrder\s[A-Z]{2}[0-9]{5}\-[0-9]{4}\sPayment\sHas\sBeen\sCompleted|^Shipment\s\#\[[0-9]{5}\-[0-9]{2}\]\sConfirmed|^McAfee\sPayment\s[0-9]{5}:|Hello\s[a-z]{2,15}\,\sAcknowledgment\sfor\syour\sorder\sno\s[0-9A-F]{16}|^Payment\sProcessed:\sOrder\s[A-Z]{2}[0-9]{4}\-[A-Z]{2}\-[0-9]{4}\sNow\sConfirmed|InvoiceNo\.\#[A-Z]+\#[0-9]+\-[A-Z0-9]{8}\.+\sThank\sYou\.+|\#[0-9]{4}\-[0-9]{3}\-[0-9]{4}\shas\sbeen\sprocessed\sand\sis\snow\son\sits\sway\.|^[a-z]{2,15}\,\sTransaction\sfor\sorder\sno\s[0-9]{5}\-[0-9]{4}[A-Z]{3}|^Hello\s[a-z]{2,15}\,\sDelivery\sfor\sorder\sno\s[A-Z]{3}[0-9]{3}[A-Z0-9]{2}|Your\sBill\stransaction\swas\ssuccessful\./ describe JR_BZ_SUBJ9 Subject contains Baza Call signatures score JR_BZ_SUBJ9 5 header JR_BZ_SUBJ10 Subject =~ /Confirmation\sof\sYour\sPayment\sfor\sCyber\sSafety\sThreats\sSolution|^Payment\sfor\sReceipt\shas\sbeen\sapproved|Your\sInvoice\s[A-Z]{4}\-[0-9]{4}\-[A-Z]{3}\stransaction\shas\sbeen\ssuccessfully\scompleted\.|^Tracking\sfor\sInvoices\s[0-9a-f]{8}\-[0-9a-f]{4}\.|^Confirmation:\sPayment\sProcessed\sfor\sInvoice\s\#[0-9]{5}\-[0-9]{4}|Payment\scompleted\sfor\sFile\sstatement\sId|Your\srecent\sFile\sstatement\s[0-9a-f]{4}\-[0-9a-f]{4}\-[0-9a-f]{4}:\snew\supdates\!|Shipment\s\#[0-9]{6,8}\stransferred\sto\snext\shub|Hello\,\sHello\,\s[a-f0-9]{10,20}\sis\syour\sorder|^I\shave\sdelivered\sYour\sOrder\son\s(Monday|Tuesday|Wednesday|Thursday|Friday|Saturday|Sunday)|Your\sTransaction\snumber\s[0-9]{7}\-[0-9]{4}\spayment\shas\sbeen\ssuccessfully\scompleted|Payment\sfor\syour\s[0-9]{4}\-[a-z]{4}\-[a-z]{3}\shas\sbeen\ssuccessfully\sprocessed\.|Security\sNotice:\sPlease\sConfirm\sThis\sCharge\sto\sAvoid\sRestrictions|Shipping\sconfirmed\sfor\sOrder\s[A-Z]{3}\-[0-9]{3}\-[A-Z]{2}\-[0-9]{4}\.|Hello\s[A-z]{2,15}\,\sAcknowledgment\sfor\syour\sorder\sno\s[A-F0-9]{8}|Your\sTransaction\sSummary\s\(\#INV[0-9]{9}\)\sis\sReady|Hey\,\sOrder\s[0-9]{7}[A-Z]{3}\splaced\sand\sconfirmed\!|Hi\,\sYour\sOrder\sNo\.\s[0-9]{6}\spayment\sis\scompleted|Your\sproduct\sID\s[A-Z]{3}[A-Z0-9]{4}\sis\snow\sin\sprocessing/ describe JR_BZ_SUBJ10 Subject contains Baza Call signatures score JR_BZ_SUBJ10 5 header JR_BZ_SUBJ11 Subject =~ /Approval\sof\sthe\sOrder\s[A-Z0-9]{8}\-[0-9]{4}\-[A-Z0-9]{4}\-[A-Z0-9]{4}\-[0-9]{12}|Your\sBill\s[0-9]{4}\-[a-z]{4}\-[a-z]{3}\sstatus\supdate\.|^[A-z]{2,15}\,\sYour\sInvoice\s\#[0-9]{6}\sNeeds\sAction|Bill\sId\sORD[0-9]{6}\sstatus\supdated\.|We\sare\sgrateful\sfor\sthe\s\$[2-5][0-9]{2}\.[0-9]{2}\.\sorder\sfee\.|Payment\sreceived\sfor\syour\s[A-Z]{3}[0-9]{4}[A-Z]{2}[0-9]{5}[A-Z]{2}\.|Your\sOrder\sHas\sBeen\sDone|Fwd\x3A\sPraful\sPatel\xE2\x80\x99s\sProposal|Hey\,\sReview\syour\srecent\sorder\swith\sus\s[A-Z]{2}[0-9]{4}\-[A-Z]{2}\-[A-Z0-9]{15,20}|^Amazon\'$|Your\sOrder\sHas\sBeen\sApproved\,\sCongrats\!\s\[\*\#[0-9]{9}\]|Payment\sverified\sfor\sBill\sNumber\s[0-9]{3}\-[a-z]{4}\-[a-z]{3}\.|^Pending\sTransaction\sRequest:\s[0-9]{4}\-[A-Z]{2}\-[0-9]{4}|^Order\sreceived\sand\sconfirmed:\sOrder\sORD[0-9]{6}\.|Payment\slogged\sfor\sBill\sno\s[0-9][A-F0-9]{3}\-[A-F0-9]{4}\-[A-F0-9]{3}[0-9]\.|Order\s[0-9]{4}\-[a-z]{4}\-[a-z]{3}\shas\scleared\spayment\sand\sshipping\.|An\sorder\sfor\s\$[3-5][0-9]{2}\.[0-9]{2}\sis\scurrently\sbeing\sactivated\.|Invitation:\sAmazon\sPrime\sRenewal\sNotice\s\-\sCall|I\'m\sgrateful\sthat\syou\spurchased\.\sA\scharge\sof\s\$[3-6][0-9]{2}\.[0-9]{2}\sUSD\swill\sbe\smade\sto\syour\saccount|Invitation:\sAmazon\sPrime\sRenewal\sNotice\s-\sCall|Process\sPay_ment/ describe JR_BZ_SUBJ11 Subject contains Baza Call signatures score JR_BZ_SUBJ11 5 header JR_BZ_SUBJ12 Subject =~ /Datos\sregistrados\s\xE2\x80\x93\s[0-9]{1,2}\.[0-9]{1,2}\.[0-9]{2}\s[0-9]{2}\:[0-9]{2}\s[AP]M\s\xE2\x80\x93\sN\xC2\xBA\:\s[A-Z]{6}\-[0-9]{8}|Your\sInvoice\s[0-9]{4}\-[n-z]{7}\spayment\swas\scompleted\.|^Transaction\sid\sprocessed\ssuccessfully\.$|^The\stotal\samount\syou\sowe\sis\s\$[3-5][0-9]{2}\.[0-9]{2}\.$|^\$[3-5][0-9]{2}\.[0-9]{2}\sis\sthe\sentire\samount\sof\syour\soutstanding\scharge$|Unveiling\sNew\sPayment\sConfirmation\sTreasures|We\sare\sverifying\sthat\swe\sgot\san\sorder\sfor\s\$[2-5][0-9]{2}\.[0-9]{2}\.|^Invitation:\sPayPal\sBilling\sNotice|Currently\,\sthe\s\$[2-5][0-9]{2}\.[0-9]{2}\spurchase\sorder\sis\sbeing\sprocessed\.|Your\sBill\s[A-Z]{4}\-[0-9]{4}\-[A-Z]{3}\sis\son\strack\.|^I\sappreciate\syour\spurchase\.\sA\s\$[3-5][0-9]{2}\.[0-9]{2}\scharge\swill\sbe\smade\sto\syour\saccount\.|The\sactivation\sof\sa\s\$[3-5][0-9]{2}\.[0-9]{2}\sorder\sis\sunderway\.|^There\swill\sbe\sa\s\$[7-9][0-9]{2}\.[0-9]{2}\scharge\sto\syour\saccount\.|Invitation:\sThank\syou\s\-\sOrder\sprocessed|Invitation:\sTransaction\supdate\sapplied|Invitation:\sConfirmation:\sTransaction\sreport|^Order\sConfirmation\s[A-Z]{5}[A-Z0-9]{7}\/[A-Z0-9]{6}\.[A-Z0-9]{12}|Invoice\sconfirmed\s[0-9]{3,4}[AP]M_202[0-9]_[A-Z]{4}\s\(742\)|Invitation:\sOrder\scompleted\sand\sready\sfor\sdispatch/ describe JR_BZ_SUBJ12 Subject contains Baza Call signatures score JR_BZ_SUBJ12 5 header JR_BZ_SUBJ13 Subject =~ /Thanks\sFor\sYour\sOrder\s[A-Z0-9]{6}\~[A-Z0-9]{5}\/[A-Z0-9]{14}\!\sWe\xE2\x80\x99re\sexcited\sto\sserve\syou\.|Invoice\sconfirmed\sat\s\#KEY\#\sfrom\s\(batch[0-9]\-[0-9]{3}\)|Your\sOrder\sHas\sBeen\sApproved],\sCongrats\!\s\[*\#\*[0-9]{14}\]|Norton\sPayment\son\s\([0-9]{2}\-[A-z]{3}\-[0-9]{2}\)\s\|\sToken\s\([0-9]{9}\)|PayPal\sPayment\sComplete!\sProtection\sGuaranteed\.\sCode:|PayPalPayment\sProcessed|^Invitation:\sPayPal\s(BTC|Transaction\sConfirmed)|PayPal\sBTC\sConfirmed\!|Invitation:\sWe\xE2\x80\x99ve\sfinished\syour\sorder\ssuccessfully|invited\syou\sto\sThank\syou\s\xE2\x80\x93\syour\sorder\sprocess\sis\scomplete|invited\syou\sto\sYour\sReceipt\s.*\srequest\sis\scomplete|Receipt\sfor\sYour\sPayment\s\xE2\x80\x93\s\[Bitdefender\]|Invitation:\sDispatch\sarranged\sfor\sBill|Invitation:\sYour\sorder\sReceipt\s[A-Z0-9]{15}\sis\sconfirmed|Invitation:\sPayPal\sPayment\sReceived|Invitation:\sYour\sHello\sPayment\sis\sconfirmed|Invitation:\sPayPal\sto\sBitcoin:|Invitation:\sConfirmation\sSuccess\s\-\sHello|Here\sis\sYour\sQuotation\sId\s[A-Z][A-Z0-9]{8}[A-Z]|Order\sConfirmation:\s\$[3-5][0-9]{2}\.[0-9]{2}\sVerification\sin\sProgress|Processing\sof\sthe\s\$[3-5][0-9]{2}\.[0-9]{2}\spurchase\sorder\sis\spresently\sunderwayTransaction\scomplete\s\xE2\x80\x94\sBitcoin/ describe JR_BZ_SUBJ13 Subject contains Baza Call signatures score JR_BZ_SUBJ13 5 header JR_BZ_SUBJ14 Subject =~ /Secure\sYour\sDevices:\sPayPalRenewal|PayPalRenewal\sConfirmed|Activate\sPayPal\sBTC\sand\sKeep\sYour\sData\sSafe|Invitation:\sActivate\sPayPal\sBTC|invited\syou\sto\sBTC\ssuccessfully|BTC\ssuccessfully\sreleased\sfrom\sPayPal|Hey\,\syour\sSubscription\sis\snow\sfinalized|McAfee\sSolving\sSecurity\sEnabled|McAfee\sPackaging\sSecurity\sEnabled|Updated\sSuccessfully\s\xE2\x80\x94\sGeek\sSquad|Hello\,\sverification\scompleted\sfor\sTransaction|Geek\sSquad\sAccount\sProtection\sApproved|Thank\sYou\sFor\sYour\sOrder[A-Z0-9]{14}_|Your\sRenewal\sCompleted\s\xE2\x80\x94\sGeek\sSquad\sVerified|Renewal\sConfirmation\sReceived\s\xE2\x80\x94\sGeek\sSquad|N\sWilkesboro\,\sNC\,\s28659|Your\sorder\sActivation\s[A-Z0-9]{9}\shas\sbeen\squeued|All\supdates\scomplete\s\xE2\x80\x93\sPayment\s[A-Z0-9]{9}|Geek\sSquad\-Order\sID\s\#[A-Z][0-9]{4}|Geek\sSquad\-E\-Order\#[A-Z0-9]{5}|\xF0\x9F\x92\xB3\sPayPal\s\$[3-5][0-9]{2}\.[0-9]{2}\sUSD\s-\sAuto\sDebit\sScheduled|PayPal\-Pay\sID\-\#[A-Z][0-9]{4}|Dear\sYour\sOrder\sNo\.\s[A-Z]{3}[0-9]{3}[A-Z]{2}\spayment\sis\ssuccessful|Convite:\sInvoice\sAttached:\sPayment\sInstructions\sInside|the\sorganization\sBilling\sapplied:\s\$[5-7][0-9]{2}\.[0-9]{2}\srenewal|Your\sorder\sfor\s\$[3-5][0-9]{2}\.[0-9]{2}\shas\sbeen\sactivated\.|Pay_ment\sInstructions\sAtt\-ached/ describe JR_BZ_SUBJ14 Subject contains Baza Call signatures score JR_BZ_SUBJ14 5 header JR_BZ_SUBJ15 Subject =~ /^Order\sID\s\#GS\-[0-9]{6}\-[0-9]{4}|^Activation\sProcess\sFinished\sfor\sToken\s[A-Z][0-9][A-Z][0-9][A-Z]{2}|Invitation:\sYour\sreceipts\shave\sbeen\supdated|Your\sIn\-voice\#\#\sIs\s(Ready|Now)|Now\sAvailable\sfor\sPay_ment|An\sorder\sfor\s\$[3-5][0-9]{2}\.[0-9]{2}\shas\sbeen\sactivated\.|Invitation:\swe\xE2\x80\x99d\slove\sto\shave\syou\sback\!|Invitation:\sWe\'ve\sgot\syour\srequest\s[A-Z0-9]{8}|Invoice\s[0-9]{2}_[A-Z]{4}[0-9]{6}\sfor\sorder\sORD\-[A-Z0-9]{17}|In\-voice\#\#\sEnclosed:|Pay_ment\sRequired\sBefore\sDue\sDate|Your\sE\-Purchasing\sApprove\s[A-Z][A-Z0-9]{7}|invited\syou\sto\s[A-Z0-9]{8}\sis\sthe\sorder\syou\srecently\splaced\.|Invitation:\sYour\sOrder\sNo\.\s[A-Z0-9]{8}\shas\sbeen\sdelivered|Verification\sin\sProgress\sfor\sYour\s\$[2-5]3[0-9]{2}\.[0-9]{2}\sOrder\.|Currently\,?\swe\shave\san\sorder\sfor\s\$[2-5][0-9]{2}\.[0-9]{2}\sactivated|Your\srequest\sNo\.\s[A-Z0-9]{8}\sis\sbeing\sprocessed\sfor;|From\sBilling\shas\sinvited\syou\sto\scollaborate\son\sBox|Your\sorder\sof\s\$5[0-9]{2}\.[0-9]{2}\shas\sbeen\sconfirmed\.|Quick\sVerification\sfor\sYour\s\$5[0-9]{2}\.[0-9]{2}\sOrder\.|Your\sMicrosoft\s365\sPlan\sIs\sActive\sThrough\s2\sYears|Invitation:\sOrder\s[A-Z0-9]{8}\sacknowledgement\sfrom|Your\sIn\-voice\#\#\sHas\sBeen\sGenerated|Invitation:\s\[Order\sAlert\]\sPayment/ describe JR_BZ_SUBJ15 Subject contains Baza Call signatures score JR_BZ_SUBJ15 5 header JR_BZ_SUBJ16 Subject =~ /You\sreceived\sa\spurchase\snotification\sfrom\sBlue\sCross\sBlue\sShield\s+of\sMichigan|^Your\sreceipts\shave\sbeen\supdated\s[A-Z]{3}[0-9]{2}[A-Z]{3}$|We\sare\sverifying\sthat\sa\s\$[3-5][0-9]{2}\.[0-9]{2}\sorder\swas\sdelivered\.|Delivery\sfor\sorder\sno\s[A-D]{3}[I-T]{2}[B-H]{2}[0-9]\son\s(Monday|Tuesday|Wednesday|Thursday|Friday|Saturday|Sunday)|Currently\,\san\sorder\sfor\s\$[3-5][0-9]{2}\.[0-9]{2}\sis\sbeing\sactivated\.|^Payment\sstatus\supdated\sfor\sorder\sID\sBill|Your\sorder\sof\s\$[3-5][0-9]{2}\.[0-9]{2}\shas\sbeen\sconfirmed\.|^Transaction\srecord\sfor\sarrangement\sno\.\s[A-Z]{7}[0-9]|Almost\sThere\!\sVerify\sYour\s\$[3-5][0-9]{2}\.[0-9]{2}\sOrder\.|^Order\sreceived\srecord\s[A-Z]{8}$|^Order\s[A-Z]{8}\splacement\srecord$|^Bill\s[A-Z]{4}[0-9]{5}\snow\sapproved\sfor\sfulfillment$|^Confirmation\sNotice\sfor\sPackage\s[A-Z]{4}[0-9]{5}$|^Your\sHi\sBill\shas\sbeen\sdispatched|In\-voice\#\#\sReady|Online\sPay_ment\sAvailable|Urgent:\siPhone\sBilling\sNotice|PayPal\sCourtesy\sMessage\sAbout\siPhone\s17\sPro\sMax\sOrder|We\sare\sawaiting\sconfirmation\sof\syour\s\$[3-5][0-9]{2}\.[0-9]{2}\sorder\.|We\'re\sgoing\sto\sactivate\sa\s\$[3-5][0-9]{2}\.[0-9]{2}\sorder\snow\.|Receipt\sof\sPayment\s\-\sPayPal\sTransaction\sSuccessful|In\-voice\#\#\s(Attached|for\sService)/ describe JR_BZ_SUBJ16 Subject contains Baza Call signatures score JR_BZ_SUBJ16 5 header JR_BZ_SUBJ17 Subject =~ /Confirming\sYour\sRecent\s\$[2-5][0-9]{2}\.[0-9]{2}\sPurchase\.|Order\sfrom\sGeek\sSquad\s\(Order\s\#:\sID\-\s[A-Z0-9]{3}\-[A-Z0-9]{3}\-[A-Z0-9]{3}\)|Payment\s[A-Z]{4}[0-9]{5}\spayment\smatched\ssuccessfully|All\sClear\s\-\sHi\sBill\sis\sfinalized|^Transaction\srecord\scompleted\sfor\sSubscription$|advised\sthat\san\sorder\sin\sthe\samount\sof\s\$[3-5][0-9]{2}\.[0-9]{2}\sis\spresently\sbeing\sactivated\.|Let\'s\sVerify\sYour\s\$[3-5][0-9]{2}\.[0-9]{2}\sOrder\sAgain\!|Tracking\sSummary\sConfirmation\s\+1\s\([0-9]{3}\)\s[0-9]{3}\-[0-9]{4}|We\sconfirm\sthat\sthe\s\$[2-5][0-9]{2}\.[0-9]{2}\sorder\shas\sbeen\sactivated\.|Bonjour:\sOrder\sToken\spayment\sreceived|Payment\sConfirmation:\sOrder\sActivation\s[A-Z]{4}[0-9]{5}\sprocessed\ssuccessfully|Your\sHi\sStatement\sis\sconfirmed\sand\sin\sprogress|Package\s[A-Z]{4}[0-9]{5}\s\-\sDelivery\sin\sMotion$|We\sare\snow\sprocessing\san\sorder\sfor\s\$[3-5][0-9]{2}\.[0-9]{2}|Your\sHi\sSubscription\sDetails\s[A-Z]{4}[0-9]{5}\shas\sbeen\sapproved|Bonjour:\sPayment\sfor\sBill\shas\sbeen\ssuccessfully\sprocessed|Order\stia167hp\sdispatch\spreparation\supdate|We\shave\sreceived\sa\s\$[3-5][0-9]{2}\.[0-9]{2}\sorder\sand\sare\sactivating\sit\.|^I\scurrently\shave\san\sorder\sfor\s\$[3-5][0-9]{2}\.[0-9]{2}$|^The\s\$4[0-9]{2}\.[0-9]{2}\sUSD\spayment\sreceipt$/ describe JR_BZ_SUBJ17 Subject contains Baza Call signatures score JR_BZ_SUBJ17 5 header JR_BZ_SUBJ18 Subject =~ /Hello:\sPayment\sconfirmation\sfor\sTransaction\sreceived|In\-voice\#\#\sEnclosed|Billing\sNotice:\sIn\-voice\#\#|and\sinvoice\s[0-9]{3}[AP]M_20[0-9]{2}_[A-Z]{4}\sare\sattached|Canceled\sevent:\sRenewal\scomplete\s\@|GSINV[0-9]{4}\-[0-9]{3}[a-z]\-[a-z0-9]{4}\sis\sprogressing\sahead|event:\sYour\srenewal\shas\sbeen\sfinalized|Invitation:\sDear\sSir\/Madam\s\-\sThank\sYou\sfor\sChoosing|^Our\sorder\sfor\s\$[3-5][0-9]{2}\.[0-9]{2}\sis\snow\sbeing\sprocessed\.|Subscription\sPayment\sSuccessfully\sProcessed\s\@|Can\syou\sconfirm\sthis\?\s\@|Order\snow\sreflects\supdated\sdetails\s\@|Subscription\sRenewal\s\-\sConfirmation\sand\sUpdate\s\@|Renewal\sDetails\sfor\sYour\sAccount\s\@|Order\sConfirmation\s[0-9]{6}\sto\s[A-z]{2,15}\s[A-z]{2,15}\son\s2026\-[0-9]{2}\-[0-9]{2}|event:\sYour\sMembership\s(Is\sRenewed\sfor\sAnother\sTerm|Details\sAre\sReady)|Reminder:\sYour\sSubscription\sTerm\sis\sEnding\sSoon|Your\sBitcoin\sTransfer\sHas\sBeen\sApproved\sby\sNetwork|event:\sBitcoin\sOrder\sConfirmed\s\-\sFunds\sTransferred|Invitation:\sNotice:\sYour\sSubscription\sWill\sContinue\sAutomatically|^Reminder:\sService\sContinuation\sNotice|Upcoming\sBilling\sCycle\sRenewal\sNotice|be\sadvised\sthat\san\sInvoice\shas\sbeen\sassigned\sto\syour\sBitdefender\ssubscription|che\xD1\x81kout\srec\xD0\xBErd/ describe JR_BZ_SUBJ18 Subject contains Baza Call signatures score JR_BZ_SUBJ18 5 header JR_BZ_SUBJ19 Subject =~ /event:\sYour\sBitcoin\sTransfer\sIs\sComplete\s-\sView\son\sBlock\sExplorer|^Invoice\s\-\sINV\-000001\sfrom\sconfirm\sorder$|In_voice\supdate\sbilling\sreference\snotice|Right\snow\,\sa\s\$[3-5][0-9]{2}\.[0-9]{2}\sorder\sis\sbeing\sfulfilled\.|^Notification:\sYour\sOrder\s\#[0-9]{8}\sis\son\sits\sWay|Renewal\sTransaction\sSuccessfully\sCompleted\sNotice|CaII\s805\s707\s1651|^Exclusive\sNotice:\sInvoice\s\#[0-9]{5}\-[0-9]{4}$|^(Your|Final)\sIn\-voice\#\#|^In[_\-]voice\#?\#?\s(update|reference|Available)|^Your\srequest\s\#[0-9]{8}\sis\sbeing\sprocessed\sfor\syou$|^Canceled\sevent:\sAll\sset\sfor\snow|Canceled\sevent:\sSmall\sidea\s\@|Geek\sSquad\sSecurity\sDeluxe\sService\sConfirmation|Canceled\sevent:\sAccount\sRenewal\sNotice|Your\sinvoice\s2026[0-9A-Z]{9}\shas\senclosed\sand\ssubmitted|Canceled\sevent:\sPlan\supdate\sfor\syou|event:\sRenewal\scomplete\sfor\syour\saccount|^Payment\sfor\sarrangement\s\#[0-9]{8}\sapproved$|enteredYour\sreceipt\sand\sinvoice|Your\sreceipt\sandForward:Your\sorder|event:\sYour\sSubscription\sRenewal\sIs\sConfirmed|event:\sYour\ssubscription\sstatus|Canceled\sevent:\sRenewal\sNotification\s\-\sThank\sYou|The\sinvoice\s24_[A-Z]{4}[0-9]{6}\sis\senclosed\sfor\syour\srecords\.|^Invoice\supdate\stransaction\srecord$|^Subscription\sActivity\sHas\sBeen\sUpdated/ describe JR_BZ_SUBJ19 Subject contains Baza Call signatures score JR_BZ_SUBJ19 5 header JR_BZ_SUBJ20 Subject =~ /Billing\sConfirmation\s\-\sPayPal\sto\splace\syour\sorder|Canceled\sevent:\sYour\saccount\sis\sactive|Thank\sYou\sfor\sYour\sOrder\s[F-Z]{4}[0-9]\.[0-9][A-Z0-9]{9}\~[A-Z0-9]{8}_[A-Z0-9]{11}|event:\sConfirmation\sof\sYour\sSubscription\sRenewal|The\sinvoice\s[0-9]{3,4}[AP]M_2026_[A-Z]{4}\sis\senclosed\sfor\syour\srecords\.|^Security\sNotice\sRegarding\sYour\sAccount\s\xE2\x80\x94\s(Monday|Tuesday|Wednesday|Thursday|Friday|Saturday|Sunday)|event:\sBilling\sand\sSubscription\sUpdate|^Purchase\sORD\-[A-Z]{4}[A-Z0-9]{12}\shas\sbeen\ssuccessfully\sconfirmed\.|^The\sinvoice\s2026[0-9]{3}[A-Z]{6}\sis\senclosed\sfor\syour\srecords\.|^Kindly\sReview\sAttached\sInvoice\s2026[0-9]{3}[A-Z]{6}|event:\sA\squick\snote\sabout\syour\splan\s\@|event:\sSubscription\srenewal\s(confirmed|confirmation)\s\@|^Invoice\s[0-9]{3}[A-Z]{2}_2026_[A-Z]{4}\sacknowledgment\sreceipt\sattached|^Invoice\s[0-9]{8}\sis\sprocessed\sfor\syou$|event:\sWanted\sto\sask\syou\sthis|Subscription\sActivated\s\|\s\$[3-5][0-9]{2}\.[0-9]{2}\s\|\sRef:\sTXN\-[A-Z0-9]{4}\-[A-Z0-9]{4}\-[A-Z0-9]{4}|event:\sBilling\supdate:\srenewal\scompleted|Canceled\sevent:\sJust\sa\squick\snote\s\@|event:\sOne\slast\sfollow\-up\s\@|This\sis\sabout\syour\sNorton\sLifeLock\sPremium\sProtection\saccount|Your\sMembership\sRenewal\sDate\sIs\sApproaching\s\@/ describe JR_BZ_SUBJ20 Subject contains Baza Call signatures score JR_BZ_SUBJ20 5 header JR_BZ_SUBJ21 Subject =~ /Invoice\spayment\sconfirmed\s[A-Z0-9]{2}\/[A-Z0-9]{20,22}\.[A-Z0-9]{6}\-[A-Z]|Renewal\sCompleted\s\|\s\$[0-9]{3}\.[0-9]{2}\s\|\sRef:\sTXN\-PGM[0-9]\-[A-Z0-9]{4}\-[A-Z0-9]{4}|^INVOICE\-3L0_[A-Z0-9]{10}\~[A-Z0-9]{7}\.[A-Z0-9]{10}|Invitation:\sService\sUpdate\sfor\sYour\sAccount|Invitation:\sMembership\sConfirmation\sUpdate|Hello\sShipping\sLog\s[A-Z]{4}[0-9]{5}\sapproval\sgranted|INVOICE\-[0-9]{2}[A-Z0-9]{9}\/[A-Z0-9]{6}\-[A-Z0-9]{5}\~[A-Z0-9]{5}|Payment\sconfirmation\sreceived\sfor\sDear\sSir\/Madam\sPurchase|Invitation:\sCoverage\sDetails\sAre\sAvailable\sFor\sReference|Subscription\sActivated\s\|\s\$[0-9]{3}\.[0-9]{2}\s\|\sRef:\sTXN\-[A-Z0-9]{4}\-[A-Z]{4}\-[A-Z0-9]{4}|Your\saccount\sis\srefreshed\sand\sactive|^Subscription\sCharge\sSuccessfully\sConfirmed$|Dear\sCustomer\,\sYour\sPayPal\spayment\shas\sbeen\ssuccessfully\sprocessed|^We\'ve\sconfirmed\sthat\syou\spaid\syour\sbill$|^A\sSpecial\sReward\sfor\sYou\s(Monday|Tuesday|Wednesday|Thursday|Friday|Saturday|Sunday)\,|^Account\srenewal\scycle\scompleted|^Service\sAccess\sInformation\sSummary|invited\syou\sto\ssubscriptions\sBill\spaid\ssuccessfully|^Everything\xE2\x80\x99s\sSet\swith\sYour\sPayment$|^Thank\sYou\sfor\sYour\sOrder\s[A-Z]{3}\/[A-Z0-9]{10}\-[A-Z0-9]{12}|In_voice\supdate\s(alert|billing\supdate)/ describe JR_BZ_SUBJ21 Subject contains Baza Call signatures score JR_BZ_SUBJ21 5 header JR_BZ_SUBJ22 Subject =~ /Billing\supdate\sfor\syour\ssubscription\sis\scomplete|(Undangan|Invitation):\s.*\sAuto\-payment\swill\sbe\sprocessed\swithin\s24\shours|Thank\sYou\sFor\sYour\sOrder[A-Z0-9]{5}\-[A-Z0-9]{7}_[A-Z0-9]{14}\~[A-Z0-9]{12}|Payment\sRequest\sIssued\sby\sCoinBase\sGlobal\sPayment\s\xE2\x80\x93\sUSD\s[3-5][0-9]{2}\.[0-9]{2}|Confirmation:\sYour\sTransaction\s\#[0-9]{8}\sis\sPrepped\sfor\sShipping|Dear\sSir\s.+\,Your\sBank\s\$[3-5][0-9]{2}\.[0-9]{2}\sPayment\sHas\sBeen\sAccepted|Auto\sReceipt\sGenerated\s\|\s\$[5-7][0-9]{2}\.[0-9]{2}\s\|\sRef:\sTXN\-[A-Z0-9]{4}\-[A-Z0-9]{4}\-[A-Z0-9]{4}|Your\sUSD[4-6][0-9]{2}\.[0-9]{2}\sBilling\s\-\sTransaction\sFinalized|^Transaction\sApproved\s\|\s\$\$[7-9][0-9]{2}\.[0-9]{2}\s\|\sRef:|^Billing\sSuccessful\s\|\s\$[7-9][0-9]{2}\.[0-9]{2}\s\|\sRef:|Invitation:\sDear\sValued\sCustomer|Billing\sSuccessful\s\|\s\$[4-7][0-9]{2}\.[0-9]{2}\s\|\sRef:|^Grace\sClay$|Payment\sConfirmation\s\|\s$[0-9\.]{6}\s\|\sRef:|^Payment\sSuccessfully\sApplied\sin\sYour\sMembership\sRecords|^Billing\sSuccessful\s\|\s\$[2-5][0-9]{2}\.[0-9]{2}\s\|\sRef:|^Shipping\sConfirmation\sfor\sYour\sOrder\s[0-9]{8}$|invited\syou\sto\sNotice:\sYour\sSubscription\sPayment|^Transaction\sApproved\s\|\s\$[4-7][0-9]{2}\.[0-9]{2}\s\|\sRef:|Invitation:\sYour\sAnnual\sService\sPlan\sSummary/ describe JR_BZ_SUBJ22 Subject contains Baza Call signatures score JR_BZ_SUBJ22 5 header JR_BZ_SUBJ23 Subject =~ /Billing\sConfirmation\s\xE2\x80\x94\sCustomer\sSupport:|^Thanks\sfor\sYour\sPurchase\!\sOrder\sO[A-Z0-9]{10}_K[A-Z]{13}|^Carla\sCarla\sLester|^Thank\sYou\sfor\sYour\sOrder\sS[0-9A-Z]{14}|Device\slog:\syour\slogin\soutc\xD0\xBEme\sis\snow\senabled|Payment\sConfirmation\s\|\s\$[3-7][0-9]{2}\.[0-9]{2}\s\|\sRef:|^Thank\sYou\sfor\sYour\sOrder\sAUG[A-Z0-9]{2}\-[A-Z0-9]{7}_[A-Z0-9]{14}$|The\sinvoice\'s\sdetails\sare\saccessible\.|The\screation\sof\sthe\sinvoice\swas\ssuccessful\.|\xD1\x80ayment\sfiling\si\xD1\x95\snow\sbatch\-\xD1\x95ettle\xD4\x81|Service\sRenewed\s\|\s\$[3-7][0-9]{2}\.[0-9]{2}\s\|\sRef:|Payment\sReminder\x3A\sInvoice\s\#[0-9]{2}\sIs\sDue\sin\s[0-9]\sDays\s\xE2\x80\x93\sAvoid\sLate\sFees|Your\sTransaction\s[0-9]{8}\spayment\sis\sconfirmed|Your\sfresh\scheckout\shas\sbeen\smanaged\s\[202[0-9]\-[0-9]{2}\-Order\-[0-9]{3}\]|Amazon\-Order\sConfirmation\,\sPAYMENT\sSUCCESS\s\||Generate\sbilling\sdocument\s\#Bill\)|Invitation\x3A\s\xE1\xB4\x9B\xCA\x9C\xE1\xB4\x80\xC9\xB4\xE1\xB4\x8B\xEA\x9C\xB1\s\xEA\x9C\xB0\xE1\xB4\x8F\xCA\x80\s\xCA\x8F\xE1\xB4\x8F\xE1\xB4\x9C\xCA\x80\s\xE1\xB4\x98\xE1\xB4\x80\xCA\x8F\xE1\xB4\x8D\xE1\xB4\x87\xC9\xB4|Quotations\sand\sRemittance\-Advice\s\-\s[0-9]{2}\.[0-9]{2}\.202[0-9]|^Kim\sAmanda\sTaylor|Official\sInvoice\sConfirmation\sOverview\sfor\sProfile\sFile/ describe JR_BZ_SUBJ23 Subject contains Baza Call signatures score JR_BZ_SUBJ23 5 header JR_BZ_SUBJ24 Subject =~ /Your\scrypto\spurchase\sUSD\s[0-9]{3}\ssuccess\svia\sGeek\sSquad|^Success:\sOrder\splaced\,$|\xE2\x80\x93\sAshley\sMatthew\sSmith|ba\xD1\x81kground\son\syour\sfully\-processed\sorder\slog|Subscription\sActivated\s\|\s\$[3-5][0-9]{2}\.[0-9]{2}\s\|\sRef:|^Your\ssubscription\sfee\shas\sbeen\sdeducted\sand\sinvoice\semailed|^Order\sSubmitted\s\|\s\$[2-5][0-9]{2}\.[0-9]{2}\s\|\sRef:/ describe JR_BZ_SUBJ24 Subject contains Baza Call signatures score JR_BZ_SUBJ24 5 meta __JR_BZ_SUBJ_HI (JR_BZ_SUBJ0A || JR_BZ_SUBJ0 || JR_BZ_SUBJ1 || JR_BZ_SUBJ2 || JR_BZ_SUBJ3 || JR_BZ_SUBJ4 || JR_BZ_SUBJ5 || JR_BZ_SUBJ6 || JR_BZ_SUBJ7 || JR_BZ_SUBJ8 || JR_BZ_SUBJ9 || JR_BZ_SUBJ10 || JR_BZ_SUBJ11 || JR_BZ_SUBJ12 || JR_BZ_SUBJ13 || JR_BZ_SUBJ14 || JR_BZ_SUBJ15 || JR_BZ_SUBJ16 || JR_BZ_SUBJ17 || JR_BZ_SUBJ18 || JR_BZ_SUBJ19 || JR_BZ_SUBJ20 || JR_BZ_SUBJ21 || JR_BZ_SUBJ22 || JR_BZ_SUBJ23 || JR_BZ_SUBJ24) header __JR_BZ_SUBJ_LO1 Subject =~ /(Renewal\sConfirmation\!\!|ORDER\sRECEIPT|Order\sConfirmed\s\x7C\sWe\xE2\x80\x99re\sAll\sSet\sTo\sBegin\x21|Order\sConfirmation\s[A-Z]{3}YXM[0-9]{17}|[Yy]our\sorder\sis\sbeing\sprocessed|Order\s(Confirmation|information|Complete)$|Payment\sReceipt\.|Order\sIs\sbeing\sProcessed|Harve\sEmmaline|Order\sStatus\s\#AMZN[0-9]{2}\-[0-9]{8}|0rder\sdispatched|Your\sNorton\ssubscription\sis\srenewed\ssuccessfully\.|Thank\syou\sfor\syour\sorder|Plan\sRenewed\sonly\sat\s\$[0-9]{3}\!|AVC\spayment\sinvoice|View\sdetails|Order\sReceived|Invoice\s\#[A-Z]{3}\-[A-Z][0-9]{2}\-[0-9]{8}|Update\sregarding\syour\spayment\s\([A-Z]{5}\)|Service\sRenewal\sfrom\sGeek\sSquad|Order\sUpdate|You\sreceived\sa\snew\sinvoice\s\(\#[A-Z]{3}[0-9]{6}\)|You\shave\san\sinvoice\swaiting\s\(\#[A-Z]{3}[0-9]{9}\)|Receipt\s[0-9]{7}|Billing_[0-9]{7}|Online\sRegistration|Here\sIs\sYour\sMonthly\sService\sInvoice|View\syour\sorder\s\#[0-9]{7}|We\shave\sreceived\syour\supdated\sreport\sfile\.|Payment\sconfirmation\#[0-9]{5}|Service\splan|Your\sorder\shas\sshipped\!|Renewal\sRequest|Billing\sDept|Please\sfind\sthe\sattached\sfile\sfor\smore\sinfo|purchase\sclaim\scopy\sattached\shere|June\s[0-9]{1,2}th\spayment\s[0-9]{6}|Check\syour\saccount\sdetails|Invoice\sNotification\s[A-Z]{2}[0-9]{6}[A-Z]{2})\s?/ header __JR_BZ_SUBJ_LO2 Subject =~ /(Thanks\sfor\spurchasing\s[A-Z]{3}[0-9][A-Z]{2}|We\supdated\sarrangement\sno\.\s[0-9]{5}|Payment\sInvoice\sConfirmation\sReceived|Renewal\sRequest|Subscription\sConfirmation|Your\sOrder\sHas\sBeen\sPlaced|Invoice\sfrom\s[A-z]{2,20}\s[A-z]{2,20}\s\(\d{5}\)|Service\sUpdates\s\#\d{6}|Thank\syou\sfor\spurchasing\.|[0-9]{3}[A-Z]{2}[0-9]{3}[A-Z]{2}\sTicket\sis\sconfirmed|Payment\sfor\sinvoice\s[0-9]{8}|Membership\sRenewal\sAlert|New\smessage\s[A-Z][0-9][A-Z][0-9]{2}[A-Z][0-9][A-Z]{2}[0-9]|Invoice\sPayment\sConfirmed\sfor\s[0-9]{6}|\$[0-9]{3}\.[0-9]{2}\sorder\sis\sbeing\sprocessed|Payment\sCompletion:\sInvoice\s\#[0-9]{9}|\(via\sRazorpay\)|Locked\sIn\sand\sConfirmed|Order\s[0-9]{4}\-[0-9]{3}\-[0-9]{4}\sPayment\sProcessed\s\xE2\x80\x93\sThank\sYou|^Verify\sthis\sinvoice$|Recent\sOrder[0-9]{3}[A-Z]{5}\-[0-9]{3}\-[A-Z]{5}[0-9]{5}|[A-Z]{2,20}\,\sYour\sOrder\sNo\.\s[0-9]{7}[A-Z]{3}\shas\sbeen\sdelivered|Your\sInvoice\shas\sbeen\spaid\s(Monday|Tuesday|Wednesday|Thursday|Friday|Saturday|Sunday)\,|Thank\syou\sfor\syour\sOrder|Bill\spayment\scomplete\sfor\sBill\snumber\s\#|^Transaction\sis\sconfirmed|We\'ve\sreceived\syour\sPayPal\scase|You\scontributed\sto\syour\spool|Payment\sReceived:\sInvoice\sPayment\sSuccessfully\sProcessed|^Your\sOrder\sHas\sBeen\sReceived|^Billing\sStatement$)\s?/ header __JR_BZ_SUBJ_LO3 Subject =~ /(Thank\syou\sfor\syour\srecent\spurchase\sof\s[A-Z]{4}\-[0-9]{4}\-[A-Z]{3}\.|[0-9]{7}\sis\syour\srecent\sorder\sno\.|Urgent\sSecurity\sNotice:\sConfirm\sThis\sRecent\sCharge|^Your\sInvoice\s\#\s[0-9]{5}\-[0-9]{5}\s?|^Order\sConfirmed\.$|Ready\sfor\sshipment:\sOrder\s[A-Z]{4}\-[0-9]{4}\-[A-Z]{3}\.|^Order\sConfirm(ed|ation)\.?$|^Thanks\sfor\syour\sorder$|^Payment\sDone$|Order\s[0-9]{6}\splaced\s\xE2\x80\x93\sInvoice\sincluded|^Auto\sRenewal|Thank\syou\sfor\syour\spurchase\sof\s[A-Z]{3}\-[0-9]{8}\.|We\sare\sconfirming\sreceipt\sof\san\sorder\stotaling\s\$[2-5][0-9]{2}\.[0-9]{2}\.|You\shave\s\$[0-9]{3}\.[0-9]{2}\sin\soutstanding\scharges\soverall\.|invited\syou\sto\sPayPal\sBTC|Shine\swith\sDigital\sBuyion|Confirmation\sof\sRenewal\sActivity|Invitation:\syour\sorder\swill\sarrive\son|We\sare\snow\sprocessing\sa\s\$[3-5][0-9]{2}\.[0-9]{2}\sorder|^Invitation:\s\.\s\@\s(Mon|Tue|Wed|Thu|Fri|Sat|Sun)|We\sare\scurrently\splacing\sthe\s\$[3-5][0-9]{2}\.[0-9]{2}\sorder\.|^Device\sreference\srecord\s[A-Z]{8}|Confirm\sYour\s\$[3-5][0-9]{2}\.[0-9]{2}\sOrder\sToday\.|Service\sUpdate\sRelated\sto\sYour\sActivity|Order\sConfirmation\sNeeded\s\xE2\x80\x93\s\$[4-5][0-9]{2}\.[0-9]{2}|^Your\stransaction\sInvoice\shas\scleared\ssuccessfully|Payment\sConfirmation\s\&\sInvoice\sDetails|^Payment\sNotice$)\s?/ header __JR_BZ_SUBJ_LO4 Subject =~ /(^Bill\sshows\slatest\supdate\sdata$|We\xE2\x80\x99re\sProcessing\sYour\s\$[3-5][0-9]{2}\.[0-9]{2}\sOrder|Canceled\sevent:\sYour\sAccount\sHas\sBeen\sExtended\sfor\sAnother\sTerm|^Please\sVerify\sYour\sPayment\sMethod|^Invoice\supdate\ssummary|Invoice\supdate\salert|\[Transaction\sAlert\]|^Invoice\ssummary|Invoice\supdate\sstatement\savailable|^Payment\sDue$|^Your\sBilling\sStatement\sis\sReady$|^Billing\s[Uu]pdate$|We\xE2\x80\x99ve\supdated\syour\ssubscription\sstatus|^Payment\s\&\sBilling\sUpdate$|Thank\syou\sfor\syour\ssupport\!|We\xE2\x80\x99ve\sUpdated\sYour\sBilling\sPreferences|Transaction\sReceipt\sfor\s\$4[0-9]{2}\.[0-9]{2}\sUSD|Account\sSubscription\sRenewal\sProcessed|Your\sTransaction\s\#[0-9]{8}\sis\snow\sbeing\sprepared\sfor\sshipment|^Friendly\sreminder$|Invoice\supdate\sbilling\snotification|Service\sRenewal\sHas\sBegun|Thank\sYou\sfor\sYour\spurchase\s\#[0-9]{8}|^Thank\syou\sfor\syour\srecent\spurchase$|^Billing\snotice\supdate$|^Recent\sBilling\sUpdate|^Renewal\sprocessed\stoday|^Service\sAlert$|^Billing\sConfirmation|^Your\sRenewal\sIs\sDone|^Your\saccount\sis\snow\sactive|^Payment\sUpdate$|Your\sRecent\sPurchase\s\#[0-9]{9}\sIs\sAvailable|Your\sInvoice\spayment\sis\sprocessed|Invoice\supdate\snotification\smessage|Account\sActivity\sUpdated\sSuccessfully)\s?/ header __JR_BZ_SUBJ_LO5 Subject =~ /(Purchase\s\#[0-9]{9}\sInformation\sAvailable|Transaction\sfor\sArrangement\s[0-9]{8}|Receipt\sDetails\sSuccessfully\sLogged|Thank\syou\sfor\sYour\sOrder\s[A-Z0-9]{9}_[A-Z0-9]{5}\.[A-Z0-9]{12}|^Service\sPayment\sReceipt|^Updated\sinvoice\sdetails|^Your\sinvoice\shas\sbeen\supdated|Service\sInformation\sUpdate|^Payment\sauthorized\ssuccessfully$|Updated\sdetails\son\sthe\sbill|Invoice\s[0-9]{8}\sis\sconfirmed|^Account\sUpdated$|^Subscription\sSuccessfully\sContinued$|^Payment\sEntry\sNotification|^Renewal\sPayment\sStatus$|^Invoice\supdate\saccount\snotice|^Notification\sof\sinvoice|^Transaction\s(Update|Alert|Notice)$|^A\sBrief\sNote\sAbout\sYour\sOrder|Diane\sJennifer\sHarrison|^Subscription\sBilling\sUpdate|^Thank\sYou\sfor\sYour\sOrder\s[A-Z0-9]{17}|^Payment\sSuccessful$|Your\sPayment\sfor\sInvoice\s\#[0-9]{5}\-[0-9]{4}\sis\sPast\sDue|^Payment\supdate\supdated|^Payment\sInformation$|^Bitcoin\sTransaction\sConfirmation$|^Payment\sDetails\sConfirmation|^Invoice\sConfirmed$)\s?/ meta JR_BZ_SUBJ_LO (__JR_BZ_SUBJ_LO1 || __JR_BZ_SUBJ_LO2 || __JR_BZ_SUBJ_LO3 || __JR_BZ_SUBJ_LO4 || __JR_BZ_SUBJ_LO5) describe JR_BZ_SUBJ_LO Baza Call V1: Low-priority Subject contents score JR_BZ_SUBJ_LO 0.1 meta __JR_BZ_SUBJ (__JR_BZ_SUBJ_HI || JR_BZ_SUBJ_LO) ####################### ## BAZA CALL PHRASES ## ####################### body T_JR_BZ_BODY1 /(^|\b)(?:doubts\sabout\sthis\ssubscription\sor\sneed\sassistance\,\skindly\sget\sin\stouch\swith\sour\steam\sat|We\shave\sprocessed\sthe\scharge\sof\s[0-9.]{5,6}\sUSD\sas\sper\syour\sauto\-debit\sstanding\sinstructions|If\sYou\shave\sany\squestions\sor\swish\sto\scancel\sthe\srenewal\,Please\sconnect\sto\sus|regarding\sthis\semail\sor\syour\sservice\,\sRing\sus\son\sour\sAccount\sHelp\-Line|In\scase\syou\sneed\sany\sassistance\splease\sdo\snot\shesitate\sto\scall\sour\scustomer\sservice\sno\.|Charges\swill\sappear\son\syour\saccount\swithin\s24hrs\.\sIn\scase\sif\syou\sdon't\swant\sthe\sservices\,\syou\scan\scall\sus|review\sor\scancel\sand\sfull\srefund\sthis\sorder\,\skindly\sgive\sus\sa\scall\son\sour\sHelpline\sNumber|To\supgrade\/Cancel\syour\ssubscription\,\sPlease\scontact\sour\scustomer\sservice\sdesk\sgiven\sbelow\.|If\syou\swish\sto\scancel\syour\ssubscription\sand\sclaim\sfor\syour\srefund|your\sbill\swas\spaid\sdue\sto\syou\sselecting\sAuto\-Upgrade\sfeatures\swhile\sregistering|(to\scancel\syour\sorder|For\sAny\sAssistance)\,\scall\sus\scustomer\sservice|This\sEmail\sConfirms\sThat\sYour\sauto\sRenewed|Over\sthe\spast\s[2-5]\-Year\,\swe\xE2\x80\x99ve\sbeen\shonored\sto\shave\syou\sas\sa\smember|(Thank\sYou\sEver\sSo\sMuch|Best\sAlways)\,\,\sWebroot\spowered\sby\sintel)(\W|$)/m tflags T_JR_BZ_BODY1 nosubject describe T_JR_BZ_BODY1 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY2 /(^|\b)(?:To\smanually\srenew\sand\scancel\syour\sonline\sprotection\,\splease\scall\sus\son\sour\shelpline\snumber\.|call\sus\son\s.{7,20}\smake\ssure\syour\scomputer\sis\son\swhen\syou\scall|If\syou\swant\sto\sreview\sor\scancel\sthis\sorder\.\sKindly\sgive\sus\scall\son\sour\shelp\sDesk|if\syou\shave\sany\squestion\son\sthis\sorder\sPlease\scall\sus\sour\sHelp\sline\snumber|In\scase\sof\sany\sdispute\sor\squery\sor\sto\scancel\sthe\ssubscription\splease\sreach\sout\sto\sour\ssupport\steam\s\@\stoll\sfree|the\sAuto\sRenewable\splan\sof\syour\sMcAfee\sfamily|cancel\sthe\sServices\sand\swant\sa\smoney\sBack|1\smore\syear\sto\sprovide\syou\sthe\sservices|For\scancellation\sthe\sservices|cancel\sthe\sServices\sand\swant\sa\smoney\sBack|Please\scontact\sus\snow\sto\scancel\syour\srenewal\ssubscription\sbill\s\&\sget\san\sinstant\srefund\stoday|years\ssubscription\sbill\sof\sthe\s\xE2\x80\x8ENorton\s360\sDeluxe|You\sare\senrolled\sin\sauto\-renew\,\sfew\sdays\sbefore\syour\ssubscription\sis\sscheduled\sto\sexpire|Your\sPersonal\sSubscription\sGeek\sSquad\sPC\sCare\sWill\sExpire\sToday\son|Ineternet\stotal\ssecurity|acc\xC3\xB4unt|amount\sof\s\$USD[3=5][0-9]{2}\.[0-9]{2}\swill\sbe\sautomatically\sdeducted\sfrom\syour\saccount\sin\saccordance\swith\syour\srenewal)(\W|$)/m tflags T_JR_BZ_BODY2 nosubject describe T_JR_BZ_BODY2 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY3 /(^|\b)(?:Geek\-Squard\sTech\sSupport|Your\sANNUAL\sSUBSCRIPTION\sfor\sNORTON\s360\sANTIVIRUS|the\sAuto\sRenewable\splan\sof\syour\sMcAfee\sfamily|your\smembership\sup\-gradation|auton1atic\srenewal\soption|If\syou\swish\sto\sCancel\sthis\sSubscription\sthen\splease\sfeel\sfree\sto\scontact\sour\sbilling\sdepartment\sas\ssoon\sas\sPossible|you\shave\snot\sauthorized\sthis\scharge\,\skindly\sconnect\swith\sour\ssupport\sexecutive\sand\svoid\sthe\scharges|Your\sNortonLifLock\ssubscription\swill\srenew\sautomatically|Thank\sYou\son\sthe\scompletion\sof\syour\s1\syear\splan|your\sregistered\sPhone\snumber\sfor\sQueries|This\sSubscription\sWill\sAuto\sRenew\sEvery\sYear\sUnless\sYou\sTurn\sIt\sOff|If\syou\shave\snot\splaced\sthis\sorder\splease\scontact\surgently\sat|If\syou\sare\shaving\sany\skind\sof\sinquiries\sor\swant\sto\scancel\sthis\spurchase\,\sconnect\swith\sour\steam|Geek\s{2,5}Squad\steam|please\scheck\syour\s\?rder\sdetails|you\sauthorized\sus\sto\scharge\syour\scard\son\sfile\sfor\sannual\srenewal\sprice\splus\sapplicable\staxes|The\sSubscription\sWill\sBe\sAuto\sRenewed\.\sHope\sYou\sAre\sHappy\sWith\sThe\sServices|membership\swill\sauto\-renew\seach\syear\sunless\scanceled\s[0-9]{2}\shours\sbefore\sthe\send\sof\sthe\scurrent\sterm)(\W|$)/m tflags T_JR_BZ_BODY3 nosubject describe T_JR_BZ_BODY3 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY4 /(^|\b)(?:If\syou\sbelieve\sthat\syour\saccount\sis\sbeing\smisused\,\sour\sBoard\sof\stechnicians\swill\sbe\sof\sassistance|have\s\d{2}\shrs\sto\scancel\syour\scurrent\sSubscription\sfrom\sus|We\swould\salso\slike\sto\sinform\syou\sthat\sthe\srenewal\srequest\shas\sbeen\sreceived|easily\sreach\sour\sconsumer\sservice\sport|for\schoosing\sNort\-one\smembership\!|HOWEVER\sIf\syou\sbelieve\sthat\san\sunauthorised\sparty\smay\shave\saccessed\syour\saccount\sas\sthis\sorder\swas\splaced|Nort\-One\smember\saccount\sis\sbeing\sbilled\swith\s\$[0-9.]{2,6}\sfor\sPaid\sBusiness|\#PCSolutions_FirewallTeam\#|In\scase\sof\sany\sdispute\sor\squery\sor\sto\scancel\sthe\ssubscription\splease\sreach\sout\sto\sour\ssupport\steam\s\@\stoll\sfree|get\sa\sfull\srefund\.\sPlease\snote\syou\shave\s24\shours\sto\sreport\sa\sdispute\.|information\sregarding\sservice\sor\syou\sneed\sany\sother\sfurther\sdetail\sfor\sthis\sorder\splease\scontact\sus\son\shelpline|Transaction\sfor\sthis\sservice\shas\sbeen\sauto\sdebit\sfrom\syour\sbank\saccount|this\stime\swe\scharge\syou\sonly\s\$400\sfor\s3\syear\sof\sservice|Your\sservices\shas\sbeen\srenewed|excited\sto\sinform\syou\sthat\syour\ssubscription\shas\sbeen\srenewed\ssuccessfully\sfor\sthe\supcoming\sterm)(\W|$)/m tflags T_JR_BZ_BODY4 nosubject describe T_JR_BZ_BODY4 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY5 /(^|\b)(?:trying\sto\scontact\syou\sfor\sthis\srenewal\sbut\sthey\sdid\snot\sget\sany\sresponse\sfrom\syour\sside|Mcafee\shas\sbeen\srenewed\sSuccessfully|We\sprovide\syou\sall\sdetails\srelated\sto\sthis\sorder\.|N\xC3\xB0rt\xC3\xB5n|N\xC3\xABt\sSecure|Your\sCpanel\sHosting\shas\sbeen\stemporarily\ssuspended|Your\sNorton\sExpired\sToday|Thanks\sfor\susing\sour\sNorton\sSecurity\sfor\sthe\spast\sone\syear\!|If\syou\shave\sany\sQuestion\sor\swish\sto\sRefund\sand\sCancel\sthe\sRenewal|This\semails\sconfirms\sthe\srenewal\sof\syour\sservices\swith\sGeek\-Squad|Renewal\sID\:\sGS[0-9]{2}\-[A-Z]\-[0-9]{7}|If\syou\swant\sto\scancel\/modify\syour\sorder\,\sget\sin\stouch\swith\sus\sbefore\sit\sgets\sdelivered|Your\saccount\shas\sbeen\sset\sfor\sAuto\sDebit\sfrom\syour\ssaved\sbilling\son\sthe\saccount\sin\sthe\snext\s24\shours|This\semail\sconfirms\sthat\syou\'ve\ssubscribed\s\syour\s1\syear\ssubscription\sto\sGeek\sSquad\sfor\s\$|For\s{1,3}any\sIssues\s\,\scontact\sthe\sabove\smentioned\ssupport\snumber\sto\scancel|Your\saccount\xE2\x80\x99s\ssubscription\shas\sbeen\sautomatically\srenewed\stoday\.|GeekSquadInc\.|aut\xC3\xB2\sdebit|PayPal\,Inc\.Team|Norton\sAntiVirus\sOrders\sReceived\sThank\sYou\sFor\sYour\sPay|Bill\sTo\s\:\sDear\sCustomer)(\W|$)/m tflags T_JR_BZ_BODY5 nosubject describe T_JR_BZ_BODY5 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY6 /(^|\b)(?:To\scancel\syour\scurrent\ssubscription\s\&\sget\san\sinstant\srefund\,\splease\sdon\xE2\x80\x99t\shesitate\sto\sreach\sout|was\sactivated\sa\sspecial\sdiscount\sto\suse\son|To\supgrade\/cancel\syour\sservices\,\splease\sget\sin\stouch\swith\sour\sService\sDesk\sgiven\sbelow|This\semails\sconfirms\sthe\srenewal\sof\syour\sservices\swith|Renewal\sID\:\s[A-Z]{2}[0-9]{2}\-[A-Z]\-[0-9]{7}|will\sbe\sauto\sdebitede\sfrom\syour\sbank\saccount|you\sneed\sany\sother\sfurther\sdetail\sfor\sthis\sorder\splease\scontact\sus\son\shelp\sline|to\scancel\s\&\sget\sand\sinstant\srefund\sof\syour\sannual\ssubscription\,\splease\scontact\sour\scustomer\scare|Your\sSubscription\swith\sNORTON\sLife\-Lock|is\sabout\sTo\sDebit\sfrom\syour\saccount\sby\stoday|If\syou\sfeel\sthis\sis\san\sunauthorized\sTransaction\sor\syou\swant\sto\scancel\sthe\ssubscription|Norton\sbilling\sTeam|Hope\syou\shave\sa\slovely\sday\sahead\.\sCustomer\sSupport\:|invoice\sfor\syour\srecent\srequest\.\sWe\sthank\syou\son\sthe\scompletion\sof\syour\s1\syear\.|You\shave\s24Hrs\.\sfrom\sthe\sdate\sof\sthe\srenewal\sto\scancel\syour\splan\.|Geek\sBilling\sTeam)(\W|$)/m tflags T_JR_BZ_BODY6 nosubject describe T_JR_BZ_BODY6 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY7 /(^|\b)(?:for\sthe\snew\slicense\skey\sfor\snext\s[0-9]\syears|We\s{1,5}\sare\s{1,5}associated\s{1,5}with\s{1,5}several\s{1,6}retail\schains\xE2\x80\x99|You\s{1,5}can\s{1,5}reach\s{1,5}out\s{1,5}to\s{1,5}us\s{1,5}at\s{1,5}our\s{1,5}toll\s{1,5}free\s{1,5}\+1|If\syou\sdid\snot\sorder\sit\sand\swant\sclaim\sa\srefund\sor\scancel\sthe\spaid\sservices\.|Your\sGeeks\sSquad\sSecure\s360\sPremium|This\sis\sa\sconfirmation\semail\sfor\syour\sauto\-renewal\sof\ssupport\splus|NORTON360\sBILLING\sDEPARTMENT|\*If\sthis\sorder\sis\snot\splaced\sby\syou\sor\sif\syou\sthink\ssomeone\sis\sgaining\saccess\sto\syour\sNorton\saccount|To\scancel\syour\ssubscription\s\&\sget\san\sinstant\srefund\,\skindly\sreach\sout\sat|if\syou\sbelieve\san\sunauthorized\sperson\sis\sattempting\sto\saccess\syour\sMicrosoft\saccount\sCall\sto\sour\scustomer\scare\srepresentative|contact\sour\scustomer\scare\srepresentative\swithin\s72\shour|Invoice\sID\s\:\sMS\-[0-9]{5}\-[0-9]{6}|Your\sLife\sLock\sSubscription\shas\sbeen\sauto\srenewed|Your\ssecurity\sservice\splan\swith\sus\shas\sbeen\ssuccessfully\srenewed\sfor\snext\sone\syear|HELPDESK\:\s18554842213)(\W|$)/m tflags T_JR_BZ_BODY7 nosubject describe T_JR_BZ_BODY7 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY8 /(^|\b)(?:upgraded\splan\s\swhich\syou\srequested\sfor\sand\sif\syou\swant\sto\sdispute\sthe\scharge|This\semail\sconfirms\spayment\sfor\sthe\sNortonLifeLock\splan\slisted\sabove|To\scancel\srenewal\sor\sreview\syour\scurrent\ssubscription\,\splease\sreach\sout\snow\sat|Official\s\|\|\sTeam\sGeek\sSquad\s\(US\)|If\syou\shave\sany\squestions\sregarding\sthis\semail\,\sreach\sus\son\sour\sHelp\-Desk\swithin\s24Hrs|Confirmation\sfor\syour\srecent\spurchase\swith\sus\.\sYour\spackage\shas\sbeen\sconfirmed\sand\sready\sto\sdispatch\.|INVOICE\s\#AMZN[0-9]{2}\-[0-9]{8}|If\syou\sdon\'t\srecognize\sthis\sorder\,\splease\scall\sus\simmediately\sat|Invoiced\sfor\s3\-year\splan\stowards\syour\scomputer\sprotection\s\&\ssecurity\slicense\srenewal\skey\.|CANCELLETION\s\&\sREFUND\sPOLICY|If\syou\sWish\sto\sCancel\sthen\splease\sfeel\sfree\sto\scontact\sour\sBilling\sDepartment\sas\ssoon\sas\sPossible|Invoiced\sfor\s3\-year\splan\stowards\syour\scomputer\sprotection\s\&\ssecurity\slicense\srenewal\skey|order\sconfirmation\smessage\sfor\syour\spurchase\sof\sthe\sAdvanced\sMicrosoft\sDefender\slisted\sabove|furth\xC3\xA9r\sassistanc\xC3\xA9)(\W|$)/m tflags T_JR_BZ_BODY8 nosubject describe T_JR_BZ_BODY8 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY9 /(^|\b)(?:G\xC3\x89\xC3\x89KSQ\xC3\x9BA\xC4\x90|N\xC3\xA9\xC3\xA9d\sH\xC3\xA9lp|qu\xC3\xA9ry\spl\xC3\xA9as\xC3\xA9|b\xC3\xA9\xC3\xA9n\sd\xC3\xA9bit\xC3\xA9d|D\xC3\xA9ar\sCustom\xC3\xA9r|G\xC3\xA9\xC3\xA9kSQ\xC3\x9BA\xC4\x90|th\xC3\xA9\sinformation\sb\xC3\xA9low|Custom\xC3\xA9r\sSupport\sD\xC3\xA9sk|For\scancellation\sor\sto\smake\sany\schanges\sor\sfor\sany\sother\sissues\scontact\sthe\sabove\smentioned\ssupport\snumber|To\sturn\soff\sautomatic\sre\-newal\sand\/or\sstop\syour\ssubscription\son\syour\sprofile|Please\sdon\'t\sfeel\sconcerned\,\sactivated\sauto\srenewal\spreference\swill\sautomatically\sbill\syour\svisa\sor\smastercard|Reach\sHelp\-Desk\sNumber\sbelow\simmediately\sto\sstop\sthis\sshipment|your\scurrent\syear\s\xC3\xB8utstanding\sbalance|\xC2\xB4Geek\sSquad\xC2\xB0\xE2\x84\xA2|kindly\scancel\/void\sthe\scharges\swithin\s24\shours\sfrom\sthe\sdate\sof\stransaction\sto\savoid\sfuture\spayments|If\syou\shave\sany\squestions\,\splease\scontact\swith\sSupport|As\syou\shave\senabled\sauto-renewal\son\syour\ssubscription\.|Please\scontact\sout\scustomer\scare\srepresentative\swithin\s48\shours|Cunsumer\sHelpline\sDept\.)(\W|$)/m tflags T_JR_BZ_BODY9 nosubject describe T_JR_BZ_BODY9 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY10 /(^|\b)(?:If\syou\sdidn\'t\smake\sthis\spurchase\sor\swant\sto\scancel\syou\spurchase\syou\scan\scontact\sour\scustomer\sservice\sexecutive|payment\shas\sbeen\sauto\sdeducted\sfrom\syour\sbank\sa\/c\sand\ssoon\sit\xE2\x80\x99ll\sbe\sreflected\sin\syour\sbank\sstatement|Here\xE2\x80\x99s\san\sattachment\sof\syour\splan\xE2\x80\x99s\sdetail\:\-|AVC\sRefund\sSupport\.|For\sfurther\supdate\sfrom\sMicrosoft\,\syou\swill\sbe\sinformed\svia\semail|Hello\sdear\,\sThank\syou\sfor\srenewing\syour\ssubscription\sagain\!|Please\snote\sif\syou\swould\swant\sto\schange\syour\sbilling\sinformation\s\splease\svisit\sthe\saccount\ssection\spage\s\-\sif\syou\swish\sto\sstick\sto\sthe\scurrent\splan|Service\sRenewal\s\&\sCancellation\sTeam\s\#\#|Order\sConformation|With\sany\squestion\syou\smight\shave\sor\sin\scase\sof\srefund\/cancelling\sthe\sorder\.|auto\-debited\sand\swill\sbe\sreflected\sin\syour\sbank\sAccount\sstatement\sby\stoday|if\syou\sbelieve\san\sunauthorized\sperson\sis\sattempting\sto\saccess\syour\sMicrosoft\saccount\sCall\sto\sour\scustomer\scare\srepresentative|the\samount\swill\sbe\svisible\son\sthe\saccount\sstatement\sin\ssometime)(\W|$)/m tflags T_JR_BZ_BODY10 nosubject describe T_JR_BZ_BODY10 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY11 /(^|\b)(?:want\sto\scancel\syou\spurchase\syou\scan\scontact\sour\scustomer\sservice\sexecutive|contact\sout\scustomer\scare\srepresentative\swithin\s48\shours\sof\sreceiving\sthis\sinvoice\sdetails|above\sinformation\sincorrect\splease\scontact\sour\scustomer\sservice\sexecutive\sto\sresolve\sthe\sissue|Your\sRequest\shas\sbeen\sProcessed\sNow\sAnd\sthe\sAmount\shas\sbeen\sCharged|taken\sout\sfrom\syour\saccount\sannually\sunless\swe\shear\sfrom\syou\swithin\s24\shours|honor\sto\sreport\sto\syou\sthat\syour\scurrent\ssubscription\shas\sbeen\sauto\srenewed\sas\sper\syour\sreference\sat\san\saffordable\sprice\sof|charges\sfor\sthis\ssubscription\shave\sbeen\sauto\sdeducted\sfrom\syour\srespected\sbank\saccount\sshortly\sand\sthe\sdetailed\sinvoice\swill\sbe\sgenerated\sto\syour\sbank\sstatement\swithin\s[0-9]{1,2}\shours|If\syou\sare\sunaware\sof\sthis\ssubscription\sor\swant\sto\sedit,\skindly\sreach\sout\sto\sus\sin\sthe\sgiven\snumber\sbelow|happy\sto\sinform\syou\sthat\syour\sGeek\sSquad\sTech\sannual\ssubscription\shas\sbeen\ssuccessfully\srenewed\sand\sreactivated|\(80\%\)\srenewal\sdiscount\sToday|^Thanks\sFor\sCooperation)(\W|$)/m tflags T_JR_BZ_BODY11 nosubject describe T_JR_BZ_BODY11 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY12 /(^|\b)(?:is\staken\sout\sfrom\sthe\snominated\scredit\sfunds\sbalance\sand\sit\swill\sshow\son\sthe\sstatement\sshortly|automatically\sdebited\sfrom\syour\saccount\sfunds\sannually\sas\syou\shave\sopted\sfor\sauto\sdebit\spayments|No\slater\sthan\s48\shours\sof\s\s?before\sthe\send\sof\ssubscription\sPeriod|subscription\swill\sauto\srenew\severy\s1\syear\sunless\syou\sturn\sit\sOFF\!|You\shave\sonly\s8\shours\sto\scancel\sor\smodify\sthis\sorder\,\sfor\sany\smodification\,\scancellation\sor\sany\sspecial\srequest\splease\scall|Your\sPC\sand\sNetwork\sSecurity\sServices\shas\sbeen\sautomatically\srenewed|from\sthe\supdated\saccount\sfunds\sbalance\,\sthe\scharge\swould\sshow\son\sthe\sstatement\sin\ssometime|If\sthe\sdatabase\sgets\sdamaged\safter\sthe\ssoftware\shas\sexpired\,\sthe\stechnicians\swill\sbe\sunable\sto\sfix\sthe\sissues\,\sand\swe\swould\snot\sbe\sable\sto\srecover\sany\sdata\slost|from\sthe\supdated\saccount\sfunds\swhich\swill\sbe\sreflected\son\syour\saccount\sstatement\sin\sfew\shours|If\syou\sdon\'t\swish\sto\srenewed\sor\supgrade\sthe\srecent\sannual\ssubscription|Executive\sAssistant\sOf\sGeek\ssquad|Order\sreceived\,\sconfirmed\,\ssecured\.)(\W|$)/m tflags T_JR_BZ_BODY12 nosubject describe T_JR_BZ_BODY12 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY13 /(^|\b)(?:If\syou\swant\sto\scancel\sthe\sRenewal\sand\sclaim\sthe\srefund\.|As\sthe\sprocess\sof\sAuto\-Renewal\.|cancel\syour\ssubscription\,\splease\sreach\sHelp\-desk|We\spromise\sto\sserve\syou\sin\sthe\ssame\sway\sas\swe\shave\sbeen\sserving\.|will\sbe\sreflected\swithin\snext\s24\shour\son\syour\saccount\sstatement|For\sfurther\sassistance\sor\squery\splease\scontact\sto\sthe\sinformation\sbelow|This\scharge\swill\sappear\son\syour\sstatement\sas\sPayPal\sCoinbase\swithin\s[0-9]\shours|has\sbeen\srenewed\sfor\snext\sone\syear|If\syou\spresume\sthe\sdetails\sabove\sis\sinvalid\,\scontacting\scustomer\sservice\srepresentative|notify\san\sindividual\sof\sour\scustomer\scare\steam\swithin\s48\shours\sof\sreceiving\sthis\sstatement\'s\sdetails|The\sexpenses\sis\s\$\s[0-9]{3}\.[0-9]{2}|you\saccept\syou\shave\snot\sapproved\sthe\syearly\srepeating\scharge\sor\syou\swish\sto\squit\sthis\smembership\splan|void\sall\sthe\scharges\sand\sget\sthe\sfull\samount\srefunded\sback\sto\sthe\soriginal\spayment\ssource\,\splease\scontact\sus\swithin\s[0-9]{2}\shours|has\sbeen\sprocessed\ssuccessfully\sfrom\sthe\snominated\spayment\ssource)(\W|$)/m tflags T_JR_BZ_BODY13 nosubject describe T_JR_BZ_BODY13 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY14 /(^|\b)(?:Message:\sDear\sCostumer|questions\sabout\scancellation\sor\supgrading\,\splease\sreach\sout\sto\sour\scustomer\sservice\steam\sat|If\syou\sdid\snot\sinitiate\sthis\spurchase\sor\sif\sthe\spayment\swas\snot\smade\sby\syou\sreach\sus\simmediately\sat|please\sreach\sus\sout\son\sour\scustomer\sservice\sexecutive|Thank\syou\sfor\ssubscribing\sMS\sAccount|In\sany\scase\,\syou\sdon\'t\swish\sto\scontinue\sor\sdrop\sthe\scharges\ssimply\scontact\sus|If\syou\sdid\snot\sinitiate\sthis\spurchase\sor\sif\sthe\spayment\swas\snot\smade\sby\syou\sreach\sus\simmediately\sat|Geek\xC3\x82\sSquad|Your\srecently\sRenewal\sSubscription\sInvoice|If\syou\shave\sproblem\swith\sthis\sOrder\sPlease\sreport\sus|If\sfunds\shas\salready\sbeen\staken\sfrom\syour\saccount\,\she\swill\sassist\syou|cancelling\syour\ssubscription\sand\sobtaining\sthe\sreceipt\sneeded\sby\slaw\.|\#879324\-2304\-32490|Your\ssubscription\sis\sactive\s\sgo\sover\s\sthe\s\ssales\sreceipt|GE\xC3\x8BKSQ\xC3\x99\xC3\x85D|Please\slet\sus\sknow\sif\syou\shave\sany\sissues\sregarding\sthe\spayment\sas\srefund\scan\sbe\sclaimed\swithin\s[0-9]{2}\shours\sof\sthe\spayment)(\W|$)/m tflags T_JR_BZ_BODY14 nosubject describe T_JR_BZ_BODY14 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY15 /(^|\b)(?:Security\swill\sautomatically\srenew\syour\sLicense\stoday\sfor\s3\syears\sPlan\sof\syour\sFive\sOperating\ssystem|We\stried\sto\scontact\syou\son\syour\sregistered\sPhone\snumber\sfor\sQueries|In\scase\,\syou\sdid\snot\smake\sthis\spayment\splease\scall\sour\sbilling\ssupport\steam\sat|You\shave\s24\shours\sto\sraise\sa\sDispute\sin\sthe\sPayPal\sInc\.\sat\sbilling\ssupport\steam\sfor\scancellation\sand\sRefund|GEEK\sSQUAD\sRENEWAL\sTEAM|Thank\syou\sfor\svictimization\sour\sservices|Find\sthe\sperfect\ssolution\sfor\syour\sPc\sProtection|Thank\syou\sfor\sexploiting\sour\sservices\.|if\syou\sdiscover\shigher\sthan\sinfo\sincorrect\splease\scontact\sour\sclient\sservice\sgovernment|We\shave\srenewed\syour\sSubscription\sas\sper\syour\selectronic\sconsent\.|For\sany\sassistance\sor\sneed\sto\scancel\,\splease\-reach\:|Your\santivirus\sprotection\splan\swill\sexpire\stoday\sdue\sto\sthe\sauto\srenewal\sdate|NOTE\:\sTo\sview\syour\sorder\,\splease\sdownload\syour\sinvoice\sfrom\sthe\sattachment\.|We\sare\soverjoyed\sto\shave\syou\sas\sour\sesteemed\spatron|have\snot\sauthorized\s.*\sauto\srenewal\ssecurity)(\W|$)/m tflags T_JR_BZ_BODY15 nosubject describe T_JR_BZ_BODY15 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY16 /(^|\b)(?:We\'re\shappy\sto\shave\syou\son\sboard\sfor\sour\sannual\smembership\splan|Thank\syou\sand\sSee\syou\snext\stime\!|and\syou\smust\sdeactivate\sthe\sservices\sor\scancel\syour\ssubscription\sto\savoid\sfurther\scharges|you\sneed\sclarification\son\sanything\splease\sreach\sout\sto\sus\son\sthe\sbelow\smentioned\stoll\-free\snumber|The\spayment\smode\sused\sin\sthe\spast\sis\sdebited\sand\sit\swill\sbe\scharged\swithin\s24\shours|Note\-\sThe\scharge\swill\scome\sup\/reflect\sin\syour\saccount\sin\s48\sHrs|Your\sRenewal\sReceipt\sIs\s\"Subscription\sPlan\"|To\sReach\sour\scustomer\shelp\sdesk\sDial|your\sauto\-\sdebit\srecurring\spayments\sor\svoid\sall\scharges\skindly\sreach\sout|\{\sGeek\sSquad\sService\sDept\.\}|If\syou\sdid\snot\splace\sthis\sorder\,\splease\scontact\sus\sIMMEDIATELY\sso\swe\scan\skeep\syour\saccount\ssecure|We\shave\sthe\spremium\ssecurity\sservices\sfor\syou\sand\supgraded\syour\sSubscription|Your\sAnnual\sPlan\swill\sbe\sAuto\sRenewd\swithin\sNext\s24\sHOURS|Thank\syou\sfir\susing\sour\sservice\sonce\sagain|This\semail\sis\sto\slet\syou\sknow\sthat\sa\scharged\sof\s\$[0-9]{3}\.[0-9]{2}\shas\sbeen\smade|PayPal\sBILLING\s\&\sSETTLEMENT\sDEPARTMENT|confident\sthat\swe\scan\shelp\simprove\syour\ssocial\smedia\svisibility)(\W|$)/m tflags T_JR_BZ_BODY16 nosubject describe T_JR_BZ_BODY16 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY17 /(^|\b)(?:Just\sto\slet\syou\sknow\sthat\slast\syear\santivirus\sprotection\sservices\shas\sbeen\supgraded|wish\sto\sstop\sautomatic\spayments\sor\svoid\sthe\srecent\scharges\sand\sunsubscribe|if\syou\sstill\sfind\san\serror\sin\sthe\sreceipt\scontact\sus\swithin\s24\shours\sto\sget\sthe\sfull\srefund|We\sare\sglad\sto\sinform\syou\sthat\syour\sannual\splan\swith\sus\shas\sbeen\ssuccessfully\srenewed|\*GEEK\*\*SQUAD\*\*\*\*\*|transaction\swill\sbe\sprocessed\ssoon\sonce\sdone\samount\swill\sbe\sauto\sdebit|\sIf\syou\sno\slonger\swish\sto\sreceive\sproduct\seducation\semails\sfrom\sus\,\sunsubscribe\shere|The\sDebited\sAmount\swill\sbe\sreflected\swithin\sthe\snext\s24\sHOURS|If\syou\sdidn\'t\sauthorize\sthis\sCharge|\xC5\x83orton|If\syou\sdidn\'t\sauthorize\sthis\scharge\.\sYou\shave\s24hrs\sto\sblock\sauto\-renewal|Your\sSubscription\swith\sGEEK\sSQUAD\sProtection\sPlan|This\ssubscription\swill\sAuto\-Renewed\severy\syear\suntill|Your\sPersonal\sHome\ssubscription\sof\sGEEK\sSQUAD\sCARE|In\scase\sof\sany\sfurther\sclarification\sor\sto\sblock\sthe\sauto\-renewal\sservice|Mobile\sPhone\sShield\sInstall)(\W|$)/m tflags T_JR_BZ_BODY17 nosubject describe T_JR_BZ_BODY17 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY18 /(^|\b)(?:We\shave\sautomatically\srenewed\syour\sservice\splan\ssince\syour\sauto\sdebit\sservice\sis\sstill\sactive|We\'re\sexcited\sto\sinform\syou\sthat\syour\sPC\splan\sis\snow\sofficially\sin\seffect|pleased\sto\snotify\syou\sthat\sthe\spayment\sfor\sthe\srenewal\sof\syour\skaspersky\sintegration\sfor|In\scase\sof\sno\sresponse\sfrom\syour\smerchant\,\splease\sreach\sout\sto\syour\sbank\sfor\sany\spayment\-related\squeries|Your\sprevious\splan\shas\sexpired\stoday\,\sbut\swe\shave\srenewed\syour\sservice\splan\spromptly|plan\spurchase\susing\syour\spre\-approved\spayment\smethod\shas\sbeen\sprocessed|your\sservice\splan\shas\sbeen\srenewed\sthanks\sto\sour\sauto-renewal\sservice|Completed\s\(Savings\sAuto\sDebit\)|amount\shas\sbeen\salrea\sdy\sdebited\sfrom\syour\slinked\saccount\swith\sus|Thanks\sfor\schoosing\sus\sagain\,Your\ssubscription|If\syou\sbelieve\sthis\s0rder\swas\snot\splaced|kindly\svisit\syour\s0rder\son\sthe\sofficial\sapp|thanks\sfor\splacing\syour\s0rder\swith\sus|This\semail\sis\sto\sconfirm\sprocessing\sof\sa\srequest\sfor\sPremium\sProtection\sSecurity|behalf\sof\s363S13HX3)(\W|$)/m tflags T_JR_BZ_BODY18 nosubject describe T_JR_BZ_BODY18 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY19 /(^|\b)(?:I\'d\slike\sto\sexpress\sour\sdeepest\sgratitude\sfor\syour\scontinued\sMembership|Get\sImmediate\sHelp\sfrom\sOur\sService\sSupport\sTeam|reaching\sout\sto\slet\syou\sknow\sthat\syour\ssubscription\shas\sbeen\ssuccessfully\srenewed\sas\sof\stoday|We\sare\swriting\sto\sextend\sour\sutmost\sgratitude\sfor\syour\scontinued\spatronage|reminder\sfrom\sour\sbilling\sdepartment\sregarding\sthe\sauto\srenewal\sof\sthe\smaintenance\splan\sfor\syour\sdevice|Should\syou\schoose\sto\scancel\sand\srequire\sa\sfull\srefund\sto\sbe\sprocessed\sback\sto\sthe\soriginal\spayment\ssource|It\'s\sour\spleasure\sto\ssee\syou\schoose\sMCAfee\sTotal\sas\syour\sfavored\snetwork\ssecurity|you\srequire\surgent\sassistance\,\splease\scall\sour\sExperts\sfor\srefund|As\syour\sfirst\schoice\sin\ssystem\ssecurity\,\swe\sare\sdelighted\sthat\syou\schose\sus|This\semail\sconfirms\syour\spurchase\sof\sthe\sfollowing\ssubscription\susing\syour\sPayPalID|If\syou\sexperience\sany\sissues\sor\swish\sto\scancel\sauto-renewal\,\splease\sdo\snot\shesitate\sto\sreach\sout\sto\sus|Your\spayment\shas\sbeen\sreceived\,\sthank\syou\sfor\syour\sorder\!)(\W|$)/m tflags T_JR_BZ_BODY19 nosubject describe T_JR_BZ_BODY19 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY20 /(^|\b)(?:enjoy\syour\sservice\sas\syour\spurchase\shave\sbeen\ssuccessfully\sdone|If\syou\shave\sany\squestions\,\splease\scontact\sus\sour\srepresentative|If\sthe\srenewal\sor\supgrade\sdoes\snot\sconform\sto\syour\sneeds\,\splease\sreach\sour\ssupport\sline|circumstances\scan\sshift\,\sif\syou\swish\sto\sreassess\syour\ssubscription\sterms|Below\sare\sthe\sdetails\sof\syou\splan\sbreakdown|INVOICE\sORDER\sBILL\sRECEIPT\sATTACHED|Your\syearly\sbased\ssubscription\shas\sbeen\sauto\-renewed\sas\syou\shave\sselected\sfor\sit|We\sare\sthrilled\sto\sconfirm\sabout\syour\srecent\ssubscription|Your\sSubscription\swith\sGEEK\sSQUAD\swill\sRenew\sToday|The\sDebit\sAmount\swill\sbe\sreflected\swithin\sthe\snext\s24\.|block\sthe\sauto\-renewal\sservice\splease\sreach\sout\sCustomer\sHelp\sCenter\sat|Your\splan\shas\sbeen\sseamlessly\srolled\sover\sfor\sa\sfurther\sthree\syears\.|This\sis\sto\sbring\sto\syour\sattention\sthat\syour\sDevice\sProtection\ssubscription|like\sto\sbring\sto\syour\sattention\sthat\syour\sMcAfee\ssubscription\shas\sbeen\ssuccessfully\sextended|Our\srecords\sindicate\sthat\syour\s.{2,50}\ssubscription\sverification\sis\spending|We\sappreciate\syour\spayment\sand\ssincerely\shope\syou\slike\swhat\syou\sbought\.|attached\stowards\srenewal\sof\s[0-9]\syears)(\W|$)/m tflags T_JR_BZ_BODY20 nosubject describe T_JR_BZ_BODY20 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY21 /(^|\b)(?:Your\smembership\swill\sbe\sautomatically\srenew\stoday\sfor\sthe\samount\sof|in\sneed\sof\sassistance\sor\shave\sany\sinquiries\sabout\sthe\srenewal\sprocess\,\splease\sfeel\sfree\sto\sreach\sout\sto\sus\sat\sthe\sfollowing\ssupport\snumber\:|The\sdetails\sof\sthe\sorder\sare\sattached\.|Your\sorder\sdetails\sare\senclosed\.\sFor\sbilling\sinquiries\,\scontact\sus\sat|The\stransaction\swill\sappear\swithin\sthe\supcoming\s48\shours\.|Your\spayment\sfor\sthis\syear\'s\srenewal\sis\sreceived\swith\sthanks\.|deduction\swill\sbe\sprocessed\sand\sappear\son\syour\saccount\sstatement\spromptly\,\swithin\s[0-9]{2}\shours|If\syou\shave\sany\squestions\sor\syou\swant\sto\scancel\syour\scontract\splease\scall\sus\son|Claim\sYour\sTac\sDrone\sPro|we\shope\sthat\syou'll\senjoying\sus|don\'t\swant\sto\scontinue\swith\sus\sthen\smake\ssure\syou\scall\sus\son|\-+It\sappears\sthat\syou\shave\sreceived\sa\ssubscription|subscription\swill\sdefinitely\sproceed\sand\salso\swill\scertainly\srestore|We\sare\srenewing\sit\sfor\syou,\sand\swe\sthus\svalidate\sinvoice\sof\syour\sorder|We\sare\sdelighted\sto\sconfirm\sthat\syour\s[A-z0-9\s]{2,20}\smembership\shas\sbeen\srenewed\.|payment\swill\sbe\sprocessed\swithin\s[0-9]{2}\sworking\shours\sor\swill\sappear\son\syour\snext\sservice\sbill)(\W|$)/m tflags T_JR_BZ_BODY21 nosubject describe T_JR_BZ_BODY21 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY22 /(^|\b)(?:We\sare\spleased\sto\sconfirm\sthe\srenewal\sof\syour\ssubscription\.\sYour\scommitment\sto\sour\sservices\sis\shighly\svalued|To\sinform\syou\sthat\syour\spayment\swas\shandled\sin\scompliance|important\sto\sus\sthat\syou\sare\ssatisfied\swith\syour\spurchase\sjourney|We\'re\sexcited\sto\sconfirm\sthe\srenewal\sof\syour\ssubscription|attached\stowards\srenewal\sof\s3\syears\sSubscription|Geek\sSquad\s\-\s3\sYears\sMembership|Your\sAntivirus\ssubscription\sstatus\:\sUpdated\sSuccessfully\.|Your\ssubscription\srenewal\sbrings\sus\simmense\spleasure|INVOICE\sALERT\#[A-Z0-9]{4}\-[A-Z0-9]{4}\$[A-Z0-9]{3}|Your\scontinued\ssubscription\sis\sa\svalued\saspect\sof\sour\sbusiness\srelationship|We\strust\syou\sare\sin\sgood\shealth\sas\syou\sreceive\sthis\scommunication|Envelope\shas\sbeen\sdeleted\sand\swas\stherefore\sautomatically\svoided|Paid\sUser\,thank\syou\svery\smuch|Payment\ssent\sfor\s.{5,45}\,\shas\sbeen\ssuccessfully\sapproved|charge\swill\sreflect\son\syour\sPay\sPal\saccount\swithin\s[0-9]{1,2}\shours|If\syou\sdon\'t\smake\sthese\s\s?transaction|^members\sget\s24\/7\sGeek\sSquad\xC2\xAE\stech\ssupport|Geek\sSquad\sAccount\sProtection\sApproved|Pleasekeep\sthis\sinformation|Renewal\sConfirmation\sReceived\s\xE2\x80\x94\sGeek\sSquad)(\W|$)/m tflags T_JR_BZ_BODY22 nosubject describe T_JR_BZ_BODY22 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY23 /(^|\b)(?:Norton\sAntiVirus\sPlus\ssent\syou\sa\sinvoice|Please\scontact\sPayPal\sHelp\sor\scall\sour\semergency\shelpline|pleasure\sto\shave\syou\sas\sa\smember\sof\sour\sLifeLock\sPremium\sfamily|transaction\swas\snot\sby\syou\sQuickly\sreach\sus\son|members\sget\s24\/7\sGeek\-Squad\xC2\xAE\stech\ssupport\sprotection\splans|you\shave\s24hrs\.\sto\scancel\s\&\sget\san\sinstant\srefund\sof\syour\ssubscription|invoice_[0-9]{8,10}\s\@\sGeek\-Squad\xC2\xAE|to\scancel\sthe\ssubscription\s\,\sreach\sus\sat\s\:|\|This\sSubscription\swill\sAuto\-Renew\sEvery\syear\sunless\syou\sturn\sit\sOFF|We\swould\slike\sto\sinform\syou\sthat\swe\shave\sgenerated\san\sinvoice\sfor\sthe\sservices\swe\shave\srendered\sto\syou|Sent\sBy\sGeek\sSquad\sAs\sYou\sHave\sSubscribed\sTo\sOur\sServices|PayPal\swill\sbe\sdelivered\sonline\stoday\sbetween\.|We\sare\sdelighted\sthat\syou\shave\schosen\sto\srenew\syour\ssubscription|benefits\sdesigned\sto\smeet\sthe\sdiscerning\sstandards\sof\sour\sesteemed\smembers|Plan\shas\sbeen\srenewed\ssuccessfully\syou\swill\sreceive\sa\sconfirmation\semail\safter\s[0-9]{2}\shours|[0-9]{2}\-hour\speriod\sfrom\sthe\sactivation\sdate\sto\sreview\syour\ssubscription|We\sare\sdelighted\sto\sinform\syou\sthat\syour\sPayment\sInvoice)(\W|$)/m tflags T_JR_BZ_BODY23 nosubject describe T_JR_BZ_BODY23 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY24 /(^|\b)(?:privileged\sto\shave\syou\swith\sus\sand\slook\sforward\sto\snurturing\sthis\sjourney\stogether|confirmation\sthat\syour\scomputer\sprotection\splan\'s\sauto\-renewal\sdate\sis\stoday|service\swill\sbe\savailable\sto\syou\sfor\sthe\supcoming\sFive\sYears|Your\sorder\sfrom\sNorton\sAntiVirus\.|payment\sof\s\$[0-9]{3}\.[0-9]{2}\sfor\sthe\s.*\sauto\-renewal|We\'re\sgetting\syour\sorder\sready\,\sand\swe\'ll\semail\syou\swith\sthe\stracking\sinformation\sas\ssoon\sas\sit\'s\sout\sthe\sdoor\.|We\sare\sthrilled\sto\sinform\syou\sthat\syour\spayment\sinvoice|has\sbeen\ssuccessfully\sprocessed\,\sand\swe\'re\sthrilled\sto\sconvey\sthis\spositive\soutcome\sto\syou|reach\sout\sto\sour\scustomer\sservice\steam\sat\s.{7,25}\swithin\sthe\snext\ssix\shours|you\sneed\smore\sinformation\sor\shave\sany\suncertainties\sabout\sthis\stransaction|debited\sfrom\syour\saccount\slinked\sto\syour\sNorton\saccoun|cancel_\&_get|instant_refund_of|Please\sbe\saware\sthat\sfailure\sto\sverify\syour\ssubscription\swithin\s[0-9]{2}\shours|received\srenewal\srequest\sfor\syour\s.{2,50}\scomputer\smaintenance\sservice\sonce\sagain|YOU\sCAN\sCANCEL\sTHE\sSERVICES\sAND\sASK\sFOR\sREFUND|We\shighly\svalue\sthe\strust\syou\'ve\sshown\sin\sour\sservices|Your\sorder\sis\sunder\squeue\sfor\smonitoring)(\W|$)/m tflags T_JR_BZ_BODY24 nosubject describe T_JR_BZ_BODY24 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY25 /(^|\b)(?:We\sare\sdedicated\sto\senriching\syour\sexperience\swith\sus|and\syour\stransaction\svia\sPayPal\sService\shas\sbeen\ssuccessfully\sprocessed|we\sare\simmensely\sgrateful\sfor\syour\strust\sin\sus|our\sdevoted\scustomer\sservice\steam\sis\sready\sto\sassist\syou|enthusiastic\sabout\syour\spurchase\sand\sexcitedly\sawait\syour\scontinued\sloyalty|Look\sforward\sto\songoing\supdates\sfrom\sus\son\sthe\sadvancement\sof\syour\sorder|We\slove\shaving\syou\sas\sour\scustomer\.\stoday\,\syour\ssubscription\sexpired|contact\sour\scustomer\sservice\steam\sat\s[0-9\s\-()+]{8,20}\swithin\sthe\snext\s(six|[0-9]{1,2})\shours|Urgent\:\sVerify\sYour\sMcAfee\sSubscription\sNow|a\sPayment\sof\s\$[0-9]{3}\.[0-9]{2}\sfor\sthe\sauto\-renewal\sservice|receipt\scovers\sthe\sauto\-renewal\sof|Should\syou\sneed\smore\sdetails\sor\shave\sany\suncertainties\sabout\sthis\stransaction|delighted\sto\snotify\syou\sthat\syour\s\$[0-9]{3}\.[0-9]{2}\spayment\sinvoice|AntiVirus\sgot\syour\sback\syour\sorder\son\sits\sway|membership\sto\sour\sservice\sor\sregistration\swith\sMcfee|computer\sprotection\swill\sbe\sautomatically\srenewed\swithin\sa\s[0-9]\-hours\speriod|you\sproceed\sto\syour\scomputer\sand\scontact\sus\sat\sthe\sfollowing\sphone\snumber|transaction\shas\sbeensuccessfully\sprocessed)(\W|$)/m tflags T_JR_BZ_BODY25 nosubject describe T_JR_BZ_BODY25 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY26 /(^|\b)(?:Purchasing\sgrants\syou\sthe\sright\sto\srenew\syour\slicense\susing\sthe\spayment\smethod\sfrom\sthe\sinitial\stransaction|Thanks\sFor\sPurchasing\!\sOrder\sDetails\sAnd\sBelow|We\'re\s(thrilled|excited)\sabout\syour\spurchase\sand\s(appreciate|value)\syour\s(ongoing|continued)\spatronage|Expect\sfurther\scommunication\sfrom\sus\sregarding\syour\sorder\'s\sprogress|We\'re\shere\sto\sensure\syour\sexperience\sis\ssmooth\sand\seffortless|Exciting\snews\!\sYour\sinvoice\s.*\sis\snow\savailable|a\snew\se\-Bill\sfrom\sthe\sGeek\ssquad|fund\swas\scharged\sfrom\sthe\scard\slinked\swith\syour\smalware\saccount|reflected\sin\syour\sa\/c\swithin\snext\s[0-9]{2}hrs|REFUND\sOf\sYour\sSubscription|To\sCANCEL\sthe\ssubscription\s?\,\sreach\sus\sat|preventing\sit\sagainst\sall\sthe\ssuspicious\sTHREATS|all\sthe\sMALWARE\sand\sSPYWARE\son\syour\sPC|Anticipate\sreceiving\sfurther\sdetails\sabout\syour\sorder\sfrom\sus\ssoon\.|We\sare\sthrilled\sto\sacknowledge\sthe\srenewal\sof\syour\ssubscription\!|have\sany\sinquiries\sor\sneed\sassistance\,\sour\scustomer\sservice\sis\sjust\sa\scall\saway|This\sSubscription\sWill\sAuto\-Renew\sEvery\syear|If\sthis\spayment\sis\snot\sdone\sby\syou\,\splease\sget\sin\stouch\swith\sus\son\:|Thank\syou\sfor\sremaining\sa\spart\sof\sour\sGS\sfamily\.)(\W|$)/m tflags T_JR_BZ_BODY26 nosubject describe T_JR_BZ_BODY26 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY27 /(^|\b)(?:AUTO\sPAY\sfrom\syour\sAccount\/Card|Order\sDetails\sAnd\sBelow|membership\swith\s[A-z0-9\-_\.]{2,40}\@[A-z\-_0-9]{2,40}\.[A-z]{2,8}\shas\sbeen\sconfirmed\sand\sis\son\sits\sway|delighted\sto\snotify\syou\sthat\syour\s\$[0-9,.]{5,6}\spayment\sinvoice|Kindly\smaintenance\syour\sbalance|Expect\sadditional\supdates\sfrom\sus\sabout\syour\sorder\'s\sprogress\.|we\'re\sworking\sdiligently\sto\sprepare\syour\sorder\sfor\sshipment|delighted\sto\sannounce\sthat\syour\sservices\sfor\s.*\shas\sbeen\sAuto\-Updated|entire\steam\sis\sdedicated\sto\sensuring\syour\s.*\sexperience\sis\sfirst\-rate|Exciting\supdate\!\sYour\sorder\s\#[0-9A-Z]{15,17}\splaced\son\s.*\shas\sbeen\ssuccessfully\sprocessed|Thank\syou\sfor\syour\sloyalty\sto\s.*\sover\sthe\spast\s[0-9]\-Year\.|The\sMcAfee\,\sLLC\.|We\shave\snoticed\san\susual\sactivity\son\syour\saccount|We\sare\spleased\sto\sinform\syou\sthat\syour\sorder\swas\sfulfilled\ssatisfactorily|get\sin\stouch\swithin\sthe\snext\s12\shours\sby\scalling\sour\sHelpline\sNumber|your\sauto\-renewal\sis\sactive\sand\syou\swill\sbe\scharged\s[0-9]{3}\.[0-9]{2}\sUSD|enrollment\sin\sour\sWindows\sDefender\sSuite\swith\sOptimal\sCybersecurity|It\sis\sour\shonor\sto\sannounce\s\{your\smembership|Call\s.*\sand\sour\sgroovy\steam\swill\sassist\syou)(\W|$)/m tflags T_JR_BZ_BODY27 nosubject describe T_JR_BZ_BODY27 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY28 /(^|\b)(?:Attached\,\syou\'ll\sfind\sthe\srequested\sinvoice\sstatement\s\#[0-9]{5}\-[0-9]{4}\.|your\ssubscription\shas\sbeen\srenewed\sfor\sanother\s1\syear\swith\sGeekSquad|Subscription\sWill\sAuto-Renew\sEvery\sYear\sunless\sYou\sturn\sit\sOFF|Please\sReview\syour\spurchased\sSummary\sBelow|This\sWill\sAuto\-Renew\sas\sper\sthe\splan\sselected|renewal\sof\s[0-9]\sYears\sMembership|We\'re\sexcited\sto\sinform\syou\sthat\syour\spurchase\,\sidentified\sunder\stransaction\snumber|You\sare\sall\sset\!\sHere\sare\sthe\sdetails\sof\syour\spay\sfrom|renew\syour\s[A-z0-9\-_]{6,30}\smembership\svia\sauto\-renew|subscription\swill\srenew\sautomatically\sin\saccordance\swith\syour\sselected\splan|Thank\syou\sfor\ssubscribing\sto\s\s?.{6,30}\s\s?\s?through\sus\.|To\sstop\sthis\sauto\-renewal\,\splease\suse\syour\scomputer\sto\scontact\sus|charged\s\$[0-9]{3}\.[0-9]{2}\sfor\syour\s[0-9]\sYear\smembership\sof\sthe\s.*\sPlan|users\swho\sdid\snot\sstop\stheir\sauto\-renewal\sand\swere\scharged\sby\sthe\sautomatic\sdebit\ssystem|Your\sMcAfee\s.*\sis\scomplete\sand\sready\sto\sroll\!|Thank\syou\sfor\schoosing\sMcfee|It\smay\stake\sup\sto\s48\sHour\sfor\sthis\stransaction\sto\sappear\sin\syour\saccount\.|Dear\s[A-z]{2,15}\,\syou\shave\ssuccessfully\spurchased\s[A-z0-9\s]{2,20}\syearly\splan\sworth)(\W|$)/m tflags T_JR_BZ_BODY28 nosubject describe T_JR_BZ_BODY28 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY29 /(^|\b)(?:Following\sour\sagreement\,?\swe\shave\scharged\syour\saccount\s\$[0-9,.]{5,6}\sfor\sthe\s[0-9]\-Year\smembership|not\shave\sauthorized\s.*\sto\scharge\syour\sbank\saccount\sfor\srenewal|We\sare\spleased\sto\sinform\syou\sthat\syour\ssecurity\shas\sbeen\sactivated|Writing\sthis\smail\sto\sinform\syou\sthat\syour\spurchase\shas\sbeen\ssuccessful\sfor\sthe\srenewal|For\sAny\sQuery\sor\sSupport\sor\sto\sCancel\sthe\sSubscription\sand\sreport|Here\'s\sthe\sReceipt\sfor\sYour\sPayment\stowards\sthe\sRenewal|Your\saccount\sstatement\swill\sshow\sthe\sDebt\sAmount\swithin\sthe\snext\s[0-9]{2}\shours|in\stouch\swith\sour\scustomer\sservice\sto\scancel\sand\sreceive\san\simmediate\srefund\sfor\syour\sannual\ssubscription|To\scancel\sand\sget\sa\sprompt\srefund\sfor\syour\syearly\ssubscription\,?\splease\scontact\sour\scustomer\ssupport|your\saccount\swill\sbe\scharged\s\$[0-9]{3}\.[0-9]{2}\s\s?by\stoday|Official\sNortonTM\sSupport\sCentre|have\syour\ssubscription\snumber\sor\sReceipt\sNo\sready\sfor\squicker\sservice|Your\ssubscription\swith\sMcafee\shas\sbeen\srenewed\sas\sper\syour\selectronic\sconsent|[Ww]e\shave\scharged\sUSD\s?[0-9]{3}\.[0-9]{2}\sto\sensure\syour\sservices\scontinue\swithout\sinterruption|Thank\syou\sfor\susing\s[A-z0-9\s]{2,20}\sfor\sthe\spast\s[2-9]\sYear\.)(\W|$)/m tflags T_JR_BZ_BODY29 nosubject describe T_JR_BZ_BODY29 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY30 /(^|\b)(?:wish\sto\smake\sany\salterations\sto\syour\sorder\sor\sdecide\sto\sdiscontinue\sthe\sauto\-renewal|You\'ve\sopted\sfor\sthe\sconvenience\sof\sauto\-renewal\sfor\syour\ssubscription|Please\scontact\sour\sbilling\sdepartment\sas\ssoon\sas\spossible\sif\syou\swould\swant\sto\scancel\sthe\ssubscription|If\sthis\scharge\sis\snot\swhat\syou\sauthorized\,\syou\shave\s24\shours\.|For\san\sinstant\srefund\sof\syour\syearly\ssubscription\supon\scancellation|We\xE2\x80\x99re\shappy\sto\slet\syou\sknow\sthat\syour\sprotection\splan\swith\s[A-z0-9\s]{2,20}\shas\sbeen\ssuccessfully\srenewed\.|We\xE2\x80\x99re\sreaching\sout\sto\slet\syou\sknow\sthat\syour\sdigital\sprotection\splan\swith\s[A-z0-9\s]{2,20}\sis\snow\sactive\.|assistance\sor\swish\sto\sdiscuss\syour\splan\,\splease\scontact\sus\sat\sthe\ssupport\shotline\slisted\sabove|For\sany\squestions\sor\sassistance\sregarding\syour\srenewal\,\splease\sreach\sout\sto\sus\sat\s\{|Your\strust\sin\sMicrosoft\s365\sis\sdeeply\sappreciated|[yY]our\spayment\sfor\sMicrosoft\s365\,?\stotaling\s\$[1-9][0-9]{2}\.[0-9]{2}|customer\ssupport\swill\sassist\syou\swith\sthe\smembership\scanceling\sprocess\sMonday\sto\sFriday|Payment\sHas\sBeen\sProcessed\sSuccessfully\sAnd\sVerified:\s\#[A-Z]{3}\-[A-Z][0-9][A-Z])(\W|$)/m tflags T_JR_BZ_BODY30 nosubject describe T_JR_BZ_BODY30 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY31 /(^|\b)(?:If\swe\sdo\snot\sreceive\sa\sresponse\swithin\sthe\sgiven\stime\sframe\,\swe\swill\sproceed\swith\scharging\syou\sfor\sthe\spurchase\sin\squestion|Reach\sout\sto\sour\sdedicated\saccount\smanagement\sphone\sin\scase\syou\ssee\ssome\sanomalies|As\sthis\smailbox\sis\snot\sunder\ssurveillance\.|A\smaximum\sof\s[0-9]{2}\shours\sprior\sto\sthe\ssubscription\speriod\'s\sconclusion\.|Unless\syou\sturn\soff\sauto\-renewal\,\sthis\smembership\swill\sautomatically\srenew\severy\s(two|three|five)\syears|Your\sorder\sfor\sBit\sCoin\shas\sbeen\sprocessed|This\samount\swas\sadjusted\sto\sthe\slive\scrypto\srate\.\sMake\ssure\sto\sdeposit\sthe\sexact\samount\sshown\sin\sthe\sinvoice\sfor\sfull\scredit|Dear\sCustomer\,\sThank\syou\sfor\sbeing\swith\sus\.|Team\sNorton\sDeluxe|a\sgentle\sreminder\sthat\syour\ssubscription\swith\s[A-z0-9\s]{2,20}\sis\sdue\sfor\srenewal|debited\sfrom\syour\saccount\swithin\s24\shours\sfor\sthe\snext\s(One|Two|Three|Four|Five)\sYear|applied\sto\syour\saccount\sin\sthe\snext\s[0-9]{2}\shours\,?\sas\sper\syour\sselected\srenewal\ssettings|reminder\sthat\syour\sPremium\sProtection\sMembership\swill\sbe\sautomatically\srenewed|Lower\syou\scan\ssee\syour\sorder\sinformation\:|thrilled\sto\sconfirm\sthat\syour\s.{2,30}\ssubscription\shas\sbeen\srenewed\ssuccessfully)(\W|$)/m tflags T_JR_BZ_BODY31 nosubject describe T_JR_BZ_BODY31 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY32 /(^|\b)(?:This\sis\sa\spolite\sreminder\sthat\syour\s[A-z0-9\s]{2,20}\s(Subscription|Membership)\swill\srenew\sautomatically\stoday\.|Thank\syou\sfor\syour\sunwavering\ssupport\sover\sthe\spast\s1\sYear\xF0\x9D\x97\xAC\xF0\x9D\x97\xBC\xF0\x9D\x98\x82\xF0\x9D\x97\xBF|\xF0\x9D\x97\xBC\xF0\x9D\x97\xBF\xF0\x9D\x97\xB1\xF0\x9D\x97\xB2\xF0\x9D\x97\xBF\s\xF0\x9D\x97\xB6\xF0\x9D\x98\x80\s\xF0\x9D\x97\xB0\xF0\x9D\x97\xBC\xF0\x9D\x97\xBB\xF0\x9D\x97\xB3\xF0\x9D\x97\xB6\xF0\x9D\x97\xBF\xF0\x9D\x97\xBA\xF0\x9D\x97\xB2\xF0\x9D\x97\xB1|\xF0\x9D\x97\x95\xF0\x9D\x97\xA7\xF0\x9D\x97\x96|\xF0\x9D\x97\xB5\xF0\x9D\x97\xAE\xF0\x9D\x98\x80\s\xF0\x9D\x97\xBB\xF0\x9D\x97\xBC\xF0\x9D\x98\x81|renewal\sfor\s[A-z0-9\s]{2,20}\shas\sbeen\ssuccessfully\splaced\sfor\sthe\snext\s[0-9]\-Year|(your|The)\sPayPal\sHoldings\,\sInc\s(membership|Team)|\-\s?After\sthe\sexpiry\sdate\shas\spassed\,\syour\sdevices\swill\sbecome\svulnerable|renew\syour\s[A-z0-9\s]{2,20}\ssubscription\sas\ssoon\sas\spossible\sto\sprotect\syour\spersonal\sdata|[Ii]f\sno\ssubscription\sis\sregistered\,?\syour\saccount\smight\sbe\smarked\sas\sinactive\sin\s[0-9]{2}\shours|please\sdownload\sthe\scancellation\sform\sby\sclicking\sthe\sbutton\sbelow|Cyber\sSafety\sThreats\sSolution\sfrom\sNortonLifeLock|NortonLifeLock\sSupport\sTeam)(\W|$)/m tflags T_JR_BZ_BODY32 nosubject describe T_JR_BZ_BODY32 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY33 /(^|\b)(?:subscription\shas\sbeen\ssuccessfully\srenewed\sfor\s[2-9]\sYear\.|feel\sfree\sto\scontact\sus\sat\s1\-\([0-9]{3}\)\-\([0-9]{3}\)\-3686\.|NortonTM\sCustomer\sCare|To\sterminate\sand\sreceive\sa\sprompt\sreimbursement\sfor\syour\syearly\ssubscription|To\sblock\sthe\sauto\-renewal\sservice\sor\sobtain\sadditional\sclarifications|subscription\sis\sset\sto\srenew\stoday\,\sand\s\$[0-9.,]+\swill\sbe\sdeducted\sfrom\syour\saccount\sby\stoday|\(c\)2025\sCompany|McAfee\,\sInc\.\sPhone\sHelp\:|Confirmed\!\sYour\sMembership\sis\sNow\sLive\.|covering\sthe\snext\s[2-5]\-Year\sof\sservice|^Once\syour\spayment\shas\sbeen\ssuccessfully\sprocessed\,$|Warm\sWishes\,\sMcAfee\,\sInc\.|Best\sregards\,\sThe\sPayPal\,\sInc\.\sTeam|We\shope\syou\'re\sexcited\sabout\syour\srecent\sorder\sfor\s.{2,30}\sAnti[Vv]irus|Subject:\sYour\s.{2,30}\sSubscription\sRenewal\sHas\sBeen\sConfirmed|Today\smarks\sthe\srenewal\sof\syour\ssubscription\,\sand\spayment\swill\sbe\sprocessed\.|subscription\srenewal\sfor\s[2-5]\sYear\sis\snow\scomplete|\#\#\#\sStay\sConnected\:\s\s?McAfee|Best\sregards\,\sThe\sPayPal\,\s?Inc\.\sTeam|Thank\sYou\sfor\sa\sYear\swith\sPayPal\,Inc\.|unwavering\ssupport\sover\sthe\spast\s1\sYear|Copyright\sPayPal\,\sLlc\.|Dear\sPayPal\,\sInc\.\sSubscriber|Coinbase\sTrade\sDesk\sLLC)(\W|$)/m tflags T_JR_BZ_BODY33 nosubject describe T_JR_BZ_BODY33 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY34 /(^|\b)(?:C\sCleaner\sou\sordered\sfrom\sLifeLock\sService\shas\sbeen\ssuccessfully\sprocessed|payment\sis\spart\sof\syour\songoing\ssubscription\swith\sLifeLock\sService|Enjoy\sThe\sServices\sBecause\sThe\sSubscription\sWill\sAutomatically\sRenew|In\sCase\sOf\sAny\sDispute\sOr\sTo\sCancel\sYour\sSubscription\sRenewal\sPlan|You\sHave\s[0-9]{2}\sHours\sTo\sReport\sIf\sYou\sWant\sTo\sDispute\sThis\sCharge|If\swe\sdo\snot\shear\sfrom\syou\swithin\s[0-9]{2}\shours\,?\swe\swill\srelease\sthis\spayment|Thank\syou\sfor\syour\sPayPal\,\sLlc\.\sPurchase|transaction\swill\srefect\swithin\s[0-9]{2}\shours|Life\sLock\sPC\sSupport\sBilling\sTeam|Your\spayment\sof\s\$[0-9]{3}\.[0-9]{2}\sfor\sPrivacy\sProtection|transaction\son\syour\sPayPal\saccount\sfor\sthe\spurchase\sof\sa\sBitcoin|Best\sregards\,\sPayPal\sSecurity\sTeam|Your\sCoinbase\sBitcoin\s\(BTC\)\spurchase\shas\sbeen\ssuccessfully\sprocessed\.|your\sGeekSquad\ssubscription\spackage\swill\srenew\ssoon|USD[0-9]{3}\.[0-9]{2}\swill\sbe\sprocessed\swithin\sthe\snext\s[0-9]{2}\shours\sfor\sa\s[0-9]\-Year\sterm|Cheerful\sSending\,\sGeekSquad\,\sLLC\.|Dear\sEsteemed\sPayPal\,Inc\.\sClient|we\surge\syou\sto\simmediately\sconnect\swith\sour\sFinancial\sSecurity\sBureau|Dear\sEsteemed\sPartner\,|Delighted\sSending\,\sGeek\sSquad\,\sLLC\.)(\W|$)/m tflags T_JR_BZ_BODY34 nosubject describe T_JR_BZ_BODY34 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY35 /(^|\b)(?:was\snot\sauthorized\sby\syou\,?\sit\'s\scritical\sthat\syou\snotify\sour\sSecurity\sResolution\sDepartment\swithout\sdelay|your\saccount\sregistration\swith\sPayPal\,\sInc\.\shas\sbeen\sofficially\sapproved|Your\sNorton360\sPurchase\sis\sComplete|Sending\sSmiles\,\sFinance\sHead\,\sNorton360|friendly\sreminder\sthat\syour\sGeekSquad\ssubscription\srenewal\sis\sapproaching|With\sappreciation\,\sGeek\sSquad\,\sInc\.|Great\sYour\sorder\sis\sconfirmed\.|your\ssubscription\swith\sPayPal\sUS|due\sfor\sauto\-renewal\son\sTODAY|subscription\sis\sdue\sfor\sauto\-renewal\son\sTODAY|Automatic\sPayment\sfor\sYour\sPayPal\sUS\sSubscription|\(c\)\s2025\sCompany|Account\sReactivated\sConfirmation|Omaha\sSteaks\sRush\!|Thanks\sagain\,\sPayPal\,\sBusiness\sSupport|payment\svia\sPayPal\shas\sbeen\sprocessed\ssuccessfully\sto\sPurchase\sBTC|\^\^Invoice\sfrom\sPayPal\^\^|your\sNorton\smembership\swill\sauto\-renew\sin\s[0-9]{2}\shours|Thanks\sfor\sRenewing\sYour\sMembership|Your\s.{2,15}\splan\shas\sbeen\srenewed\ssuccessfully\.\sYour\saccount\shas\sbeen\sbilled\sfor|charged\s\$[0-9]{3}\.[0-9]{2}\sfor\syour\srenewed\sGeekSquad\sPlan|valid\sfor\sthe\supcoming\s[2-5]\-Year\,|Geek\sSquad\,\sInc\.\sContact\sfor\sAssistance\:|and\sallassociated\sservices|PayPal\,\sInc\.\sPhone\:)(\W|$)/m tflags T_JR_BZ_BODY35 nosubject describe T_JR_BZ_BODY35 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY36 /(^|\b)(?:As\syour\sauto\-renewal\swas\snot\scancelled\,?\syour\smembership\shas\sbeen\srenewed\sand\spayment\sprocessed|all\sset\sfor\sanother\s[2-4][4-8]\sMonths\swith\sthe\sGeekSquad\sPlan|Important\sUpdate\:\sTransaction\sPosted\sto\sYour\sPayPal\sAccount|writing\sto\sinform\syou\sthat\sa\srecent\stransaction\shas\sbeen\ssuccessfully\sprocessed\son\syour\sPayPal\saccount|Order\sConfirmation\sfor\sYour\sMembership\sRenewal_[a-f0-9]{8}\-[a-f0-9]{4}|The\sLifeLock\sTechnical\sSupport\sServices\sTeam|wanted\sto\sremind\syou\sthat\syour\s.{7,40}\ssubscription\swill\sautomatically\srenew\son\s20[0-9]{2}\-[0-9]{2}\-[0-9]{2}\.|We\xE2\x80\x99d\slove\sfor\syou\sto\sjoin\sthe\sLifeLock\sCustomer\sSupport\scommunity|\xC2\xA9\s2025\sYour\sCompany\sName|\/Pay\(\)pal\s([Ss]ubscription[Tt]eam)|Please\squote\sInvoice\sNumber\:\sMSG[0-9]{9}\sin\sall\scommunications|The\sNorton\sSecurity\sand\sLifeLock\sTeam|an\sautomatic\srenewal\sof\syour\sNorton\sSecurity\sand\sLifeLock\ssubscription|\xC2\xA9\s2025\sPayPal\sInc\.\.\sAll\srights\sreserved|Great\snews\!\sYour\s(Norton|LifeLock|Geek\sSquad|PayPal|McAfee)\sorder\shas\sbeen\ssuccessfully\sprocessed\,|Hey\s[A-z]{2,15}\,\syour\smembership\swith\sMcAfee\shas\sbeen\ssuccessfully\srenewed\.|\(c\)\s2025\.\sAll\srights\sreserved\sworldwide\.)(\W|$)/m tflags T_JR_BZ_BODY36 nosubject describe T_JR_BZ_BODY36 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY37 /(^|\b)(?:charge\sof\sUSD\s[0-9]{3}\.[0-9]{2}\shas\sbeen\ssuccessfully\sprocessed\sfor\syour\scurrent\splan\svalid\sthrough\s[0-9]{2}\sMonths\.|happy\sto\sconfirm\sthat\syour\ssubscription\swith\sNorton360\shas\sbeen\srenewed\sfor\sthe\snext\s[0-9]{2}\sMonths|Recognition\sAfresh\,\sMc\sAfee\,\sLLC|USD\s[0-9]{3}\.[0-9]{2}\swas\scharged\sfor\sthe\s(Two|Three|Four|Five)\sYear\splan\.|A\srenewal\scharge\sof\sUSD\s[2-5][0-9]{2}\.[0-9]{2}\shas\sbeen\scompleted\sfor\syour\s2\sYear\ssubscription\sterm|your\s\'Norton\sLife\-Lock\'\ssubscription|Your\sOrder\sfor\sNorton\sLife\-Lock\sPremium\sSupport\shas\sbeen\ssuccessfully\srenewed|Thanks\s\&\sRegards\sNorton\-LifeLock|^GEEK\sSQUAD\sTeam\.|have\s24\sHrs\.\sTo\scancel\s\&\sget\san\sinstant\srefund\sof\syour\sannual\ssubscription|Our\ssystem\srecorded\sa\sOrder\son\syour\sPayPal\,\sInc\.\saccount|you\sdid\snot\sapprove\sthis\,?\slet\sus\sknow\.\sOtherwise\,\s\$[2-5][0-9]{2}\.[0-9]{2}|Hey\s[A-z}{2,10}\s[A-z\s]{2,15}\,\sthanks\sfor\splacing\syour\sorder\.\sPayment\shas\sgone\sthrough\ssuccessfully\.|This\sis\sto\sconfirm\sthat\syour\s.{2,20}\ssubscription\shas\sbeen\ssuccessfully\srenewed\sfor\s[3-5]\-Years?|\*Get\sexpert\shelp\sfrom\sGeek\sHelpline|Warm\sregards\,\sThe\sPayPal\,\sInc\.\sTeam|PayPal\,\sInc\.\sLLC\.)(\W|$)/m tflags T_JR_BZ_BODY37 nosubject describe T_JR_BZ_BODY37 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY38 /(^|\b)(?:confirms\sthat\syour\sPayPal\saccount\swas\sused\sto\spay\sCoin\sBase\sInc\.|1998\-2025\sPayPal\sUSA\-2\sLimited|\(c\)2025\sMcAfee\sInc\.\.|Dear\sCustomer\,\sThanks\sfor\sbeing\sour\svalued\scustomer\.|Thank\sYou\sfor\sChoosing\sus\.|Coin\sBase\sInc\.\sreceived\spayment\sfor\sthe\sBitcoin\scryptocurrency\spurchase\sfrom\syour\sPayPal\saccount|Thank\syou\sfor\sshopping\swith\sMicrosoft\sWorldwide\.|Worm\sRegards\sTeam\sPayPal|account\sis\stemporarily\srestricted\sdue\sto\sa\sreported\s\$[0-9]{3}\.[0-9]{2}\sBitcoin\stransaction|[0-9]{2}\shours\sto\sextend\syour\scoverage\sthrough\s2\-Year|McAfee\ssubscription\sis\sapproaching\sautomatic\srenewal\.|don\'t\swish\sto\scontinue\swith\sthe\sservice\sof\swant\sa\sRefund\sof\sthis\samount|PayPal\,LLCTeam|PayPal\,LLC\sWill\sRenew\sand\s\$[0-9]{3}\.[0-9]{1,2}\sis\sabout\sto\sDebit\sfrom\syour\saccount|Yours\ssincerely\,\sGeeksquad\,\sInc\.|Reminder\:\syour\sGeeksquad\ssubscription\swill\sbe\srenewed\sautomatically\.|A\scharge\sof\sUSD\s[3-5][0-9]{2}\.[0-9]{1,2}\swill\sapply\sin\sthe\snext\s12\shours\sfor\sthe\s[0-9]{2}\sMonths\sduration\.|Appreciatively\,\,\sMcAfee\,\sInc\.|We\'ve\sfinalized\syour\sMcAfee\srenewal\.\sUSD\s[3-5][0-9]{2}\.[0-9]{1,2}\shas\sbeen\sbilled|Gratefully\sYours\,\,?\sNorton\,\sLLC|We\'ve\scharged\sUSD\s\$[3-5][0-9]{2}\.[0-9]{1,2}\sfor\sthe\s12\sMonths\ssubscription)(\W|$)/m tflags T_JR_BZ_BODY38 nosubject describe T_JR_BZ_BODY38 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY39 /(^|\b)(?:successfully\sprocessed\syour\smembership\srenewal\s\(.{15,20}\)\sand\sare\sexcited\sto\scontinue\sserving\syou|In\sThankfulness\,\sMcafee\,\sInc|We\'ve\srenewed\syour\s[A-z\s]{2,15}\ssubscription.\sThe\samount\sof\sUSD\s\$[3-5][0-9]{2}\.[0-9]{2}\shas\sbeen\sbilled\sto\syour\saccount|Peacefully\sYours\,+\sMcafee\,\sInc\.|This\sSubscription\sWill\sAuto\-Renew\sEvery\s1\sYears\sUnless\sYou\sTurn\sIt\sOff\.\sNo\sLater\sThan\s24\shrs\.|This\semail\sis\sbeing\ssent\sto\sall\sthe\susers\swhose\sauto\-renewal\swas\snot\sstopped\sand\swas\scharged\sby\sthe\sautomatic\sdebit\ssystem|PayPal\sTransaction\sConfirmation\/Immediate\sAction\sRequired|If\syou\sdo\snot\stake\saction\swithin\s24\shours\,\syour\saccount\swill\sbe\spermanently\scharged\sfor\sthis\stransaction\.|Your\ssubscription\sfor\sAmazon\sPrime\sVideo\sPremium\shas\sbeen\sautomatically\srenewed|Amazon\sPrime\sCustomer\sService\sSupport\sHelpline|McAfee\sBilling\sSupport\sNeed\shelp\?\sContact\sour\ssupport\steam\:|Thank\syou\sfor\schoosing\sGeek\sSquad\sServices\.\sBilling\s\&\sAccount\sServices|PayPal\/Crypto\sPurchase\sConfirmation|Dear\,\sCustomer\,|If\syou\sdid\snot\sauthorize\sthis\stransaction\sor\swish\sto\scancel\,?\scontact\sBilling\sSupport\simmediately\.|N0R\.T0N|Please\scall\sPay\*\-Pal\sat)(\W|$)/m tflags T_JR_BZ_BODY39 nosubject describe T_JR_BZ_BODY39 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY40 /(^|\b)(?:PayPal\sBilling\sNotice\s\xE2\x80\x93\sReview\sNow\s-\s-\s[0-9]{5}|PayPal\s\xE2\x86\x92\sBitcoin\srequest|Regards\,\sOfficial\sSupport\sCenter\sfor\sNorton\xE2\x84\xA2|PayPal\/Crypto\sTransaction\sAlert|appear\son\syour\sfinancial\sstatement\swithin\s24\shours\sas\sPayPal\xE2\x80\x93\sDigital\sCurrency|Until\sNext\sTime\,\,\sMcafee\,\sInc\.|A\stotal\scharge\sof\sUSD\s[3-5][0-9]{2}\.[0-9]{2}\swill\sbe\sprocessed\sfor\sthe\s[3-5][6-8]\sMonths\sterm\.|your\smonthly\sbilling\samount\sof\s\$[7-9][0-9]{2}\.[0-9]{2}\shas\sbeen\ssuccessfully\sdebited\sfrom\syour\slinked\sbank\saccount|transaction\swill\sappear\son\syour\sstatement\sas\sPayPal\sDigital\sPurchase\swithin\s24\shours|Failure\sto\srespond\swithin\s24\shours\swill\sconfirm\sthis\scharge\sas\svalid|a\spayment\sof\s\$[3-5][0-9]{2}\.[0-9]{2}\shas\sbeen\scharged\sto\syour\sbank\saccount\sthrough\sour\ssecure\spayment\snetwork|Your\sPayPal\s\xE2\x86\x92\sBTC\stransaction|For\squick\sassistance\,?\scontact\sour\ssupport\sdesk\swithout\sdelay\.\sThis\sreceipt\sserves\sas\sconfirmation\sof\syour\spayment\.|We\shave\snoticed\san\sunauthorized\stransaction\sfrom\syour\sPayPal\saccount\.\sIf\sthis\stransaction\swas\snot\s\smade\sby\syou\,\splease\scal\sus\sto\scancel\sthis\sorder\.|P\@yP\@l|P\@yP\@L)(\W|$)/m tflags T_JR_BZ_BODY40 nosubject describe T_JR_BZ_BODY40 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY41 /(^|\b)(?:We\shave\sdetected\sa\srecent\stransaction\sfor\san\sApple\siPhone\s16\sPro\sfrom\syour\sPayPal\saccount\.|ID\s546PM_2025_QBPJ|Regads\,\sPayPal\sRenewal\sTeam|1A5TTK\~L2GAO\/70NCTWX5Z70M1S|Your\sBTC\spayment\salready\spaid\.|payment\sof\s\$[4-6][0-9]{2}\.[0-9]{2}\shas\sbeen\sinitiated\sto\sCoinbase\sCorporation|38ce2e56\-3652\-41ce\-ad5e\-3198b84631eb|Stripe\s2660\sMonterey\sRd|You\shave\sreceived\san\sorder\son\sNorton\.|prevent\sautomatic\srenewal\sand\sfurther\scharges\,?\syou\smust\scontact\sour\sverification\steam\swithin\s[0-9]{2}\shours:|Regards\,\sPayPal\sBilling\sDepartment|Regards\,\n\x0APayPal\sBilling\sDepartment\n\xC2\xA92025\sPayPal\,\sInc\.\sAll\srights\sreserved\.|CRITICAL:\sThis\sis\sa\sRECURRING\ssubscription|PAYPAL\sALERT:\sYour\saccount\swas\sjust\scharged\s\$[3-5][0-9]{2}\.[0-9]{2}\sUSD\sfor\sa\sBitcoin\spurchase|PayPalPayment\sProcessed|Your\sBitcoin\sAuto\-Investment\sis\sConfirmed|To\spause\,\scancel\,\sor\schange\syour\ssubscription\,\scall\swithin\s24\shours|We\shave\sreceived\syour\sPayPal\sto\sBTC\srequest\sand\sare\sprocessing\sit|PayPal\sTransaction\sConfirmed\s\-\sBTC\sWill\sBe\sCredited|Bitcoin\sAuto\-Buy\sExecuted\sSuccessfully|PayPal\sto\sBitcoin\s(transaction|purchase)\shas\sbeen\s(completed\ssuccessfully|successfully\sprocessed))(\W|$)/m tflags T_JR_BZ_BODY41 nosubject describe T_JR_BZ_BODY41 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY42 /(^|\b)(?:let\syou\sknow\sthat\syour\srecent\srenewal\srequest\sfor\syour\sMcAfee\spurchase\shas\sbeen\ssuccessfully\sprocessed|\xE2\x80\x93\sMcAfee\sAccounts\sDepartment|[Tt]he\srenewaled\samount\swill\sappear\sin\syour\soriginal\spayment|From\:\sBitdefender\sBilling\sDepartment|Refunds\sare\savailable\swithin\s24\shours\sof\srenewal\sconfirmation\.|With\sMy\sRegards\,\s2025\sMcafee\,\sInc|reminder\sthat\syour\sPremium\sProtection\sMembership\sis\sup\sfor\sauto\-renewal\.|With\sMy\sRegards\,\s2025\sMcAfee\,\sInc|delighted\sto\sinform\syou\sthat\syour\sPayPal\sto\sBitcoin\stransaction\swas\ssuccessful|Access\sconfirmed\smembership\ssecured\.|Your\sPayPal\sto\sBitcoin\sconversion\shas\sbeen\ssuccessfully\scompleted|has\sinvited\syou\sto\sPayPal\sto\sBitcoin|With\sContinued\sThanks\,\sNorton\s360\,\sLLC\.|renewal\sfor\sNorton\s360\sis\scomplete\.\sThe\stotal\spayment\sof\sUSD\s\$[0-9]{3}\.[0-9]{2}\shas\sbeen\sapplied\ssuccessfully\.|Your\sNorton\sBy\slifelock\ssubscription\sis\sdue\sfor\srenewal|Cheers\sand\sThanks\,\sNorton\sBy\slifelock|[Tt]he\srenewal\sfee\sof\s\$[3-5][0-9]{2}\.[0-9]{2}\swill\sbe\sautomatically\scharged\sfor\syour\s[0-9]\-Year\splan|your\sPayPal\s\xE2\x86\x92\sBTC\sexchange\shas\sbeen\ssuccessfully\srecorded|Contact\sPayPal\+1|P\@y\@\.Pal)(\W|$)/m tflags T_JR_BZ_BODY42 nosubject describe T_JR_BZ_BODY42 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY43 /(^|\b)(?:enrollment\sin\sour\sautomated\srecurring\sBitcoin\spurchase\sprogram|Your\snext\spurchase\sis\sscheduled\sfor\s\$next_date\.|Activate\sPayPal\sBTC\sand\sKeep\sYour\sData\sSafe|automatic\sBitcoin\spurchase\sof\s\$[3-5][0-9]{2}\.[0-9]{2}\sUSD\swas\ssuccessfully\scompleted\svia\sPayPal|your\sPayPal\s\xE2\x86\x92\sBTC\spayment\shas\sbeen\srecorded|This\sis\sa\snotification\sof\syour\sPremium\sMembership\sauto\-renewal\.|your\sSubscription\sis\snow\sfinalized\sand\ssecure|With\sLasting\sGratitude\,?\,?\sNorton\sLifeLock\sPremium|Your\sMcAfee\sIdentity\ssubscription\srenewal\sis\scomplete\.|Don\'t\sreply\sto\sthen\semail\.|McAfee\s(Solving|Packaging)\sSecurity\sEnabled|Updated\sSuccessfully\s\xE2\x80\x94\sGeek\sSquad|please\scontact\sour\s\*?\*Customer\sSupport\*\*?\sat|Hello\,\sverification\scompleted\sfor\sTransaction|Yours\sin\sRespect\,\,?\sNorton\sLifeLock\spremium\sprotection|Premium\sMembership\swill\srenew\sautomatically\.\sA\scharge\sof\sUSD[3-5][0-9]{2}\.[0-9]{2}\swill\sbe\sdebited\swithin\s24\shours\sas\sper\syour\ssubscription\spreferences|Your\sRenewal\sCompleted\s\xE2\x80\x94\sGeek\sSquad\sVerified|please\scall\sus\sto\scancel\sthis\sorder\.\sOtherwise\,\syour\s\$1[0-9]{3}\.[0-9]{2}\swill\sbe\scharged\stoday|100\%\sVirus\sProtection\sPromise2)(\W|$)/m tflags T_JR_BZ_BODY43 nosubject describe T_JR_BZ_BODY43 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY44 /(^|\b)(?:Best\sregards\,\sMcAfee\sTotal\sServices|(With\sTrue\sRespect\,\,|Copyright\s\xC2\xA92025|With\sMy\sRegards\,\,|Most\sAppreciatively\,\,)\sNorton\sLifeLock\s([Pp]remium\s[Pp]rotection|[Ss]ecurity)|Your\sOrder\sfor\sMcAfee\sProtection\sPackage\sHas\sBeen\sSuccessfully\sRenewed|McAfee\s\xE2\x80\x94\sCopyright\s\xC2\xA9\s2025\.|Your\sorder\sActivation\s[A-Z0-9]{9}\shas\sbeen\squeued|Order\sActivation\s[A-Z0-9]{9}\sconfirmed\sand\slogged|All\supdates\scomplete\s\xE2\x80\x93\sPayment\s[A-Z0-9]{9}|Geek\sSquad\sTeam\sBest\sBuy\sCo\.\,\sInc\.|email\sserves\sas\sa\sconfirmation\sthat\syour\sGeek\sSquad\sTotal\sProtection\sPlan\shas\sbeen\srenewed\ssuccessfully\sfor\sthe\snext\s[0-9]{2}\smonths\.|Thank\syou\sfor\schoosing\sGeek\sSquad.\s\xE2\x80\x94\sGeek\sSquad\sSupport\sTeam|This\sis\sa\sconfirmation\sthat\syour\sGeek\sSquad\sProtection\sPlan\shas\sbeen\srenewed\sautomatically\.|illegal\saccess\sto\syour\spersonal\sinformation\,\sYou\smust\sact\simmediately\sPhone\:|\xC2\xA9\s2025\sDigital\sBilling\sServices\s\xE2\x80\x94\sAll\sRights\sReserved\.|\xF0\x9F\x92\xB3\sPayPal\s\$[3-5][0-9]{2}\.[0-9]{2}\sUSD\s-\sAuto\sDebit\sScheduled|automated\sconfirmation\sregarding\sa\srecent\sdigital\scurrency\spurchase\sassociated\swith\syour\sPayPal\saccount|NortonLifeLock\sInc\.)(\W|$)/m tflags T_JR_BZ_BODY44 nosubject describe T_JR_BZ_BODY44 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY45 /(^|\b)(?:PayPal\sBilling\s\&\sAccount\sServices\s\xC2\xA9\s2025\sPayPal\sInc.\s\xE2\x80\x94\sSample\sNotice|Dear\sYour\sOrder\sNo\.\s[A-Z]{3}[0-9]{3}[A-Z]{2}\spayment\sis\ssuccessful|Thank\syou\sfor\sbeing\ssuch\sa\sloyal\smember\sof\sthe\sMcafee\scommunity\sfor\s[2-5]\sYear\.|invited\syou\sto\sInvoice\sAttached:\sPayment\sInstructions\sInside|Freely\sContact\sAt\shere\:\s\+1|invited\syou\sto\sbe\sa\smember\sof\sthe\sorganization\sBilling\sapplied\:\s\$[5-7][0-9]{2}\.[0-9]{2}\srenewal|confirmation\sthat\syour\srecent\sPayPal\spayment\sfor\sBitcoin\s\(BTC\)\shas\sbeen\ssuccessfully\srecorded\.|not\sauthorize\sthis\stransaction\sor\sbelieve\sthere\sis\san\serror\,?\splease\scontact\syour\sofficial\spayment\sservice\ssupport\sthrough\sthe\shelp\scenter\sin\syour\saccount|confirmation\sthat\syour\sAnnual\sDevice\sProtection\sService\shas\sbeen\ssuccessfully\srenewed|YOU\'VE\sSENT\sA\sPAYMENT\sOF\s\$[3=5][0-9]{2}\.[0-9]{2}\sUSD\s\sTO\sCOINBASE\sCORPORATION|invited\syou\sto\sYour\sreceipts\shave\sbeen\supdated|pleased\sto\sinform\syou\sthat\syour\sMicrosoft\sOffice\sPremium\shas\sbeen\srenewed\sfor\s[0-9]\sYears|Regards\,\sMicrosoft\sTotal\sProtection|wanted\sto\sinform\syou\sthat\syour\smembership\swith\sMcAfee\shas\sbeen\srenewed\sautomatically\.|P\@y\@\.PaI\.)(\W|$)/m tflags T_JR_BZ_BODY45 nosubject describe T_JR_BZ_BODY45 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY46 /(^|\b)(?:Your\sorder\sis\sbeing\sverified\sand\swill\smove\sinto\sprocessing\swithin\sthe\snext\s24\shours|For\sdetails\sand\sif\syou\swant\sto\scancel\,\sPlease\scontact\sour\shotline\snumber|Norton\steam\sThank\syou|invited\syou\sto\s[A-Z0-9]{8}\sis\sthe\sorder\syou\srecently\splaced|invited\syou\sto\sYour\sOrder\sNo\.\s[A-Z0-9]{8}\shas\sbeen\sdelivered|your\smembership\swill\s(renew\sautomatically|automatically\srenew)\s(each|every)\s[2-5]\sYear\,?\s(unless\syou\sopt\sto\scancel|but\syou\smay\scancel\sat\sany\stime)|Your\sorder\sis\scurrently\sbeing\sreviewed\sand\swill\slikely\sbe\scompleted\swithin\s[0-9]{2}\shours\.|Copyright\s\xC2\xA9\s2025\sCompany\.\sAll\srights\sreserved\.|payment\sof\s0-9]{3}\.0-9]{2}\sUSD\sto\s(Pay\'\*Pal|Pay\*\-Pal)\sUSDT|(Always\sAppreciative|Thank\sYou\sKindly|Kindly\sYours)\,\,Webroot\spowered\sby\sintel|Your\sorder\sis\scurrently\sbeing\sverified\.\sProcessing\sis\sexpected\sto\sbe\scompleted\swithin\sthe\snext\s24\shours,\safter\swhich\sa\sconfirmation\swill\sbe\sprovided\.|Premium\sMembership\sfor\sMicrosoft\sSecurity\sis\sset\sfor\srenewal\sshortly|\*?Bitcoin\s\(BTC\)\spurchase\*?\sbilled\sthrough\syour\sPayPal\saccount|invited\syou\sto\sOrder\s[A-Z0-9]{8}\sacknowledgement\sfrom|Appreciatively\,\,\sMcAfee\s360\sStandard|PAY\.PAL\.)(\W|$)/m tflags T_JR_BZ_BODY46 nosubject describe T_JR_BZ_BODY46 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY47 /(^|\b)(?:Sending\sHappiness\,\,\sMcAfee|You\spaid\s\xC2\xA5[0-9]{3}\sJPY\sto\sBlue\sCross\sBlue\sShield\sof\sMichigan|USD\s[3-5][0-9]{2}\.[0-9]{2}\shas\sbeen\sapplied\sto\syour\sOne\sYear\ssubscription\scycle\.|A\scharge\sof\sUSD\s\$[3-5][0-9]{2}\.[0-9]{2}\shas\sbeen\sprocessed\sfor\syour\s1\sYear\splan\.|An\sAuto\sDebit\scharge\sof\sUSD\s\$[3-5][0-9]{2}\.[0-9]{2}\swill\sbe\sapplied\sfor\sthe\snext\s1\-Year\sterm\.|(Truly|Always)\sAppreciative\,\,\sMcAfee\s(Inc\.|Service)|Kindly\sYours\,\,\sMcAfee\,\sLLC\.|Recognition\,\sMcAfee\,\sInc\.|email\sis\sto\sinform\syou\sthat\sa\sbilling\sinvoice\shas\sbeen\sgenerated\sfor\syour\sGeek\sSquad\sservice\splan|notifying\syou\sabout\sthe\sautomatic\srenewal\sof\syour\smembership\swith\sMcAfee|McAfee\sTransaction\sDate\:|This\semail\sis\sto\snotify\syou\sthat\sa\sbilling\sinvoice\shas\sbeen\sissued\sfor\syour\sGeek\sSquad\sservice\splan|notify\syou\sof\sa\srecent\sbilling\sinvoice\sassociated\swith\syour\sGeek\sSquad\sservice\splan|informed\sabout\sthe\supcoming\srenewal\scycle\sof\syour\sPremium\sProtection\sMembership|Here\xE2\x80\x99s\syour\sreceipt\.\s20[0-9]{2}\-[0-9]{2}\-[0-9]{2}\-Call\sOur\sHelpline|notifying\syou\sof\sa\spending\sbilling\sinvoice\son\syour\sGeek\sSquad\saccount|subscription\sof\sNORTON\sLIFELOCK|P\.A\.Y\.P\.A\.L)(\W|$)/m tflags T_JR_BZ_BODY47 nosubject describe T_JR_BZ_BODY47 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY48 /(^|\b)(?:GeekSquad\sFunds\sReceipt\sDate\:|Transaction\srecord\sfor\sarrangement\sno\.\s[A-Z]{7}[0-9]|(With\skind\sregards|Much\sappreciated|Thankfully|With\ssincere\sthanks)\,\,\sGeek\sSquad|the\sGeek\sSquad\s1\-Year\sSubscription\susing\sour\splatform|claim\srefund\sthen\splease\sfeel\sfree\scontact\sus\sour\scustomer\ssupport\snumber|Your\sAccount\swill\sbe\sDebited\sby\s$[3-5][0-9]{2}\.[0-9]{2}\sUSD\swithin\s24Hrs|Four\sYearsTotal\sAmount:\sUSD[3-5][0-9]{2}\.[0-9]{2}|If\syou\swish\sto\scancel\sthe\stransaction\sor\syou\swant\sto\sclaim\srefund\sthen|GeekSquad\s(Account\sCharge|Plan\sBundle)\sDate|Yours\sin\sRespect\,\,\sMcAfee\sMembership|Ever\sGratefully\,\,\sMcAfee\sPC\sMembership|your\sPremium\sMembership\sis\sset\sfor\sautomatic\srenewal\.\sAn\samount\sof\s$[3-5][0-9]{2}\.[0-9]{2}\swill\sbe\sdebited\swithin\s24\shours|message\sconfirms\sthat\sa\sbilling\sinvoice\shas\sbeen\sgenerated\sfor\syour\sGeek\sSquad\sservice\splan|P\@YP\@L\sAccount\sServices|Premium\sMembership\srenewal\sis\sdue\.\sUSD[3-5][0-9]{2}\.[0-9]{2}\swill\sbe\scharged\sautomatically|\xC2\xA92026\sMcAfee\sLifelock|Yours\sin\sAppreciation\,\,\sMcAfee|PayPal\sCourtesy\sMessage\sAbout\siPhone\s17\sPro\sMax\sOrder|Hey\sThere\sHonorable\sUser|paid\sfor\syour\sAmazon\sInc\.\son\s20[0-9]{2}\-[0-9]{2}\-[0-9]{2}\susing\sPayPal\.)(\W|$)/m tflags T_JR_BZ_BODY48 nosubject describe T_JR_BZ_BODY48 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY49 /(^|\b)(?:cryptocurrency\stransaction\shas\sbeen\ssuccessfully\sprocessed\sthrough\syour\sPayPal\saccount|Thank\syou\sfor\schoosing\sPayPalPayPal\sBilling\sDepartment|Thanks\sand\sRegards\sGeek\sTeam|With\sHonest\sThanks\,\sMcAfee\,\sInc\.|With\sHeartfelt\sThanks\,\,\sNorton\,\sLLC|Membership\scontinues\sthanks\sfor\sstaying\.|Norton\ssubscription\shas\sbeen\srenewed\sand\sUSD\s\$[4-5][0-9]{2}\.[0-9]{2}\shas\sbeen\ssuccessfully\scharged\sfor\syour\s[0-9]\sYear\splan|inform\syou\sthat\sa\sbilling\sinvoice\shas\sbeen\ssuccessfully\sprocessed\sfor\syour\sNorton\sLifeLock\sSecurity\ssubscription|No\sfurther\ssteps\sare\srequired\.\sFor\sassistance\,\splease\scall\sCustomer\sCare\sHelpline\:|NORTON\sLIFELOCK\s\xE2\x80\x93\sBILLING\sINVOICE|inform\syou\sthat\sa\sbilling\sinvoice\shas\sbeen\sgenerated\sfor\syour\sNorton\ssubscription|Norton\sLifelock\s+In\s1\syear\s\$[3-5][0-9]{2}\.[0-9]{2}\sAutomatic\sDebit|paid\sfor\syour\sAmazon\sInc\.\son\s[0-9]{4}\/[0-9]{1,2}\/[0-9]{1,2}\susing\sPayPal|Regards\sNorton\sBilling\sTeam|subscription\sfee\sto\sNorton\sLife\-Lock\sSecurity\shas\sbeen\spaid\sin\sfull\.|Your\sorder\shas\sbeen\ssuccessfully\sprocessed\,\.\s2026\-[0-9]{1,2}\-[0-9]{1,2}\-Service\sTeam\sNumber\:|Renewal\sfinalized\splan\srunning\.|Pay\.Pal\.\sHoldings,\sInc|gr\@teful|patr0nage)(\W|$)/m tflags T_JR_BZ_BODY49 nosubject describe T_JR_BZ_BODY49 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY50 /(^|\b)(?:With\sLasting\sGratitude\,\,\sPayPal\,\sLLC|Payment\sConfirmation:\sOrder\sActivation\s[A-Z]{4}[0-9]{5}\sprocessed\ssuccessfully|Wishing\sYou\sWell\,\sPayPal\,\sLLC|In\sThankfulness\,\,\sPayPal\,\sInc|inform\syou\sthat\syour\sGeek\sSquad\sProtection\sPlan\shas\sbeen\srenewed\ssuccessfully|your\sGeekSquad\ssubscription|With\sTrue\sRespect\,\,\sGeekSquad\,\sInc|you\spaid\sfor\syour\sAmazon\sInc.\son\s20[0-9]{2}\-[0-9]{2}\-[0-9]{2}\susing\sPayPal|Dear\,your\spayment\shas\sbeen\sreceived\.|billing\sinvoice\shas\sbeen\sgenerated\sand\sprocessed\sfor\sa\sGeek\sSquad\sservice\sassociated\swith\syour\saccount|notify\syou\sthat\sa\sbilling\sinvoice\shas\sbeen\sissued\sfor\syour\sNorton\ssubscription|your\sPayPal\sto\sBTC\spayment\shas\sbeen\ssuccessfully\sreceived\sand\sregistered|Sincerely\,\sNortonTM\sCustomer\sCare|Receipt\sof\sPayment\s\xE2\x80\x93\sPayPal\sTransaction\sSuccessful|pleased\sto\sinform\syou\sthat\syour\sBitDefender\ssubscription\srenewal\shas\sbeen\scompleted|subscription\swill\sAuto\-activate\sEvery\syear\sunless\syou\sturn\sit\soff|subscription\swill\sbe\sAuto\-Purchase\sas\sper\splan|writing\sto\sinform\syou\sthat\sthe\sbilling\sprocess\sfor\syour\ssecurity\ssubscription\shas\sbeen\scompleted|Your\sCoverage\sPackage\splan\sfor\s3\sYears\shas\snow\sexpired)(\W|$)/m tflags T_JR_BZ_BODY50 nosubject describe T_JR_BZ_BODY50 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY51 /(^|\b)(?:find\sattached\syour\sorder\ssummary\.\s20[0-9]{2}\-[0-9]{2}\-[0-9]{2}\-Assistance\sService\sPhone\:|sent\sa\spayment\sof\s[3-5][0-9]{2}\.[0-9]{2}\sUSD\sto\sAmazon\-com\,\sInc|Copyright\,\s2024\sWindows\sDefender|you\shave\s24\shours\sto\sinitiate\sa\scancellation\sand\sreceive\san\simmediate\srefund\sof\syour\sannual\ssubscription\sfee|a\sbilling\sinvoice\shas\sbeen\ssuccessfully\sprocessed\sfor\syour\sNorton\sLife-Lock\sSecurity\ssubscription|charge\shas\sbeen\ssuccessfully\sprocessed\sthrough\syour\ssaved\sPayPal\saccount|SalonSync\ssubscription\shas\sbeen\srenewed\sfor\sthe\supcoming\sannual\sservice\sterm|successful\sprocessing\sof\syour\ssubscription\srenewal\sunder\syour\selectronic\sapproval|Finance\sHead\sof\sGeekSquad\,\sllc\.|serving\syou\sthrough\sGEEK\sSQUAD\sService|GEEK\sSQUAD\,\sLLC|payment\shas\sbeen\ssuccessfully\sprocessed\sthrough\syour\ssaved\sPayPal\saccount\sto\smaintain\suninterrupted\sservice|Thank\syou\sfor\schoosing\sAvast\sOne\sinc|Your\s\"Norton\sLife\-Lock\"\ssubscription\sis\sabout\sto\srenew|Sincerely\,\s\xC2\xA91997\-2026\sNorton\sLife\-Lock|transaction\svalued\sat\sUSD[3-5][0-9]{2}\.[0-9]{2}\sfor\sCrypto|paypal\sSupport\sTeam|Subscription\sPayment\sSuccessfully\sProcessed\s\@|Kind\sregards\,\spaypal|N0rt0n\s360\sInc|P\@Y_P\@L\sactivities)(\W|$)/m tflags T_JR_BZ_BODY51 nosubject describe T_JR_BZ_BODY51 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY52 /(^|\b)(?:Best\sregards\,\spaypal\sBilling\sTeam|Thank\syou\sfor\schoosing\spaypal\.|The\sNorton\sLifeLock\,\sInc\.|\xC2\xA92026\sCompany|Thanks\sfor\srenewing\sservice\scontinues\.|Copyright\s\xC2\xA9\s2026\sCompany|Yours\sTruly\sHelpline\:|Digital\sCurrency\sAcquisition\s\-\sBlockchain\sSettlement|(Bitcoin|\(BTC\))\spurchase\shas\sbeen\sinitiated\susing\syour\sPayPal\saccount|PAYPAL\sBilling\sServices|the\ssystem\shas\sprocessed\sthe\sannual\srenewal\sto\sensure\syour\saccess\sto\sservices\scontinues\swithout\sinterruption|((Kind|Best)\sregards\,|for\schoosing|for\sbeing\spart\sof|your\scontinued\strust\sin|provided\sby|continued\strust\sin)\sPAYPAL|your\sNorton\sLife\-Lock\sSecurity\ssubscription\sbilling\sinvoice\shas\sbeen\ssuccessfully\sprocessed|Billing\sTeam\sNorton\sLife\-Lock\sBilling\sDepartment|With\sHonest\sThanks\,\sMalwarebytes|apply\sfor\sRefund\sand\sCancellation\sof\sthis\sorder\skindly\scontact\sUS|Best\sregards\,\sNorton\sSupport\sTeam|Your\sBitcoin\sTransfer\sHas\sBeen\sApproved\sby\s\sNetwork|Bitcoin\spurchase\shas\sbeen\ssuccessfully\sauthorized\sand\scompleted\sthrough\syour\ssaved\sPayPal\saccount|event\:\sBitcoin\sOrder\sConfirmed\s\xE2\x80\x93\sFunds\sTransferred|Respectfully\sSubmitted\,\sTotalAVPremium|Kindest\sRegards\,\sBitdefender\,\sEnterprises)(\W|$)/m tflags T_JR_BZ_BODY52 nosubject describe T_JR_BZ_BODY52 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY53 /(^|\b)(?:that\san\sBilling\sInfo\shas\sbeen\ssuccessfully\screated\sfor\syour\sBitdefender\ssubscription|Gratefully\sReceived\,\sBitdefender\,?\s\&\sCompany|Bitcoin\spurchase\shas\sbeen\ssuccessfully\sverified\sand\sprocessed\sthrough\syour\ssaved\sPayPal\saccount|Best\sregards,\sPayPal\sSecurity|If\syou\sdid\snot\sauthorize\sthis\stransaction\s\.Contact|that\san\sShipping\sDetails\shas\sbeen\screated\sfor\syour\sTotalAVPremium\ssubscription|SecurePayPalBilling\sTeam|To\srequest\scancellation\,\sContact\s\s1.{2,25}\s\swithin\s12\shours\.|NORT0N|inform\syou\sthat\sa\sbilling\sinvoice\shas\sbeen\sissued\sfor\syour\sGeek\sSquad\sservice\splan|Regards\,\sGeek\sSquad\sBilling|confirmation\sthat\syour\sGeek\sSquad\sBest\sBuy\sService\splan\'s|transaction\shas\sbeen\sprocessed\ssuccessfully\sthrough\syour\sPay\.Pal\saccount|sup\@port\steam|If\syou\sdid\snot\sinitiate\sthis\stransaction\,\sPlease\sreview\syour\saccount\ssettings\sor\scontact\ssupport|[Tt]his\sserves\sas\sa\snotice\sthat\syour\sNorton\ssubscription\sis\sset\sfor\srenewal|Microsoft\s365\sis\snow\sactive\.\sA\spayment\sof\sUSD\s6[0-9]{2}\.[0-9]{2}\shas\sbeen\ssuccessfully\sprocessed\sand\sapplied\sto\syour\saccount|SECURITY\sNOTICE\:\sFlagged\sUSD\s6[0-9]{2}\.[0-9]{2}\sBTC\swithdrawal\sfrom\syour\slinked\sPaypal)(\W|$)/m tflags T_JR_BZ_BODY53 nosubject describe T_JR_BZ_BODY53 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY54 /(^|\b)(?:Warmest\sregards\sNorton\sSecured\spowered\sby\ssymantec|Thank\syou\sfor\syour\srecent\smembership\srenewal\swith\sPayPal\,Inc\.\son\s202[0-9]\-[0-9]{2}\-[0-9]{2}|SecurePay\.Pal\sCredit|A\scharge\sof\s\$[3-5][0-9]{2}\.[0-9]{2}\sUSD\shas\sbeen\sprocessed\svia\sAuto\sDebit\sand\swill\sappear\son\syour\sbank\sstatement\swithin\s24\shours\.|Your\sGeek\sSquad\sSecurity\sServices\sannual\ssubscription\shas\sbeen\ssuccessfully\srenewed\.|invoice\swill\sbe\sautomatically\spaid\sfrom\syour\saccount\swithin\s12\shours\sof\sreceiving\sthis\semail\sas\sper\sthe\sauto\-deduction\spolicy\sof\sour\ssecure\spayment\ssystem|\xC2\xA9\s2026\sSecurePay\.Pal\sAll\sRights\sReserved\.|Your\sProduct\sis\sprocessed\.\sIf\syou\shave\sany\sinquiries\,?\splease\sreach\sout\sto\sus|We\'ve\snoticed\san\sunusual\scharge\son\syour\sGeekSquad\saccount\.|We\'ve\sobserved\sa\sTransaction\son\syour\sPayPal\,\saccount\.|Respectfully\sPayPal\sGateway|PayPal\sAccount\sReview\s\&\sCompliance\sCustomer\sBilling\sTeam|part\sof\sPayPal\sPayment\sProcessors|Warm\sregards\,PayPal\sPayment\sProcessors|Geek\sSquad\sSecurity\sDeluxe\sService\sConfirmation|With\sUtmost\sRespect\,\sGeek\sSquad\sPrime|Geek\sSquad\sPrime\sTransaction\sReference|Bill\sTo\s\:\sDear\sCustomer|Sincerely\,\sMicrosoft\s365)(\W|$)/m tflags T_JR_BZ_BODY54 nosubject describe T_JR_BZ_BODY54 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY55 /(^|\b)(?:billing\sfor\sthis\srenewal\shas\sbeen\ssuccessfully\scompleted\susing\syour\ssaved\sPayPal\saccount|WELLS\sFARGO\sGEEK\sSQUAD\sPROTECTION\sPURCHASE\sINVOICE|reaching\sout\sto\sconfirm\sthat\syour\sMcAfee\sInternet\ssafety\sservice\splan\shas\sbeen\srenewed|Sincerely\,\sPayPal\sHelp\sCenter\sSupport\sTeam|\xC2\xA9\s2026\sPayFlow\sServices\.\sAll\srights\sreserved\.|Support\s\&\sRefundPolicy|\xE2\x80\x93\sGeek\sSquad\sBilling\sTeam|event\:\sRenewal\scomplete\sfor\syour\saccount|Kind\sregards\,\sPayPal\sAccount\sReview\s\&\sCompliance\sBilling\sServices|Contact\sPayPall|wanted\sto\slet\syou\sknow\sthat\syour\sNorton\sAntivirus\sApp\ssubscription\shas\sbeen\srenewed\sfor\sthe\supcoming\syear|event\:\sYour\sSubscription\sRenewal\sIs\sConfirmed|Warm\sregards\,\sPayPal\sHelpdesk\sSupport\sTeam|Business\sAccount\sOpening\sRequest\sPayPal|Best\sregards\sPayPal\sBusiness|inform\syou\sthat\syour\sGeek\sSquad\sSecurity\sServices\sannual\splan\shas\sbeen\srenewed\ssuccessfully|Kind\sregards\,\sPayPal\sHelp\sCenter\sBilling\sTeam|McAfee\sPC\ssetup\sand\sconfiguration\ssubscription\shas\sreached\sits\sscheduled\srenewal\sdate|McAfee\sCyberwards\ssubscription\shas\sbeen\srenewed\sfor\sthe\snext\s12\-month\sbilling\scycle|Kind\sregards\,PayPal\sFraud\sPrevention\s\&\sSecurity)(\W|$)/m tflags T_JR_BZ_BODY55 nosubject describe T_JR_BZ_BODY55 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY56 /(^|\b)(?:Billing\sConfirmation\s\xE2\x80\x93\sPayPal\sto\splace\syour\sorder|your\smcafee\sProtection\sManuals\ssubscription|Kind\sregards\,\sPayPal\sSecurity\sBilling\sServices|Sincerely\,\sTeam\sGeek\sSquad|Thank\syou\,\sYour\sGeek\sSquad\sPlan\s\([0-9]{6}\)\srenews|event:\sConfirmation\sof\sYour\sSubscription\sRenewal|confirmation\sregarding\syour\smcafee\sMalware\sProtection\ssubscription\sstatus|suspicious\sbilling\srequest\shas\sbeen\sdetected\sunder\syour\sGeek\sSquad\saccount|Thank\syou\,\sGeek\sSquad\sSecurity\sDepartment|confirm\sthat\syour\sMicrosoft\s365\smembership\srenewal\shas\sbeen\ssuccessfully\scompleted\.|noticed\san\sunauthorized\sTRANSACTION\sfrom\syour\sPayPal\saccount|mcafee\sProvirus\sPlus\ssubscription\srecently\sreached\sits\srenewal\sdate|N0RT0N\sHelp\sCenter\sBilling\sServices|With\ssincere\sregards\sMcAfee\sintel\scompany|Your\s1\sYear\sauto\-renewal\ssubscription\swill\scontinue\sunless\scanceled\sat\sleast\s24\shours\sbefore\sthe\srenewal\sdate|your\sN0RT0N\sInternet\sSecurity\sPro\ssubscription|N0RT0N\sAntiVirus\sStandard\smembership|N0RT0N\sSecurity\sBilling\sServices|status\sof\syour\sN0RT0N\sGenie\sComplete\sGuard\ssubscription|Regards\,\sGeek\sSquad\sPartnership\sManagement\sBilling\sDepartment|aut0mated|m0ney|deducti0n|P\@YP\@L\sClient\sSupport)(\W|$)/m tflags T_JR_BZ_BODY56 nosubject describe T_JR_BZ_BODY56 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY57 /(^|\b)(?:KINDLY\sCALL\sUS\sFOR\sCANCELLATION\sOF\sTHIS\sORDER\sOTHERWISE\sYOUR\s\$[3-5][0-9]{2}\.[0-9]{2}\sUSD\sWILL\sBE\sCHARGED|you\shave\sany\squery\sregarding\sthis\sorder\,\scall\sour\simmediately\.|event\:\sBilling\sand\sSubscription\sUpdate|Kind\sregards\,\sMcAfee\sPartnership\sManagement|Bitcoin\sthrough\sCoin\sbase\sCorporation|Thanks\s\&\sRegards\,PayPal\sSupport\sTeam\.|Copyright\s\xC2\xA9\s1999-2026\sPayPal1\,\sInc\.\sAll\srights\sreserved|Your\sN0RT0N\sRansomware\sComplete\sProtection\ssubscription|Kind\sregards\,\sN0RT0N\sFraud\sPrevention\sBilling\sTeam|Your\sN0RT0N\sIdentity\sTheft\sProtection\smembership\shas\sbeen\srenewed|\xC2\xA9\s1999\-2026\sPayPal1\,\sInc\.|payment\sto\sUID[0-9]{6}\sCryptoXchange\sPro|Your\sNorton\sLifeLock\spayment\sof\s\$[3-5][0-9]{2}\.[0-9]{2}\shas\sgone\sthrough\ssuccessfully|regarding\syour\sN0RT0N\sDeepfake\sPlus\sDefense\ssubscription|N0RT0N\sTechnical\sSupport|service\supdates\sand\scustomer\ssupport\sfrom\sN0RT0N\sFraud\sPrevention\s\&\sSecurity|new\srecurring\spayment\sprofile\shas\sbeen\sestablished\sfor\syour\saccount\swith\sUID[0-9]{6}|N0RT0N\sSecurity\sBilling\sServices|notice\sconfirms\sa\sBitcoin\s\(BTC\)\stransaction\sbilled\sthrough\syour\sPayPal\saccount\.|Norton\sLifeLock\sSupport\s\xC2\xA9\s2026\sAll\sRights\sReserved)(\W|$)/m tflags T_JR_BZ_BODY57 nosubject describe T_JR_BZ_BODY57 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY58 /(^|\b)(?:This\sis\sabout\syour\sNorton\sLifeLock\sPremium\sProtection\saccount|Ever\sYours\,\sNorton\sLife\sLock\sPC\sProtection|Microsoft\s365\ssubscription\srenewal\shas\sbeen\scompleted\ssuccessfully\,?\sand\syour\sservice\saccess\swill\scontinue|Your\sPayPal\saccount\shas\sbeen\scharged\ssuccessfully\sfor\sa\sBitcoin\s\{BTC\}\spurchase|your\sPremium\sMembership\sand\sMcAfee\sPremium\sProtection\srenewal\sfor\s48\sMonths\shas\sbeen\scompleted|pleased\sto\sinform\syou\sthat\syour\scredit\scard\sapplication\shas\sbeen\sapproved\,\sand\syour\snew\scard\saccount\shas\sbeen\ssuccessfully\screated|\(c\)\s2026\sPayPal\,\sLLC\.|Until\sWe\sMeet\sAgain\,Geek\sSquad\sPC\sProtection|reaching\sout\svia\sthis\sautomated\schannel\sto\supdate\syour\smembership\soverview|pleased\sto\sprovide\syou\swith\syour\sdigital\sinvoice\sfor\sthe\sannual\srenewal\sof\syour\ssecurity\sservices|N0RTON\sOfficial\sPayment\sReceipt|\xC2\xA9\s2026\sAcademic\sServices\.\sAll\sRights\sReserved\.|planis\sbiled\sannually|YouTube\sLLC|A\snew\sautomatic\sbilling\sagreement\shas\sbeen\ssuccessfully\slinked\sto\syour\saccount|authorized\sBlockchain\sFinance\sAuthority\sto\sinitiate\sweekly\stransactions|invited\syou\sto\sService\sUpdate\sfor\sYour\sAccount)(\W|$)/m tflags T_JR_BZ_BODY58 nosubject describe T_JR_BZ_BODY58 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY59 /(^|\b)(?:A\spre\-arranged\stransaction\stotal\sof\s\$[3-5][0-9]{2}\.[0-9]{2}\sUSD\sis\sscheduled\sto\sprocess\sinside\sthe\snext\s[0-9]{2}\shours|Renewed\sappreciation\,\,\sMcfee\sProtection|payment\sof\s\$[3-5][0-9]{2}\.[0-9]{2}\swill\sbe\scharged\sunder\sthe\sMicrosoft\sOffice\sPlan\sand\swithdrawn\sfrom\syour\schecking\saccount|Kind\sregards\,\sGroup\sMicrosoft|Hello\sShipping\sLog\s[A-Z]{4}[0-9]{5}\sapproval\sgranted|Warm\sHugs\sFinance\sTeam|Best\sRegards\,\sNorton\sRenewal\sTeam|Funds\shave\sbeen\sdeducted\sfrom\syour\sselected\spayment\smethod\sand\sdelivered\sto\sthe\sdesignated\srecipient\swithout\sinterruption|\$[0-9]{3}\sto\sNorton\sInclusivetCorporation|Bill\sTo\s\:\sDear\sCustomer|Kindly\sYours\,\sAccounts\sTeam\:|invited\syou\sto\sCoverage\sDetails\sAre\sAvailable\sFor\sReference|Faithfully\,\s\xE2\x80\xA2\sNorton\sLife\sLock\sPC\sProtection|Here\'\'s\sToll\-free\sNumber|contacting\syou\sto\snotify\sthat\sa\sbilling\sinvoice\shas\sbeen\ssuccessfully\sgenerated\sfor\sa\sGeek\sSquad\sservice|If\syou\shave\squestions\sregarding\sthis\sinvoice\,\sContact\sFor\sassistance\,\splease\sCall|Geek\sSquad\sTeam\s\|\s2026\sAll\srights\sreserved\.|notify\syou\sthat\syour\sMinecraft\sEducation\sEdition\ssubscription\srenewal\sis\sscheduled\sfor\sprocessing\stoday)(\W|$)/m tflags T_JR_BZ_BODY59 nosubject describe T_JR_BZ_BODY59 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY60 /(^|\b)(?:Norton\sLife\slock\sinc\sBILLING\sCONFIRMATION|Regards\,\sTeam\sMicrosoft\sCompany|Your\spayment\sof\sUSD\s[3-5][0-9]{2}\.[0-9]{2}\shas\sbeen\ssuccessfully\sprocessed\,\sand\syour\saccount\sremains\sactive\swith\sthe\srenewed\sservice\speriod|renewal\sfor\sthe\sMcAfee\sPremium\sProtection\smembership\sunder\sthe\s\s4\-Year\splan\shas\sbeen\scompleted\ssuccessfully|\xC2\xA9\s2026\sMcAfee\sCorporation\.|Thank\syou\,\sGeek\sSquad\sAccount\sServices|payment\sfor\syour\sGeek\sSquad\sBest\sBuy\sService\splan\shas\sbeen\sreceived\sand\sconfirmed|Automatic\spayment\sset\sup\sto\sUID[0-9]{6}\sBlockchain\sFinance\sAuthority|If\sthis\sorder\sis\splaced\swithout\syour\sauthorization\sor\sif\syou\shave\sany\squeries\srelated\sto\syour\sorder\,\syou\scan\sreach\sour\s24\/7\shelpline\snumber\sprovided\sbelow|Microsoft\sOneNote\ssubscription\swith\sMicrosoft\sis\sdue\sfor\srenewal|Account\sServices\sMicrosoft|message\sconfirms\sthat\syour\sComputer\sProtection\smembership\shas\sbeen\srenewed\ssuccessfully|\xC2\xA92026\sMicrosoft\sOffice\sCorporation\.|We\swould\slike\sto\sinform\syou\sthat\syour\ssubscription\splan\shas\sbeen\srenewed\ssuccessfully\.|inform\syou\sthat\syour\sMicrosoft\s365\sSecurity\sServices\sannual\ssubscription\shas\sbeen\sextended\sfor\sthe\supcoming\syear)(\W|$)/m tflags T_JR_BZ_BODY60 nosubject describe T_JR_BZ_BODY60 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY61 /(^|\b)(?:A\scharge\sof\s\$[5-7][0-9]{2}\.[0-9]{2}\shas\sbeen\sapplied\sto\sthe\scard\slinked\swith\syour\sMicrosoft\saccount\.|Dear\sCustomer\,\sYour\sPayPal\spayment\shas\sbeen\ssuccessfully\sprocessed|Sincerely\,\sGeek\sSquad\sBilling\sTeam|pleased\sto\sconfirm\sthat\sthe\stransaction\sassociated\swith\syour\saccount\shas\sbeen\scompleted|Warmest\sregards\sPayPal\sGateway|reaching\sout\sto\sinform\syou\sthat\swe\shave\srecently\sdetected\sa\sInvoice\sassociated\swith\syour\sPayPal\,?\saccount|[Yy]our\sGeek\sSquad\sservice\splan\shas\sbeen\srenewed\sfor\sanother\sbilling\speriod\.|payment\sof.{1,6}\$[3-5][0-9]{2}\.[0-9]{2}\sUSD\shas\sbeen\sauthorized\sand\sprocessed\susing\sthe\spayment\smethod\syou\shave\schosen\.|Sincere\,\sGeek\sSquad\sDepartment\sof\sBilling|inform\syou\sthat\sa\spayment\sof\sUSD\s[4-7][0-9]{2}\.[0-9]{2}\shas\sbeen\srecorded\sin\syour\sMcAfee\saccount\shistory|upcoming\smembership\sservice\speriod\sreflected\swithin\sthe\sapplicable\saccount\srecords|With\ssincere\srespect\,\sGeek\sSquad\sTeam|For\sany\senquiries\sregarding\syour\sorder\.|accept\sthis\sexclusive\soffer\sas\sa\stoken\sof\sour\sgratitude\.[A-Z]{15}|successfully\srecorded\sa\spayment\sof\sUSD\s[3-6][0-9]{2}\.[0-9]{2}\sassociated\swith\syour\sMcAfee\saccount|Copyright\,\s2026\sGeek\sSquad\sSupport)(\W|$)/m tflags T_JR_BZ_BODY61 nosubject describe T_JR_BZ_BODY61 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY62 /(^|\b)(?:We\sdetected\sa\stransaction\srequest\sassociated\swith\syour\sPayPal\saccount\.|With\sgenuine\sgratitude\,\sGeek\sSquad\sLLC|^We\shave\snoticed\san\sunauthorized\stransaction\sfrom\syour\sAmazon\saccount\.|invited\syou\sto\ssubscriptions\sBill\spaid\ssuccessfully|Your\sPay\-Pal\saccount\swas\sused\sfraudulently\sto\spurchase\ssubscription|pleased\sto\slet\syou\sknow\sthat\syour\ssubscription\shas\sbeen\srenewed\sfor\sthe\snext\sbilling\speriod\.|Thank\syou\,\sYour\sNorton\s360\sDeluxe\sPlan|Sincerely\s,Billing\sDepartment\sof\sthe\sGeek\sSquad|Geek\sSquad\sBest\sBuy\sService\srenewal\syou\shad\splanned\shas\sbeen\ssuccessfully\sdone|your\splanned\sGeek\sSquad\sBest\sBuy\sService\srenewal\shas\sbeen\ssuccessfully\sexecuted|Invo_ice\sReceipt|continuing\syour\ssubscription\swith\sGEEK\sSquad|N0RATon\s\-\sMonthly\sSubscription\sRenewal|support\@Payypl\.com|We\shave\sprocessed\sthe\scharge\sto\syour\sactive\sledger\.|Sold\sby\:\sAmazon\.com\sServices\sLLC|This\sis\sa\sreminder\sthat\syour\sMicrosoft\s365\ssubscription\sis\sscheduled\sfor\srenewal|contact\sGeek\sSquad\sthrough\stheir\sofficial\scustomer\ssupport\s\steam\simmediately|Norton\ssubscription\sis\sset\sto\srenew\sautomatically\stoday\.\sA\scharge\sof\s\$[4-6][0-9]{2}\.[0-9]{2}\swill\sbe\sprocessed)(\W|$)/m tflags T_JR_BZ_BODY62 nosubject describe T_JR_BZ_BODY62 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY63 /(^|\b)(?:With\ssincere\sregards\sThe\sPayPal\sGateway|This\smessageconfirms\sthat\sa\sbilling\stransaction|did\snotauthorize\sthis\stransaction|please\scontactour\ssupport\steam|keep\sthis\sinformation\sforyour\srecords|charge\swasapplied\saccording\sto\syour\scurrent\ssubscription|accessyour\saccount\sonline\sat\sany\stime|forchoosing\sPayPaIfor|Copyright\,\s2026\sWindows\sDefender\.\sAll\sRights\sReserved|Microsoft\s365\ssubscription\sis\sset\sto\srenew\ssoon\.\sA\scharge\sof\sUSD\s[3-5][0-9]{2}\.[0-9]{2}\swill\sbe\sprocessed\swithin\sthe\snext\s[0-9]{2}\shours|Sending\sSmiles\,\sPayPal\sGateway|Geek\sSquad\sTeam\sCopyright\s\xC2\xA9\s2026\sGeek\sSquad\sTeam|automatic\spayment\sprofile\sfor\sBlockchain\sFinance\sAuthority|PayPal\sProfile\sSetup\sConfirmation|payment\sof\sUSD\s[4-6][0-9]{2}\.[0-9]{2}\sfor\sCoinbase\sUS\shas\sbeen\ssuccessfully\sprocessed\sthrough\syour\sPayPal\saccount|^Warm\sWishes\,\,|sent\san\sautomatic\spayment\sof\s\$\$[7-9][0-9]{2}\.[0-9]{2}\sUSD\sto\sUID[0-9]{6}|Thank\syou\sfor\syour\spayment\sto\sUID[0-9]{6}|With\sAppreciation\,Norton\spowered\sby\ssymantec|fraud\sprevention\ssystem\srecently\slogged\sa\s\$[2-6][0-9]{2}\.[0-9]{2}\sPayPal\spurchase\sattempt\sat\san\sApple\sStore\slocation\sin\sMassachusetts)(\W|$)/m tflags T_JR_BZ_BODY63 nosubject describe T_JR_BZ_BODY63 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY64 /(^|\b)(?:Here\sare\sthe\sdetails\sabout\syour\sautomatic\spayment\sfor\s1\sWeek\sDai\.\.\.|question\sabout\sthis\sinvoice\sor\syou\swant\sto\scancel\sthe\ssubscription\,?\syou\scan\sreach\sout\sour\sCustomer\sSupport|your\scomputer\sProtection\sAnnual\ssubscription\shas\sexpired\sand\sAuto\-Renewed\stoday|Copyright\s\xC2\xA9\s2026\sSupport\sInc\.|You\ssent\san\sautomatic\spayment\sof\s\$[0-9\.]{6}\sUSD\sto\sUID[0-9]{6}\sBTC\sTrade\sDesk\sLLC|please\sconnect\swith\sour\shelp\sdesk\swithin\sthe\snext\s12\shours\sat\:|payment\sof\sUSD\s[4-5][0-9]{2}\.[0-9]{2}\shas\sbeen\sreceived\,\sand\syour\ssubscription\sremains\savailable|help\swith\syour\srenewal\,?\splease\scontact\s\{\s.{11,13}\s\}\swithin\sthe\snext\s12\shours|\xC2\xA9\s2026\sSubscription\sServices|successful\srenewal\sof\syour\sMcAfee\sPremium\sProtection\smembership\sfor\sthe\sFour\sYear\ssubscription\speriod|successful\srenewal\sof\syour\sMcAfee\sPremium\sProtection\smembership|\xC2\xA9\s2026\sMcAfee\.\sAll\sRights\sReserved\.|The\sPayPal\sGateway\sHelp\sDesk|\(c\)\s2026\sPayPal\.\sAll\srights\sreserved|the\sPremium\sMembership\sassociated\swith\sMcAfee\sCyber\sIncident\sResponse\sremains\sactive|subscription\susing\syour\sPay_Pal\saccount|Pay_Pal\saccount\smay\shave\sbeen\sused\sfraudulently\sto\spurchase\sthis\ssubscription)(\W|$)/m tflags T_JR_BZ_BODY64 nosubject describe T_JR_BZ_BODY64 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY65 /(^|\b)(?:Your\sGeek\sSquad\sBest\sBuy\sService\ssubscription\sremains\sactive|choosing\sour\sindependent\stechnology\ssupport\sservice|Subject\:\sFamily\sSupport\sPlan\s\xE2\x80\x94\sInvoice|confirms\sthe\srenewal\sof\syour\sNorton\s360\ssubscription\sfor\san\sadditional\s[3-5]\sYears|Best\sregards\,\sNorton\s360\sBilling\sDepartment|wish\sto\slearn\smore\sabout\show\sGeek\sSquad\sbilling\snotifications\sare\sstructured|Geek\sSquad\sBilling\sDepartment\sBest\sBuy\sCo\.\,\sInc\.|YOU\'VE\sSENT\sA\sPAYMENT\sOF\s\$[5-7][0-9]{2}\.[0-9]{2}\sTO\sCOINBASE\sCORPORATION|Copyright\,\s2026\sGeek\sSquad\sProtection|to\sacknowledge\sthe\ssuccessful\sprocessing\sof\syour\sGeek\sSquad\srenewal|Amazon.com\sServices\sLLC|recurring\spayment\sagreement\swith\sBlockchain\sFinance\sAuthority|questions\sregarding\sthis\sautomated\sprofile\sor\swish\sto\sdispute\sthis\ssetup\,?\splease\scontact\sour\ssecurity\sdesk\simmediately|Geek\sSquad\sBest\sBuy\sService\ssubscription\shas\sbeen\ssuccessfully\srenewed\sfor\sthe\supcoming\sbilling\speriod|Dear\sAccount\sHolder\,\sWe\'re\sglad\sto\shave\syour\sorder\.\sYour\sprocurement\srequest\shas\sbeen\sreceived\sand\sconfirmed\.|^Here\sare\sthe\sdetails\sof\syour\sRecurring\sBilling\:|thanks\sagain\.?\sOrder\s\{order_id\}\sconfirmed)(\W|$)/m tflags T_JR_BZ_BODY65 nosubject describe T_JR_BZ_BODY65 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY66 /(^|\b)(?:extend\sour\ssincere\sgratitude\sfor\syour\ssteadfast\ssupport\sover\sthe\spast\s1\sYear|Upcoming\sSubscription\sRenewal\s\xE2\x80\x93\sPayPal|Best\sregards\,\sThe\sPayPal\sTeam|Warm\sregards\,\sGeek\sSquad\sBilling\sTeam|plan\shas\sbeen\ssuccessfully\srenewed\sfor\sthe\supcoming\s12\-month\ssubscription\speriod|To\sstop\sor\sunsubscribe\scall\snow\sto\sGeek\sSquad\sTech\sSupport|Payment\sReminder\x3A\sInvoice\s\#[0-9]{2}\sIs\sDue\sin\s[0-9]\sDays\s\xE2\x80\x93\sAvoid\sLate\sFees|With\sappreciation\,\sPayPal\sBusiness|An\sactivation\-related\scharge\sof\s\$[2-5][0-9]{2}\.[0-9]{2}\shas\sbeen\srecorded\sin\sconnection\swith\syour\saccount\.|For\simmediate\schanges\sor\scancellations\sto\sthis\sorder\sbefore\sdispatch|Hello\sAmazon\-Order\sConfirmation\,\sPAYMENT\sSUCCESS|Warm\sregards\,\sAmazon\sSupport\sTeam\,|transaction\sis\scurrently\sbeing\sprocessed\,?\sand\sthe\srelated\saccount\sinformation\smay\stake\sup\sto\s12\shours\sto\sreflect\sthe\slatest\sstatus|Powered\sby\sNorton\s360\.\s\xC2\xA92026\.\sAll\srights\sreserved\.|pleased\sto\sinform\syou\sthat\syour\sGeek\sSquad\sservice\shas\sbeen\sextended\.|Your\ssubscription\sis\sscheduled\sto\srenew\sautomatically\son\sthe\sdate\sshown\sabove\.|Copyright\s\xC2\xA9\s\sGeek\sSquad\sBilling\sTeam\s\|\s2026)(\W|$)/m tflags T_JR_BZ_BODY66 nosubject describe T_JR_BZ_BODY66 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY67 /(^|\b)(?:\xE1\xB4\x9B\xCA\x9C\xE1\xB4\x80\xC9\xB4\xE1\xB4\x8B\xEA\x9C\xB1\s\xEA\x9C\xB0\xE1\xB4\x8F\xCA\x80\s\xCA\x8F\xE1\xB4\x8F\xE1\xB4\x9C\xCA\x80\s\xE1\xB4\x98\xE1\xB4\x80\xCA\x8F\xE1\xB4\x8D\xE1\xB4\x87\xC9\xB4\xE1\xB4\x9B|Quotations\sand\sRemittance\-Advice\s\-\s[0-9]{2}\.[0-9]{2}\.202[0-9]|Dear\sGeek\sSquad\sService\sUser\.|Copyright\,\s2026\sGeek\sSquad\.\sAll\sRights\sReserved\.|Important\sNotes\:\sThis\sis\san\sauto-renewal\ssubscription\swith\sGeek\sSquad\.|Thank\syou,\sOrder\sSupport\sTeam|Your\scrypto\spurchase\sUSD\s[0-9]{3}\ssuccess\svia\sGeek\sSquad|INV\sID\sUTRR49E|^Greetings\,\sCustomer$|^For\squestions\sabout\syour\ssubscription\,?\splease\scontact\sthe\ssupport\steam\sat$|We\shope\syou\shave\sbeen\senjoying\sour\sservices\.\sWe\shave\srenewed\syour\sGeek\sSquad\ssubscription\.|Copyright\,\s2026\sWindows\sDefender\.\sAll\sRights\sReserved|Note\:\sYour\stransaction\shas\sinstantly\spassed\sverification\sand\sis\sapproved\sand\sconfirmed\.|Your\sregistered\spayment\smethod\shas\sbeen\sauthorized\.\sThis\sscheduled\stransaction\swill\sfinalize\swithin\sthe\sstandard\sprocessing\swindow)(\W|$)/m tflags T_JR_BZ_BODY67 nosubject describe T_JR_BZ_BODY67 Baza Call V1: Body phrase signature detected body T_JR_BZ_BODY68 /(^|\b)(?:set\sup\sautomatic\spayments\sto\sUID[0-9]{6}\sBTC\sTrade|change\sor\scancel\syour\sautomatic\spayment\,?\scontact\sat\sCall\sfor\sCustomer\sService|Account\shas\sbeen\scharged\swith\s\$[2-3][0-9]{2}\.[0-9]{2}\sand\swill\sbe\sgoing\sto\sdeduct\sfrom\syour\saccount|Thank\syou\sfor\svisiting\sus\!\sMcAfee\xE2\x84\xA2|renewal\swill\sensure\suninterrupted\saccess\sto\syour\sPayPal\sservices\sand\sfeatures\sfor\sanother\sterm|Thank\syou\,\sNorton\sSupport\sCenter|please\sreview\syour\saccount\sthrough\sthe\sofficial\sservice\sprovider\xE2\x80\x99s\swebsite\sor\scontact\stheir\sverified\scustomer\ssupport\steam\sfor\sassistance)(\W|$)/m tflags T_JR_BZ_BODY68 nosubject describe T_JR_BZ_BODY68 Baza Call V1: Body phrase signature detected meta JR_BZ_BODY (T_JR_BZ_BODY1 || T_JR_BZ_BODY2 || T_JR_BZ_BODY3 || T_JR_BZ_BODY4 || T_JR_BZ_BODY5 || T_JR_BZ_BODY6 || T_JR_BZ_BODY7 || T_JR_BZ_BODY8 || T_JR_BZ_BODY9 || T_JR_BZ_BODY10 || T_JR_BZ_BODY11 || T_JR_BZ_BODY12 || T_JR_BZ_BODY13 || T_JR_BZ_BODY14 || T_JR_BZ_BODY15 || T_JR_BZ_BODY16 || T_JR_BZ_BODY17 || T_JR_BZ_BODY18 || T_JR_BZ_BODY19 || T_JR_BZ_BODY20 || T_JR_BZ_BODY21 || T_JR_BZ_BODY22 || T_JR_BZ_BODY23 || T_JR_BZ_BODY24 || T_JR_BZ_BODY25 || T_JR_BZ_BODY26 || T_JR_BZ_BODY27 || T_JR_BZ_BODY28 || T_JR_BZ_BODY29 || T_JR_BZ_BODY30 || T_JR_BZ_BODY31 || T_JR_BZ_BODY32 || T_JR_BZ_BODY33 || T_JR_BZ_BODY34 || T_JR_BZ_BODY35 || T_JR_BZ_BODY36 || T_JR_BZ_BODY37 || T_JR_BZ_BODY38 || T_JR_BZ_BODY39 || T_JR_BZ_BODY40 || T_JR_BZ_BODY41 || T_JR_BZ_BODY42 || T_JR_BZ_BODY43 || T_JR_BZ_BODY44 || T_JR_BZ_BODY45 || T_JR_BZ_BODY46 || T_JR_BZ_BODY47 || T_JR_BZ_BODY48 || T_JR_BZ_BODY49 || T_JR_BZ_BODY50 || T_JR_BZ_BODY51 || T_JR_BZ_BODY52 || T_JR_BZ_BODY53 || T_JR_BZ_BODY54 || T_JR_BZ_BODY55 || T_JR_BZ_BODY56 || T_JR_BZ_BODY57 || T_JR_BZ_BODY58 || T_JR_BZ_BODY59 || T_JR_BZ_BODY60 || T_JR_BZ_BODY61 || T_JR_BZ_BODY62 || T_JR_BZ_BODY63 || T_JR_BZ_BODY64 || T_JR_BZ_BODY65 || T_JR_BZ_BODY66 || T_JR_BZ_BODY67 || T_JR_BZ_BODY68) describe JR_BZ_BODY Baza Call V1: Body signature phrase detected score JR_BZ_BODY 5.0 ############################################## ## BAZA CALL PHRASES - LOW PRIORITY/SCORING ## ############################################## body T_JR_BZ_BODY_LO1 /(^|\b)(?:We\shave\scompleted\sthe\supgrade\sand\sreceived\syour\spayment|If\syou\swant\sto\sreview\sor\scancel\sand\sfull\srefund\sthis\sorder|change\/(drop|cancel)\sthe\ssubcription|GOOD\sTHINGS\sHAPPEN\sWHEN\sYOU\sGET\sINVOLVED\sWITH\sNORTON|You\shave\schosen\sus\sas\syour\spreferred\sprovider\sfor\ssystem\ssecurity|1\sYear\sSubscription\sTo\sGeek\sSquad|Sent\sBy\sGeek\sSquad\sTeam|subscription\swith\sGeekSquad\sis\srenewed|One\syear\sprotection\sfor\s[0-9]\sdevices|Team\sMcafee\sTotal\sProtection|Sent\sBy\sNorton\s360\sInternet\sSecurity\sAs\sYou\sHave\sSubscribed\sTo\sOur\sServices|Thanks\sfor\schoosing\sNorton\s360\sInternet\sSecurity|9090\sDestiny\sUSA\sDr\,\sSyracuse\,\sNY|Norton\s360\sInternet\sSecurity|Your\sGeek\sSquad\sService\sDetails|Payment\sto\sCoinbase\sGlobal\,\sInc\.|NortonLifeLock\sInc\.\sAll\srights\sreserved\.|you\shave\snot\sactivated\syour\sAdobe\sAcrobat\spdf\sreader|Your\sNorton\ssubscription\shas\sexpired|Thanks\sfor\susing\sPayPal\.\sPlease\scheck\sthe\scomplete\stransaction\sdetails\sbelow\:|THANKS\s\&\sREGARDS|Thank\sYou\sFor\sSelecting\sUs\sAgain|Your\sregular\sextraction\shas\sbeen\sauthorized\.|Support\sInquiry\sLine|Norton\s360\,\sInc\.|and\swe\sthank\syou\sfor\schoosing\sour\sproduct|Warm\sregards\,\sPaypal\sLLC|The\sLifeLock\sService\sTeam)(\W|$)/m tflags T_JR_BZ_BODY_LO1 nosubject describe T_JR_BZ_BODY_LO1 Baza Call V1: Body has low-scoring signature phrase body T_JR_BZ_BODY_LO2 /(^|\b)(?:Email\sConfirmation\sRenewal|Your\smembership\sis\sscheduled\sfor\sautomatic\srenewal|Please\sfind\sthe\sdetails\sof\syour\srecurring\splan\sbelow|strive\sto\sprovide\scompetitive\spricing\sand\shigh\-quality\sofferings\sto\sour\svalued\scustomers|Your\sproduct\ssubscription\shas\sbeen\ssuccessfully\sactivated\sfor\sa\speriod\sof\s[0-9]\syears|Thank\syou\sfor\schoosing\sGeekSquad\xC2\xAE|warmest\sregards\sand\sbest\swishes\sto\syou\sas\syou\srejoin\sour\scommunity|Team\sMcAfee|McAfee\sTeam|Payment\sproblems\?\sContact\sus\sat|McAfee\sSupport\sTeam|Your\ssatisfaction\sis\sour\spriority\.|More\sInformation\sCall\sAny\sTime|You\scan\sget\sin\stouch\swith\sour\scustomer\sservice\steam\sanytime\.|Norton\sLifeLock\sFamily\sSecurity\sFor\s10\sDevices|Dear\sSubscriber\s[A-z0-9\-_\.]{2,40}\@[A-z\-_0-9.]{2,40}\.[A-z]{2,8}|It\slooks\slike\syour\sPC\sorder\shas\sbeen\ssubmitted|E\-WALLET\sADDRESS|Dear\sPaid\,|Key\sDetails\sof\sYour\sSubscription|For\sany\smembership\-related\squestions,?\splease\scontact\sour\sbilling\steam|You\'re\sthe\sone\srenewing\sit\scurrently\.|Team\sNorton\s360|we\swant\sto\smake\ssure\syou\sare\saware\sof\syour\saccount\sstatus|Cyber\ssecurity\:\sguarding\syour\sdigital\sassets|Thank\syou\sfor\schoosing\sLifeLock\sService)(\W|$)/m tflags T_JR_BZ_BODY_LO2 nosubject describe T_JR_BZ_BODY_LO2 Baza Call V1: Body has low-scoring signature phrase body T_JR_BZ_BODY_LO3 /(^|\b)(?:McAfee\sSecure\sCustomer\sCare\sBureau|Product\:\sWebroot|Ticket\sNumber\-\s[0-9]{11}|Take\snote\sof\sthis\sinformation\sfor\sfuture\sreference|Product\-\sSoftware\sTroubleshooting|Name\-\sIndustrial\sInstallations\sServices|If\syou\shave\sany\squestions\,\sdon\'t\shesitate\sto\sreach\sout\sto\sour\sagents|Thank\sYou\sfor\schoosing\sthe\sconvenience\sof\sAUTO\sPAY\.|We\'re\shere\sto\sensure\syour\sexperience\sis\ssmooth\sand\seffortless|Keep\san\seye\son\syour\semail\sfor\sfurther\supdates|GS\sDevice\sSecurity\sEntitlement|NortonLifeLock\sInc\.|We\'re\sgrateful\sfor\syour\sselection\sof\sour\sservices\|cancel\sand\sget\san\sinstant\srefund|refunds?\sof\syour\sannual\ssubscription|Team\sNorton\sLife\sLock\sPC\sprotection|Aloha\s[A-z]{2,20}\,|This\sPayment\sLink\sis\screated\sin\sTest\sMode|PROCEED\sTO\sPAY|Payment\sQuick\sGlance|Happy\ssending\,|your\sBankAccount\sstatement|NORTON\sBilling\sTEAM|cancel\sthe\ssubscription\sor\sthink\sthat\sthis\sis\san\sunauthorized\stransaction|NORTON\sSupport\sLLC|Hey\s[A-z]{2,20}\,\sIt\swon\'t\sbe\slong\sbefore\se-invoicing\sis\savailable|Please\ssend\sthe\stotal\samount\sto\sthis\scrypto\swallet\saddress\:|Should\syou\shave\squestions\sor\sprefer\sto\scancel\,\sour\ssupport\steam\sis\sready\sto\sassist|Dear\sPayPal\,\sInc\.\sUser)(\W|$)/m tflags T_JR_BZ_BODY_LO3 nosubject describe T_JR_BZ_BODY_LO3 Baza Call V1: Body has low-scoring signature phrase body T_JR_BZ_BODY_LO4 /(^|\b)(?:Your\smembership\srenewal\swill\sbe\sautomatically\sprocessed|Your\sinvolvement\sis\scrucial\sand\sdeeply\sappreciated\.|either\sthrough\sa\sbank\saccount\sdebit\sor\sVisa\/MasterCard\scharge|please\sknow\sthat\sif\syou\sdecide\snot\sto\scontinue\,?\syou\scan\scancel\sat\sany\stime\sand\sreceive\sa\sfull\srefund|Renewal\sDiscount\sToday|Your\sorder\sconfirmation\sis\sexpected\swithin\sa\sfew\shours\,\sfollowed\sby\sshipment\sshortly\sthereafter\.|appreciate\syour\schoice\sto\sdo\sbusiness\swith\sNortonLifeLock|Follow\sus\:\sMcAfee|It\swill\sshow\sthe\sDebited\sAmount\sin\sthe\snext\s[0-9]{2}\shours\.|Your\sPremium\sProtection\sfor\sMcAfee\shas\sbeen\ssuccessfully\srenewed|The\ssubscription\scharge\swill\sbe\sprocessed\sand\sreflected\son\syour\sstatement\swithin\s12\shours|For\ssupport\,\scall\sthe\stoll\-free\snumber\sprovided\sin\sthe\semail\.|Please\smake\sany\snecessary\supdates\sat\sleast\s24\shours\sbefore\syour\snext\sbilling\scycle|Your\strust\sis\sour\spriority\.|Thank\syou\sonce\sagain\sfor\sbeing\ssuch\san\simportant\spart\sof\sour\scommunity|organization\sthrives\son\sthe\senergy\smemberships\slike\syours\sbring|Hello\sDear\,|Details\sof\syour\sRecurring\sBilling|Your\saccount\shas\sbeen\scharged\son\sPayPal\,\sInc\.\swith\s\$[0-9]{2}\.[0-9]{1,2})(\W|$)/m tflags T_JR_BZ_BODY_LO4 nosubject describe T_JR_BZ_BODY_LO4 Baza Call V1: Body has low-scoring signature phrase body T_JR_BZ_BODY_LO5 /(^|\b)(?:The\sRenewal\sOf\sYour\sMembership\sHas\sBegun|McAfee\sSubscription\sExpires\sToday|Building\sRelationships\sThrough\sTransparent\sInvoicing\.|If\syou\sdid\snot\sauthorize\sthis\stransaction\sor\sbelieve\sit\sto\sbe\sfraudulent|We\sare\scontacting\syou\sregarding\sa\srecent\stransaction\son\syour\sPayPal\saccount|Expect\san\sautomatic\sdeduction\sfrom\syour\saccount\sby\stoday\'s\send|Thank\syou\sfor\sbeing\spart\sof\sthe\sPayPal\,\sInc\.\scommunity|We\svalue\syour\spartnership\swith\sPayPal\,\s?Inc\.|Premium\scoverage\sand\ssupport\sare\snow\sactive\.|[Oo]ur\steam\sis\sready\sto\shelp\swith\srefund\sor\scancellation\srequests\sunder\sour\sstandard\spolicy|If\syou\sbelieve\sthis\scharge\swas\sunauthorized\,\splease\scontact\sus\sat\s.*\sas\ssoon\sas\spossible\.|We\sappreciate\syour\schoice\sin\sPayPal\.|Payment\sConfirmation\s\-\sBTC\sPurchase|\xC2\xA9\s2025\sNortonLifeLock\.\sAll\sRights\sReserved\.|Confirmation\sof\syour\srecent\spurchase|Support\sis\savailable\sif\syou\sneed\sto\scancel\sor\smake\schanges\sto\syour\smembership|If\syou\sauthorized\sthis\s(activity|transaction)\,\sno\sfurther\s(steps\sare\sneeded|action\sis\srequired)\.|If\syou\shave\sany\squestions\sor\swish\sto\smanage\syour\ssubscription\,\splease\scontact\:|About\sYour\sSubscription\:)(\W|$)/m tflags T_JR_BZ_BODY_LO5 nosubject describe T_JR_BZ_BODY_LO5 Baza Call V1: Body has low-scoring signature phrase body T_JR_BZ_BODY_LO6 /(^|\b)(?:If\syou\shave\sany\squestions\,\sour\steam\sis\shere\sto\shelp\sat\s\+1[0-9]{10}\.|Your\ssubscription\shas\sbeen\srenewed\sautomatically\.|This\sserves\sas\sconfirmation\sof\syour\sactive\smembership|we\spromise\sto\skeep\sworking\shard\sto\smake\sNorton\-LifeLock\sthe\smost\sreliable|If\syou\sdidn\'t\sinitiate\sthis\spurchase\,?\sor\sthis\spayment\swas\snot\smade\sby\syou\,?\sdirectly\sreach\sout\sto\sour\scustomer\ssupport\shelpline\sat\:|We\'re\scommitted\sto\skeeping\syour\sPayPal\saccount\sprotected\.|Want\sthis\smonthly\?\sOpt\-in\sfor\srepeat\sdeliveries\.|To\ssafeguard\syour\sPayPal\saccount\,\syou\smust\sact\sright\saway|PayPal\sLegal\sCentre|[Ww]ithin\s24\shours\sof\sthe\stransaction\sdate\,?\syou\scan\sask\sfor\sa\srefund\sof\sthis\smoney|ORDER\sSUMMARY\sDESCRIPTION|If\syou\shave\sany\squestions\sabout\syour\sorder\,?\splease\scontact\sus\sat\:|Confirm\sor\sCancel\sthe\sTransaction|Welcome\sto\sthe\sNorton\sAntiVirus\snetwork|Your\sSelected\sPlan\sOverview|Thank\syou\sfor\syour\scontinued\strust\sin\sPayPal|Your\smembership\sbenefits\sare\snow\sactive\sfor\sanother\syear\.|your\sMcafee\ssubscription\swill\srenew\sautomatically|You\'re\sgood\sto\sgo\ssubscription\srenewed\.|Your\s[A-z\s]{2,15}\splan\srenewal\shas\sbeen\sprocessed\ssuccessfully\.)(\W|$)/m tflags T_JR_BZ_BODY_LO6 nosubject describe T_JR_BZ_BODY_LO6 Baza Call V1: Body has low-scoring signature phrase body T_JR_BZ_BODY_LO7 /(^|\b)(?:writing\sto\sconfirm\sa\srecent\stransaction\smade\sthrough\syour\sPayPal\saccount|A\scopy\sof\syour\sfull\sinvoice\sis\savailable\sin\syour\saccount\.\sStay\sprotected\,|you\sdid\snot\sauthorize\sthis\spayment\,\splease\scall\:\s[0-9]{3}\s[0-9]{3}\-[0-9]{4}\s\s\swithin\s24\shours|please\scontact\sour\s24\/7\sBilling\sDepartment\simmediately\sfor\sassistance\sand\sa\sfull\srefund|You\shave\s24\shours\sto\sdispute\sand\scancel\sthis\scharge\sfor\sa\sfull\srefund\sif\sunauthorized\.|Your\ssubscription\swill\sremain\sactive\sfor\sthe\snext\s12\smonths\sand\sthe\srenewal\scharge\shas\sbeen\sprocessed|invited\syou\sto\sPayPal\sBilling\sNotice|continued\strust\sin\sNorton\xE2\x84\xA2|[tT]hank\syou\sfor\schoosing\sNorton\xE2\x84\xA2|please\scontact\sour\sBilling\sSupport\simmediately\sfor\scancellation\sand\sdispute\sassistance|you\sdid\snot\sauthorize\sthis\stransaction\,?\splease\scontact\sour\sBilling\sHelp\sDesk\simmediately\:|[Ww]e\sare\sconfirming\sa\srecent\spayment\sprocessed\svia\syour\sPayPal\saccount\.|wish\sto\scancel\sand\sreceive\sa\sfull\srefund\,?\splease\sreach\sout\sto\sour\steam\swithin\s24\shours|Kindly\sreview\sthe\sdetails\sand\sensure\severything\sis\scorrect\.|If\sthis\sorder\sis\snot\srecognized\,\splease\scontact\sPayPal\sCustomer\sSupport)(\W|$)/m tflags T_JR_BZ_BODY_LO7 nosubject describe T_JR_BZ_BODY_LO7 Baza Call V1: Body has low-scoring signature phrase body T_JR_BZ_BODY_LO8 /(^|\b)(?:subscription\swill\sauto\srenew\severy\s3\syears\sunless\syou\sturn\sit\soff|We\sadmire\syou\sbeing\sour\sregular\suser\.|EMERGENCY\sVERIFICATION\sLINE|If\syou\ssuspect\sany\sunauthorized\sactivity\,?\scontact\sour\sfraud\sdivision\simmediately|Call\swithin\s24\shours\sto\scancel\/edit\:|transaction\sseems\sunfamiliar\sor\sunauthorized|kindly\sreach\sout\sto\sour\s24\/7\ssupport\sdesk\sat|this\stransaction\swas\smade\sin\serror\,?\scontact\sour\ssupport\steam\swithout\sdelay|value\syour\sconfidence\sin\sour\splatform\sand\sthank\syou\sfor\strading\swith\sus|[Ii]f\syou\sdidn\xE2\x80\x99t\srequest\sthis\srenewal|appreciate\syour\scontinued\strust\sin\sBitdefender\sfor\ssafeguarding\syour\sdigital\senvironment|your\smembership\srequest\shas\sbeen\ssuccessfully\sprocessed|Thanks\sfor\strusting\sour\sexchange\.\aFor\s24\/7\sassistance\,?\scontact\ssupport\sat|Thank\syou\sfor\susing\sour\sservice\.\sBilling\sDepartment|contact\sour\ssupport\steam\sat\s.*\sif\syou\sneed\sclarification\sor\swish\sto\sdispute\sthis\scharge\.|If\syou\swish\sto\scancel\sor\smake\schanges\,?\syou\smust\scontact\sus\swithin\s24\shours\.|appreciate\syour\strust\sin\sGeek\sSquad\sfor\syour\slatest\spurchase|We\shave\snoticed\san\sunauthorized\stransaction\sfrom\syour\sPayPal\saccount\.)(\W|$)/m tflags T_JR_BZ_BODY_LO8 nosubject describe T_JR_BZ_BODY_LO8 Baza Call V1: Body has low-scoring signature phrase body T_JR_BZ_BODY_LO9 /(^|\b)(?:Membership\sextended\sand\sactive\.|Renewal\sdone\snothing\selse\srequired\.|Renewal\scompleted\sthank\syou\.|If\sthis\srenewal\swas\sunauthorized\sor\smade\sby\smistake,\splease\scontact\sour\sBilling\sDepartment\simmediately|Thank\syou\sfor\schoosing\sGeek\sSquad\sProtection|Please\snote\sthat\syour\ssubscription\shas\sended\,\sbut\swe\xE2\x80\x99re\shere\sto\sensure\syou\sdon\xE2\x80\x99t\smiss\sout\son\sany\sof\sour\sgreat\sservices|Immediate\sSupport\sHelpline\:|Don\xE2\x80\x99t\srecognize\sthis\stransaction\?|confirmation\supdate\swill\sbe\ssent\sonce\sthe\stransaction\sis\scompleted\.|We\sare\shappy\sto\sconfirm\sthat\syour\smembership\shas\sbeen\ssuccessfully\sprocessed|Auto\sMembership\sNotification\sEmail|Thank\syou\sfor\splacing\san\sorder\swith\sus\.|review\sthe\sdetails\sin\syour\sPayPal\saccount\sor\scontact\sPayPal\sSupport\sthrough\sofficial\sPayPal\schannels|membership\swill\sautomatically\srenew\seach\syear\sunless\scanceled\s[0-9]{2}\shours\sbefore\syour\smembership\sends.|Thank\syou\sfor\s(choosing|your\scontinued\strust\sin)\sGeek\sSquad|believe\sthis\scharge\swas\snot\sauthorized\sor\syou\swish\sto\scancel\sthe\sservice,\splease\scontact\sour\sBilling\sSupport\sTeam\simmediately\sat|Security\sAlert\:\sUnauthorized\stransaction\sdetected)(\W|$)/m tflags T_JR_BZ_BODY_LO9 nosubject describe T_JR_BZ_BODY_LO9 Baza Call V1: Body has low-scoring signature phrase body T_JR_BZ_BODY_LO10 /(^|\b)(?:if\syou\swish\sto\scancel\sthe\sservice\,\splease\scontact\sour\sBilling\sDepartment\simmediately|The\sfollowing\ssubscription\sdetails\sfor\syour\sPC\shave\sbeen\ssuccessfully\sactivated|membership\srequest\swith\sGeekSquad\shas\sbeen\srecorded\sand\sprocessed\.|If\syou\srecognize\sthis\stransaction\,\sno\sfurther\saction\sis\srequired\.|Thank\syou\sfor\schoosing\sNorton\sLifeLock\sSecurity|contact\sour\sBilling\sSupport\sTeam\simmediately\sto\sreview\syour\saccount\sdetails\sbefore\sfinal\ssettlement|Thank\syou\sfor\strusting\sNorton\sto\sprotect\syour\sdigital\ssecurity\.|reach\sout\sto\sour\ssupport\sdesk\swithin\s24\shours\sto\scancel\sthe\ssubscription\sand\sclaim\sa\sfull\srefund|Thank\syou\sfor\schoosing\sNorton\.|To\sCancel\sthis\sSubscription\,\sCall\s\:|Renewal\shandled\sautomatically|renewed\smembership\sensures\scontinued\saccess\sto\sall\spremium\sfeatures\,\supdates\,\sand\ssupport\sservices\sprovided\sby\sPayPal|Thank\syou\sfor\schoosing\sNorton\.|For\sany\ssupport\sor\sverification\-related\sinquiries\,\skindly\scontact\:|this\smessage\sprovides\san\supdate\son\syour\saccount\sstatus|Dispatch\sMonitoring\sCenter|Renewal\sDetails\sfor\sYour\sAccount|Geek\sSquad\sTech\sSupport\sSubscription\sRenewal|Subscription\sPayment\sSuccessfully\sProcessed)(\W|$)/m tflags T_JR_BZ_BODY_LO10 nosubject describe T_JR_BZ_BODY_LO10 Baza Call V1: Body has low-scoring signature phrase body T_JR_BZ_BODY_LO11 /(^|\b)(?:access\syour\saccount\sonline\sat\sany\stime\stoview\sbilling|you\swouldlike\sto\sreview\syour\splan|your\scurrentsubscription\ssettings|the\ssystem\shas\sautomatically\srenewed\syour\smembership\sfor\sthe\snext\s12\smonths|system\shas\sprocessed\sthe\sannual\srenewal\sto\sensure\syour\saccess\sto\sservices\scontinues\swithout\sinterruption|Your\sMembership\sDetails\sAre\sReady|Your\sSubscription\sTerm\sis\sEnding\sSoon|choosing\s\*\*PayPal\sAccount\sReview\s\&\sCompliance\*\*|trust\sin\s\*\*PayPal\sHelp\sCenter\*\*|Reminder:\sService\sContinuation\sNotice|appreciate\syour\scontinued\strust\sin\sPayPal\sSecurity|We\xE2\x80\x99re\struly\sgrateful\sto\shave\syou\sas\spart\sof\sour\ssecurity\sfamily\.|cancel\syour\sannual\ssubscription\sand\sobtain\sa\stimely\sreimbursement|please\scontact\sus\swithin\s24\shours\sto\scancel\sand\sreceive\san\sinstant\srefund|Payment\sMethod\:\sAuto\sPay\sThrough\sBank|continue\senjoying\sall\sservices\,?\supdates\,?\sand\ssupport\sassociated\swith\syour\sMcAfee\sInternet\ssafety\smembership|Thank\syou\sfor\syour\scontinued\strust\sin\sGeek\sSquad|payment\swas\sprocessed\susing\sthe\sPayPal\saccount\ssaved\son\syour\sprofile|If\syou\sdid\snot\sauthorize\sthis\scharge\,?\scontact\sSupport\simmediately\:|The\sdeduction\swill\shappen\sshortly\.)(\W|$)/m tflags T_JR_BZ_BODY_LO11 nosubject describe T_JR_BZ_BODY_LO11 Baza Call V1: Body has low-scoring signature phrase body T_JR_BZ_BODY_LO12 /(^|\b)(?:If\syou\sneed\sassistance\sor\swould\slike\sto\scancel\syour\srenewal\,\splease\scontact\sour\sCustomer\sHelp\sCenter\sbefore\sthe\srenewal\sis\sprocessed|the\ssystem\shas\scompleted\sthe\srenewal\sso\syour\sservice\scontinues\swithout\sany\sinterruption|renewal\swas\sprocessed\sautomatically\sso\syour\saccess\sto\sservices\sremains\suninterrupted|securely\sprocessed\susing\syour\ssaved\sPayPal\saccount\sto\sensure\suninterrupted\saccess|Thank\syou\sfor\schoosing\sGeek\sSquad\sPartnership\sManagement|For\ssupport\sinquiries\,\splease\scontact\s\{\s[0-9\s\-]+\s\}|We\svalue\syour\sconfidence\sin\sour\sservices\sand\slook\sforward\sto\ssupporting\syour\sfinancial\sjourney|Your\sMembership\sRenewal\sDate\sIs\sApproaching|Payment\sProfile\sActive|Plan\sdetails\sremain\savailable\sunder\sactive\scoverage|For\ssupport\sor\sto\smanage\sauto-renewal\spreferences\,?\splease\scontact\sour\sCustomer\sHelp\sCenter|Your\sNorton\sLife\-Lock\sSecurity\splan\shas\sbeen\srenewed\ssuccessfully|We\sappreciate\syour\strust\sand\slook\sforward\sto\sserving\syou\sagain|Thank\syou\sfor\schoosing\sto\scontinue\syour\sMicrosoft\s365\ssubscription|A\spayment\sof\sUSD\s[4-5][0-9]{2}\.[0-9]{2}\shas\sbeen\sapplied\sto\syour\saccount\sfor\sthis\stransaction\.)(\W|$)/m tflags T_JR_BZ_BODY_LO12 nosubject describe T_JR_BZ_BODY_LO12 Baza Call V1: Body has low-scoring signature phrase body T_JR_BZ_BODY_LO13 /(^|\b)(?:Your\ssubscription\spayment\shas\sbeen\ssuccessfully\scompleted\.|Note\:\sOrders\splaced\son\sSaturday\sand\sSunday|\xF0\x9F\x95\x92\sSupport\sHours\:\s24\/7|subscription\swill\scontinue\sunder\sautomatic\srenewal\saccording\sto\sthe\sexisting\sagreement|ANNUAL\sPLAN\sRENEWAL\sNOTICE|Thank\syou\sfor\syour\scontinued\smembership\swith\sGeek\sSquad|The\stransaction\smay\stake\sseveral\shours\sto\sappear\son\syour\saccount\sstatement\.|Payment\sTransfer\sCompleted|Your\sPayPal\saccount\sremains\sa\spriority\sfor\sus\,\sand\swe\stake\severy\smeasure\sto\sguarantee\sthat\sit\sstays\sprotected|Please\sask\sour\ssupport\sstaff\sfor\shelp\sif\syou\shave\sany\squestions\sabout\sthis\stransaction\.|sincerely\sappreciate\syour\scontinued\sassociation\swith\sGeek\sSquad|Your\sloyalty\sis\simportant\sto\sus\.|appreciate\syour\scontinued\sassociation\swith\sGeek\sSquad|Ensuring\sthe\ssecurity\sof\syour\sAmazon\saccount\sis\sour\shighest\spriority|Thank\syou\sfor\schoosing\sour\sservices\.\sFor\squestions\sabout\syour\saccount\sor\sbilling\,?\splease\svisit\sour\sofficial\ssupport\spage\.|The\srenewal\splan\skeeps\syou\scovered\sfor\sservices\.|\xF0\x9F\x95\x92\s24\/7\sSupport\sAvailable|Payment\sfor\sGeek\sSquad\ssecurity\sservice\splan\shas\sbeen\spurchased)(\W|$)/m tflags T_JR_BZ_BODY_LO13 nosubject describe T_JR_BZ_BODY_LO13 Baza Call V1: Body has low-scoring signature phrase body T_JR_BZ_BODY_LO14 /(^|\b)(?:subscription\swill\sauto-renew\severy\s2\syears\sunless\syou\sturn\sit\soff\.|you\shave\s12\shours\sto\sinitiate\sa\scancellation\sand\sreceive\san\simmediate\srefund\sof\syour\sannual\ssubscription\sfee\.|(Your\splan\swill\srenew\sautomatically|Automatic\srenewal\sremains\sactive)\sunless\scanceled\sbefore\sthe\srenewal\sdate|We\sappreciate\syour\scontinued\smembership\swith\sGeek\sSquad\.|This\sis\syour\sbilling\sinvoice\sconfirming\sthat\syour\srecent\sservice\spurchase\shas\sbeen\ssuccessfully\sprocessed|Next\sPayment\sDue\:\sNext\sWeek\ssame\sday|For\sassistance\swith\sthis\sbilling\sagreement\,\suse\sthe\sphone\snumber\sprovided\sabove\.|the\stransaction\swill\sbe\sadded\sto\syour\saccount\shistory\safter\sprocessing\sis\sfinished|account\sshould\sdisplay\sthe\srevised\spayment\sinformation\swithin\sthe\snext\s12\shours|If\sthis\stransaction\sis\sunauthorized\,\sreach\sout\sto\sus\simmediately\sat|Thank\syou\sfor\susing\sour\ssecure\spayment\snetwork|subscription\swill\sauto\-renew\severy\syear\sunless\syou\sturn\sit\soff\.|upcoming\spayment\sis\sscheduled\sto\sbe\sautomatically\sdebited\sfrom\syour\sbank\saccount\sor\scharged\sto\syour\sVisa\/MasterCard|Auto\-renewal\sis\sset\sto\strigger\severy\s[2-5]\syear\suntil\sturned\soff)(\W|$)/m tflags T_JR_BZ_BODY_LO14 nosubject describe T_JR_BZ_BODY_LO14 Baza Call V1: Body has low-scoring signature phrase body T_JR_BZ_BODY_LO15 /(^|\b)(?:your\sBusiness\saccount\shas\sbeen\ssuccessfully\screated\sand\sactivated|Your\sprotection\splan\sremains\sactive\sand\swill\scontinue\sfor\sanother\sterm\.|your\sGeek\sSquad\ssecurity\sprotection\sservice\ssubscription|cancel\swithin\s12\shours\sto\sreceive\sa\srefund|The\stransaction\swill\sappear\sin\syour\saccount\sstatement\swithin\s24\shours|did\snot\sauthorize\sthis\spayment\,?\splease\slog\sin\sto\syour\sPayPal\saccount\sand\sreport\sthe\sissue\simmediately|Your\ssubscription\swill\srenew\sautomatically\saccording\sto\sthe\sselected\splan|Auto\-renewal\sis\sscheduled\severy\s2\sYears\suntil\syou\sopt\sout|We\ssincerely\sthank\syou\sfor\syour\scontinued\strust\sand\smembership\swith\sPayPal|subscription\sis\sscheduled\sfor\sautomatic\srenewal\sin\sthe\scoming\sdays)(\W|$)/m tflags T_JR_BZ_BODY_LO15 nosubject describe T_JR_BZ_BODY_LO15 Baza Call V1: Body has low-scoring signature phrase meta __JR_BZ_BODY_LO (T_JR_BZ_BODY_LO1 || T_JR_BZ_BODY_LO2 || T_JR_BZ_BODY_LO3 || T_JR_BZ_BODY_LO4 || T_JR_BZ_BODY_LO5 || T_JR_BZ_BODY_LO6 || T_JR_BZ_BODY_LO7 || T_JR_BZ_BODY_LO8 || T_JR_BZ_BODY_LO9 || T_JR_BZ_BODY_LO10 || T_JR_BZ_BODY_LO11 || T_JR_BZ_BODY_LO12 || T_JR_BZ_BODY_LO13 || T_JR_BZ_BODY_LO14 || T_JR_BZ_BODY_LO15) ################################################# ## BAZA CALL PHRASES - PRODUCTS (GEEKS/AV/ETC) ## ################################################# body T_JR_BZ_PRODUCT1 /(^|\b)(?:\xCE\x9D\xCE\x9FR\xCE\xA4\xCE\x9F\xCE\x9D\xE2\x84\xA2|N[Oo0][Rr][Tt][Oo0][Nn]\s360\s(PRO|ANTIVIRUSES|[Dd][Ee][Ll][Uu][Xx][Ee]|with\sLife\-Lock|Internet\sSecurity)|Norton\xE2\x84\xA2\s360\s(Deluxe|Protaction|Protection|De\-luxe)|De\-luxe\s[sS][eE][cC][uU][rR][iI][tT][yY]|Official\sNorton\xE2\x84\xA2\sSupport\s(Centre|\(US\))|Norton\sAntivirus\sOnline|Purchase\sfrom\sNorton|ADVANCE\sINTERNET\sSECURITY\sSER?VICES|Norton\s360\slifeLock|Norton\sSecurity\s32\.36\.0\.17\s\(10\sdevices\)|Norton\sLifeLock\s[Ss]ecurity|NortonLifeLock|Norton\sLife\-Lock\sSecurity|NORTON\sSUPPORT\sPLUS|NORTON\sLIFELOCK|Norton\sLifelock|Nortono?\sTotal\sProtection\sFamily|Internet\sProtection\sPlan\s\&\sSecurity|Norton\s360\sPlus|AVC\s360\sprotection|Nord\s\xE2\x84\xA0\s360|Norton\sSecurity|Antivirus\s\&\sSecurity|NORTON\sLIFELOCK\sSecurity|Your\sNorton\ssubscription|Plus\sWlND0WS|Membership\*Norton\sSecure|Norton\sprotection|Norton\sBilling\sTeam|Norton\s360\sPremium|Norton\s(AlertProof|protection|Ultimate|Utilities)|360\sPremium[a-z]{0,6}|norton\stotal\ssecurity|with\sSYMNTC|Norton\x3DE2\x3D84\x3DA2\s360|LifeLock\x3DE2\x3D84\x3DA2\sAdvantage|Norton\sAntiVirus\sPlus|Norton\sAntiVirus\sLLC|Personal\sHome\sMembership|Norton\s360|Norton360|Norton\,\sLLC|Norton\sPremier\sExpress|Norton\sLife\s?Lock|N0rT0n)(\W|$)/m tflags T_JR_BZ_PRODUCT1 nosubject describe T_JR_BZ_PRODUCT1 Baza Call V1: Body has product signature body T_JR_BZ_PRODUCT2 /(^|\b)(?:McAfee\xC2\xAE\sTotal\sProtection\sPlan|[Mm]c[Aa]fee\s(Security|All\sAccess|Securities|Secure|Cyberwards|AntiMalware|Pro\sFamily|AntiVirus|Gateway|Auto\-Renewal|Total\s(Protection|Secure)|Packaging|Solving|Order|Protection\sManuals|Premium\sPlus|Online\sSecurity\sExperts|Premium\sProtection|Tech\sMatrix|Cyber\sHealth|Cyber\sSecurity|Cyber\sProtection|Cyber\sIncident\sResponse)|PC\sSolution|Solutions_\s?McAfee|MS\-NNT\sCHARGE|Pro\sFamily\sAdvanced\sPlus\sPlan|M_Connect|Security\s360\sPlan|Geek\sSecure\s360\sProtect|two\syears\srenewal\sof\syour\sGeek\sSquad\scomputer\s\&\stablet\sservices|IPhone\s13\spro\sMax\s1tb|McAfee\xC2\xAE\sTotal\sProtection|Home\sDevices\sProtection\sPlan|PC\sSoftware\s\&\sNetwork\sProtection\sShield|\#Home\sMembeship|Network\sProtection\sShield|Mcafee\sTech\sTotal\sProtection|Geek\sSquad\sBest\sBuy\sService|Annual\sPC\sProtection\sPlan|Geek\sSquad\-[A-z]{4}\-[0-9]{4}|Network\s\&\sPC\sProtection|k\xCE\xB1sp\xE2\x84\xAErsky|McA_fee\slivesafe|McA_fee\sLive_safe|MCAfee\sAnti\-Pro\sSafeguard\sShield|MCAfee\sTotal\sOnline\sServices|McAfee\s(Business\sDefence|Antivirus\sPlus|membership)|MCAfee\sTotal|Mc[aA]fee\s(Digital\sBastion\sCorp|Guardian\sEnterprises|Support\sTeam|CryptoCatcher|Total\sTech|Total\sProtection|security\ssoftware|Ransomware|VirusProtector|SafeLink|WebDefend|L[iI]teExpanse|service|Protection|Plan)|McAfee\xE2\x84\xA2\scustomer\ssupport\sdesk|MacFee\sAntiVirus|membership\swith\sMcfee|McAfee\,\sUnited\sStates|Mcfee\s.*|MaaCFee\s.*|Macfeee\s.*|renewal\sfor\sMcAfee|McAfee\xC2\xAE\sInvoice)(\W|$)/m tflags T_JR_BZ_PRODUCT2 nosubject describe T_JR_BZ_PRODUCT2 Baza Call V1: Body has product signature body T_JR_BZ_PRODUCT3 /(^|\b)(?:[Gg][Ee][Ee][Kk][Ss][Qq][Uu][Aa][Dd]|Geek\s[Ss]quad\s(PC\sCare|Subscription|Services?|Partnership|Management|Protection|Premium\sPlan)|Webroot\sInternet\sSecurity\sPlus|Cyber\sTuner\s\:\sPro|G\-SQUAD\s(Protection|Customer\ssupport)|Team\siCloud|Cpanel\sHosting|Geek\sSquad\scomputer\s\&\stablet\sservices|G\sSQUAD\s360|Sony\sBra\-via\sGT\-S45|Full\sLED\sUltra\sHD\sTelevision|Defender\sFirewall|Personal\sHome\sSubscription|PAYPAL\sCOINBASE|Geek\sSecure\sPremium|Defender\sAdvanced\sThreat\sProtection|Geek\sSecure\sPremium|Geeks\sSquad\sSecure\s360\sPremium|Geek\sSquad\sCustomer\sHelpline\s\(US\)|Windows\sDefender|Advanced\sThreat\sprotection|Microsoft\sfirewall\sdefender|Microsoft\sDefender\sProtection|Firewall\sDefender\sApplication|Geek\sSquad\sAdvanced\sProtection|Geek\sSquad\sTech|Geek\sSquad\sServices|Geek\sTotal\sProtection|Geek\sSquad|Geek\s360\sSubscription|Geek\sSecure\sservice\splan|Geek\sSquad\sPremium\sFamily\sProtection\sPack|GEEK\s360\sSECURE|Personal\sHome\sSubscription\sPlan|Geek\sSquad\sSecure|GeektSquadjServices|PC\sProtection\sPlus|Total\sGeek\sSquade|The\sGeek\sSquad\xC2\xAE\s-\s3\sYears\sMembership|Geek\sSquad\sTech\sAnnual\sPlan|GeekSquad\+1|Geek\x5ESquad\xC2\xAE|GeekSquad\sPlan|Geek\sSquad\s(Premium|Total\sProtection|Comprehensive\sSecurity|Best\sBuy|Protection\sPlan))(\W|$)/m tflags T_JR_BZ_PRODUCT3 nosubject describe T_JR_BZ_PRODUCT3 Baza Call V1: Body has product signature body T_JR_BZ_PRODUCT4 /(^|\b)(?:2022\sApple\siPad\sAir\s\(10\.9-inch\,\sWi\-Fi\,\s64GB\)|Apple\sPencil\s\(2nd\sGeneration\)|Order\sBITCOIN|S\xC3\xA9curity\-360|BTC\s\(Bitcoins\)|Standard\sNotes\sProfessional\sPlan|iPad\sAir\s2022|Apple\sPencil\s2|Walmart\seGift\sCard\spurchase|Geek\sSquad\sSubscription|Network\sShield|Geeks\sProtect\s360|\xC3\xB8ur\ste\xC3\xA2m|\*Geek\sSquad\*|PC\sshield\ssecurity\sservices|Microsoft\sDefender\splan|PC\sShield\sand\sNetwork\sProtection|GeekSquad\sMembership\sService|Geek\sSquad\sTech\sservices|Bitcoin\(crypto\)|Geek\s360\sSubscription|Geek\sSquad\ssecurity|Device\sand\sNetwork\sProtection|All\sin\sOne\sData\sand\sNetwork\sSecurity|Home\s\&\sData\sProtection|Geek\xC3\x82\sSquad|Defender\sPremium\sprotection|Anti-Virus\sSecurity|PC\sProtection\s360|Defender\sFirewall\sProtection|Window\sdefender\sRenewal|Microsoft\sdefender|NSupport\sLLC|NLL\sInc\.|\xC5\x83orton|QuickBooks\sEssential\sPlan|Protectify\sPro|S\xE1\xBB\x8CNY\sBravia|\xCE\xB1m\xCE\xB1zon|SafeGuard|Defender\sand\sFirewall|Guide\sfor\sExploration\sLite|Cybersecurity\sSuite|[Ss]hield[Pp]ro\sProtection|Geek\sSquad\@|VisionProtect\sSecurity)(\W|$)/m tflags T_JR_BZ_PRODUCT4 nosubject describe T_JR_BZ_PRODUCT4 Baza Call V1: Body has product signature body T_JR_BZ_PRODUCT5 /(^|\b)(?:QuickBooks\xC2\xAE\s2022\sPro|QuickBooks\xC2\xAE\s2022\sPremier|QuickBooks\xC2\xAE\s2022\sEnterprise\sSolutions|QuickBooks\xC2\xAE\s2022\sAccountant\sEdition|QuickBooks\xC2\xAE\s2022\sMAC|Acer\sNitro\sANS\s5|Gaming\sLaptop|ASUS\sROG\sZephyrus|Geek\sProtect\sComplete|Web\sAssurance\sSafeguard|Silver\sPlus\sPlan|Premium\sVirtual\sSupport|\(Amazon\.com\)\sDELL\sLaptop|NetworkSecurity360|GeekSquadPay|GEEK\sSQUAD\sCARE|AVG\sSecurity\s\s?\s?Plan|AVG\s360\sInc|GE\xC3\x8BKSQ\xC3\x99\xC3\x85D|N\xC3\xB3rt\xC3\xB2n\-L\xC3\xAEfelock\s|McAfee\sTotal|1\s\xF0\x9D\x90\x83\xF0\x9D\x90\x9E\xF0\x9D\x90\xAF\xF0\x9D\x90\xA2\xF0\x9D\x90\x9C\xF0\x9D\x90\x9E\xF0\x9D\x90\xAC\s\xF0\x9D\x90\xB0\xF0\x9D\x90\xA2\xF0\x9D\x90\xAD\xF0\x9D\x90\xA1\s\xF0\x9D\x90\x80\xF0\x9D\x90\xAE\xF0\x9D\x90\xAD\xF0\x9D\x90\xA8-\xF0\x9D\x90\x91\xF0\x9D\x90\x9E\xF0\x9D\x90\xA7\xF0\x9D\x90\x9E\xF0\x9D\x90\xB0\xF0\x9D\x90\x9A\xF0\x9D\x90\xA5|\xE1\xBB\x8CLED\sUItra|Product\sID:\s[A-Z]{3}[0-9]{8}|WebRoot\s(Security|Protection)|The\sGeek\sSquad\s\-\s3\sYears|Cybersecurity\s\&\sPrivacy|GeekSQUAD|PayPal\sHoldings\,\sInc|Wireless\sEarbuds)(\W|$)/m tflags T_JR_BZ_PRODUCT5 nosubject describe T_JR_BZ_PRODUCT5 Baza Call V1: Body has product signature body T_JR_BZ_PRODUCT6 /(^|\b)(?:My\sBest\sBuy\sTotal\xE2\x84\xA2|Avira\sCyber\sSecurity|twoimportantthi\.shop|Geek\-Squad\xC2\xAE\sSecurity\sServices|Geek\sPurchase\sDetails|TerraUSD|McAfee\sTeam|C\sCleaner\sMembership|LifeLock\s(Service|Tech\sSupport|Membership|Premium|LLC)|CodeCape|AppleCare\+\sVIP|Webroot|_Geek_Squad_|Solana\s\(SOL\)|Paypal\sInc\sauto\-renewal\spayment|Norton\sTotal\sProtection|[0-9]\syears\sSubscription|BitCoin\s\(BTC\)|Geek\sMcafee|PAYPAL\sINC|Personal\sHome\sMembership|Ethereum\s\(ETH\)|Spring\sfield\sarmory\sInc\.|Secure\syour\sPC\sService|Premium\sVirtual\sSupport|Mcfee\sSupport|BILLING\s\&\sSETTLEMENT\sDEPARTMENT|Windows\sDefender\swith\sEnhanced\sCybersecurity\sDefense|Windows\sDefender\s(Pro|Suite)|Digital\sSecurity\sDefense|GK\-SD\sCARE|Geek\$quad|PC\sProtection\s360|Webroot\sMembership|Team\sNorton\sLife\sLock|Mcfee\,\sLLC|Microsoft\sTechnologies\sInc\.|McAfee\,\sLLC|CyberSafe\s(Pro|Plus)|Pre\sPear\sCooking|Apple\sMacBook\sPro|BTC\sMining|COFFEE\sMAKER|CryptoXchange\sPro|PC\sSecurity\sPro|Mike\sIida|Bit\sCoin|\xF0\x9D\x97\xA3\xF0\x9D\x97\xAE\xF0\x9D\x98\x86\xF0\x9D\x97\xA3\xF0\x9D\x97\xAE\xF0\x9D\x97\xB9)(\W|$)/m tflags T_JR_BZ_PRODUCT6 nosubject describe T_JR_BZ_PRODUCT6 Baza Call V1: Body has product signature body T_JR_BZ_PRODUCT7 /(^|\b)(?:Cyber\sSafety\sThreats\sSolution|Elite\sIdentity\sGuard|Delux\sProtection|Personal\sProtection\sAntivirus|premium\sPC\ssupport\sand\sservices|Deluxe\sProtection|PayPal\,\sLlc\.\sMembership|C\sCleaner|Privacy\sProtection|Life\sLock\sPC\sSupport|PayPal\sSecurity\sTeam|Apple\siPhone|Coinbase\sBitcoin|PayPal\,Inc\.|PayPal\sUS|CryptoSwift|LifeLock\sTechnical\sSupport\sServices|LifeLock\sCustomer\sSupport|\/Pay\(\)pal|Premium\sPremier\sSecurity|Norton\sSecurity\sand\sLifeLock|Comprehensive\sCare\s\-\s[0-9]{6}|CyberArmor\ssubscription|PEPE\s\-\sPepe|Geek\sSquad\sSecurity\sPlus\sPlan|TrustLock\sSecurity|BTC\(Bitcoin\)|PayPal\,LLC|McAfee\,\sInc|NetProtector\sElite|PC\sLife\s(ga|Ga)urd\sSecurity|InvisiGuard\sSecure|Antivirus\sShield\sPro|TotalAV\sDefender|PayPal\-Coinbase\sTransaction|Amazon\sPrime\sVideo\sPremium|PayPal\/Crypto|InvisiGuard|AT\&T\s5G|PayPal\sDigital\sPurchase|PayPal\s\xE2\x86\x92\sBTC|PayPal\sBTC|Bitcoin\sPurchase|Advanced\sCrypto\sTrading|PayPal\sto\sBTC|VirusGuard\sSupreme|Bitdefender|NetProtector\sPlus|Bushmaster\sFirearms|Ultimate\sShieldX|Anti\-Spyware|Total\sSupport\sCoverage)(\W|$)/m tflags T_JR_BZ_PRODUCT7 nosubject describe T_JR_BZ_PRODUCT7 Baza Call V1: Body has product signature body T_JR_BZ_PRODUCT8 /(^|\b)(?:Bitcoin\sMonthly\sAuto\-Buy|ArmorScan\sPro|PayPal\sto\sBitcoin|PRO\sProtection|PayPal\s\xE2\x86\x92\sBTC|Bitcoin\s\(BTC\)|Pro\sWebroot|Internet\sFirewall\sProtection|org\-y5GcqVRKPTueV24Cr2Bzr6gt|Btc\sPurchased|Microsoft\sOffice\sPremium|P\@yP\@l|P\@yP\@L|All\sin\sOne\sMembership|Advanced\sWeb\sSecurity|Pay\'\*Pal|Pay\*\-Pal|BTC\sfrom\sCoinbase|Hacking\sDefense|Premium\sProtection\sMembership|Laptop\/Mobile\/Tablet\/Crome\sBook|VirusGuard\sElite|TotalShield\sPremium|ThreatLock\sPro|Defender\sPrime|Bitcoin\s\{BTC\}|Defender\sfor\sNetworks|VirusShield|Virus\sand\sSpyware\sSecurity|Intensifier|EyeScan\sProtection|Printer\sSetup\sor\sTroubleshooting|ShieldMax|PayPal\sto\sBTC|BitDefender|Crypto\sWallet|UltraShield\sPlan|GEEK\sSQUAD|SynthEyes|Avast\sOne|Cosmos\s\(ATOM\)|SecureCore\sUltimate|BusinessPulse|MenuMesh|ProtectionSafe|QueryQuotient|TherapyThrive|ShieldMax|BeaconBase|MissionControl|PAYPAL|Malwarebytes|FullScope\sShield|TotalAVPremium|360\xC2\xB0\sSecurity|NanoShield|DefenderX\sUltimate)(\W|$)/m tflags T_JR_BZ_PRODUCT8 nosubject describe T_JR_BZ_PRODUCT8 Baza Call V1: Body has product signature body T_JR_BZ_PRODUCT9 /(^|\b)(?:1911\sGarrison\sHandgun|SalonSync|SafeSphere|NORT0N|[Cc]yber\s[Ss]afe\s[Ss]ecurity|ETHEREUM|Home\stheater|GradientGrow|DimeDash|IronShield|LiquidLogic|Geek\sSquad\xC2\xAE|Coin\-base\sInc\.|Coffee\sMaker\s\(Q32\-194216\)|365\sAdvanced\sProtection|Malware\sProtection|Secure\sShield|Crypto\sBTC\sPurchase|Provirus\sPlus|Coin\sbase\sCorporation|Ransomware\sComplete\sProtection|Deepfake\sPlus|Internet\sSecurity\sPro|Blockchain\sFinance\sAuthority|AntiVirus\sStandard|Genie\sComplete\sGuard|LogicShield\sPro|Invisionary\s\xE2\x80\x93\sAnnual\sSubscription|TotalLock|Travel\s\&\sCo\-Branded\sCard|Care\sEssentials|PAYPAL\sMCAFEE\sSECURE|Mcafee\x2B\xE2\x84\xA2\xEF\xB8\x8F\sUltimate|N0RTON|YouTube\sPremium|Blockchain\sFinance\sAuthority|UltraShield|Mcfee\sProtection|Microsoft\s(Azure\sArc|Protection|HoloLens|OneNote|Security|Worldwide|Account|365|Rewards|Azure\sMachine\sLearning)|PayPal\sFunds\sTransfer|ActiveGuard\sElite|System\sEssentials|N0RT0N|Minecraft\sEducation\sEdition|Blockchain\sFinance\sAuthority|Gaming\sLaptop|PayPal\sBalance|Annual\sSoftware\sLicense|Geek\sSquad\sBest\sBuy|BTC\-\s?Coinbase|Gaming\sLaptop|Disney\sGift\sCard|Complete\sNetwork\sSecurity)(\W|$)/m tflags T_JR_BZ_PRODUCT9 nosubject describe T_JR_BZ_PRODUCT9 Baza Call V1: Body has product signature body T_JR_BZ_PRODUCT10 /(^|\b)(?:Complete\sDefense\sCare|Best\sBuy\sService\splan|Comprehensive\sProtection\sPlan\s\(Extended\sCoverage\)|LG\sgram\s15\-inch|Paypal\sBTC|CoinBase\sGlobal\sPayment|Blockchain\sFinance\sAuthority|Coinbase\sUS|BTC\sTrade\sDesk\sLLC|P\@YP\@L|P\@Y_P\@L|P\@_yP\@l|Am\@z0n\sE\-Gift\sCard|Remington\sArms\sCompany|Hellcat\sMicro\-Compact\sHandgun|Annual\sFamily\sSupport\sPlan|Btc\sPurchased|Home\sUser\sUltimate|iPad\sAir|Pay_?Pal\s([Mm]embership|[Ss]ubscription|[Aa]ccount|Business)|Coinbase\sTrade\sDesk\sLLC|Center\sStage\sCamera|Amazon\sProtect\+|SecureShield\sPro|Springfield\sarmory\sgun|Subscription\sPlan\sUltimate|ProtectionSafe\sSystem|Ultimate\sPC\sCare|Galaxy\s\$23\s256GB|Comprehensive\sProtection\sPlan\s\(Monthly\)|BTC\sTrade\sDesk\sLLC)(\W|$)/m tflags T_JR_BZ_PRODUCT10 nosubject describe T_JR_BZ_PRODUCT10 Baza Call V1: Body has product signature meta __JR_BZ_PRODUCT (T_JR_BZ_PRODUCT1 || T_JR_BZ_PRODUCT2 || T_JR_BZ_PRODUCT3 || T_JR_BZ_PRODUCT4 || T_JR_BZ_PRODUCT5 || T_JR_BZ_PRODUCT6 || T_JR_BZ_PRODUCT7 || T_JR_BZ_PRODUCT8 || T_JR_BZ_PRODUCT9 || T_JR_BZ_PRODUCT10) ###################################################################### ## BAZA CALL PHONE NUMBERS: ALL NUMBERS HAVE BEEN SEEN IN SPAM/JUNK ## ## BUT NOT ALL NUMBERS ARE BAZA CALL RELATED ## ###################################################################### body T_JR_BZ_PHONE1 /(^|\b|\s|:)(?:1\-718\-989\-5740|1\-877\-482\.4956|1\-877\-482\-4956|1\-682\-626\-0008|877\-208\-5661|8772085661|1\-877\-208\.5661|877\.208\-5661|\+12063090336|\+44\-703\-590\-3232|1\-309\-401\-0721|\+1\(206\)309\-0336|1\~877\~767\~9308|\+18777679308|1\~877\~767\~9308|877\.767\-9308|\+12063090336|1\-415\-738\-5373|1\-718\-989\-5740|TEL\:00447024064951|Assured1\-682\-626\-00082|1\-832\-550\-3161|800\.481\.2979|1\.718\.989\.5746|1\-206\-350\-2402|1\.845\.709\.8044|\+1\s757\s5853620|919\-529\-5373|\+6912751776|1\-833\-945\-1505|\(d61rfo808\)\s53v3as201\s9473|(Team)?\+1\s\(800\)\s781\s\-\s2511|\+1\s\(808\)\s201\s9473|\+2348166952905|\+1\s\(315\)\s632\-0735|\+1\s\(484\)\s369\-7962|\+1\s\[800\]\s681\-7302|\+1\-888\-802\-6626|\(\+852\)\s2215\-5100|\+27\-61\-093\-4198|\+601161727487|\+1\s\(800\)\s780\-5907|260\-223\-9203|\+971\s54\s445\s1408|\+17247693888|\+91\s9830266904|\+12487935231|\+86\-13961434138|\+1\-866\-612\-1309|\+12132464505|\+170182920|\+1\s\(844\)\s976\-2771|1\.833\.900\.0864|\+1\s\(937\)\s303\-5864|\+1\(502\)\s890\-1392|\+852\s2087\s1289|\+852\s3892\s6717|\+1\s855\s552\s2963|\+1\s\(833\)\s409\-2113|\+1\s2133525800|\+64\s21\s2799369|\+1\s\(815\)\s799\-5050|\+86\-21\-52833505\-0|1\-844\-706\-1435|\+1\(866\)\s583\s\-0314|\+229\s90423151|\+1424\-222\-7316|\+1833\s409\-2113|\+1\s\(800\)\s689\-0956)\b/m body T_JR_BZ_PHONE2 /(^|\b|\s|:)(?:800\.481\.2979|1\-718\-989\-5740|\+356\s72986291|\+225\-54189599|415\-508\-4161|\+44\-\(7\)\s4\s5639\s1361|\(230\)\s216\s4865|\+2347041941368|\+1\-866\-879\-1354|\+380\s48\s7932609|\+380\s68\s8220267|\+1\s\(803\)\s692\-1706|\+1\s\(903\)\s403\-1710|\+17247693888|\+12819079195|\+1\-800\-803\-7592|\+1\-866\-879\-1354|\+31\s635250814|\+1\s346\s273\s1937|\+1\-800\-803\-7592|\+9368170104|\+1184571790|\+6244488968|1\s\(201\)\s578\-4239|1\s\(855\)\s518\-7430|\+\s1\-833\-220\-4052|\+1\s661\s280\s8730|\+1\s\(570\)\s500\-8391|\+1\-866\-785\-0325|\+1\s\(850\)\s254\-0627|\+27659345172|\+1\s\(786\)544\-4534|\+1\-803\-810\-1535|\(202\)\s792\-3049|\+1\s\(866\)\-733\-5098|\+855\s89\s279\s401|\+1\s\[800\]\s476\-3694|\+1\(866\)\s889\-3387|\+1\(867\)768\-0009|\+44\s775\s254\s0482|\+39\s339\.19\.87\.071|\+505\s8641\s5459|\+1\s(877)\s881\-6389|\+1\s\(704\)\s565\-6877|\+2347044312742|\+1\s\(917\)\s781\-5345|\+1\s888\s812\-8620|\+1\(707\)216\-1365|\+228\s93645930|1\-833\-900\-0864|\+27\s630733832|\+1\s\(800\)\s680\-9493|\+1\-844\-284\-5829|\+\s852\s2750\s7970|18884992067|1855\s552\s2963|\+1\s\(866\)\s262\-4025|\+1\s\(\s?917\)\s*277\-8169|\+1\s\(888\-230\-1289\)|\+971\s54\s445\s1408|\+1\s\(586\)\s250\-3856|1\-888\-406\-7702|\+1\s\(800\)\s229\-1748|\+1\-800\-935\-3714|\+1\s800\s604\s2634|\+62\s\(778\)\s473335)\b/m body T_JR_BZ_PHONE3 /(^|\b|\s|:)(?:\+1\s\(888\)\s520\-2975|\+1\-833\-409\-2113|\+1\s\(888\)\s\(473\)\s\-\s\(0561\)|\+86\s84320209286|\+86\s28\s06100276\-581|\(035\)\s959\-2497|\+31\(0\)20\s2254\s808|\+65\-315\s816\s72|\+1\(808\)468\-0142|\+17479995199|1\-833\-228\-5492|\+1\(417\)815\-9028|\(069\)\s800\-6826|\+1\s\(830\)\s268\-9838|1\-800\-878\-6819|TEL\.\s00357\-22\-425716|\+1\s\(888\)\s502\-0532|\+1\-719\-496\-169|\(146\)\s260\-5874ext\s20|\+39\-3207666554|\+1\-901\-641\-6558|\(415\)\s802\s\\xE2\x80\x932088|\(661\)\s666\s\-5410|\+14402914195|\+1\-\(916\)\s252\-2840|\+82\s51\s824\s4857|t\s\(\+65\)\s6681\s1790|f\s\(\+65\)\s6779\s9920|\+1\s\(937\)\s679\-9965|\+45\s92452235|\+34\s603\s253\s769|\+86\s574\s88226152|\+88\s01716\-112420|\+1\-860\-733\-6105|\+\s82\s55\s714\s8273|\+\s82\s17\s6805\s0031|\+1\(954\)\s526\-0382|\+90\s\(348\)\s822\s10\s60|\+1\s33\s24430178|\+1\-7992395629|\+1\s\(801\)\s833\-0903|\+1\-\(214\)\s432\-8939|\+1\s\(888\)\s729\-3713|\+1\s\(435\)\s\-294\-2861|\+1\s\(850\)\s905\-0489|\+2347087373209|\+19374003819|\+17143857518|\+1\s\(813\)\s944\s4747|\+1\s\(855\)\s442\-3541|\+49\s\(0\)8102\s531\-0|\+22991284452|\+90\s533\s454\s12\s33|\+86\-0769\-89074578|\+1\(504\)603\-3666|\+7651430819|\+201229766035|\+20482630040\-2|\+1\s\(866\)\s266\-8734|\+39\s0365\s896626|\+39\s0365\s896561|T\:\s\+9097918966|603\-387\-9073|\+48\s572504323)\b/m body T_JR_BZ_PHONE4 /(^|\b|\s|:)(?:021\-57950919|021\-57988818|\+1\s\(866\)\s900\-3260|\+2348033826152|86\-404\-9326260|\+1\-413\-278\-0914|\+84\s8\s3749\s2133|\+84\s348\s913\s174|9045472540|\+1\s417\s698\-4495|\+1\s\(469\)\s609\-0090|\(84\-04\)\s62\s130\s449|\(84\-04\)\s62\s130\s473|\+82\s2\s390\s5950|\+82\s2\s312\s7809|\+380\s99\s970\s3486|\+55\s22\s99249\s1895|\+79035260524|\+234\s706\s681\s5611|\+1\s\(813\)\s683\-6227|\+32460225432|888\-251\-7219|\+62\s\(903\)\s741\s8533|\+64\s21\s2799369|0086\-755\-82779330\sext\.909|\+65\s63460308|\+971556881027|\+1\-\(803\)\s891\-7990|\+27781804770|\+55\s\(19\)\s{1,2}2108\-5422|\+44\s741860\s5180|\+1\-715\-2803140|\+1\s888\s264\s3836|\+22969457855|\+1\(605\)\s299\-9629|TEL\s03\-4214\-3111|TEL\s042\-338\-3111|\+1\s\(818\)\s275\-7971|\+\s7928\-416\-6957|\+229\s5202\s9419|\+79267749331|\+447\s4569\s33901|\+855\s89\s279\s401|\+2348035479823|\+13152265820|\+234\-9074300283|tel\:804\-396\-6164|\+61\-488\-872\-039|\+60\s16\-7670851|\+1\s818\s446\s2499|\+1\s\(934\)\-213\-3701|\(\+1\)\s713\-766\-8542|\+44\-752\-064\-5540|\+2347087373209|\+\(234\)\-8029940130|\+229\-696\-57107|Tel\:27\-78\-7806649|\+1\(619\)\s796\s3293|\+233242750449|\+233244716706|\+1\(605\)\s?299\-9629|\+27\s630733832|\+442031292097|\+229\-62496761|\+447452276236|\+44\s7448\s607532|\+1\s\(808\)\s444\-7738|\+1\(605\)\s299\-9629)\b/m body T_JR_BZ_PHONE5 /(^|\b|\s|:)(?:\+12018628880|\+27\s640\s571\s034|\(\+229\)\s60738541|\+229\-62564778|\+27\-63\-568\-6167|\+33\s7\s5554\s7655|\+15616799537|\+971\-55\-6062043|\+971\-48862325|41\$78889\.864\%9807\.7|\+22967279856|\+1813\s4638\s440|\+1\s\(469\)333\-8543|\+90\s534\s484\s1383|\+1\s\(352\)792\-1972|1\-832\s528\s8959|\+\s4474\s5239\s2015|\+\s1\s6465853907|\+1\-\(917\)\-268\-6501|\+17245663336|\+1\s706\s659\s0109|\+19169096944|\+22969457855|\+1\s\(800\)\s713\-9091|\+229\s682\s97\s169|\+447418448712|\+234\s8107643325|\+234\-7019474148|\+234\-90245259|\+1\-\s806\-302\-5681|\+22964101280|\+1\s\(786\)\s697\-390|\+1\-9253097949|\xD0\xA2\xD0\xB5\xD0\xBB.\s7\s9I3\sI97\sI5\s4O|\+27\-61\-093\-4198|\+1\s9786786081|\+15312719398|\+1\-831\-844\-0022|\(11\)\s4172\.5266|\(11\)\s9\.7799\.7208|\+79267782031|\+1\s917\s382\s9660|\+1\s\(808\)\s201\-8518|\+14154198119|Tel\:\s2250584228014|\+1\s\(586\)\s250\-3856|\+707\s504\s9442|\+1\s\(833\)\s378\-2404|tel\:321\-430\-6828|\+1\s\(707\)302\-8242|\+66\-38\-677870|\+66\-38\-364271|\+22953113529a|\+48\s12\s376\s45\s51|\+48\s798\s802\s840|Tel\+1\s\(562\)\s283\-4866|\+447360239233|\+86\(532\)55663280|\+18319993359|\+1\(657\)213\-4457|\+1\s\(832\)\s6858\s245|\+2347083959781|\+86\-\(0\)\-512\-56310093|\+1\(808\)\s600\-6480|\+1\s\(262\)\s404\-3029|\+79267751985|\+\s79267751985)\b/m body T_JR_BZ_PHONE6 /(^|\b|\s|:)(?:\+234\s80\-73841291|\+7\s9216374524|\+971\s4\s4195555|\+1\s\(385\)\s243\-0779|\+27\-83\-7292\-713|\+27\-86\-6556\-649|\(844\)\s221\-6644|\+\s1\(802\)\-444\-6617|\+1\(802\)\-444\-6617|\+1\s\(202\)\s701\s1113|\+233244716706|\+\s44\s7700\s304\s4635|\+1412\s530\-5034|\+2778\-026\-9501|\+229\s53633272|\+1\s\(516\)\s686\-9224|Mobile\s\:\s00213\s770\s965\s733|\+1\(205\)\s670\-3660|\+\s1\s\(617\)\s954\s0898|\+229\s7338\s8465|\+2348144114928|\+243992775825|\+1\s\(808\)\s300\-0118|\+498017731034|\(800\)0\s8760\-4109|\+1\s\(832\)\s856\-7071|\+33\s0\s644677027|\+32\s454\s20\s49\s20|\+35799665848|\+1\s\(805\)\s500\-7271|\+30\s21\s0490\s2762|\+1\s\(804\)\s999\-9063|\+254723902145|\+44\s770\s000\s8965|\+88\-01748\-041619|\+228\-99769072|\+91\s8099060014|\+44\s7897047811|\+372\-5948\-1883|\+1\s\(724\)\s397\s0118|\+44\s75\s2064\s6934|1\(631\)647\-0829|Tel\:\s0492\s58\s27\s81|Fax\:\s0492\s58\s27\s99|\+1\s\(818\)\s743\-4817|\+1\s\-\s805\-262\-7037|888\-319\-1308|\+27\s10\s516\s0308|\+82\-2\-743\-9230|\+82\-2\-743\-9231|\+65\s6439\s2185|\+65\s6542\s2055|\+233\s23\s849\s2072|\+1\s\(844\)\s757\-2817|\+229\s621\-461\-92|\+1\s424\-226\-9141|\(303\)\s800\-6582|\(347\)\s983\s5633|\(632\)\s88700\-700|\(971\)\s93472241|\+79265036883|\+1\s\(845\)\s273\-5633|\+370\s615\s44089|\+370\s37\s407\s634|\+1\s530\s830\s2906)\b/m body T_JR_BZ_PHONE7 /(^|\b|\s|:)(?:\+39\s02\/66\.809\.530|\+39\s350\s936\s9420|\+1\s804\-999\-9943|\+27\s78\s612\s0156|\+1\s\(850\)\s290\-4643|\+1204\s817\s7202|\+1980\s499\s4627|\+31\s684\s904852|Tel\:\s645\s275\s744|\+603\s8408\s111|\+37120465375|\+1\(845\)\s202\-9524|\+3197005033311|\(86\)185\-7602\-7401|\+886\-8\-7623006|\+886\s988\s791\s968|TEL\s\:\s00\.90\.322\.457\s05\s36|MOBILE\s\:\s00\.90\.535\.977\s08\s29|\+1\s323\s714\s1528|\+15125720009|\+1\(845\)\s868\-2485|\+1\s917\-268\-2771|\+91+22+28952752\/28946488|888\-609\-1819|\+1\s\(888\)\s247\-0505|No\:044\-4850\s7158|\+88649\-87\-862965|\+86\s13602421761|\+1\s\(844\)\s955\-1654|\+393509258702|\+1\-866\-823\-1483|\(970\)\s335\-9625|\+1\(800\)\s416\-6951|\+2348083571322|\+\s1\s315\-351\-2265|\+34\-603\-195\-181|\+49\s8104\s9023\s88|\+49\s8104\s6333\s99|512\-501\-3657|tel\:8618018038949|\+1\s802\s467\-074|\+1\s\(808\)\s336\-2693|\+36\-48\-470\-758|\+36\-20\-975\-43\-56|18447000437|\+92\s317\s212\s8307|\+1\(202\)\-798\-3127|TEL\.\s072\-859\-7077|\+66961102500|954\-466\-8902|Tlf\:\s950\s455\s892|\+\s1323\-417\-2087|\+2349042516419|619\-215\-9010|\+1\-800\-781\-0952|8\-800\-222\-74\-47|\+66\s\(0\)\s2\-117\-1723|\+86\-18937156226|\+86\-371\-60328600|\+1\(818\)\s738\-9660|\+1\(201\)590\-4385|\+183358\s21329|\+22969457855|\(888\)\s257\s\-\s0407)\b/m body T_JR_BZ_PHONE8 /(^|\b|\s|:)(?:\+1\s83358\s21329|\+86\s0571\s87950940|\+86\s15325351326|\+31635250831|\+\s?372\s5758\s7027|\+31\(0\)20\s225\s5118|\+1\-800\-781\-0952|\+1\(8\s8\s8\)\s\-\s\(2\s2\s9\)\s\-\s\(3\s2\s5\s2\)|T\xC3\xA9l\s0617177677|PH\:\s07\s549161586|\+7\s\(906\)\s508\s7981|\+1\(845\)\s351\-8625|\+1\s802\s200\s3800|\+86\s18680371542|\+6281286086930|\+1\-\(845\)\-\(420\)\-\(7645\)|\+22965379623|\+22962190796|\+86\-755\-61640157|\+86\-13528820731|\+55\s719\s9204\-2292|\+44\s1420\s46739|\+381\s21\s2981\s860|\+381\s60\s359\s34\s80|\+1\(805\)\s284\-9527|\(805\)\s284\-9527|\+971\s\s4\s431\s41\s37|\+447937249226|\+91\-9466693734|\+1\-800\-781\-0952|\+1\s701\s890\s2309|\+18887188219|\+1\-888\-718\-82\-19|1\-\(802\)\-375\-7008|\+1\s\(888\)\s531\-2313|\+1\s\(805\)\s250\-0772|\+1\s\(888\)\s652\s4184|\+98\-21\-8854\s7355\-59|\+98\-912\-2882400|\(916\)\s259\-3395|1\-805\-323\-4432|\(312\)\s373\-0691|\+1\(845\)\s299\-7151|\+1\(845\)\s299\-0532|\+1\(302\)209\-0096|\+1\s\-\s\(888\)\s\-\s\(515\)\s\(9208\)|\+1\s\-\s\(888\)\s\-\s\(515\)\s\(9208\)|\+1\(818\)\s724\-5013|\+1\(808\)\s649\-2084|\+1\-724\s648\s0890|\+1\s8\s7\s7\,\s7\s9\s8\,\s2\s4\s0\s3|\+229\s98877594|\+1\s888\s278\s7566|\+1\(888\)\s278\-7566|\+1\(845\)\s299\-8155|\(260\)\s639\-8798|\(\+234\)\s91\s640\s32715|\+381\s11\s2451\s242|\(229\)\s665\-099\-37)\b/m body T_JR_BZ_PHONE9 /(^|\b|\s|:)(?:\+1\(845\)\s307\-4563|\+1\(845\)\s307\-4902|\+1\(845\)\s307\-4939|\+1\(845\)\s307\-4912|\+1\s888\-382\-1407|Tel\:\s010\s516\s0641|\+35319638925|\+1\s\(434\)\s382\-1007|\+1\s\(888\)\s393\-0756|\+1\s\(636\)\s232\-0374|\+1\s\(888\)\s528\s6518|\+974\s31113728\/55865052|\+971\s526\s530\s019|\+1\s\-\s\(802\)\s\\xE2\x80\x93\s822\s0182|\+968\s2205\s6290|86\-13655777486|\(213\s352\s5615\)|\+1\(845\)\s307\-5622|\+447879164066|\+1204\-410\-2143|\+1\(888\)\-850\-2728|Mobile\:\s8606212655|\+\(323\)601\-5404|\+1\(845\)\s307\-5937|\(808\)\s755\-4991|\+1\s404\-301\-1084|\+1\{888\}\-440\-7234|\+971\s50\s4645758|\(725\)\s200\-0524|\(86\)131\-3283\-3830|\+86\s18000761338|\(\+86\)75584877644|\+45\s7455\s2600|\(725\)\s200\-0524|\+1\(845\)\s377\-3215|\+1\(747\)2087488|\+1\s516\s886\s3662|\+79265039894|315\-642\-4321|08\-9467\-9804|\+1\s907\s331\s3121|\(\+1\)917\s672\s6997|\+86\-21\-65701888|\+86\-21\-65191318|\+18776526525|\+234\-855\-171\-3321|\+37253167592|\+1\(845\)\s377\-6295|\+18453776305|\+1\(845\)\s377\-6305|\+44\s\(0\)1226\s740\s007|\+1\-833\-900\-0864|1\.833\.900\.0864|\+1\-844\-562\-0277|20\-2\-2693200\s\/2692285|\+1\s\(442\)\s274\-0144|\+2783\-409\-1204|\+1\s844\s334\s2776|\+1\s\(855\)\s393\s0498|\(0932\)\s8899\.346|\(0917\)\s138\.8899|\+1\(888\)\s592\-2140|\+1\s844\s334\s2776)\b/m body T_JR_BZ_PHONE10 /(^|\b|\s|:)(?:\+1\,808\/431\/2536|\+1\s\(512\)\s45566604|\+56\s9\s44241900|\+1\-808\-378\-5019|1\s855\s383\s4460|\(\+27\)\s\(0\)\s12\s516\s0021|\+1\s\(877\)\s509\-8177|\+39\s02\/66\.809\.530|\+358\s10\s8471|\+1\(845\)\s377\-0076|\+22965379623|\+1\(505\)\s456\-0318|Office\:\s212\.931\.6852|\+971\s50\s4654758|\+82\-2\-3788\-8400|\+1\s\(908\)\s279\-0100|\+381\s\(0\)11\s42\s35\s571|\+229\-53480690|\+1\(601\)2918581|\+1\s\(877\)\s635\s8157|\+1\s\(855\)\s708\s9599|\(\+1\)\s845\-307\-6661|\+\s82\-2\-483\-2413|\+\s63\s2\s711\-8474\s\/\s493\-3327|\+2348024574138|\+1\s833\s674\s5060|\+1\(845\)\s307\-6541|\+234\s8101881179|\+1\s\(818\)\s643\-7860|Tel\s\:\s82\(2\)\-62\s9\s0\-3852|\+1\(845\)\s666\-0773|\+27614713988|\+\s447903696207|\+14808171792|\+1\s\(888\)\s598\s4612|1\s844\s239\s6544|\+1\s\(805\)\s303\-3474|805\-303\-3474|\+55\s21\s98110\s4898|02166\s99\s88\s522|\+55\s21\s98110\s4898|\+1\s\(949\)886\s3968|\(402\)\s486\-2607|\(617\)\s729\s\-\s6881|\+34\.640519259|\+91\-\s9952960721|\+1\(888\)279\-8486|\+1\s\(808\)\s318\s\-2713|\(669\)\s270\-4547|\+27\(0\)\s12\s0041\s723|27\-78\-7806649|\(917\)\s720\-7465|\+1\-\(845\)\-\(407\)\-\(0836\)|\+2711\s794\s3072|\+44\s20\s8638\s0603|\+65\-6775\s5192|\+1\s\(808\)\s493\-1988|\+62\s21\s5433\s1467|\+390687452658|\+91\-75748\s52560|\+18886570992|610\-653\-2170)\b/m body T_JR_BZ_PHONE11 /(^|\b|\s|:)(?:\+229\-5433\-4728|\+44\s753\s715\s8205|610\-653\-2170|\+1\s888\s465\s2073|7325865562|\+86\s18701592769|\+95\s9\s5043893|\+881745709815|\+84\s290\s383\s6454\-56|\(919\)\s935\-0010|817\.587\.6060|\(888\)\s?679\-0270|\+1\s2136693321|1\-\(415\)\s513\-0081|\+86\-17776171657|\(585\)\s209\-5588|\+1\s?\(888\)\s976\-6331|\+1\(845\)\s307\-6191|\+1\s\(845\)\s335\-3146|\+1\s\(808\)\s501\-0315|\+1\(888\)983\-2842|\+1\(206\)\s647\-2429|\+1\s\(808\)\s229\-2472|\+1\s\(808\)\s646-8710|\+1\(845\)\s407\-0856|\+1\(845\)\s407\-0603|\+1\(845\)\s407\-0573|\(\+34\)\s\s91\.123\.83\.85|\+1\s808\-229\-3045|Tel\:\s03\s99\s85\s95\s26|\(312\)\s548\-7147|\(\+62\)\s021\-29969646|\+27\-74\-73\-04\-385|\+65\s6344\s4687|(\+1\s)?888\s791\s4171|\+84\s\(0\)\s922\s397\s621|\+1\s888\s822\s2130|\+1\s\(808\)\s272\-7829|\+27\-\s621\s81\s9563|\+1\s888\-274\-5485|\(571\)\s560\-1429|\+1\s\(877\)\s290\-5639|\+1\s\(888\)\s313\-7913|\+393491922503|\+393207666554|\+7\s909\s667\s1433|\+1\s917\s336\s0795|\+1\s914\s297\s7466|\+1\(888\)\s220\-0432|\+49\s547294220|\+1\s\(667\)\s401\-5534|\+44\s20\s8040\s0335|\+1334\s380\s5783|\+1[i\s]\(808\)[i\s]751\-1410|\+2499\s1231\s0824|424\-645\-7929|\+1\s\(866\)\s638\-1831|\+1\s833\s\(966\)\s2310|\+65\s9752\s8469|\+66\-2\-4162735|\+1\-888\-243\-0635|\+61\s8\s8121\s7794|1\-866\-599\-2488)\b/m body T_JR_BZ_PHONE12 /(^|\b|\s|:)(?:\+6682\-5164531\~4|\(844\)653\-4356|1\-\(833\)\-812\-1621|\+7\s981\s803\-09\-41|\+1\s\(605\)277\-9730|\+\s18016758764|\+44\-7864552278|\+1\s\(850\)\s466\-\s?9781|\+90\s539\s108\s1633|\(880\)\s8399760\-65|880\-1628636453|850\-659\-3568|\+34\s687\s044\s744|\+1345\s988\s413|\+33\s07\s61\s28\s80\s01|\+254101128768|\+254106274304|\(914\)\s826\-8751|\(866\)\s221\-\s?6084|\+79267741220|\+1\s\(808\)\s470\-7517|\+1\s\(818\)\s?900\-2642|\+1\s\(833\)\s415\-5147|\+447472176280|\+229\s51839018|\+1\-833\-465\-9920|\+27\s\(0\)\s12\s51\s60846|\+40\s241\s619993|866\-398\-8293|\+918929872012|\(949\)\s863\-0700|\+603\-3375\s6757|\(877\)\s407\-0101|888\-426\-9371|\(888\)\s503\-0550|661\-279\-0088|\+12800333505402|\+1\(928\)\s544\-3444|1\(717\)\s945\-0948|\+1[.,\-]{1,2}818[.,\-]{1,2}226[.,\-]3737|\+1[.,\-]{1,2}818[.,\-]{1,2}921[.,\-]{1,2}4455|\+1\s\(877\)\s564\-9777|\+1\s\(877\)\s306\-0631|\+1\s888\s397\s5631|\+1\s\(877\)\s516\-9746|\+1\s\(877\)\s978\-3257|\+1\s\(888\)\s339\-4961|\+7\s717\s255\s2888|\(44\)\s7411\s021255|877\s701\s7594|\+1\-845\-288\-4065|410\-697\-6250|\(443\)\s696\-4346|\(646\)\s415\-9125|1\*877\;902\:4902|786\-351\-6075|855\-368\-5502|\+1\s216\s242\-6387|\+1\s216\s242\-6387|\+86\s15919103357|\+18884079644|\(786\)\s706\-4856|\(305\)\s537\-8378|1\.800\.236\.6519|\+86\s407\s597\s1665)\b/m body T_JR_BZ_PHONE13 /(^|\b|\s|:)(?:\+1\(888\)\s614\s6003|\+62\s821\s1\s7777\s871|\+1\s647\-501\-6895|317\-659\-8190|087\s057\s3922|949\-428\-5531|\+1\(888\)\-556\-0764|866\.274\.4287|Tel\:\s5168563212|814\.217\.0702|\+1\s\(914\)\s297\s7466|\+7\s\(926\)\s774\-14\-07|0086\s769\s33399957|1\-866\-599\-2488|\+2347036140351|\+375259112693|\+446543891113|0769\-83371090|\+244936063592|303\-834\-3445|\+1\s919\-335\-9044|1\-800\-865\-3202|\+34\s624\s017\s984|\+34\s631\-713\-398|\+1\.866\.699\.7121|718\-450\-9282|\(516\)\s272\-2110|\+86\-2161918696|\+86\-13816428671|\(718\)\s\(4509282\)|\(718\)\s\(618\s4485\)|\+96569998458|650\-316\-6308|\+1\-888\-232\-3619|0086\-18303202083|\+7186184485|61\s7\s3164\s6420|61\s7\s3868\s2570|\+387\s33\s269\-430|\(01\)\s889\-2357|\+1\s\[888\]\s\/\s712\s\/\s5820|\+15168563212|\(954\)\s585\-9765|7186184485|18334270971|\+1\s\[888\]\s\^\s713\s\^\s4834|\+1\s\(888\)\s\(\s713\s\(4828|\+1\s\(888\)\s\)\s713\s\)\s4828|\+17186184485|\+1\s\(877\)\s414\s0992|302\-499\-4943|804\-256\-8388|18665367855|786\-855\-1873|\+65\s308\-654\-3283|\(859\)\s525\-1344|\+60\s11\s1722\s5127|\+81\-772966422|\+1\s\(888\)\s841\-6798|571\-210\-5562|0086\-576\-89963931|0086\-13650852152|877\-300\-7849|305\-401\-9508|786\-322\-4321|470\-231\-1016|\+1\(808\)\s515\-2217|\(213\)\s212\-6955|\+1\s\(888\)\s713\-5691|608\s982\s9990)\b/m body T_JR_BZ_PHONE14 /(^|\b|\s|:)(?:\(718\)\-450\-\(9282\)|\+7\s915\s348\s23\s89|844\s653\s4356|425\-620\-2648|\(701\)\s581\-5844|at9\+15888665412922|\+\s27\s12\s516\s0059|\+27\s63\s050\s2053|888\.895\.2649|6\+21088866546292268461523|\+1\s\(888\)\s713\s5731|816\-336\-1394|\+1\s\(800\)\s880\-0338|\+2348156335605|\+91\s912\s174\s6330|\+1\s\(888\)\s713\s5734|on\xEF\xBF\xBD\+1\xEF\xBF\xBD\(866\)\s554\-3960|\(844\)\s944\-2629|\+92\s303\s486\s5317|\+20235358570|86\s18028736682|\(815\)S569T4493|954\-466\-3205|\+1\s\(920\)\s808\-5951|\+1\s\(888\)\s713\s5921|\+1\s\(888\)\s713\s5922|\(847\)\s545\-0548|\+1815\-324\-2232|\+447452295073|408\-216\-2158|\+44\s20\s3752\s3438|\+44\s1350\s727516|\+346\s\(3264\)\s5040|415\-633\-4266|\+1\(818\)\s214\-1092|818\-848\-6111|\+7\s707\s758\s8519|\+380970752360|\+380671236145|\+92\-21\-34325656\-7\-9|\+1\(845\)\s422\-4015|\+1\s\(507\)\s209\-0612|951\-261\-5578|615\-669\-0298|\(347\)\s796\-4437|\(703\)\s721\-8864|\+1\s\(866\)\s352\-1613|\(888\)\s363\-7596|27\-632\-056\-088|27\-71\-929\-8901|888\-908\-1191|\+1\W\(806\).642.4782.{0,3}|737\-328\-9471|\+1\-805\-755\-4763|00201023990901|\+1\(844\)\s457\-0146|1\.858\.800\.4935|\+66\s2073\s0670|\+66\s2073\s0677|\+44\s7915\s647305|\+1\s\(838\)\s227\-9028|\+974\s4416\s7728|\+974\s55789\s205|\+1\s\(838\)\s227\-9029|\+1\s\(201\)\s298\-3939|971\.399\.0050)\b/m body T_JR_BZ_PHONE15 /(^|\b|\s|:)(?:\(732\)\s497\-8827|\(855\)\s224\-1500|\+91\s9078198796|\+1315\-636\-4609|\+1\s409\s207\s0180|646\-661\-7853|516\s730\s0548|\+3197505030827|1\s\(800\)\s790\-5520|\+962\s6\s58\s64\s584|886\+953\s515\s906|\+818\s909\-7772|\+44\s207\s088\s8349|\+1\(302\)\s308\-8404|\+31\s\(0\)\s345\s623\s811|321\-354\-1938|877\-804\-3258|760\-454\-5420|\+1\s802\s636\s0657|\(802\)\s636\-0657|\(646\)\-440\-4100|818[\-.]848[\-.]6111|\+39\s030\s8341\.421|\+1\s866\s462\-3575|\+966\s14\s321\s2440|\+1\s866\s462\s3575|\+32\s2808\s2477|\+91\s9911204975|\(718\)\-404\-9257|\+1\(816\)\s846\-8216|\+1\s732\-936\-7389|\+00441543227984|\+233206473903|\+92\s335\s3572280|\+92\-300\-0568721|\+86\s13554861140|\+1\s802\s565\s5460|\+385\s1\s4107770|\+1\(855\)\s679\-2079|\+1\s\s\?\[\s?888\s?\]\s875\-\s?0634|\(561\)\s257\-0179|\(\+47\)\s915\s03\s850|\+1\(213\)\s562\s4369|\+1\(855\)\s446\-8929|305\-336\-2403|\+1\s\|\s833\s\|\s487\s\*\s4994|\+1\s\(818\)\s230\-2931|\+1\(215\)789\-9104|\+1\s\(845\)\s687\-3201|\+40799102041|\+91\s912\s174\s6330|7186184485|\(833\)\s505\-3899|\+1\s\(832\)\s603\-4694|\+39\s02\s796\s420|\+852\s3709\s4988|\+1\-888\-786\-0215|\(330\)\s331\-2003|\+1\s\(205\)\s419\-8848|\(239\)\s214\-8592|\+1\s847\s450\s0751|\(512\)\s287\-7618|\+1\(847\)\s986\-8801|\(917\)\s789\-6913|419\.376\.0392|510\-982\-3084)\b/m body T_JR_BZ_PHONE16 /(^|\b|\s|:)(?:\+1\s888\s627\s2263|\+1\s\[\s833\s\]\s493\s\`\s5115|\+86\-2161918696|305\-951\-3171|\+973\s17731178|\+1\s\(520\)\s357\-3370|\+1\s\(833\)\s498\s\-\s4077|1\.858\.926\.7874|051\-59055803|412445\-0703|\(760\)\s359\-8186|\+4915905578805|\+1\s\(805\)\s290\s1089|614\.915\.4563|\+1\(855\)\s613\-3205|\+1\s\{866\}\~566\-\s\[9346\]|740\-860\-0890|\+18553450222|\+1\s\[855\]\s345\s\,\s0222|7186184485|866\.503\.0500|\+1\s\(805\)\s206\-2671|\(718\)\s450\-9282|\+1\s\[833\}493\~5115|\+1\(480\)\s409\-0809|714\-308\-8755|\+1\s\(888\)\s538\-2936|813\s776\s1443|\+1\s\(929\)\-561\-6448|\(314\)\s343\-1044|\+1\(859\)\s788\-2703|1\-818\-570\-5363|\+1\s813\s776\s1400|1\(888\)\s998\-5814|\+1\s469\-757\-4606|\x2B\xF0\x9D\x9F\x8F\-\xF0\x9D\x9F\x96\xF0\x9D\x9F\x8E\xF0\x9D\x9F\x93\-\xF0\x9D\x9F\x96\xF0\x9D\x9F\x94\xF0\x9D\x9F\x8F\-\xF0\x9D\x9F\x8F\xF0\x9D\x9F\x90\xF0\x9D\x9F\x90\xF0\x9D\x9F\x91|\+1\(914\)297\-7466|Skype\:\sbulkmailmarketer|8185327012|\+1\s813\s709\s7447|\(949\)\-755\-7782|\+1\s949\-755\-7782|727\-858\-9744|\+14157027960|7186184485|1\-866\-640\-1052|\+1\s302\s266\s82099|\+1\s813\s776\s1460|\(813\)\s776\-1460|866\-564\-1400|\+1\s\(866\)\s333\-0211|\(718\)\s866\-4301|\(858\)246\-6519|315\s636\s4446|1\s860\s341\s5467|\(571\)\s377\-8672|714\-308\-8755|\+1\-833\-331\-3019|\(816\)\-336\-1394)\b/m body T_JR_BZ_PHONE17 /(^|\b|\s|:)(?:\x2B\xF0\x9D\x9F\x8F\-\xF0\x9D\x9F\x96\xF0\x9D\x9F\x8E\xF0\x9D\x9F\x90\-\xF0\x9D\x9F\x94\xF0\x9D\x9F\x93\xF0\x9D\x9F\x95\-\xF0\x9D\x9F\x94\xF0\x9D\x9F\x95\xF0\x9D\x9F\x96\xF0\x9D\x9F\x94|\+1\s888\s353\-0903|347\-515\-6590|718\s618\s4485|\(571\)\s210\-4204|\(904\)\s710\-1744|\+1\s888\s394\-0082|\+1\s844\s6771\s994|888\s391\-6407|971\-4\-282\-6493|714\-308\-8755|\+1\(870\)\s619\-4551|\(608\)\s620\-7860|\(00965\)\s24810901|\+965\-97397988|216\-243\-7301|0422\s\-\s4342\s888|954\.445\.6498|888\s321\s5301|\+1\(858\)\s222\-0978|\+1\s424\s226\s4546|314\-850\-4929|\+1\s680\-205\-1365|786\-698\-3500|\(305\)\-234\-4700|\+1\-813\-776\-1410|337\-455\-7002|\+971\s4\s424\s4411|\+1\s\{?\(855\)\}?\s295\s?\-\s?7755|\+971\s4\s212\s4000|\+91\-9902035377|\(310\)\s507\-0523|\+31620875984|\+1\s\(888\)\s451\-9783|971\-21\-32211230|\+84816704569|\+1\s\(\s803\s\)\s680\-3355|\+1\s\[\s855\s\]\s505\-3456|\+1\s487596\&855|\+91\-11\-9278\s4071|7184509282|\+1\s805\s265\s3558|\+39\s0438\s1963235|\+65\s6261\s8009|\+1\s\(202\)\s5952\s666|\(502\)\s668\-0096|623\-352\-9776|\(949\)\s755\-7782|\+1\(818\)\s921\-4787|\+86\-13816428671|\+86\-2161918697|\+1\(870\)\s376\-0828|561\-203\-9521|866\-561\-4019|904\-807\-1626|\+1\s\(347\)\s545\-7070|888\s321\s4446|1\(800\)\s683\-1978|603\-471\-5772|81O\s58O\-8684)\b/m body T_JR_BZ_PHONE18 /(^|\b|\s|:)(?:\(213\)\s376\-2307|\+1\s\(213\)\s376\-2271|\(386\)\s270\-3186|\(619\)\s272\-2259|\+7\s926\-778\-45\-94|888\s653\-6695|\+1\(806\)576\-1175|1\-888\-\s809\-1816|\+1\s\(888\)\s925\-7759|\(502\)\s222\-0303|703\-836\-9340|\(202\)\s657\-6172|1\(574\)\s701\-2909|1\-\(877\)\-592\-1641|1\.877\.592\.1643|888\.202\.4423|\+97477314550|1\-\(844\)\-716\-9911|\+886\s6\s6530335|\+886\s6\s6530343|\+16664028669|\(703\)\s752\-6178|319\.430\.9126|\+1\s703\-389\-8593|\+447860064908|\+1\s703\-333\-9494|\+1\s\(773\)\s998\-7358|1\-515\-\s?316\-0411|\(646\)\s661\-7853|\+7\s926\s774\s14\s07|\+7\s707\s480\s3452|\+1\s813\s776\s1410|1\-\(855\)\-713\-3280|\+233\s200143320|\+1\s\(816\)\s834\-9561|\(\+1\s505\)\s\s?217\-3580|\+91\s6261912373|1\-620\-213\-8818|\+1\(888\)\s233\-8155|\+32\s78\s48\s28\s01|\+44\s02\s231043451|\(833\)\s948\-6080|\(646\)\s661\-7853|\+\(1\)\s305\-404\-1822|\+31\s\(0\)50\s521\s54\s37|\+1\s(805)\s500\-6289|1\-\(866\)\-623\-1202|\+1\s\{\s833\s\}\s882\s\-\s1871|\+1\(339\)\s309\-6422|\+1\s\(888\)\s341\-3653|\+58\s412\s971\s0270|725\.276\.3111|\+86\s13546142004|214\.320\.3205|\+86\-18636130844|\(619\)\s272\-2259|305\.307\.5217|\(717\)\s525\-5913|\(888\)\s743\-8467|\+1\s806\s884\-4369|\(888\)\s742\-2149|1\-888\-851\-7613|\+34\s91\s627\s91\s00|\+1\s\(888\)\s575\-4901)\b/m body T_JR_BZ_PHONE19 /(^|\b|\s|:)(?:(call\s?)?+971543187710|\+1\(866\)\s929\-3518|1\{980\}\s\s?206\-1016|\+86\s755\s2291\s8760|302\-476\-2306|1\(888\)312\-2036|\(\+1\s850\)\s\s388\-0127|315\s636\s4446|\+1\s?\(202\s735\s3623\)|\+447584965729|\+1\s\(866\)\s622\-2092|\+45\s92451\s659|\+1\s\(813\)\s398\-0831|\+1\s\(804\)\s7238\-771|561\-910\-6424|562\-903\-1557|\+27\s12\s516\s0738|\+77752160975|\+1\(830\)\s297\-0410|1_866_290_0383|\+16512008901|Tell\:\s012\s516\s0616|00201062992510|00201096841626|\(\+1\)\s647\-395\-1523|\(\+1\)\s647\-321\-2018|\+1\(240\)232\-6773|\+1\(855\)\s684\-3175|\(919\)\s439\s7172|08373\-242171|\+1\(805\)\s215\-0464|\+1\s844\-769\-6994|805\.362\s0933|\+447777294417|\(818\)\s206\-7761|\(732\)\s382\-7000|\+1\s\(828\)\s567\-8844|\+1\s\(808\)\s427\-9233|1\-828\-\s?423\-8452|\+34\s92\s476\s70\s10|\+974\s3018\s4986|\+01671\-122231|\+880\-2\-9834892|\+1\s\(801\)\s740\s3176|\(818\)510\-4967|\+233\-533\s791\s520|\+77086930123|9755561213|\(\+601\)\s4986\s8900|8338426800|\(802\)\s200\s9561|\+1\-808\-515\-5209|\+18053025842|\(332\)\s230\-9012|\+1\s816\-762\-2324|86\s762\s3269332|18202080065|\+86\s15221421060|032\-744\-3314|1\(81O\)\s58O\-8684|\+1\s866\s201\s6429|\+19498257904|808\-308\-9450|\(8O3\)\s+446\-1612|\+27\s72\s590\s2674|\(332\)\s222\-4058|\+1\s\(864\)\-516\-978O|1\(833\)\-412\-2852)\b/m body T_JR_BZ_PHONE20 /(^|\b|\s|:)(?:\+1\s810\s215\s4492|804\s800\-4435|1\-\(865\)\s\s232\-2544|1863\s21O4696|\+1\s818\s350\s5817|\+1\/810\/215\/8120|\+1\s818\s495\s9350|\+1\s815\s283\s0409|929\-822\-5533|\+1\-\(81O\)\s\s268\-5O32|\+1\s\(954\)\s406\-6686|1\-8O8\-\s216\-6467|\+1\-\(801\)\-340\-5239|\(778\)\s855\-5549|031\-516\-0869|\+33\s66\s296\-7043|\+1\s\(818\)570\-6797|\+1\-409\s941\s7030|\+60327773110|\+1\s\(562\)\s732\-4120|859\s+4O2\-7872|803\-573\-2592|\(215\)789\-9104|1\-\(859\)\s\s693\-4475|406\-206\-4707|\+90\s282\s746\s10\s07|\+\s90\s543\s746\s11\s04|\+44\s\(742\)\-893\-4380|\+86\s15805321553|\+852\s464\s114\s23|\+612\-83108022|1\s828\s+242\-77O6|\(865\)\s+24O\-8986|\+1\(804\)\s392\-\s8847|\+971\s2\s641\s7990|\+\s971\s50\s202\s9496|\+971\s4\s353\s6863|\+\s971\s4\s3535436|\+91\-6283285416|\(852\)\s2753\s8525|806\s232\-1891|\+1\s\(818\)\s493\-1238|803\a265\-2780|\+1\(208\s625\s1831\)|\+1\s\(202\s703\s1416\)|\+852\-28333787|\+852\-98316243|852\-28333777|\+1\s\(863\)\s346\-6483|803\s393\-3497|\(832\)\s737\-3912|\+91\s9315317277|\+91\s8178633590|805\s505\-3161|1\-844\-505\-2993|\#\+90\s554\s959\s7523|786\.281\.8376|61459065521|\(321\)\s352\-4743|7186184485|\+358\a40\a6871806|\(803\)\s876\-3060|805\s505\-9855|\+1\s\(815\)\s420\-9351|828\s235\-5489|\(404\)\s939\-9748|\(865\)\s+283\-6747)\b/m body T_JR_BZ_PHONE21 /(^|\b|\s|:)(?:\+86\s13336461964|810\s320\-9721|\(215\)\s789\-9104|820\s206\s3066\xE2\x80\xAC|820\s206\s3066|808\s272\-8324|\x2B1\xC2\xAD\xC2\xAD\xC2\xAD\xC2\xAD\xC2\xAD\xC2\xAD\xC2\xAD\xC2\xAD\xC2\xAD\xC2\xAD\xC2\xAD\xC2\xAD\xC2\xAD\xC2\xAD\xC2\xAD\s\(866\)\s617\-4991|\(805\)\s505\-8380|\+1\s\(810\)\s320\-8980|\+1\s\(804\)\s552\s5112|\+1\.813\-786\-7220|1\.812\.469\.0368|\(888\)\s662\-6250|7186184485|\+1\s\(802\)\s753\s\-\s2581|\+12363003002938|\+1\s\(805\)\s764\-9107|\+44\s\(0\)208\s135\s2906|\+1\s\(858\)\s867\-8362|\+1\s\(856\)\s308\-6723|\+1\s\(724\)6727\-493|\(\+84\)931\s537\s189|\(\+84\)274\d3613069|\+1\s\(839\)\s268\-8379|\+1\s\(857\)\s895\-8373|\+1\s\(858\)\s331\-9858|\+1\s\(802\)\s318\-4077|\+34915822500|\+91\s9414303739|\(808\)\s867\-3635|\+1\s\(312\)\s555\-0923|\(888\)\s662\-6230|\(848\)\s388\-1489|81\-3\-5561\-4711|\+77752545157|\+1\s876\s238\s5267|\+44\s6477751501|1\s808\s220\-1941|1\-808\-\s220\-1941|\(814\)\s270\-0023|\+1\s\(828\)\s280\-1943|\+1\-\(808\)\-385\-9489|\+1\s\(803\)\s610\-4970|1\s\(814\)\-270\-9970|\+1\s814\-270\-9970|\+1\s\(814\)\-270\s0402|\+1\s\(808\)\s258\-5945|\+1\s\(878\)\s978\-3073|\+1\s\(805\)\s350\-4333|\+1\s\(803\)\s463\-2853|1\(808\)\s388\-8930|\+1\s803\s467\.5981|\+1\s\(803\)4675981|\+1\s\(703\)\s520\-7531|1\(859\)\s270\-6721)\b/m body T_JR_BZ_PHONE22 /(^|\b|\s|:)(?:\+44\s7350\s274758|\+852\-9247\-8758|\(808\)\s562\-4553|1\-\(808\)\-\(351\)\-6278|\+1\s\(808\)\s464\-1504|\+1\s\(703\)\s459\-9604|\+27\-86\s515\s4728|\+27\-\s632683403|\+1\s\(805\)\s294\-8609|\(808\)\-562\-4553|503\-218\-3290|\+1\s\(808\)\-227\-3158|\+1\s\(808\)\s388\-8930|1\s808\s226\-7690|\+1\s\(808\)\-227\-3158|\+1\s\(704\)\s828\-0833|1\-805\-236\-1024|852443\s591\s48|903\s212\-9807|305\-883\-5058|800\-544\-1131|\+1\s802\s356\s3981|\+?1\s\(802\)\s356\-3981|\+79267759269|\+91\s7398380048|\+1\s\(828\)781\-2618|1\s\(904\)\s579\-7173|\+380\s9655\s01642|\+31\s6122\s30299|\+44\s73867\s53878|\+48732104293|\+1\s\(865\)\-206\-1812|\+1\s\(865\)\s686\-8431|\+1\s314\-896\-1623|\+1\s877\-502\-2227|\+1\s\(701\)\s638\-0848|\+16267249172|\+1\s\(706\)\s710\-8980|7207606411|\(702\)\s603\-2713|\+27782070308|\+1\s\(863\)\s210\-7222|272\s4256\s376|\+1\s\(828\)\s620\-4957|\+1\s\(859\)\s230\-1422|\+82\-10\-9687\-1208|\+1\s\(805\)\-228\-9899|1\(859\)\-396\-5398|\(845\)\s286\-0631|1\-839\-\s810\-9254|1\.582\.\s238\.0185|1\-\(803\)\s297\-4539|\+1\s\(802\)\s204\-3107|1\-\(801\)\s435\-4106|\+17017798506|\(317\)\s751\-5969|1\.859\.\s227\.6480|1\s803\s297\-4539|839\s810\-9254|\(805\)\s309\-1073|929\-822\-5533|1\(582\)\s238\-0185|\+1\-\(803\)\s297\-3429|\+1\s\[828\]\s242\-\s4045)\b/m body T_JR_BZ_PHONE23 /(^|\b|\s|:)(?:\+14062994196|\(831\)\s210\-2852|\+1\s\(839\)\-810\-9254|\+1\s\(983\)\s220\-2378|\+1\s\(983\)\s220\-2057|1\.859\.\s222\.1582|\(\+1\s839\)\s810\-9254|\(859\)\-222\s6237|\+1\s\(865\)\-235\-4589|01905\s792\s843|\(804\)\s388\-7103|1\-\(803\)\s297\-3429|\(859\)\-222\s6276|\(805\)\s293\-2546|86\-15802752742|\(801\)\s340\s7080|\+1\-865\-235\-4580|\+1\(983\)\s220\-2853|\(801\)\s306\-9959|\+1\-859\-204\-5293|\+1\s\(805\)\s365\-2932|1\s805\-365\-2978|1\-808\-\s302\-7606|1\s865\s223\-1766|\(865\)\s209\-0486|917\-259\-0898|\+1\-865\-223\-0873|\+1\s\(859\)\s222\-5136|\+1\-808\-308\-6077|\+1\s\(864\)\s325\-2585|\+81\-75\-935\-6101|1983\s220\-2753|\(818\)\s629\-2821|1983\s220\-2753|\+1\-865\-489\-7073|\+1\-839\-317\-8932|\+974\s66757322|\+86\s13926193149|\+1\s\(803\)\s471\-6149|\+1\s\(888\)\s818\-8536|\+260\s\(211\)\s256749\/60\/64|\(843\)\s302\-3665|\+1\s838\s209\s0187|\(983\)\s220\-2228|\(818\)\s208\-8006|\+39\s335\s5975629|\+1\s\(859\)\s247\-9295|\(865\)\s206\-0802|1\s865\s206\s0802|\+9662\-5567100|\+1\s\(859\)\s247\-9295|1\s\(865\)\s293\-9153|\(859\)402\s7471|\+1\s865\s293\s9153|\+1\s\(805\)\s304\-4578|\+7\s775\s540\s2738|\(810\)\s288\-4202|\+1\s\(818\)\s206\-5570|\+1\s\(818\)\s206\-5570|\+1\s\(970\)\s303\-2845|\+1\s\(818\)\s839\-6316|\+1\s\(662\)\s792\-0622|\+1\.802\-306\-6437)\b/m body T_JR_BZ_PHONE24 /(^|\b|\s|:)(?:\(818\)\s839\-6324|\+1\s\(818\)\s751\-0631|\+1\s\(970\)\s303\-2841|970\s303\s4248|1\-970\-303\-4248|\+1\-970\-303\-4248|\(970\)303\.4248|1\s970\s303\s4248|\(888\)\s207\-0170|\(810\)\s288\-5922|810\s288\s5922|\+1\(970\)\s303\-2645|\(805\)\s204\-6329|\(818\)\s573\-6135|\+1\s\(804\)\s713\-4607|\+1\s\(802\)\s438\-3362|\(865\)\-321\s3167|\+96878813640|\(619\)\s289\-7059|\+852\s6198\s9606|\(859\)\s312\-7383|1\{859\}\s222\-6276|\+1\s\(120\)\s362\-78213|\(816\)\s277\-0806|\(802\)\s267\-5949|\+1\(801\)\s346\-6088|\+1\s\(970\)\s303\s\-\s2784|1\s\-\s970\s\-\s303\s\-\s2784|\+44\s7780\s480\s657|\+1\s\(804\)\s738\-7596|\+971566771175|\(855\)\s557\-7703|204\-384\-2834|\+7\s906\s086\s9370|\+1\s\(803\)\s839\-0789|\+1\s\(808\)\s221\-3294|\(803\)\s930\-4102|\(856\)\-246\-9796|\+66\(0\)2\s\s079\-9888|1\-\(856\)\-\(288\)\-6713|\+62\s21\s440\s2459|\(805\)\s669\-3960|1864\s3467326|\+1\s\(808\)\s364\-5770|1\-808\-\s304\-2793|\+1\s\(805\)\s215\-0984|\+974\s5186\s0348|\+91\-7350002596|\+31\s9700\s503\s4006|\+1\s\(332\)\s291\-1519|1\(810\)\s386\-7760|\(810\)\-386\-7761|\+9716\s7430\s611|\+1\s\(864\)\s275\s8689|\+1\s\(805\)\s254\-9146|\+1\s\(812\)\s266\-3622|\+1\s\(810\)\s221\-9620|\(804\)\s738\-3578|\+77470469583|\(856\)\s308\-9364|1810\s3863493|1\s813\s\s401\s\-\s7925|\+1\s\(803\)\s859\-6047)\b/m body T_JR_BZ_PHONE25 /(^|\b|\s|:)(?:\+1\s\(843\)\s343\-4061|\+1\s\(843\)\s324\-6085|\(865\)\-293\s1719|\+1\s\(820\)\s235\-7387|\+1\(888\)\s896\-5435|\+1\s970\s303\s4431|\(760\)\s372\-6546|1\s803\s\s965\s\s4332|1\s\-\s803\s\-\s965\s\-\s4332|\+1\s\(347\)\s268\-9369|1970\s303\s\-\s2606|1\s856\s342\s1895|\+1\s\(803\)\s477\-5089|\+1\s\(859\)\s247\-9140|1\(856\)\s\s246\-2676|805\s707\s1651|\+1\-\(803\)\-886\-7257|1\-970\-303\-4462|\(213\)\s440\-2832|\(213\)\s440\-2832\xE2\x80\xAC|\+1\s970\s303\s\-\s4456|\+1\s970\s303\s4394|\+1\s\(802\)\s346\-3775|\+1\s\(805\)\s896\-2595|\+1\s\(806\)\s517\-4918|\+1\s\(813\)\s453\-7340|808\-226\-1152|1\(810\)213\-3002|\+7\s747\s052\s4085|\+1\s\(808\)\-460\-7714|\+1\s\(805\)\s3041786|\+1\s\(970\)\s303\s\-\s4496|\+1\s332\s277\-8568|\(805\)\s304\-3048|\+1\s\(803\)\s263\s8031|\+1\s\(802\)\s252\s5140|808\s389\s7801|\+1\s\(864\)\s856\-0823|\+1\s\(859\)\s247\-0362|347\s522\s-\s1706|856\.250\.7305|\+1\s\(813\)\s934\-5022|856\/250\-7305|1\s\(805\)\s725\s\-\s8788|\+1\s\(828\)\s269\-4655|\+\s1\s\(813\)\s263\-7550|\+7\s747\s052\s4085|\+1\.805\-365\-4865|\+1\.808\.216\.4975|\+1\s\(813\)\s934\-5166|1\-806\-\s535\-3746|\(332\)\s293\-4361|\+1\s\(801\)\s516\-6739|\+1\s\(865\)\s684\-3909|\+1\s\(983\)\s220\-2850|\+1\-\(801\)\s613\-5303|\+1\!\(801\)\s613\-5338|\+1\-\(863\)\s329\-1048)\b/m body T_JR_BZ_PHONE26 /(^|\b|\s|:)(?:\+1\/808\/219\/9130|\+1\s808\s219\.9130|\+1\.805\-518\-7755|1\-\(815\)\s296\-6566|1863\s3980539|\+1\s\(865\)\s287\-0499|\(803\)\s200\-4718|\(810\)\s259\-7658|\+1\s686\s204\s8789|686\s204\-8789|801\-614\-4365|\+1\s686\s204\.8789|1\s\(686\)\-204\-8789|1\+\s\(864\)\s237\-7986|\+1\s864\-907\-9694|\+1\s856\-620\-6870|686\/204\-8789|\(864\)\s908\-0190|1\.856\.\s601\.2765|1\s\(802\)\s319\-5749|\(803\)\s883\-9894|1\-802\-\s330\-4660|262\-977\-5513|\+1\s\(831\)\s266\-7423|\+1\s\(812\)\s396\-0730|\+1\-810\s219\-8941|\(808\)\s721\-3196|\+1\s804\s392\s2793|\+1\s717\s748\s6604|\+31\s612\s290\s064|1864\s365\s9476|\+1\s\(352\)\s450\-8884|\(952\)\s450\-8688|\+1\-\(805\)\-774\-4847|\+1\s\(813\)\s934\-5254|1\(828\)\s271\-2063|1\-\(530\)\-\(941\)\-4573|1\{808\}\s909\-1648|1\s805\s303\-0426|1\s805\s303\-0426|\(856\)\s\s601\-6700|\+1\s\(828\)\s579\-5860|\+1\s\(831\)\s529\-6347|\(864\)\-631\-7022|\(803\)\s223\-8597|\+1\s\(813\)\s934\s5221|1\s828\s620\-5826|1\.828\.\s620\.5826|1\-\(805\)\-\(303\)\-0425|1\(808\)\s748\-1467|1813\s\s\(934\)\s\-\s5384|\+1\sEight\-0\-Six\-677\-9360|854\s\s500\-4851|1\.854\.\s500\.4851|\(813\)\-934\s5083|843\s442\-7484|\+44\s\(0\)20\s7443\s8856|805\-670\-2952|8056702228|\+447418603273|\+447886787422|\(805\)\s\s?670\-7915|\(805\)\s\s?670\-7915|805\-670\-4255)\b/m body T_JR_BZ_PHONE27 /(^|\b|\s|:)(?:\+1\s\(805\)\-758\-9296|\+44\s7425753991|\(805\)\s\s?758\-9534|\+1\s\(805\)\s758\-9402|\(805\)\s815\-5935|\+1\s\(810\)\s228\-5112|\+1\s\(810\)\s341\-2472|\+1\s\(802\)\s856\-5335|\+1\s\(805\)\s824\-8528|1\s\(805\)\s824\-7952|805\s843\s1380|805\s824\-7952|\+27\-73\-520\-8257|\+1\s\(808\)\s909\-1648|\+1\s\(865\)\s287\-2428|\+1\s\(813\)\s934\-5502|\+1\s\(813\)\s934\-5516|\+1\-\(805\)\s\s832\-1341|\+44\-7520\-677780|55\s1477\s8599|\+1\s\(803\)\s586\-7144|86\-0760\-23401871|\(805\)\s853\-6475|\+1\s\(864\)\s551\-8879|\+1\s\(844\)\s312\-1146|\+1\s\(805\)\s215\-5664|\(864\)\s201\-2609|\+1\s\(813\)\s543\-3219|\+1\s\(813\)\s543\-3175|1656\s\(556\)\s2261|\(813\)\s543\-3359|1656\s\-\s\(556\)\s\-\s2208|\(813\)\s934\-5501|\(\+1\s805\)\s\s940\-7167|\+1\s\(813\)\s543\-3518|1805\s9406901|\+1\s\(813\)\s543\-3501|\+1\-805\-946\-4048|\+1\s\(812\)\s266\-5006|\+1\s\(802\)\s559\-4496|\(805\)\s248\-3914|813\s543\-3358|\+18562498777|1\-\(813\)\-\(543\)\-3293|\+1\-\(865\)\-242\-9165|\+1\-\(865\)\-283\-8942|\+1\s\(865\)\s287\-9978|\+1\s\(812\)\s396\-0742|\+1\s\(831\)\s529\-4961|518\-800\-9657|518\s600\s8830|\(347\)\s997\-5436|\(980\)\s354\-2978|332\-286\-7945|516\.990\.9789|1\s\(865\)\s398\s\-\s5520|\+1\s\(856\)\s366\-7331|\+1\s\(810\)\s345\-2836|\+1\s929\-333\-4727|\(518\)\s535\-8405)\b/m body T_JR_BZ_PHONE28 /(^|\b|\s|:)(?:332\.286\.8038|\+1\s\(704\)\s997\-4370|\+1\-\(820\)\-667\-6807|\+1\s856\s283\s1540|806\s\s438\-6210|\+1\s\(518\)\s412\-9014|1\{805\}\s\s?302\-8515|\+18043070745|\+44\s20\s7946\s0821|\+1\s\(806\)\s471\-4360|\+1\s\(628\)\s502\-6284|\(\+1\s806\)\s\s239\-4758|\+1\s\(806\)\s382\-0325|\+1\-\(805\)\-236\-4938|804\-391\-1736|\(828\)\s367\-1538|\(860\)\s\s?484\-2654|\(813\)\s786\-1722|\(516\)\s534\-2900|\+1\-830\-515\-8358|\+1\s857\s605\s5425|516\s534\s2666|347\.997\.5884|\+1\s516\-252\-5856|347\.997\.4030|\+1\s\(516\)\s534\-2111|516\.534\.2700|516\s413\s3321|646\-829\-9279|516\s413\s3321|830\s515\s0555|516\-548\-8666|1\s863\.\s?666\.7445|\+1\s\(805\)\s302\-8886|1\-813\-343\-9101|\(347\)\s997\-4031|\(347\)\s997\-4979|\(585\)\s308\-8847|\+1\-\(805\)\-366\-1784|\(919\)\s980\-6758|\(347\)\s997\-4031|\(980\)\s265\-6204|910\s407\s6724|\(804\)\-696\-1636|845\-459\-\s\s\-\s9199|646\s386\s8045|\+1\s843\s301\s3765|\+1\s\(865\)\s253\-8675|\(816\)\s328\-9455|\+15572386095|516\-534\-2800|516\.453\.3432|\+1\s\(812\)\s266\-4236|332\s286\s8241|518\-551\-8481|\(332\)\s286\-8038|919\-980\-6758|\+1\s332\-216\-0877|\(845\)\-406\-0445|\+1\s810\s284\s2401|\+1\(843\)\s301\-5604|\(574\)\s931\-8336|\(858\)\s308\-9276|\+1\s\(857\)\s605\-9585|(\+1)?\(833\)994\-5828)\b/m body T_JR_BZ_PHONE29 /(^|\b|\s|:)(?:\+1\s507\-351\-0554|646\s829\s9279|\(743\)\s800\-7175|\+1\s470\-839\-8458|\(\+971\)\s4\s398\s4545|\(810\)\s284\-\s\s\-\s2734|\(660\)\s207\-3229|\+44\s833\-567\-1462|\+1\s830\s360\s5082|1\-828\-\s579\-7204|\(828\)\s\s?579\-7744|\+39\s339\s7116179|1\(816\)\s372\-4805|863\-338\-5028|\(858\)\s308\-3131|13726413875|\+1\s859\s704\s1458|1\s\(840\)\s230\-2454|817\s230\s4995|\+1\-802\-503\-3394|\(813\)\s934\-5756|\+1\s\(865\)\s208\-4661|\+18023040183|\(813\)\s934\-5441)\b/m meta JR_BZ_PHONE (T_JR_BZ_PHONE1 || T_JR_BZ_PHONE2 || T_JR_BZ_PHONE3 || T_JR_BZ_PHONE4 || T_JR_BZ_PHONE5 || T_JR_BZ_PHONE6 || T_JR_BZ_PHONE7 || T_JR_BZ_PHONE8 || T_JR_BZ_PHONE9 || T_JR_BZ_PHONE10 || T_JR_BZ_PHONE11 || T_JR_BZ_PHONE12 || T_JR_BZ_PHONE13 || T_JR_BZ_PHONE14 || T_JR_BZ_PHONE15 || T_JR_BZ_PHONE16 || T_JR_BZ_PHONE17 || T_JR_BZ_PHONE18 || T_JR_BZ_PHONE19 || T_JR_BZ_PHONE20 || T_JR_BZ_PHONE21 || T_JR_BZ_PHONE22 || T_JR_BZ_PHONE23 || T_JR_BZ_PHONE24 || T_JR_BZ_PHONE25 || T_JR_BZ_PHONE26 || T_JR_BZ_PHONE27 || T_JR_BZ_PHONE28 || T_JR_BZ_PHONE29) describe JR_BZ_PHONE Bad phone number in message body score JR_BZ_PHONE 4.0 ## CALENDAR AND PAYPAL ## ifplugin Mail::SpamAssassin::Plugin::MIMEHeader header __JR_BZ_GOOG_SNDR1 Sender =~ /Google\s(Calendar|Kalendar|Kalender)/ header __JR_BZ_GOOG_SNDR2 X-Sender =~ /Google\s(Calendar|Kalendar|Kalender)/ mimeheader __JR_BZ_ICS Content-Disposition =~ /filename\=[\s"]?.*\.ics([";']?|$)/i endif body __JR_HAS_PAYPAL /(^|\b|\s)(?:P[\@a]yP[\@a]l)(\W|$)/i ###################################### ## META RULE PROCESSING - VERSION 1 ## ###################################### meta JR_BAZACALL1 ((JR_BZ_BODY || __JR_BZ_BODY_LO) && T_JR_BZ_FREE_ANYWHERE && __JR_BZ_PRODUCT) describe JR_BAZACALL1 Baza Call V1: Body phrases and product name with a Freemail address score JR_BAZACALL1 2.7 meta JR_BAZACALL2 ((__JR_BZ_NAME || JR_BZ_PHONE) && (JR_BZ_BODY || __JR_BZ_SUBJ)) describe JR_BAZACALL2 Baza Call V1: From Name or phone number w/ body phrases score JR_BAZACALL2 2.7 meta JR_BAZACALL3 ((__JR_BZ_GOOG_SNDR1 || __JR_BZ_GOOG_SNDR2 || __JR_BZ_ICS) && (__JR_HAS_PAYPAL || __JR_BZ_PRODUCT)) score JR_BAZACALL3 2.7 meta JR_BAZACALL4 (__JR_BZ_NAME && JR_BZ_PHONE) describe JR_BAZACALL4 Baza Call V1: From Name with known bad phone number score JR_BAZACALL4 2.7 meta JR_BAZACALL5 (__JR_BZ_PRODUCT && __JR_BZ_SUBJ) describe JR_BAZACALL5 Baza Call V1: Subject phrase and product/subscription score JR_BAZACALL5 2.5 meta JR_BAZACALL6 (__JR_BZ_SUBJ_HI && T_JR_BZ_FREE_ANYWHERE) describe JR_BAZACALL6 Baza Call V1: Subject phrase with a Freemail address score JR_BAZACALL6 2.7 meta JR_BAZACALL7 (JR_BZ_SUBJ_LO && JR_BZ_BODY && JR_BZ_PHONE) describe JR_BAZACALL7 Baza Call V1: Subject non-scoring phrase w/ body phone numbers and phrases score JR_BAZACALL7 2.6 meta JR_BAZACALL8 (__JR_BZ_NAME && T_JR_BZ_FREE_ANYWHERE && JR_BZ_SUBJ_LO) describe JR_BAZACALL8 Baza Call V1: From name with a Freemail address and a non-scoring subject phrase score JR_BAZACALL8 2.6 ################################### ## DETECT ANY NANPA PHONE NUMBER ## ################################### body __JR_BZ_FON_ANY /(^|\b|\s|\:)(\+1|1)?[\.\-_),(\s\[\]`{}]*(?:[0-9O]{3})[\.\-_),(\s\[\]`{}]*(?:[0-9O]{3})[\.\-_),(\s\[\]`{}]*(?:[0-9O]{4})\b/ tflags __JR_BZ_FON_ANY nosubject body __JR_BZ_FON_SIG1 m/(?:Telephone|Facsimile|Mobile|Cellular|Cell|Office|Work|Home|Phone|Fax|Tel|\s\|\s|Main|Pager|Recipient|Sender|\bO|\bF)\s*[\#:;\=]\s?(?:\+1|1)?[\.\-),(\s\[\]`{}]*(?:[0-9]{3})[\.\-),(\s\[\]`{}]*(?:[0-9]{3})[\.\-),(\s\[\]`{}]*(?:[0-9]{4})\b/ tflags __JR_BZ_FON_SIG1 nosubject body __JR_BZ_FON_SIG2 m/(?:\+1|1)?[\.\-),(\s\[\]`{}]*(?:[0-9]{3})[\.\-),(\s\[\]`{}]*(?:[0-9]{3})[\.\-),(\s\[\]`{}]*(?:[0-9]{4})\s{1,4}[)(\[\]{}]?\s?(?:[Tt]elephone|[Ff]acsimile|[Mm]obile|[Cc]ellular|[Cc]ell|[Oo]ffice|[Ww]ork|[Hh]ome|[Pp]hone|[Ff]ax|[Tt]el|[Mm]ain|or\s[Ee]mail|[Pp]ager)\s?[)(\[\]{}]?\b/ tflags __JR_BZ_FON_SIG2 nosubject body __JR_BZ_FON_SIG3 m/(\+1|1)?[\.\-_),(\s\[\]`{}]*(?:[0-9]{3})[\.\-_),(\s\[\]`{}]*(?:[0-9]{3})[\.\-_),(\s\[\]`{}]*(?:[0-9]{4})\s[A-z0-9\-_\.]{2,40}\@[A-z\-_0-9.]{2,40}\.[A-z]{2,8}/m tflags __JR_BZ_FON_SIG3 nosubject body __JR_BZ_FON_SIG4 m/[A-z0-9\-_\.]{2,40}\@[A-z\-_0-9.]{2,40}\.[A-z]{2,8}\s(\+1|1)?[\.\-_),(\s\[\]`{}]*(?:[0-9]{3})[\.\-_),(\s\[\]`{}]*(?:[0-9]{3})[\.\-_),(\s\[\]`{}]*(?:[0-9]{4})/m tflags __JR_BZ_FON_SIG4 nosubject meta T_JR_BAZA_ANYPHONE (__JR_BZ_FON_ANY && !(__JR_BZ_FON_SIG1 || __JR_BZ_FON_SIG2 || __JR_BZ_FON_SIG3 || __JR_BZ_FON_SIG4)) describe T_JR_BAZA_ANYPHONE Baza Call V2: NANPA phone number in message body header __JR_BZ_SUBJ_FON_ANY Subject =~ /(^|\b|\s|\:)(\+1|1)?[\.\-),(\s\[\]`{}]*(?:[0-9]{3})[\.\-),(\s\[\]`{}]*(?:[0-9]{3})[\.\-),(\s\[\]`{}]*(?:[0-9]{4})(\b|$)/ header __JR_BZ_SUBJ_FON_EXEMPT1 Subject =~ /(Voicemail|Fax|Transcript|Mail|Text|SMS|MMS|Photo|Message|Call|Received)(es|s)?\s?(\-|:|to|from|received|sent|recorded|by)/i header __JR_BZ_SUBJ_FON_EXEMPT2 Subject =~ /(?:\s\#[0-9]{10,11}[\s!\])}])/i header __JR_BZ_SUBJ_FON_EXEMPT3 Subject =~ /(?:(\s\#[A-Z]|INV)\-[0-9]{10,11}|Reservation|Confirmation|Ticket)/i meta __JR_BZ_SUBJ_FON (__JR_BZ_SUBJ_FON_ANY && !(__JR_BZ_SUBJ_FON_EXEMPT1 || __JR_BZ_SUBJ_FON_EXEMPT2 || __JR_BZ_SUBJ_FON_EXEMPT3)) ################################## ## DETECT MESSAGE REPLY HEADERS ## ################################## header __JR_HAS_REFERENCE References:raw =~ /\<.+\>/ header __JR_HAS_REPLY_TO In-Reply-To:raw =~ /\<.+\>/ meta __JR_MSG_IS_REPLY (__JR_HAS_REFERENCE || __JR_HAS_REPLY_TO) ########################## ## DETECT INLINE IMAGES ## ########################## header __JR_INLINE_IMG1 Content-Disposition =~ /inline\;\s?filename\=\".*\.(jpg|gif|png)([";']?|$)/i header __JR_INLINE_IMG2A Content-Type =~ /image\/(jpg|gif|png)$/i header __JR_INLINE_IMG2B Content-Disposition =~ /inline$/i meta __JR_INLINE_IMG ((__JR_INLINE_IMG2A && __JR_INLINE_IMG2B) || __JR_INLINE_IMG1) ############################# ## DETECT ITEM/VALUE PAIRS ## ############################# body __JR_BZ_ITEM1 m/(^|\b|\s)(?:Quantity|Renewal|Customer|Payment\s(Status|Mode|Method|ID)|Product|Plan|(Transaction|Activation|Due|Invoice|Issue)\sDate|Date\sof\sIssue|Services?|(Shipping|Renewal|Total)\sCharges?|Name\sof\sclient|Mail\sAddress|Activation\sKey|Seller|Qyt|Customer\sUID|Wallet\saddress|(Invoice|Renewal|Billed|Net|Total)\sAmount|Your\sSubscription|Token\s(Receipt|number|No|Date)|Full\sSupport|Validity|(Member|Subscription|Ticket|Consumer|Purchaser|Reference|Plan|Information)\sID|E\-WALLET\sADDRESS|Customer\swallet\saddress|Ordered\sItem|(Member|Login|Product|User|Account|Client|Planner)\sName|(Account|Authorization|A\/C)\sType|Tenure|Devices?|ORDER\s\#|What\syou\sget|Assigned\sagent|Subscribed\sServices|Monthly\sContribution|Membership\s(ID|Number|Fee|UID)|Time\sof\sActivation|Warranty\sCover(age)?|Order\s(ID|name|Confirmation)|Service\s(Address|Date|Plan|Management)|Transaction\s(ID|Fees?|Reference|No|Code|On)|(lavoice|INVOICE|Confirmation)\sNO\.?|Price\sEach|On\sYour\sStatement|Renewal\s(ID|date)|ID\sfor\sBilling|Renewing\son|Renewing\sAmount|Serial\sKey\sNumber|Support\s(Number|Center|Duration)|Term\sPlan|License\s(Key|Validity)|Duration|Features|Total\swith\sTax\sand\sCharges|Paid|Product\s(Purchased|Description)|Valid\sTill|Item\/Plan|Discount|Total\sInvoice\sAmount\sInc\sall\sTax|Service|Shipping|Summary|Security|Home\s\&\sOffice|All\sin\sOne\sData\sand\sNetwork\sSecurity|Bill\s(Date|Number|to)|Next\sRenewal|Contact\sToll\-free|Toll\-free|Send\sthe\sfollowing\sID|Chargeable\sAmount|Help\-?Desk|Renewed|Email\saddress|Your\ssubscription\swill\sexpire|PAYMENT\sMODE\sAUTO\sDEBITED|YOUR\sORDER\sNUMBER|Service\scontract\snumber|Customer\semail|Plan\srenewal\sdate|Extended\sWarranty|Get\sQuick\sSupport|Customer\sSupport|Details\sfor\ssoftware|Renew\sreceipt\snumber|Paid\s(via\sAmazon\sCredit|for\srenew\sservice)|Mode|Delivery\sMode|List\sPrice|Invoice\sHere|Client|E\-Transaction\sId|Service\sWarranty|Purchase\sItem|(Mcfee|McAfee|Mcfee|MaaCFee|Macfeee|MacFee)\sSupport|Account\sInfo|Link\sId|Helpline|Charged|Hotline|Charged\sAmount|Purchased|Client\sUID|Terms\s\&\sConditions|Invoice\sto|GRAND\sTOTAL|Support|(Invoice|Order|Receipt)\s(Number|Details|Date)|Frequency|Add\-On|Customer\sID|(Billing|Charge)\sFrequency|Customer\sSupport\sContact|Delivery|Exchange|Merchant(\s(Display|Information))?|Billed\sAs|Coverage\sLength|Email\son\sFile|Invoice\sid|ID\sNo|(Application|File\sstatement|TRX|Txn)\sID|BTC\sReceived|Feature|per\sBTC|Product\/Service|(Subscription|Product|Package)\sDetails|Amount\sProcessed|Term|(Assistance|Reference)\sNumber|Cryptocurrency|Registered\sEmail|Complete\sGuard|ArmorScan\sElite|Coverage|Units|Plan\sName|Amount\sin\sBTC|Exchange\sRate|(Transaction|Processing)\sFee|Subscription\s(Name|Duration)|Messaging\sServices?|Wireless\sPlan|Data\sUsage|Total\sCharged|INV\-\s[0-9]{6}|TXN\s\-\s[0-9]{7}|Color|Capacity|No\.\sOf\sDevices|Authorization|Amount\s(Invested|renewaled)|Processed\sOn|Funding\sSource|Activation\sId|Accounts\steam|Date\sof\sIssue|Cycle|Reference\sNumber|Credit\sLimit|Booking\sId|Account\sHash|Time\sHorizon|Line\sInquiries|Headquarters|Bi?l?ling\sAd?dress|Helpline\sAgent|Timeframe\sSpan|Security\sAnchor|Selected\sProduct|HQ\sLocation|Attendees|(Recipient|Subscription)\sInformation|Document\sID|Item\sName|Purchaseitem|Next\sPayment\sDue|Processed\sPayment|Confirmation\sCode|Next\sRenewal\s(Amount|Date)|Scheduled\s(Date|Amount)|Sold\sby|Condition|HELP\sDESK|Billing\sSummary)\s*[\#:;\=\~]/i tflags __JR_BZ_ITEM1 nosubject multiple maxhits=4 Number body __JR_BZ_ITEM2 m/(^|\b|\s)(?:Item|Email)\s*[\#:;\=\~]/i tflags __JR_BZ_ITEM2 nosubject body __JR_BZ_ITEM3 m/^(?:Reference\sNo|Service|Warranty|Paid|Client\sName|Client\s(Name|UID|Email|Information)|Account\s(Name|Info)|Seller\s(Name|Details)|Product|Charged|Quantity|Transaction\sDetails|Warranty\sPeriod|Customer\s(email|ID)|Amount\sPaid|Receipt\sNo|Payment\s(id|Mode)|Client|Amount|Ordered\sItem|Membership\sUID|Member\s(Name|Information)|Helpline|Support\sHotline|Charged\sAmount|Client\sName|Item\sPurchased|Client\sUID|Client\sEmail|Terms\s\&\sConditions|Invoice\sto|Payment\sMethod|Type\sof\saccount|Product\sordered|Charges\stotal|Our\smailing\saddress|Customer\sID|Charge\sFrequency|Exchange|Product)\:?\-\s/i tflags __JR_BZ_ITEM3 nosubject multiple maxhits=4 meta __JR_BODY_BAZA_ITEMS ((__JR_BZ_ITEM1 + __JR_BZ_ITEM2 + __JR_BZ_ITEM3 >= 2) && !(__JR_MSG_IS_REPLY)) meta T_JR_BAZA_FIELDS (__JR_BODY_BAZA_ITEMS && __JR_BODY_BAZA_VALUES) body __JR_BZ_VALUE1 m/(?:[\#:;\=\~]\s?(Home\sSubscription|[0-9]\sDevices?|Auto(\s|\-)(Debit|Pay)|Webroot|[0-9]{1,2}\/[0-9]{1,2}\/[0-9]{4}|Ethereum|Free|Secure\syour\sPC|Cryptocurrency\sExchange\sGateway|[0-9]{1,2}\s(years?|months?)|Windows\s(Defender|Comp)|Online|Personal\sPC|[0-9]\sYear\sCoverage|LifeLock|C\sCleaner|(One|Two|Three|Four|Five|Six)\s(years?|months?)|Paid\sUser|Membership|McAfee|Geek\s?(360|Total|Squad)|kaspersky|[0-9]{1,2}\sDevices|Credit\sCard|[0-9]{2}\-[0-9]{2}\-202[0-9]|(Monday|Tuesday|Wednesday|Thursday|Friday|Saturday|Sunday)\,\s(January|February|March|April|May|June|July|August|September|October|November|December)\s[0-9]{1,2}\,\s20[0-9]{2}|Iphone\s?1[34567]|[0-9]{1,2}[\/\s\-.,]+(Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec)[\/\s\-.,]+20[0-9]{2}|Silver\sPlus|(Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec)\s[0-9]{1,2}\,\s20[0-9]{2}|Defender|Annual\sSubscription|Debit\sCard|Subscription|ACCOUNT\s\/\sCARD|(January|February|March|April|May|June|July|August|September|October|November|December)\/[0-9]{1,2}\/20[0-9]{2}|Debit\/Credit\sCard|Walmart\sCustomer|[0-9]{1,2}(st|nd|rd|th)?\s(January|February|March|April|May|June|July|August|September|October|November|December)\s20[0-9]{2}|NORTON\s|NORT[0-9]{3,6}|Express\sFree|Billing\son\saccount|Sony\s|[A-Z]{6}\s[A-Z]{6}\s[A-Z]{6}|Acer\sSpin|Support\sDesk|NSWPQP|[0-9]{9,10}\b|\#\sINV[0-9]{7,9}|[0-9]{7}\-[0-9]{4}\b|GK\/PC4|Total\sTech\ssupport|[0-9a-f]{8}\-[0-9a-f]{4}\-[0-9a-f]{4}\-[0-9a-f]{4}\-[0-9a-f]{12}|[a-z0-9]{8}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{4}\-[a-z0-9]{12}|[A-Z]{7}|[1-5]x$|\&\#x(50|61|79|6c)\;|Canik\sTP9|MS\-[0-9]{4}\-[0-9]{5}|Security\sEdition|[0-9a-f]{8}\-[0-9a-f]{4}|24\*7\s\(Monday\sto\sSaturday\)|GS\sInternet\sSecurity|your\ssaved\sbilling\soption|the\snext\s12\smonths|another\syear\sof\sprotection|the\sbilling\soption\syou\spreviously\sprovided|2024\-[0-9]{2}\-[0-9]{2}|[A-Z]{3}[0-9]{3}\-[0-9][A-Z]{3}[0-9]|Identity\sFraud\sProtection|Antivirus\sand\sMalware|[0-9]{2}\sMonths|Industrial\sInstallations|plink_[A-z0-9]{13,15}|[0-9]\-Year|[A-Fa-f0-9]{4}\-[A-Fa-f0-9]{4}\-[A-Fa-f0-9]{4}|[A-Z]{2}[0-9]{4}\-[A-Z]{2}[0-9]{4}|ArmorProtect|Intensifier|Fast\sGuard\sSystem|Password\sVault|Thirdeye\sScanner|Microsoft\s(365|Office|Security|OneNote|HoloLens|Azure|Protection)|On\sFile|[0-9]{3}[A-Z]{5}\-[0-9]{3}\-[A-Z]{5}[0-9]{5}|PC\sSecurity\sPro|PayPal\sHoldings\,\sInc|Bitcoin\s\(BTC\)|System\sAlert|VisionProtect|Deluxe?\sProtection|[0-9]{4}\-[A-Z]{2}\-[0-9]{4}|\xE2\x82\xB1[0-9]{3}\.[0-9]{2}\sPHP|[A-Z]{3}[0-9]{7}[A-Z]{2}[0-9]{2}|Personal\sProtection\sAntivirus|Direct\sDebit|Privacy\sProtection|[0-9]\.[0-9]{2,6}\s\-\sBTC|Express|Coinbase|PayPal\,\s?Inc\.|Geek\sAntivirus|Identity\sVerification|Security\sSuite\sPRO|Geek\sWebroot|Amazon\sPrime|PayPal\sUS|(Ultimate|Hack)\sDefense|Trump\acoin|NetProtector|\{[0-9]{2}\,[0-9]{3}\.[0-9]{2}\}|\{[0-9]\.[0-9]{4}\}|CryptoSwift|Crypto\s(to\sFiat|Wallet)|PC\sMax\ssecurity|TXN[0-9]{9}|PC\sPremium|([A-z\s]{2,25})?\(?Cyber\swards\sSecurity\)?|Parental\sControls|(USD\s)?\{[0-9\.,]{5,10}\}(\/|\s)BTC|[A-Z]{3}[A-Z0-9]{5}$|ShieldMax\sPro|Risk\sMonitoring|CyberArmor|\#INV\/[A-Z0-9]{11}|\#FGH[A-Z0-9]{7}|Dogecoin|PEPE\s|[A-Z]{4}\-[0-9]{4}\-[A-Z]{3}|[A-Z]{3}[0-9]{4}[A-Z]{2}[0-9]{5}[A-Z]{2}|TrustLock\sSecurity|SafeNet\sPro|PC\sLife\s(ga|Ga)urd|Antivirus\sShield|TotalAV\sDefender|Linked\sBank|\#QC\s[0-9]{9}|PRIME\-\sINV\-\s[0-9]{6}|Premium|Geek|Cryptocurrency\sPurchase|Linked\sBank|InvisiGuard|Advanced\sCrypto\sTrading|Desert\sTitanium|Cosmic\sOrange|[0-9]{2,3}\s?GB|\$next_date|NetProtector\sPlus|Ultimate\sShieldX|ArmorScan\sPro|PRO\sProtection|Bitcoin\sMonthly|GK\/PC[0-9]|Threats\sDetection|Pro\sWebroot|Anti\-Spyware|BTC\-PAY\-[0-9]{6}|Internet\sFirewall\sProtection|NL\-TX\-[0-9]{5}|R[A-Z]{2}[0-9]{2}X[A-Z]{2}|M365\-202[0-9]|Linked\sP\@yP\@l|Bit\-coin|MacBook|All\sin\sOne|Hacking\sDefense|VirusGuard|TotalShield|ZEFITECH|Am\@zon\-com|ThreatLock|VirusShield|Virus\sand\sSpyware|Intensifier|EyeScan\dProtection|Printer\sSetup|ShieldMax|Total\sProtection|SalonSync|CryptoPros|UltraShield\sPlan|PC\sSupport|TherapyThrive|SynthEyes|Avast\s|SecureCore|BusinessPulse|MenuMesh|ProtectionSafe|QueryQuotient|ShieldMax|BeaconBase|MissionControl|FullScope|360\xC2\xB0\sSecurity|SafeSphere|Wireless\sEarbuds|Pay\.\.Pal\.|True\scyber\ssafe|Home\stheater|1911\sGarrison\sHandgun|Bushmaster\sFirearms|GradientGrow|DimeDash|IronShield|LiquidLogic|Geek\sSquad\xC2\xAE|Coin\-base|365\sAdvanced\sProtection|N0RT0N|TotalLock|Travel\s\&\sCo\-Branded\sCard|Care\sEssentials|N0RTON|\#ADDRESS1i?\#|Blockchain\sFinance\sAuthority|UltraShield|Service\sTracking\sNetwork|DefenderX|x1\-Multi|ActiveGuard|Mike\sIida|Minecraft\sEducation\sEdition|Blockchain\sFinance\sAuthority|BTC\-\s?Coinbase|Disney\sGift\sCard|Complete\sDefense\sCare|Paypal\sBTC|CoinBase\sGlobal\sPayment|Blockchain\sFinance\sAuthority|Coinbase\sUS|PPL[0-9]{9}|UID[0-9]{6}|Family\sPlan|Complete\sNetwork\sSecurity|Annual\sFamily\sSupport\sPlan|REF\-[0-9]{6}))/i tflags __JR_BZ_VALUE1 nosubject multiple maxhits=4 body __JR_BZ_MONEY m/(?:[\#:;\=\~]\s?(USD?\s\$?[0-9]{3,4}|\$\s[0-9-]{2,4}\.[0-9]{2}|[0-9]{3}\.[0-9]{2}\sUSD|\$[0-9]{3}\.[0-9]{2}))/ tflags __JR_BZ_MONEY nosubject meta __JR_BODY_BAZA_VALUES (((__JR_BZ_VALUE1 + __JR_BZ_MONEY) >= 2) && !(__JR_MSG_IS_REPLY)) meta T_JR_BAZA_FIELDS (__JR_BODY_BAZA_ITEMS && __JR_BODY_BAZA_VALUES) describe T_JR_BAZA_FIELDS Baza Call V2: Item/Value pairs found in message body meta JR_BAZA_ITEM_VALUE_1 ((T_JR_BAZA_FIELDS + T_JR_BAZA_ANYPHONE + __JR_BZ_PRODUCT + JR_BZ_BODY + __JR_BZ_SUBJ_FON + __JR_BZ_SUBJ_HI) >= 3) describe JR_BAZA_ITEM_VALUE_1 Baza Call V2: Multiple BazaCall signatures are present score JR_BAZA_ITEM_VALUE_1 5.0 meta JR_BAZA_ITEM_VALUE_2 ((T_JR_BAZA_FIELDS && T_JR_BAZA_ANYPHONE && JR_BZ_SUBJ_LO) && !(JR_BAZA_ITEM_VALUE_1)) describe JR_BAZA_ITEM_VALUE_2 Suspicious BazaCall signatures are present score JR_BAZA_ITEM_VALUE_2 2.4 meta JR_BAZA_IMAGE ((__JR_BZ_PRODUCT || JR_BZ_BODY || __JR_BZ_SUBJ_FON || __JR_BZ_SUBJ) && __JR_INLINE_IMG) describe JR_BAZA_IMAGE Multiple BazaCall signatures are present with an inline image score JR_BAZA_IMAGE 5.0