# Ruleset: NILS.cf # License: GPL # Version: 215159157 # Created: Mon Oct 26 07:25:58 AM EDT 2026 # Author: Jared Hall # Contact: jared@jaredsec.com # Generated By: jbuild ######################## NILS.cf ######################### ############### NAME, IMAGE, LIKENESS SPAM ############### # These rules filter agressive email abusers. These include: # + Over-played Social Information Diffusion campaigns or Trademark # Infringement campaigns, like: # AAA, Costco, BlueCross/BlueShield, Marriott, Omaha Steaks. #################### ### FROM BAD TLD ### #################### header __JR_PISST_TLD_A From:addr =~ /\@(.+\.)?(?:help|click|app|space|info|cc|biz|codes|pro|name|me|gold|cat|website|bond|support|today|onl|eus|shop|club|asia|tech|blog|online|xyz|buzz|best|site|gold|cv|cloud|win|eu|dev|bar|fun|design|city|sbs|work|cfd|store|watch|wtf|live|skin|garden|contact|world|living|cam|lifestyle|fit|forum|mom|lol|lat|property|beer|homes|surf|ninja|boutique|cyou|rest|monster|global|quest)$/i header __JR_PISST_TLD_B EnvelopeFrom =~ /\@(.+\.)?(?:help|click|app|space|info|cc|biz|codes|pro|name|me|gold|cat|website|bond|support|today|onl|eus|shop|club|asia|tech|blog|online|xyz|buzz|best|site|gold|cv|cloud|win|eu|dev|bar|fun|design|city|sbs|work|cfd|store|watch|wtf|live|skin|garden|contact|world|living|cam|lifestyle|fit|forum|mom|lol|lat|property|beer|homes|surf|ninja|boutique|cyou|rest|monster|global|quest)\>?$/i meta __JR_PISST_TLD (__JR_PISST_TLD_A || __JR_PISST_TLD_B) # Extracting fules from JR_META.cf ################## ### AAA AUTO ### ################## header JR_AAA_FROM_ADDR From:addr =~ /^(aaa\-goto|aaacustomers[0-9]{2}|(aaa|aaacourtesyk|aaacare|aaacustomers|aaamembercar|aaacareteam|aaasupportte)\-(goto|next|stage|flow|page|route|path|step|link|visit)|aaacustomers|aaagoto|aaa\-next|AAARoadsideKit|AAASupportKit|AAAReadyKit|AAARoadsideLocal|AAARoadsideServices|aaaroad|AAARoadsideTeam|AAARoadsidePgrm|RoadsideServicesfromAAA|CurtseyAAAKit|RoadsideAAAPack|AAARoadsideRescue|AAAAssistance|StateAAARoadKit|AAARoadCourtesyKit|AAARoadsideCareKit|AAARoadsideCourtesyKit|AAAsReliabIeRoadKit|AAAEmergencyRoadKit|YourAAACourtesyKit|AAARoadsideAssistance|AAARoadsideHelp|aaaroadsidehelp|AAARoad|AAALocal|AAAHighway|TripleARoadside|LocalAAARoadside|RoadsideEmergency|AAAWelcomeKit|AAAServices|AAASpeciaI|AAACourtesyCollection|AAACourtesySet|AAAsCourtesyReport|AAACourtesylnfo|aaacourtesyp|aaapackageco\-next|aaaspecialpa|aaa\-visit|courtesypack\-link|TripleACourtesyKit|TripleAKitAlert|TripleAKit|aaacare|tripleagoto|AAACourtesy|AAADriverKit|aaao6|aaapath|aaatriplekit|aaacare\-route|aaacourtesyk[0-9]{2}|AAAsCourtesyPackage|AAACourtesyDelivered|AAADriverCourtesy|AAARoadsideCourtesy|AAACourtesyBox|TripleARoadsideCourtesy|YourAAACourtesy|AAACourtesySupport|AAACourtesyKit|AAACorutesy|AAACourtesyPackage|AAACourtesyPkg|AAAAreas|aaacourtesybox|aaacourtesybundle|aaafriendlykit|aaahelpfulkit|aaakitcourtesy|ycrjmqug7dw2nzaj|el47fgioij2nrnub|aaacourtesykit|aaacourtesypack|courtesyaaakit|aaacourtesyset|aaapolitetrip|aaacourtesyexcursion|aaatripcourtesy|tripaaacourtesy|aaacourtesyroadside|aaaroadsidecourtesy|courtesyroadsideaaa|aaaconsiderateroadside|aaapoliteroadside|aaacourtesyassistance|aaacourtesyhelp|aaaassistanceroadside|aaaroadsidekit|roadsideaaacourtesy|aaacareteam[0-9]{2}|courtesyaaaroadside|aaasupportte[0-9]{2}|aaacourtesyservice|aaahelpfulroadside|aaacourteoustrip|aaamembercar|aaamembercar[0-9]{2}|aaakindtrip|aaamembersup|aaamembersup[0-9]{2}|aaaassistancecourtesy|assistancecourtesyaaa|aaaroadsideservice|aaacourtesyroadkit|aaacourtesystatus|tripleacourtesyroadside|aaacourtesyassist|aaaroadhelp|customersupporttriplea|aaacourteoussupport|courtesyroad|tripleasupportcourtesy|tripleacourtesyservice|aaasupportdesk|aaacourtesyteam|aaacourtesysupport|aaasupporthelpful|aaaassistance?|supporttripleacourtesy|aaacustomercare|triplearoads|tripleacourt|roadsidecour|aaacourtesys|travelwithco|aaacourtesyt|yourroadside|aaacourteous|aaacourtesya|roadsidekind|tripleaservi|tripleamembe|roadsideacco|tripleateamc?|quickroadsid|tripiearepiy|tripiea|aaamembertea[0-9]{1,2})\@/ describe JR_AAA_FROM_ADDR NIL: From Address contains an AAA spam identifier score JR_AAA_FROM_ADDR 1.5 header __JR_AAA_FROM_ADD_GEN From:addr =~ /^(triple|triple6z|aaar6|courtesypack|aaapage|aaapackageco|aaao0|aaavisi|aaaj0|aaahn|aaaq3|roadsidecourtesykit|supportroadside|roadsidecourtesy|courtesyroadhelp|roadsidecourtesyset|roadsidecare|courtesyroadsideteam|tripieacourt|supportinfor|tripleasuppo|aaamembertea)\@/ header JR_AAA_FROM_NAME From:name =~ /^(AAA\sCustomer\sSupport|AAA\sCustomer\sService|AAA\sEmergency\sCare\sTeam|AAA\sAd|AAA\s(Courtesy|Roadside|Support|Emergency|Survival|Ready|Protection|Exclusive|Road)\s(Kit|Pack|Local|Services)|AAA\sRoad\-Services|AAA\sRoad\sSide\sCare|AAA\s(\-\s)?(Driver\sKit|Roadside\sTeam|Courtesy)|Participate\swith\sAAA|AAA\sRoadside\sKit|AAA\sSupport\sKit|AAA\sReady\sKit|AAA\sRoadside\sLocal|AAA\-Roadside\s.*|AAA\s\-\sDriver\sKit|AAA\sRoadside\sTeam|AAA\-Roadside\s\|\sPgrm\.|Roadside\sServices\sfrom\sAAA|Curtsey\sAAA\sKit|Roadside\sAAA\sPack|AAA\sRoadside\sRescue|AAA\sAssistance|State\sAAA\sRoadKit|AAA\sRoad\sCourtesy\sKit|AAA\sRoadside\sCare\sKit|AAA\sRoadside\sCourtesy\sKit|AAA\'s\sReliabIe|AAA\sEmergency\sRoad\sKit|Aaa\sCourtesy\sRoadside|Your\sAAA\sCourtesy\sKit|AAA\sRoadside\sAssistance|AAA\sRoadside\sHelp|AAA\sRoad|Triple\sA\sAuto\sKit|AAA\sRewards\s\-\sJust\sfor\sYou|AAA\sLocal|AAA\sHighway|Triple\-A\sRoadside|LocalAAA\sRoadside|AAA\sRoadside\sEmergency|AAA\sWelcome\sKit|AAA\sServices|AAA\sSpeciaI|This\sCar\sEmergency\sKit\sIs\sYours|AAA\sCourtesy\sCollection|AAA\sCourtesy\sSet|AAA\'s\sCourtesy\sReport|AAA\sCourtesy\slnfo|AAA\sCourtesy\sPack|AAA\sPackage\sCourtesy|AAA\sPoliteness\sPackage|AAA\sSpecial\sPackage|AAA\sCare\sPack|Courtesy\sPack\sAAA|AAA\sService\sPack|Triple\-A\sCourtesy\sKit|Triple\sA\sKit\sAlert|Triple\sA\sKit|AAA\sCare|TripleA\sCare\sKit|Triple\sAAA\sCourtesy\sKit|StateAAARoadKit|AAA\sDriver\sKit|Roadside\sServices\sAAA|AAA\sGiveaway|AAA\s(Care|Support)\sTeam|AAA\'s\sCourtesy\sPackage|AAA\sCourtesy\sDelivered|AAA\sDriver\sCourtesy|AAA\sRoadside\sCourtesy|AAA\sCourtesy\sBox|Triple\-A\sRoadside\sCourtesy|Your\sAAA\sCourtesy|AAA\sCourtesy\sSupport|AAA\sCourtesy\sKit|AAA\s(Corutesy|Courtesy)\s.*|AAA\sCourtesy\sPackage|AAA\sCourtesy\sPkg|AAA\sAreas|aaa\scourtesy\s(info|pack|package|pkg|box|set|support|help|bundle|kit)|AAA\sCourtesy\sBundle|AAA\s(Friendly|Helpful)\sKit|AAA\sMember\sPriority|AAA\sRoadside\sExperts|Courtesy\sAAA\sSet|AAA\sPolite\sTrip|AAA\sCourtesy\sExcursion|AAA\sTrip\sCourtesy|Trip\sAAA\sCourtesy|AAA\sConsiderate\sRoadside|AAA\sPolite\sRoadside|Courtesy\sRoadside\sAAA|Road\sSafety\sRewards|AAA\sCourtesy\sAssistance|AAA\sCourtesy\sHelp|Aaa\sCourtesy\sRoadside|AAA\sMember\sServices|AAA\scourtesy\sRoad\sKit|AAA\sCourtesy\sStatus|AAA\sCourtesy\sAssist|AAA\sRoad\sHelp|AAA\sHelpful\sRoadside|AAA\sCourtesy\sService|Roadside\sCourtesy|AAA\sCourteous\sSupport|Courtesy\sRoad|AAA\s\xE2\x80\x91\sLoyalty\sRewards\sProgram|AAA\sCourtesy\sTeam|roadside\scourtesy\skit|AAA\sCustomer\sCare|TripIe\-A\sRepIy|Triple\sA\sRoadside|TripIe\-A\sCourtesey\sKit|Tripl\e-A\sCourtesy\sSupport|Assistance\sProgram\sRoadside|Roadside\sCourtesy|Aaa\sCourtesy\sSupport|Courtesy\sRoad\sHelp|Travel\swith\sCourtesy|Courtesy\sRoadside|Support\sInformation\sUpdate|Your\sRoadside\sCourtesy|Roadside\sKindness\sKit|Triple\sA\sService\sTeam|Triple\-A\sTeam\sCare|Roadside\sCare|TripIeA\sRepIying|AAA\sMember\sTeam)\"?$/ describe JR_AAA_FROM_NAME NIL: From Name contains an AAA spam element score JR_AAA_FROM_NAME 1.5 header __JR_AAA_SUBJ Subject =~ /Your\sroadside\s(assistance\s)?kit\sis\s(almost\sready|set|ready)\sto\sship|Your\sroadside\sassistance\skit\sis\sshipping|AAA\sCar\sEmergency\sHas\sYour\sBack|Car\sEmergency\sKit\sreward\sFrom\sAAA|FREE\sCar\sEmergency\sKit|Complimentry\sAAA|Emergency\sKit\svia\sState\sProgram|CompIimentary\sAAA|Emergency\sRoadside\sKit|AAA\sRoadside\sKit\sReady|Distributed\sAAA\sRoadside\sKit|Curtsey\sAAA\sRoadside\sKit|AAA\sRoadside\sBag\sKit|Roadside\sKit\sfor\sLicensed\sDrivers|Roadside\sKit\svia\sState\sProgram|Courtesy\sEmergency\sRoad\sKit|Road\sKit\sfor\sAll\sLicensed\sDrivers|CompIimentary\sEmergency\sRoad\sKit|Kit\sfor\sEvery\sLicensed\sDriver|Emergency\sRoad\sKit\sCompIimentary|Licensed\sDrivers\xE2\x80\x94AAA|CompIimentry\sEmergency\sRoadside\sKit|State\sUpdate\s\-\sAll\sDrivers|Courtesy\sRoadside\sKit|Licensed\sDrivers\sIn\sState|State\sProgram\s\-\sAAA|Kit\sComplimentery|Exclusive\sAAA\sReward\sAwaits\sYou|Road\sKit\sfor|Road\sKit\sCourtesy|AAA\sEmergency\sRoadside\sKit|Roadside\sKit\s\xE2\x80\x93\sState\sUpdate|CompIimentry\sEmergency|AAA:\sGet\sYour\sCourtesy\sRoadside|Free\sCar\sEmergency\sKit|AAA\sMember\sGift:|Exclusive\s(for|to)\sAAA\sLicensed\sDrivers|Courtesy\sRoad\sKit|Your\sCompIimentary\sRoad\sKit|CompIementary\sTravel\sKit|Complimentery\sRoad\sKit|Road\sKit\sfor\sThose\sAAA\sLicensed|AAA\sRoad\sKit|Complimentry\sRoad\sKit|AAA\sLicensed\sDrivers|CIaim\sYour\sRoad\sKit|CIaim\sYour\sCourtesy|For\sAAA\sLicensed\sDrivers|Courtesy\sRoad\sKit|Your\sComplimentry|Courtesy\sRoad\sKit\sReady|AAA\sMembers:\s2026\sCourtesy|AAA\sArea\sDrivers|Your\sComplimentary\sSafety\sKit|Kit\sis\sPrepared\sfor\sShipping|Road\skit\savailable\sfor\sAAA\slicensed|Inside\syour\sAAA\sdriver\sbenefits|AAA\sdriver\,\sreceive\syour\sroad\skit|friendly\sreminder\sfor\sAAA\sdrivers|AAA\'s\sgift\sfor\slicensed\sdrivers|Discounted\sSafety\sKit\sExpires\sTonight|Safety\sKit\sDrivers\sAre\sChoosing|Here\'s\syour\sAAA\sroad\skit|AAA\sroad\skit\sis\son\sits\sway|road\skit\sfor\sAAA\sdrivers|complimentary\sroad\ssafety\skit\shas\sbeen\ssent|AAA\sroad\skit\shas\sshipped|Your\sAAA\sroad\skit|Some\shelpful\sitems\sfor\syour\scar\sare\shere|Roadside\sEssentials\sfrom\sAAA|Your\sAAA\sroadside\skit|Sending\sOver\sYour\sAAA|Your\sAAA\sRoad\sKit|Confirm\sYour\sEntry\sto\sWin\sToday|A\shelpful\sroad\skit\sfor\sAAA\smembers|road\skit\sfor\sAAA\smembers\slike\syou|Details\sabout\sthe\scourtesy\sroad\skit|AAA\sloyalty\scredit\sexpires\sat\sMidnight|^Your\sAAA\sdriver\skit|driver\skit\shas\sbeen\sdispatched|Good\snews:\sYour\ssafety\skit\sis\sready|road\skit\sfor\sAAA\slicensed\sdrivers|Complimentary\sroad\skit|A\scourtesy\sroad\skit\sto\skeep|road\skit\sto\skeep\sin\syour\scar|Your\sAAA\sroad\skit|AAA\sdriver\'s\sroad\skit\sis\shere|Courtesy\sRoad\sSupport\sKit|Support\sKit\sfor\sAAA\sLicensed\sDrivers|included\sin\syour\sAAA\sroad\skit|drivers\scourtesy\stravel\spack|Licensed\sDrivers\sCourtesy\sRoad\sKit|Road\sKit\sfrom\sAAA|Courtesy\sKit\sFor\sThe\sRoad|AAA\sMembership\sUnlocks\sThis\sExclusive\sOpportunity|Exclusive\sCourtesy\sRoad\sKit|Road\sKit\sfor\sAAA\sHolders|AAA\sDrivers\s\-\sRoadside\sAssistance|Motorists:\sYour\sRoad\sKit|AAA\sCourtesy\sRoad\sKit|Road\sKit\sfor\sLicensed\sDrivers|Roadside\sKit\sCourtesy|For\sLicensed\sMotorists|Courtesy\sOffer\sfor\sAAA\sDrivers|Roadside\sKit:\sA\sCourtesy\sOffer|Courtesy\sKit\sfor\sthe\sRoad\sAAA|Licensed\sDriver\sRoad\sKit|Licensed\sAAA\sDrivers\sReceive|AAA\sDrivers\sReceive|Courtesy\sKit\sRoad\sFor\sLicensed\sDriver|Roadside\sCourtesy\sKit|Licensed\sDrivers\sOnly|Calling\slicensed\sdrivers:|Get\sa\sRoadside\sKit\sToday|Courtesy\sAAA\sRoad\sKit|AAA\sLicensed\sDriver\'s\sRoad|Road\sCourtesy\sKit|AAA\sLicense\sHolders|car\skit\sis\sready\sfor\scollection|Your\scourtesy\scar\skit\sis\sready/m tflags __JR_AAA_SUBJ multiple maxhits=3 header __JR_AAA_SUBJ_LO Subject =~ /Drivers\sReceive\sComplimentry|Licensed\sDrivers:?\s(Receive|Get)|Roadside\sSupport\sProgram|for(\s(State|AAA))?\sLicensed\sDrivers|AAA\sLicensed\sDrivers/m describe __JR_AAA_SUBJ_LO NIL: Message subject contains an AAA spam phrase body __JR_AAA_BODY_OBJ1 /(^|\b|\s)(?:Air\sCompressor|(Connector|Jumper|Jump\-Start)\s(Cables?|Wires?)|First\sAid|wound\scare|safety\sitems|Aid\sSupplies|Flashlight|Hands\-free\sheadlamp|(Foil|Thermal|Emergency|warming|Weather)\sBlanket|battery\sboosts|LED\sflashlight|pressure\sgauge|Tire\spressure|tool\sset|Bungee\scords?|zip\sties|whistle|poncho|gloves|bandages|(warning|reflective)\striangle|(Protection|Safety|High\-visibility|Hazard|Nylon|Security|Reflective|Visibility)\sVest|Multi\-Tool|USB\sCharging\sCable|(Signal|Road|Emergency|Safety)\sFlares?|Non\-Perishable\sSnacks|Travel\sBag|Torchlight|Safety\sCover|Reflective\sMarker|Canvas|Pocket\sKnife|Power\sAnalyzer|Maintenance\sPack|(Primary|Basic|First)[\s\-]Aid\s(Pouch|Kit|Package|Supply|Module|Material|Pack|Bag|Set|Box)|roadside\sguidance\scard|utility\stool|Hand\sSanitizer|Booster\s(Cords?|Cables?)|Utility\s(Knife|Blades?)|Glow\s(Marker|[Ss]tick)|Emergency\sSignal|Waterproof\sMat|Repair\sPackage|Car\sJack|Tow\s(Strap|Rope)|duct\s(seal|tape)|Window\sbreak\stool|(warning|alert)\sstrobe|tire\smaintenance|multitool|weatherproof\ssheet|tire\spuncture\sseal|organizer\spouch|tire\sgauge|fuse\stester|LED\storch|(multipurpose|utility|Waterproof)\starp|Flat\-tire\srepair|Emergency\s(Horn|beacon)|Flat\srepair\ssealant|rapid\-inflate\spump|industrial-strength\ssealant|tire\srepair\ssystem|Puncture\sRepair|(Battery|Voltage)\s(Checker|Tester|Examiner|check|Analyzer)|Double\-Sided\sCarry\sBag|compact\sinflator|gear\spouch|digital\sgauge|Safety\sBeacon|Power\sLeads|inflating\sset|Waterproof\sFabric|Metal\sLamp|Starter\sCable|Journey\sBag|Portable\sVacuum|valve\-stem\scaps|fire\sextinguisher)(\W|$)/i tflags __JR_AAA_BODY_OBJ1 nosubject multiple maxhits=10 meta T_JR_AAA_BODY_OBJ (__JR_AAA_BODY_OBJ1 >=8) describe T_JR_AAA_BODY_OBJ NIL: Message body contains an AAA object list body __JR_AAA_BODY_BTN1 /(^|\b|\s)(?:Get\sMy\sComplimentary\sRoadside\sKit|See\sYour\sRoad\sSafety\sKit|Redeem\sYour\sRoad\sKit\sToday|Reserve\sMy\sCompIimentary\sSafety\sPack|RESERVE\sMY\sROAD\sBUNDLE|Reserve\sYour\sCompIimentary\sRoadside\sKit|ROAD\sSAFETY\sESSENTIALS\sBUNDLE|Access\sYour\sKit|Redeem\sAAA\sCourtsey|Courtsey\skit\xE2\x87\x92|Reserve\sMy\sKit|Your\sComplimentary\sKit\sDetails|CIaim\sMy\sRoadside|Reserve\sSafety\sPack\sNow|CLA\xEF\xBB\xBFIM\sYOUR\sCOM\xE2\x80\x8BPLIMENTARY\sKIT|Reserve\sMy\sRoadside\sEssentials\sPack|Request\syour\sRoadside\sPackage|Claim\sYour\sKit\sNow|CLAIM\sYOUR\sCOMPLIMENTARY\sKIT|CIaim\sYour\sCourtesy\sBundle|(Obtain|Grab|Secure|Get|Retrieve|Redeem|Access|Collect|Review|Reserve)\sYour\sComp[Il]imentary\s(Kit|Pack|Bundle|Package)|CLAIM\sYOUR\sKIT\s\xE2\x80\x94\sAAA\sMEMBERS\sONLY|Obtain\sYour\sRoadside\sCollection|Reserve\sYour\sCourtesy\sKit|Your\sCourtesy\sBundle\sToday|View\sYour\sCourtesy\sKit|Receive\sOur\sElite\sSafety\sKit|View\sYour\sRoadside\sKit|Get\sYour\sCourtesy\sRoadside\sKit|Secure\sYour\sRoadside|(Obtain|Grab|Secure|Get|Retrieve|Redeem|Access)\syour\sroadside\sbundle|Redeem\sYour\sAAA\sCourtesy\sRoadside|Your\sLocal\sRoadside\sSupport\sKit|Reserve\sYour\sComplimentary\sSet|Receive\san\sAdvanced\sDriver\sSafety\sPack|Unlock\sYour\sCar\sEmergency\sKit|Your\sAAA\sEmergency\sRoadside\sKit|(Access|Obtain|Grab|Secure|Get|Retrieve|Redeem)\sYour\s(AAA\sCourtesy\s)?Roadside\s(Kit|Pack|Bundle|Package)|Receive\sYours\sHere|Get\sYour\sCourtesy\sRoad\sKit|Courtesy\sRoadside\sKit\sNow|Your\sAAA\sRoadside\sBundIe|Road\sCrew\sPriority\sSet\sContains\:|Premier\sRoadside\sCollection\sComprises\:|Review\sYour\sKit\sDetails|How\sTo\sClaim\sYour\sFree\sKit|Review\sKit\sContents|Yes\,\sSend\sMy\sFree\sKit|RESERVE\sYOUR\sFREE\sKIT\sNOW|View\syour\sAAA\sCourtesy\sKit|Courtesy\sKit\sDetails\s\xC2\xBB|Your\sAAA\sCourtesy\sKit|View\sYour\sAAA\sCourtesy\sKit|VIEW\sYOUR\sAAA\sCOURTESY\sKIT|View\sKit\sDetails\sand\sAAA\sChanges)(\W|$)/m tflags __JR_AAA_BODY_BTN1 nosubject body __JR_AAA_BODY_INC1 /(^|\b|\s)(?:What\s[Yy]our\s[Kk]it\s[Ii]ncludes|What\'s\sIncluded\sin\sthe\sKit|See\swhat\xE2\x80\x99s\sincluded|Supplies\sIncluded\sin\sYour\sKit|See\swhat\sis\sincluded\sin\syour\skit|What\s[Yy]our\s[Kk]it\s[Cc]ontains|What\xE2\x80\x99s\sin\sYour\sKit|What\xE2\x80\x99s\sincluded\sin\syour\s(bundle|kit|package)|What\xE2\x80\x99s\sinside\sthis\skit|What\syou\xE2\x80\x99ll\sfind\sin\syour\skit|What\syou\'ll\sfind\sinside\syour\skit|WHAT\sYOUR\sKIT\sINCLUDES|What\syou\xE2\x80\x99ll\sfind\sin\sthe\skit|Explore\sYour\sUnique\sKit|What\'s\sFound\sIn\sYour\sBundle|On\-the\-Road\sCollection\sContains|Kit\sHighlights|What\'s\sPacked\sin\sthe\sKit|Inside\sEvery\sSafety\sBag|Quick\sLook\x3A\sWhat\'s\sInside|What\'s\sInside\sthe\sPack|YOUR\sKIT\sINCLUDES\:|Here\xE2\x80\x99s\swhat\syou\xE2\x80\x99ll\sfind\:|Roadside\sAssistance\sKit\sIncludes\:|What\'s\sFound\sIn\sYour\s(Kit|Bundle)|What\'s\sIncluded\sin\sthe\sKit|What\'s\sProvided\sin\sthis\sKit|Kit\sFeatures\sInclude\:|Included\sItems\:|Your\sPremier\sDrive\sKit\sCovers\:|Premier\sRoadside\s(Collection|Bundle|Support)\sIncludes\:|Elite\sRoadside\sSet\sComes\sWith|Premium\sRoadside\sKit\sFeatures\:|Premium\sEmergency\sKit\sIncludes\:|Your\sAAA\sKit\sIncludes|See\sWhat\xE2\x80\x99s\sIncluded|Kit\sComponents\sProvided|Complete\sCar\sSafety\sKit\sIncludes|Included\sSupport\sItems|Inside\sYour\sAAA\sRoadside\sKit|the\sPremier\sRoadside\sSupport\skit\scovers|What\sthe\sroadside\skit\smay\sinclude|YOUR\sROADSIDE\sCHECKLIST)(\W|$)/m tflags __JR_AAA_BODY_INC1 nosubject body __JR_AAA_BODY_LMT1 /(^|\b|\s)(?:distribution\smanaged\sby\srequest\sorder|200\sremain\sat\stime\sof\smessage|Act\spromptly\:\sOnly\s200\sremain|available\sto\squalifying\smembers\son\sa\srolling\sbasis|Limited\s(Supplies|Provisions)\sAvailable\:|the\scount\sof\skits\sis\slimited|(reserve|claim)\syours\sbefore\s(they|provisions)\srun\sout|Distribution\sis\s(on\sa\s)?first\-come\,\sfirst\-served|Consider\sreserving\syours\ssoon|Supply\sis\sextremely\slimited\:|just\s200\sremain|Don\'t\sdelay\sif\syou\swish\sto\ssecure\sa\sset|qualifies\syou\sto\sclaim\sone|Only\s200\s(bundles|kits)\s(ready\sfor\sdistribution|are\scurrently\savailable)|distributed\sin\sorder\sof\sconfirmed\srequests|Currently\,\s200\sunits\sare\savailable|Limited\squantity\savailable|act\spromptly\sto\ssecure\syour\skit|available\sto\sall\slicensed\sdrivers\sin\syour\sstate|shipped\sdirectly\sto\syour\sverified\saddress|Small\sStock\sAvailable|number\sof\skits\sis\srestricted|qualify\sfor\sa\skit\swith\sno\sadded\scharges|Meanwhile\,\sonly\s200\sremain|distributed\son\sa\sfirst\-completion\sbasis|Only\s200\sleft\.|Get\syours\swhile\ssupplies\slast\!|only\s200\skits\sare\sleft\sfor\squalifying\sdrivers|Distribution\sis\sin\sthe\sorder\sreceived|[Tt]his\sis\sa\stime\-sensitive\soffer|One\sper\shousehold|Shipping\s\&\shandling\scovered|Offer\sends\ssoon|(secure|grab)\syours\sbefore\s(supplies|stocks)\sare\sexhausted|reserve\syours\sbefore\sthey\srun\sout|Quantities\sExtremely\sLimited\:|the\savailable\ssets\sare\sconstrained|[Tt]he\snumber\sof\scollections\sis\srestricted\.|Available\sfrom\stoday\sthrough\sthis\sweek|[Ee]ligibility\sis\sbased\son\sresidency|kits\sare\sdistributed\sbased\son\sprogram\sallocation|due\sto\sresidency\sin\sa\ssupported\slocality|based\son\sregional\sparticipation\slevels|LIMITED\sQUANTITIES\sAVAILABLE|CLAIM\sYOURS\sNOW|program\sis\savailable\sbased\son\syour\sgeographic\slocation|according\sto\sprogram\savailability\sin\syour\slocality|[Ss]upplies\sare\smanaged\saccording\sto\sprogram\sallocations|licensed\sdriver\sresiding\sin\s(a\sparticipating|an\seligible)\s(area|region)|no\scharge\sto\seligible\sresidents|kit\sis\sreserved\,\sbut\sonly\sfor\sa\slimited\sallocation)(\W|$)/m tflags __JR_AAA_BODY_LMT1 nosubject body __JR_AAA_BODY /(^|\b|\s)(?:Executive\sRoadside\sEmergency\sPackage|an\sExecutive\sSafety\sKit|Emergency\sKits\savailable\sfor\srapid\sdistribution|Advanced\sVehicle\sEssentials\sKit|AAA\sis\sdelivering\sa\scurated\sbatch\sof\sselect\sRoadside|Roadside\sSafety\sBundles|AAA\sElite\sSafety\sGear\sPack|special\sstate\-authorized\sdriver\sprotection\sinitiative|Roadside\sSafety\sPacks?|Roadside\sSafety\sKit|Safety\sKits\sto\sresidents\sin\syour\sstate|Ultimate\sDriver\sPreparedness\sSet|Statewide\sVehicle\sSupport\s\|\sEasy\sPeace\sof\sMind|Roadside\sEssentials\sKit|Unique\sHighway\sEssentials\sPack|Executive\sRoadside\sSurvival\sKits?|Executive\sRoadside\sEmergency\sKits?|comprehensive\sSafety\sEssentials\sBags|Elite\sDriver\sEssentials\sSet|receive\sa\sunique\sRoadside\sSolution\sKit|This\snote\sprovides\srelevant\sinformation\sregarding\syour\spresent\sAAA\smembership\.|Drivers\sto\sAcquire\sPreparedness\sPacks|Executive\sRoadside\sAssistance\s(Kits?|Packs?|Bundles?)|Executive\sRoadside\sAssistance\sPacks|AAA\sROAD\sCREW|qualify\sfor\san\sElite\sRoadside\sKit|expertly\scrafted\sSafety\sBundles|Your\sSuperior\sVehicle\sBundle\sCombines|Eligible\sfor\sthe\sPremium\sSafety\sPack|roadside\ssupport\skit\sbelow|[Tt]he\sPremier\sRoadside\sSupport\steam|CLAIM\sYOUR\sFREE\sKIT\sNOW\s\xC2\xBB|Courtesy\sRoadside\sKit\sIs\|Receive\sa\sCourtesy\sRoadside\sKit|offering\sis\sprovided\sat\sno\scharge\sto\seligible\sresidents|essential\sitems\sto\sassist\swith\scommon\sroadside\ssituations|Eligible\sfor\sa\sCourtesy\sRoadside\sKit|items\sto\sassist\swith\scommon\sroadside\ssituations|CLAIM\sYOUR\sFREE\sDELUXE\sCAR\sSAFETY\sKIT|Your\sComplimentary\sEmergency\sKit|Courtesy\sBundle\sfor\sLicensed\sDrivers|Confirm\syour\sresidential\sdetails\sto\ssecure\syour\skit|Eligible\sdriver\salert|licensed\sdrivers?\sin\sa\sparticipating\smunicipality)(\W|$)/m tflags __JR_AAA_BODY nosubject body __JR_AAA_BODY1 /(^|\b|\s)(?:a\sstate\-endorsed\svehicle\ssafety\sinitiative|high\-quality\sEmergency\sKits|Your\sRoadside\sAssistance\sKit|Authorized\sDriver\sKit\sProgram|the\sExecutive\sRoadside\sAssistance|You\sMeet\sthe\sCriteria\sfor\sthe\sExecutive\sRoadside|Premium\sRoadside\sTravel\sKit|Premium\sRoadside\sAssistance|Advanced\sDriver\sSafety\sPack|Reserve\sMy\sState\sKit|kit\sis\spacked\swith\ssmart\sroadside\ssolutions|Safety\sEssentials\s(Kit|Bundle|Pack)|Free\sCar\sEmergency\sKit|Qualify\sfor\sPremier\sRoadside\sHelp|Premier\sRoadside\sAssistance\s(Kit|Pack|Collection|Bundle)s?|Your\sPremier\sRoadside\sBundle|Elite\sRoadside\sRelief\sSets?|Eligible\sfor\sPremier\sRoadside\sHelp|Your\sPremium\sRoadside\sKit|Premier\sRoad\sCrew\sPriority|Qualify\sfor\sPremier\sRoadside\sAssistance|Your\sPremier\sRoadside\sCollection|(requirements|Qualify)\sfor\sElite\sRoadside\s(Assistance|Support|Relief)|Your\sElite\sRoadside\sCollection|Elite\sRoadside\sAssistance\s(Kit|Bundle|Pack)s?|Eligible\sfor\sPremier\sRoadside\sSupport|Premier\sRoadside\sSupport\s([Kk]it|[Cc]ollection|[Pp]ack|[Bb]undle)s?|Your\sPremier\sRoadside\sSupport|Qualify\sfor\sPremium\sEmergency\sAssistance|Qualify\sfor\sPremier\sHelp\son\sWheels|Roadside\sSupport\s(Kit|Bundle|Pack)\sat\sNo\sCharge|AAA\sRoadside\sBundIe|Assistance\sSets\sto\sresidents\sin\syour\szone|Assistance\sCollection|courtesy\sbundle\sis\soffered\sbased\son\syour\sresidency|Your\sAAA\sEmergency\sCar\sKit|Premier\sRoadside\sSupport\sCourtesy\sBundle|qualify\sfor\sthe\sPremier\sRoadside\sSupport\sprogram|bundle\sat\sno\scharge\sto\seligible\sindividuals\sin\syour\slocality|Greetings\,\sAAA\smember\,\,|support\skit\sto\seligible\sresidents\sin\syour\slocality|Your\sCourtesy\sRoadside\sKit\sAwaits|Your\sAAA\sCourtesy\sRoadside\sKit\sis\sready)(\W|$)/m tflags __JR_AAA_BODY1 nosubject body __JR_AAA_BODY2 /(^|\b|\s)(?:Complimentary\sAAA\sEmergency\sCar\sKit|Your\sAAA\sEmergency\sRoadside\s(Kit|Bundle|Pack)|this\semergency\sroadside\scar\skit|extending\sa\sCourtesy\sBundle\sfor\slicensed\sdrivers|your\sAAA\sCourtesy\s(Kit|Bundle|Pack)|Bundle\sis\scoordinated\sby\sAAA\sin\scooperation\swith\sparticipating\slocalities|Roadside\sSupport\sKit\sIs\sReady|Courtesy\sBundle\sis\sa\scollection\sof\spractical\sitems|Premier\sRoadside\sCourtesy\s(Kit|Bundle|Pack)|Introducing\sOur\sCourtesy\sBundle|You\sQualify\sfor\sPremier\sHelp\son\sWheels|receive\sa\scomprehensive\sroadside\ssupport\skit|Premier\sRoadside\sCollection\sIncludes|Premier\sRoadside\sAssistance\sCollection|Qualify\sto\sReceive\sthe\sExecutive\sRoadside\sAssistance\sBundle|requirements\sfor\sElite\sRoadside\sRelief|Executive\sRoadside\sSupport\sKits?|State\-Approved\sSafety\sKits\s\xE2\x80\xA2\sLicensed\sDriver\sParticipation|Deluxe\sAAA\sRoad\sSafety\sKit|special\sRoadside\sEssentials\sKit|advanced\sSafety\sEssentials\sKit|Selected\sfor\san\sAdvance\sPreparedness\sKit|Elite\sRoadside\sUtility\sKit|Executive\sRoadside\sRescue\sKit|state\-endorsed\sRoadside\sSafety\sPack|Executive\sRoadside\sEmergency\sPackages|Emergency\s(Kits|Packages)\sto\sresidents\sin\syour\s(state|locality)|AAA\scar\semergency\skit\sDepartment|peace\sof\smind\sknowing\sAAA\sis\sby\syour\sside|your\sexclusive\sCar\sEmergency\sKit|Premium\sRoadside\sHelp\sKit|Premium\sOn\-the\-Road|On\-the\-Road\sAssistance|practical\sassistance\sto\slicensed\sdrivers\sin\seligible\szones|Roadside\sCourtesy\sPackage|Courtesy\sBundle\sincludes\spractical\sitems\sto\sassist|FREE\sEMERGENCY\sKIT|qualify\sfor\sa\scourtesy\sroadside\skit|AAA\sCourtesy\sRoadside\sKit\sis\sReady|Your\sCourtesy\sRoadside\sKit\sis\sready\sfor\sconfirmation)(\W|$)/m tflags __JR_AAA_BODY2 nosubject body __JR_AAA_BODY3 /(^|\b|\s)(?:approved\sfor\sa\sroadside\sessentials\spack|AAA\scar\semergency\skit\sDepartment|this\semergency\sroadside\scar\spackage|Your\sAAA\sEmergency\sCar\s(Kit|Package)|Your\sAAA\sEmergency\sRoadside\s(Package|Kit)|Your\sGift\sAAA\sEmergency\sCar\sKit|present\sthis\semergency\sroadside\scar\skit|Gifted\sAAA\sEmergency\sCar\sKit|Courtesy\sRoadside\sKit\sIs\sReady|comprehensive\sRoadside\sSupport\sKit|Your\sRoad\sCrew\sPriority\sSet|Roadside\sSupport\sKit\sIs\sReserved\sfor\sYou|provided\sat\sno\scharge\sto\seligible\sresidents|program\scovers\sthe\s(kit|bundle)\sfor\shouseholds\sin\syour\sarea|(Kit|Bundle)\sincludes\spractical\sitems\sselected\sfor\sdriver\spreparedness|AAA\sCourtsey\skit|This\sis\sa\sservice\scommunication\sfor\seligible\sresidents|What\sYour\sKit\sIncludes|offered\sthrough\sa\sregional\sinitiative\sfor\sresidents|Area\sQualifies\sfor\sa\s(Courtesy\sRoadside|Roadside\sSupport)\sKit|FREE\sCAR\sSAFETY\sKIT|Resident\sRoadside\sKit\sIs\sReady|roadside\ssupport\skit\sprovided\sat\sno\scharge|available\sto\syou\sdue\sto\syour\sresidency\sin\sthe\sregion|Premier\sRoadside\sSupport\sinitiative|Courtesy\sRoadside\sKit\sAwaits|Qualify\sfor\sa\sCourtesy\sRoadside\sKit|Confirmed\:\sCourtesy\sRoadside\sKit|Your\sCourtesy\sRoadside\sKit|CLAIM\sYOUR\sFREE\sDELUXE\sCAR\sSAFETY\sKIT|YOURS\sFREE\s\+\smystery\sgift|OFFICIAL\sAAA\sSAFETY\sINITIATIVE\s2026|Special\sRoadside\sEmergency\sPack|Emergency\scar\skit\sfor\sAAA\smembers|Courtesy\sRoadside\sKit\sis\sassembled\sto\shelp|Roadside\sSupport\s\&\sMember\sServices|Roadside\sKit\sShipping\sDetails|qualify\sfor\sa\sAAA\sCourtesy\sRoadside\sKit|Premier\sRoadside\sSupport\scourtesy\skit|receive\sa\scomprehensive\sCourtesy\sRoadside\sKit|You\squalify\sfor\sthe\sAAA\sCourtesy\sRoadside\sKit)(\W|$)/m tflags __JR_AAA_BODY3 nosubject body __JR_AAA_BODY_LO1 /(^|\b|\s)(?:\xC2\xA9\s2025\sAAA\.\sEntire\scontents\sreserved\.|Provided\sas\san\supdate\sto\syour\scurrent\smembership\.|Instant\sRoadside\sResponse|We\sappreciate\syou\sbeing\sa\sloyal\sAAA\smember|Your\sparticipation\shelps\sus\stailor\sfuture\sbenefits|We\svalue\syour\sinput\.|Prepare\sfor\sthe\sunforeseen\.|We\sappreciate\syou\sbeing\sa\sloyal\sAAA\smember|Thank\syou\sfor\sbeing\san\sappreciated\sAAA\smember|for\syour\s(persistent|ongoing)\scommitment\sto\sroad\s(security|wellbeing|safety)\.|This\sinformational\snotice\sis\sprovided\sin\sconnection\swith\syour\sAAA\saccount\.|\xC2\xA9\s2025\sAAA\.\sAll\srights\s(reserved|are\sprotected)\.|\xC2\xA9\s2025\sAAA\sRoadside\.|State\-Authorized\sRoadside\sService|authorized\sstate\sprogram\savailable\sto\sall\slicensed\sdrivers|confirms\syour\seligibility\sfor\sone\sof\sthese\s(kit|pack)s|This\snotification\sprovides\sstatus\son\syour\seligibility\sand\smembership\.|Emergency\sRoadside\sAssistance|Thank\syou\sfor\sbeing\s(a|an)\s(exceptional|valued|esteemed|cherished)\sAAA\s(member|affiliate|associate)|This\scommunication\sprovides\simportant\sinformation\sregarding\syour\scurrent\sAAA\smembership\.|This\sinformation\sis\ssent\sto\skeep\syou\supdated\sregarding\syour\sdriver\sdetails|a\sSafety\sEssentials\sBag|comprehensive\sSafety\sEssentials\sBags|State\sRoadside\sSupport\sProgram|Provided\sin\s(partnership|conjunction)\swith\syour\s(state|statewide)\s(government|program)\.|\xC2\xA9\s2025\sAAA\sClub\.|\xC2\xA9\s2025\sAAA\sMotor\sClub\.|an\sofficial\snotification\sfrom\sAAA\sRoadside\sServices\.|This\sis\san\sofficial\scommunication\sfrom\sAAA|We\sappreciate\syour\sloyalty\sas\san\sAAA\smember|\xC2\xA9\s2025\sAAA\.\sReserved\srights\.|Providing\sdependable\sassistance\sfor\sdrivers|Reliable\ssupport\sfor\severy\smile\sof\syour\sjourney|AAA\sMEMBER\sBENEFITS|Thank\syou\sfor\sbeing\spart\sof\sthe\scommunity\sprogram\.|Roadside\sSupport\s\&\sMember\sServices|drivers\sin\sregion-backed\sresident\sprograms|We\sare\sglad\sto\ssupport\syour\stravel\sreadiness|AAA\sCommunity\sPartnership\sProgram|ROADSIDE\sREADINESS\s\-\sLOCAL\sPROGRAM)(\W|$)/m tflags __JR_AAA_BODY_LO1 nosubject body __JR_AAA_BODY_LO2 /(^|\b|\s)(?:\xC2\xA9\s2025\sAAA\.\sAll\sprivileges\sreserved\.|your\sactive\seffort\stoward\sroadway\swelfare|\xC2\xA9\s2024\sAAA\sRoadway\sHelp\.|Promoting\smember\ssafety\ssince\s1902|your\songoing\sdedication\sto\sjourney\spreparedness|your\scontinued\s(dedication|loyalty|commitment)\sto\sroad\ssafety|Thank\syou\sfor\strusting\sAAA\sas\syour\sroadside\spartner|AAA\-\sProviding\sReliable\sSupport\.|Thank\syou\sfor\sremaining\sa\svalued\sAAA\smember|message\swas\ssent\sregarding\sa\slocality\-based\sAAA\sCourtesy\sBundle\sprogram|Thank\syou\sfor\sbeing\spart\sof\sa\scommunity\sthat\svalues\spreparation\sand\sroadway\ssafety|We\sappreciate\syou\sbeing\sa\sloyal\sAAA\smember|assist\sus\sin\senhancing\sand\smaintaining\sour\stop\-tier\sservice|This\sis\sa\sservice\smessage\sfor\sour\smembers\.|your\songoing\scommitment\sto\ssafe\stravels?|Thank\syou\sfor\sbeing\sa\srespected\sAAA\smember|Reliable\ssupport\sfor\syour\sjourney|Thank\syou\sfor\sbeing\spart\sof\sour\scommitment\sto\ssafer\sroads\.|Trusted\sroadside\sassistance\sfor\severy\sjourney|We\sappreciate\syour\sinvolvement\.|Trusted\sSupport\sWhere\sYou\sLive\sand\sDrive|This\semail\sis\ssent\sas\spart\sof\syour\smember\supdate|AAA\sMember\sServices|Thank\syou\sfor\shelping\skeep\sroads\sin\syour\scommunity\ssafer|Trusted\sroadside\sassistance\sfor\severy\sjourney|We\sappreciate\syour\smembership\sand\scommitment\sto\ssafe\sdriving\.|Trusted\sassistance\sfor\sdrivers\sin\syour\scommunity\.|Support\sfor\syour\sjourney\,\swherever\syou\sare\.|your\sparticipation\sin\sthis\slocality\-based\ssupport\seffort|Reliable\ssupport\sfor\s([Ee]very\s[Jj]ourney|[Yy]our\s(Driving\s)?[Jj]ourneys?)|This\sis\sa\smember\sbenefit\sprogram\.|Reliable\ssupport\sfor\sdrivers\swhere\syou\slive|Trusted\ssupport\sfor\syour\sjourney|Reliable\ssupport\sfor\severy\smile\sof\syour\sjourney|Supporting\sDriver\sPreparedness\sin\sYour\sCommunity|Thank\syou\sfor\sbeing\spart\sof\sour\scommunity\sfocused\son\ssafer\stravels|here\sto\ssupport\sdrivers\sin\syour\scommunity|Thank\syou\sfor\sbeing\spart\sof\sthe\scommunity\swe\sserve\.|Trusted\sby\sdrivers\sfor\sover\sa\scentury|Prepared\sdrivers\sare\ssafer\sdrivers|Thank\syou\sfor\sbeing\spart\sof\sthe\scommunity\swe\sserve|AAA\sREGIONAL\sDRIVER\sSUPPORT\sPROGRAM|AAA\sCommunity\sPartnership\sProgram)(\W|$)/m tflags __JR_AAA_BODY_LO2 nosubject meta __JR_AAA_BODY_LO (__JR_AAA_BODY_LO1 || __JR_AAA_BODY_LO2) meta JR_AAA_SPAM ((__JR_AAA_BODY + __JR_AAA_BODY1 + __JR_AAA_BODY2 + __JR_AAA_BODY3 + __JR_AAA_BODY_LO + T_JR_AAA_BODY_OBJ + __JR_AAA_BODY_BTN1 + __JR_AAA_BODY_INC1 + __JR_AAA_BODY_LMT1 + __JR_AAA_SUBJ + __JR_AAA_SUBJ_LO + JR_AAA_FROM_NAME + JR_AAA_FROM_ADDR + __JR_AAA_FROM_ADD_GEN + __JR_PISST_TLD) > 2) describe JR_AAA_SPAM NIL: Email contains multiple AAA campaign markers score JR_AAA_SPAM 5.0 ############################## ### BLUECROSS/BLUESHIELD ### ############################## header __JR_BCBS_FROM_ADD_A From:addr =~ /^(bluecrossshieldbiue|covplanbcbs|bluecrosswel|bluecrosspian|biueshieldbiuecross|bluecrosssayswelcome|statusbiuecross|biuecrossstatus|bluecrossstatusupdate|bluecrosssalutation|welcometobluecross|hellobiuecross|bcbscoverageplan|bluecrossblueshieldinfo|biuecrossteam|welcomebluecross|crossblueshieid|bluecrosscare|bluecrossupdate|crossbluestatus|bluecrossteam|bluecrossgreeting|yourbluecross|statuscrossblue|bluecrossshield|bluecrosshealthshield|bluecrossnote|bluestatuscross|tobiuecrosswelcome|bluecrossbiueshield|mybluecross|awarmbiuecross|bluecrossblueshieldupdate|bluecrosswelcome|bluecrossmedr|biueshieidbiuecross|blueshieldbluecrossinfo|bluecrossblueshieldupdates|bluecrossblueshield|biuecrossblueshieid|blueshieldbluecross|biuecrossshieidblue|blueshieldfrombluecross|blueshieldandbluecross|bcbsmemberlo|blueshieidbiuecross|shieidbluebiuecross|welcomefrombluecrossins|insbluecrosswelcome|awelcomebiuecross|bluecrossinshello|biuecrossblueshieidsupport|bluecrosscov|bluecrosscov[0-9]{2}|biuecrossstag|bluecrossinswelcome|BIueCross|bluecrossmem|bluecrossmem[0-9]{2}|bluecrossblu|bluecrossblu[0-9]{2}|BIueCrossBIueShieldDetail|bluecrossinsurancewelcome|BlueCrossStarterKit|BlueCrossWelcomeDistribut|BIueCrossBlueShieldCare|BlueCrossMemberKit|BlueCrossMemberWelcomeKit|BIueCrossInsCommunication|BIueCrossInsTransformatio|BlueCrossWelcomeKit|WelcomeBIueCrossBlueShiel|WelcomeToBIueCrossIns|BIueCrossWelcomePkg|BIueCrossCarePlan|biuecrossins|BIueCrossWelcome|BIueCrossWelcomeKit|BIueCrossPlanRevisions?|BIueCrossBlueShieldRevisi|BIueCrossInsAnnouncements|BIueCrossWelcomeMCP|BIueCrossCoverageReport|BIueCrossBlueShieIdPlanRe|MyBlueCrossIns|biuecrossgoto|BIueCrossPlanCenter|BIueCrossRevisions|BIueCrossBSOverview|BIueCrossBSB|BIueCrossBlueShieldCenter|biuecrossstep|biuecrossnext|BIueCrossBSD|BIueCrossBlueShieIdIns|BlueCrossMCO|biuecrosspath|bluecrosspath|BIueCrossInsAmendments?|BIueCrossBSIns|BIueCrossInsAlterations?|BIueCrossBIueShieIdAnnoun|BIueCrossBlueShieldPlan|BIueCrossInsAdvisory|BIueCrossSource|BIueCrossBlueShieId|BIueCrossBlueShield|BlueCrossBlueShieId|BIueCrossBIueSheIdReport|BlueCrossInsReport|BIueCrossInsMCP|BlueCrossInsChange|bluecrossstag|biuecrossrout|biuecrosscov|BlueCrossDetaiIs?|BlueCrossOfMCT|bluecrosspla23|BlueCrossSummary|BlueCrossInsDetaiIs?|biuecross|BlueCrossIns|BIueCrossCoverageChanges?|IBIueCrossInsSupport|bluecrossflow|bluecrossrout|BIueCrossPolicy2026|BlueCrossInsights|BIueCrossInsReports?|BIueCrossInsCoverage|BlueCrossInsNote|biuecrossins[0-9]{2}|BIueCrossInsBuIIetin|BIueCrossIns|BIueCrossInsInformation|BIueCrossInsChanges?|BIueCrossInsModificaitons?|BIueCrossInsSummary|BIueCrossInsRevisions?|BIueCrossInslnsights?|BIueCrossPoIicyChanges?|BIueCrossInsNotes?|BIueCrossInfo|BIueCrossInsNotification|BIueCrossInsProgram|bcbspage|BIueCrossInsRevisions|BIueCrossInsNotices?|BIueCrossInsModifications?|BlueCrossBrief|bcbsstep|bcbsmemberac90|BIueCrossInsReport|bcbs\-page|BIueCrossInsNotice|bluecrosscha[0-9]{2}|BIueCrossAdjustments?|bluecrossnot[0-9]{2}|bluecrossnot|bluecrossins|insbluecross|insbluecross[0-9]{2}|ins\-flow|BIueCrossRecap|biuecrossupd|biuecrossupd[0-9]{2}|ChangesinBIueCrossCoverag|BIueCrossCommunity|BIueCrossInsAdjustment|BlueCrossLink|WelcomeToBIueCross|bluecrossupd|BIueCrossCoverage|BIueCrossPoIicy|MyBIueCrossIns|bluecrossrev|BIueCrossBlueShieldIns|BIueCrossInsDevelopments?|ChangesatBIueCross|ChangesatBIueCross|bluecrossadj[0-9]{2}|NoticeonBIueCrossIns|insbiuecross|insbiuecross[0-9]{2}|bluecrossann|bluecrossann[0-9]{2}|bluecrossins[0-9]{2}|DetailsBlueCross|biuecrosscha|biuecrosscha[0-9]{2}|bluecrosspla|bluecrosspla[0-9]{2}|BIueCrossCenters?|BIueCrossNews|BIueCrossInsRecap|bluecrossvisi|BIueCrossAnnouncement|ChangesinBIueCross|BlueCrossPolicy|BIueCrossRevision|BIueCrossBCS|BIueCrossBCLIns|BIueCrossBSCenters|BIueCrossBSIns|BIueCrossInsRevisions?|BIueCrossPlanNotification|BIueCrossInsOutline|BIueCrossInsPIan|bluecrossmod|bluecrossmod[0-9]{2}|PlanDetailsBlueCross|BIueCrosssCoverageAnnounc|BIueCrossInsStatement|BIueCrossInsService|bluecrosscha\-stage|(ins)?b[li]uecross?(ins|inf|cha|upd|pla|mem|pol|cov)?\-?(goto|next|stage|flow|page|route|path|step|link|visit)|bluecrosspla\-(goto|next|stage|flow|page|route|path|step|link|visit))\@/ header __JR_BCBS_FROM_ADD_B From:addr =~ /^(BIueCross|BIueSheId).*\@/ meta JR_BCBS_FROM_ADDR (__JR_BCBS_FROM_ADD_A || __JR_BCBS_FROM_ADD_B) describe JR_BCBS_FROM_ADDR NIL: From Address contains a BlueCross BlueShield spam identifier score JR_BCBS_FROM_ADDR 1.0 header __JR_BCBS_FROM_ADD_GEN From:addr =~ /^(insflow|bma38|bcbsru|bcbsmi|ins|insstep|ibvs|bisby|bluecross0v|bluecrossjh|bluecrosslf|bluecrossd5|bluecrossqs|bai6p|bluecrossn1|bc7z|baioq|bluecrossr4|bluecrossjs|bluecrosscu|bluecrossyu|bluecrossnz|bluecross1e|bluecrossmj|biuecross8o|biuecrossc8|biuecrossa6|biuecrosslc|biuecross9p|biuecrossbc|bluecrossaj|bluecrosscz|Noticeon|bluecross8r|bluecrossvu|bluecrossop|bluecrossrz|biuecrossta|bluecrossda|bluecrossj5|bluecrossgs|bluecrossum|biuecrossf1|bluecross3f|biuecrossuf|biuecrossah|bluecrossc5|bluecrosswz|biuecrossbs|bluecross6s|biuecrosspol|biuecrossqe|biuecross7y|biuecrossblueshieid|bluecrossblu|biuecrossblueshieidteam|biuecrossshieidblue|bluebiuecrossshieid|biuecrossandblueshieid|biuecrosssa|biuecrossmu|bluecrossnl|bluecrossgr|biuecrossqv|bcbscovplans|bluecrossplan|welcomefrombluecross|hellobluecross|greetingsbluecross|blueshieldcrossblue|plancovbcbs|bcbscovplan|planbcbscov|cross\.noresponse)\@/ header __JR_BCBS_FROM_NAM1 From:name =~ /^(Notice\son\sBIueCross\sIns\.?|Welcome\sTo\sBIueCross|BIueCross\sCoverage|BIueCross\sPoIicy|My\sBIueCross\sIns\.?|BIueCross\sBlueShield\sIns\.?|Changes\sat\sBIueCross|Changes\sat\sBIue\s?Cross|Notice\son\sBIueCross\sIns\.?|BlueCross\sAnnouncements\sIns\.?|Details\sBlueCross|BIueCross\sCenters?|BIueCross\sNews|BIue\s?Cross\sIns\.?\sRecap|BIueCross\sAnnouncement|Changes\sin\sBIue\s?Cross|BIue\s?Cross\sRevision|BIue\s?Cross\sBCS|BIue\s?Cross\s?BS\s?Ins\.?|BIueCross\sIns\.?\sRevisions?|BIueCross\sIns\.?\sOutline|BIue\s?Cross\sIns\.?\sStatement|BIueCross\sIns\.?\sService|BIue\s?Cross\sPlan\sNotification|BIueCross\s?BS\sCenters|BIueCross\sBCL\sIns\.?|BlueCross\sPolicy|BIue\s?Crosss?\sCoverage\sAnnouncement|Plan\sDetails\sBlueCross|BIueCross\sIns\.?\sPIan|BIue\s?Cross\sIns\sMCP|BIueCross\sBS\sIns\.?|BIueCross\sIns\.?\sModifications?|BIue\s?Cross\sIns\.?\sDevelopments?|BlueCross\sIns\.?\sReport|BIue\s?Cross\sBIueSheId\sReport|BlueCross\sBlue\s?ShieId|BIueCross\sBlue\sShield|BIue\sCross\sBlue\sShieId|BIue\s?Cross\sSource|BIueCross\sBlueShield\sPlan|BIue\s?Cross\sIns\.?\sAlterations?|BIue\s?Cross\sIns\.?\sAmendments?|BIue\s?Cross\sIns\.?\sAIterations?|BIueCross\sBSD|BIue\sCross\sBlue\sShield\sCenter|BIue\s?Cross\sBSB|BIue\s?Cross\sRevisions|BIue\s?Cross\sBS\sOverview|BIueCross\sBlueShield\sCenters?|BIue\s?Cross\sPlan\sCenter|BlueCross\sPlan\sUpdates?|MyBlueCross\sIns\.?|BIueCross\sBlueShieId\sPlan\sRevisions|BIue\sCross\sIns\.\sAnnouncements|BIue\s?Cross\sCoverage\sReport|BIue\s?Cross\sPlan\sRevisions|BIue\s?Cross\sIns\.?\sAdvisory|Welcome\sTo\sBIue\s?Cross\sIns\.?|BIue\s?Cross\sCare\sPlan|BIue\s?Cross\sWelcome\sPkg|Blue\sCross\sMCO|BlueCross\sWelcome\sKit|BIue\s?Cross\sIns\.?\sCommunication|Blue\s?Cross\sMember\sKit|Blue\s?Cross\sStarter\sKit|BIueCross\sBIue\sShield\sDetails|BlueCross\sBenefit\sChanges|BlueShieId\sBIueCross|BCBS\sMember\sLogin|BCBS\sMember\sTeam|BIueCross\sShieId\sBlue|Blue\sShield\sfrom\sBlueCross|BIue\sShieId\sBIueCross|BlueCross\sBlue\sShield|BlueCross\sBlueShield\sUpdate|BlueCross\sMedR|A\sWelcome\sBIueCross|Blue\sCross\sWelcome|A\sWarm\sBIueCross|My\sBlue\sCross|Blue\sCross\sBIue\sShield|To\sBIueCross\sWelcome|Blue\sStatus\sCross|BlueCross\sHealthShield|Blue\sCross\sShield|Your\sBlueCross|BCBS\sCOV\sPlans|Blue\sCross\sPlan|Welcome\sBlue\sCross|BlueCross\sSays\sWelcome)\"?$/ header __JR_BCBS_FROM_NAM2 From:name =~ /(^|\b)(BIue\s?Cross|BIue\s?SheId|ShieId|BIue|BlueCross)\b/ header __JR_BCBS_FROM_NAM3 From:name =~ /^(BlueCross\sBlueShield\sMedicare\sKit\sCustomer\sSurvey|B[lI]ueCross\s(Ins\.?\sUpdates?|Ins\.?\sChanges?|Plan\sNotices?|DetaiIs?|Of\sMCT|Plan\sChanges?|Alerts?\sIns\.?|Insights?|Ins\.?\sNotes?|Ins\.?\sInformation|Ins\.?\sCoverage|Ins\.?\slnsights?|Coverage\sChanges?|Ins\.?\sAlerts?|Ins\.?\sReports?|Ins\.?\sNotices?|Ins\.?\sSupport|Policy\s2026|Ins\.?\sBu[Il][Il]etins?|Ins\.)|IB[Il]ueCross\sIns\.?\sSupport|Blue\sCross\sIns\.?\sDetaiIs|Blue\sCross\sIns\.?|B[Il]ueCross\sIns\.?\sNotifications?|B[Il]ueCross\sIns\.?\sProgram|BCBS\sMember\sServices|B[Il]ueCross\sIns\.?\sRevisions|BCBS\sMember\sAccount|B[Il]ueCross\sIns\.?\sNotices?|\bBIueCross\b|B[Il]ueCross\sIns\.?\sModifications?|BlueCross\sBrief|bcbsmemberli|BIue\s?Cross\sIns\.?\sReport|BIue\s?Cross\sIns\.?\sChanges?|BIue\s?Cross\sIns\.?\sSummary|BIue\s?Cross\sIns\.?\sNotice|BlueCross\sChanges\sIns|BIueCross\sAdjustments|BlueCross\sNotices\sIns\.?|BIueCross\sIns\.?\sStatement|BlueCross\sIns\.?\sInfo|Ins\.?\sBlueCross|BIue\s?Cross\sRecap|BIue\d?Cross\sUpdates\sIns\.?|Changes\sin\sBIue\s?Cross\sCoverage|BIue\s?Cross\sCommunity|BIue\s?Cross\sIns\.?\sAdjustment|BIueCross\sTeam|Greetings\sBlue\sCross|BCBS\sCoverage\sPlan|Blue\sShield\sCross\sBlue|Hello\sBIueCross|Welcome\sTo\sBlue\sCross|BlueCross\sBlue\sShield|Plan\sCOV\sBCBS|BlueCross\sSalutation|BlueCross\sPIan|BIue\sShield\sBIue\sCross|COV\sPlan\sBCBS)\"?$/ meta JR_BCBS_FROM_NAME (__JR_BCBS_FROM_NAM1 || __JR_BCBS_FROM_NAM2 || __JR_BCBS_FROM_NAM3) describe JR_BCBS_FROM_NAME NIL: From Name contains a BlueCross BlueShield spam element score JR_BCBS_FROM_NAME 1.0 header __JR_BCBS_SUBJ_A Subject =~ /update\sfrom\sBlueCross\son\syour\sCoverage\sfor\s2026|BlueCross\sBIue\sCross\sBlue\sShield\sCenterupdate\sregarding\syour\s2026\sCoverage|Important:\sBlueCross\sCoverage\supdate\sfor\s2026|BlueCross\sshares\sa\s2026\sCoverage\supdate|BlueCross:\sYour\s2026\sCoverage\sUpdate|Important\sBlueCross\supdate:\s2026\sCoverage|BlueCross:\sImportant\supdate\son\syour\s2026\sCoverage|BlueCross\sshares\san\supdate\son\syour\s2026\sCoverage\sPIan|Regarding\sYour\s2026\sCoverage:\sUpdate\sfrom\sBlueCross|BlueCross:\sUpdate\sregarding\syour\sCoverage\sfor\s2026|Important\supdate\sfrom\sBlueCross\sregarding\syour\sCoverage\sfor\s2026|Check\sout\sthe\sBlueCross\supdate\son\syour\sCoverage\sfor\s2026|BlueCross\shas\san\supdate\sabout\syour\sCoverage\sfor\s2026|BlueCross\shas\san\supdate\sregarding\syour\sCoverage\,\s2026|BlueCross\shas\san\simportant\supdate\sregarding\syour\sCoverage\sfor\s2026|2026\sCoverage\sInformation\sfrom\sBlueCross|Your\sCoverage\sfor\s2026:\sAn\sUpdate\sfrom\sBlueCross|Discover\swhat\'s\snew\swith\syour\s2026\sCoverage\sfrom\sBlueCross|BlueCross\sprovides\san\supdate\son\syour\s2026\sCoverage|2026\sCoverage\supdate:\sNews\sfrom\sBlueCross|BlueCross\'s\slatest\supdate\son\syour\s2026\sCoverage|BlueCross\shas\snews\sabout\syour\s2026\sCoverage|BlueCross:\sInformation\sabout\syour\s2026\sCoverage|New\sDetails\son\sYour\sBlueCross\s\(2026\)\sCoverage|BlueCross\sUpdate:\sYour\sCoverage\sfor\s2026|Your\s2026\sCoverage:\sAn\sUpdate\sfrom\sBlueCross|BlueCross\sUpdate\sregarding\syour\sCoverage\sfor\s2026|Your\s2026\sCoverage\sUpdate\sfrom\sBlueCross|BlueCross:\sAn\sUpdate\son\sYour\s2026\sCoverage|Your\s2026\sCoverage\sChanges\sFrom\sBCBS|Check\syour\s2026\sCoverage\supdate\sfrom\sBlueCross|Update\son\sYour\sCoverage\sfor\s2026\sfrom\sBlueCross|BlueCross:\sAn\supdate\sregarding\syour\s2026\sCoverage|BlueCross\sUpdate:\sYour\s2026\sCoverage|Your\sCoverage\sfor\s2026:\sA\sBlueCross\sUpdate|the\slatest\supdate\son\syour\s2026\sBCBS\sCoverage|informs\syou\sabout\syour\sCoverage\supdate\sfor\s2026|new\sfor\syour\s2026\sCoverage|BlueCross\s2026\supdate\sRe:\syour\sCoverage|BlueCross\sCoverage\supdate\sfor\s2026\snow\savailable|2026\sPlan\smodifications\,\sselect\soptions|2026\sCoverage\supdate\sRe\:Plan\sDetails|Plan\sfor\s2026:\sBlueCross\sbrings\syou\san\supdate|BlueCross\sRevisions\,\san\supdate\sto\syour\s2026\sPlan|BlueCross\shas\sthe\slatest\supdate\son\syour\s2026\sPlan|BlueCross\supdate:\s2026\scoverage\sdetails|Your\splan\sis\schanging\sis\s2026|BIueCross\x3A\sUpdate\son\syour\supcoming\s2026\sCoverage|BlueCross\:\sImportant\supdate\sfor\syour\s2026\sCoverage|Revisions\sfor\s2026\,\sFrom\sBIueCross\sBIueShield|BlueCross\shas\san\supdate\sregarding\syour\s2026\sCoverage|2026\scoverage\sand\spick\sup\syour\sMedicare\skit|2026 your pIan changes/m tflags __JR_BCBS_SUBJ_A multiple maxhits=3 header __JR_BCBS_SUBJ_B Subject =~ /(^|\b)(BIueCross|B[Il]ueSheId|ShieId|BIue|BlueCross)\b/ tflags __JR_BCBS_SUBJ_B multiple maxhits=3 header __JR_BCBS_SUBJ_C Subject =~ /Changing\s2026\sPlan\,\sReview\sAll\sOptions|Check\-out\syour\s2026\sCoverage\supdate\sby\sBIueCross|Your\supdated\scoverage\splan\sfor\s2026\sis\sready|An\supdate\sis\savailable\sfor\syour\s2026\scoverage\splan|Update\sto\syour\s2026\scoverage\splan\,\sreview\sthe\schanges|Your\sBlueCross\sCoverage\sfor\s2026\shas\sbeen\supdated|BlueCross\shas\san\supdate\sregarding\sCoverage\sfor\s2026|Heads\sUp\:\sYour\sHealth\sKit\sIs\sShipping\sToday|Changes\sto\syour\s2026\splan\s\-\syour\sfeedback\sis\sappreciated|Update\son\syour\shealth\skit\sshipment\sthis\sweekend|Your\smedical\skit\sis\snow\savailable|Your\sopen\senrollment\shealth\skit\sis\sbeing\smailed|Time\sto\sreview\syour\s2026\splan\soptions|Let\'s\sfinalize\syour\s2026\splan\stogether|Some\sadjustments\sto\syour\s2026\splan\sare\savailable|Update\sin\sprogress\sfor\syour\s2026\splan|Your\s2026\splan\sis\sundergoing\sa\smodification|select\syour\soptions\sfor\sthe\supdated\s2026\splan|your\spIan\sfor\s2026\schanges|View\syour\s2026\splan\soptions|2026\spIan|Review\splan\soptions\sfor\s2026\sand\sselect\schanges|pIan\schanges\sfor\s2026|Please\sreview\sYour\s2026\splan|review\syour\s2026\splan\sand\sselect\schanges|Your\spIan\sfor|Review\syour\s2026\splan\smodifications|Check\sYour\s2026\sPlan\,\sMake\sSelections\sNow|Review\s2026\'s\splan\sand\sopt\sfor\smodifications|Review\syour\sevolving\s2026\spIan\schoices|your\spIan\sfor\s2026|[cC]hanges\sto\syour\spIan|your\s2026\sBCBS\splan\schanges|your\spIan\schanges|your\sevolving\s2026\splan|pIan\s2026\schanging|BCBS\splan\smodifications|your\spIan\shas\schanges|your\s2026\spIan|your\spIan\sfor\s2026|2026\spIan|pIan\sModification|Check\syour\s2026\splan/m tflags __JR_BCBS_SUBJ_C multiple maxhits=3 meta JR_BCBS_SUBJECT ((__JR_BCBS_SUBJ_A + __JR_BCBS_SUBJ_B + __JR_BCBS_SUBJ_C) >= 1) describe JR_BCBS_SUBJECT NIL: Subject contains a BlueCross BlueShield spam element score JR_BCBS_SUBJECT 1.0 header JR_BCBS_SUBJ_LO Subject =~ /Your\sMedicare\sCoverage\sPlan\shas\san\supdate|Your\shealth\skit\sships\sthis\sweekend|Shipping\syour\swellness\skit\sthis\sweekend/m describe JR_BCBS_SUBJ_LO NIL: Message subject contains a BlueCross BlueShield spam phrase score JR_BCBS_SUBJ_LO 0.5 body __JR_BCBS_BODY_OBJ1 /(^|\b|\s)(?:BP\sCuff|First\sAid\sSupplies|Pill\sBox|Medical\sInformation\s(Organizer|Folder)|Hand\sSanitizer|(battery\-powered|forehead|oral|Digital)\sthermometer|blood\spressure\scuff|protective\sface\smasks|wound\scare\skit|bandages|gauze|antiseptic\swipes?|Compression\sbandages?|Automatic\sblood\spressure|Sanitizer\sBottles|first-aid\skit|Pulse\soximeter|Basic\sfirst[\s\-]aid|pressure\smonitor|Pain\srelief|relief\spatches|bandage\s(set|variety|assortment)|compression\swrap|Alcohol\sSwabs|Pain\sRelievers|elastic\swrap|fingertip\smonitor|Cold\scompress|Blood\spressure\smonitor|Medication\sOrganizer|Magnifying\sGlass|Pill\sSplitter|Compression\sSocks|Health\sJournal|Magnifying\sSheet|Pill\sCase|face\smasks|Pill\sOrganizer|First[\s\-]Aid\s(Guidebook|Instruction|manual|Guide|handbook)|Medical\stape|Disposable\sgloves|Pill\sDispenser|Sanitizer\sWipes|wound\scleanser|Medical\-grade\sscissors|Safety\sScissors|Medication\sSamples|(Medical|Nitrile|Exam)\sgloves|Alcohol\sprep|fabric\swrap|(hot\/cold|cold|gel)\spack|Elastic\sbandages?|Blood\spressure\smonitoring|Reusable\scold\s(pack|compress)|cold\sand\swarm\scompress|fabric\sface\scovering|Emergency\scontact\smagnet|prep\spads|first[\-\s]aid\stape|Non\-latex\sdisposable|Adhesive\sbandages?|first\-aid\sbandages?|small\sdressings?|Antibacterial\scleansing|cleansing\swipes?|Self\-adherent\swraps?|skin\scleaning|protective\scase|\(pair\spack\)|\(small\spack\)|Upper\-arm\scuff|Comfortable\ssupport|Pen\sand\snotepad|warm\scompress|Medical\sinformation\swallet\scard)(\W|$)/i tflags __JR_BCBS_BODY_OBJ1 nosubject multiple maxhits=10 meta T_JR_BCBS_BODY_OBJ (__JR_BCBS_BODY_OBJ1 >=8) describe T_JR_BCBS_BODY_OBJ NIL: BlueCoss/BlueShield object list detected body __JR_BCBS_BODY_BTN1 /(^|\b|\s)(?:View\sKit\sAvailability\s\+\sPlan|2026\sCoverage\s\+\sKit\sDetails|View\sKit\s\+\s2026|Medicare\skit\s\+\s2026\sCoverage|Coverage\sUpdate\s\+\sKit\sDetails|View\sYour\sKit\sContents\sand\sCoverage|Kit\s\&\s2026\sCoverage\sReport|Kit\sAvailability\s\+\sPlan\sDetails|Kit\s\+\sView\s2026\sPlan\sDetails|View\sYour\sKit\sPlan\sSummary|See\sKit\sContents|Explore\sKit\s\+\sCoverage\sOptions|View\sKit\s(and|\+)\sPlan\sDetails|View\sKit\s(\+|and)\s2026\sPlan\sDetails|Changes\sFor\s2026\s\&\sPlan\sReview\sOptions|2026\sPlan\sChanges\s\xE2\x86\x92|Access\sYour\sKit\sDetails|Access\sYour\sKit\sDetails\s\+\s2026\sCoverage|\+\s2026\sCoverage\sDetails|\+\s2026\sPlan\sSummary|View\sYour\sKit\s\+\sCare\sPlan|View\sKit\s\+\sPlan\sDetails|Included\s\+\sCoverage\sPlan\sChanges|View\sPackage\s\+\sPlan\sDetails|View\skit\sand\s2026\scoverage\sdetails|Your\s2026\sPlan\sOptions\s\xE2\x86\x92|2026\sPlan\sDetails\s\+\sKit|Seee\sKit\s\+\s2026\sCoverage\sChanegs|View\sUpcoming\s2026\sCoverage|View\sMedicare\sKit\s\&\s2026\sPlan\sSummary|Unlock\sYour\sHealth\sKit|View\sYour\s2026\sPlan\sChanges|Verify\sThe\sChanges\sTo\sYour\sPlan|View\sKit\s\&\s2026\sPlan\sDetails|View\skit\sinformation\sand\s2026\scoverage\soverview|Medicare\sKit\sPlan\sPreview|2026\sPlan\sUpdate\sand\sKit\sDistribution|Alongside\sYour\sKit\:\s2026\sPlan\sDetails|View\sKit\s\+\s2026\sPlan|View\sKit\s2026\sPlan|Access\sYour\sFree\sHealth\sKit|2026\splan\supdates\sand\syour\sMedicare\skit|your\s2026\splan\soverview\sand\sMedicare\skit|unlock\syour\scomplimentary\sHealth\sKit|What\'s\sIncluded\s\+\sCoverage\sPlan|(Access|View)\sYour\sKit\sDetails|View\sPackage\s\+\sCoverage\sInformation|Kit\sand\sCoverage\sDetails|Kit\s\+\s2026\sPlan|Plan\sRevisions\s\xE2\x9F\xA9|Kit\sDetails\s\xC2\xBB|View\sPlan\sChanges|Fit\sDetails\s\xE2\x86\x92|Coverage\sOptions\sFor\s2026\xE2\x9F\xA9|Select\sYour\sCoverage\sOptions|View\skit\sand\s2026\splan|Plan\sOptions\s\+\sKit\sDetails|2026\sPlan\sDetails\s\+\sKit|Kit\sInformation\s\xE2\x86\x92|View\s2026\sUpdates\sand\sKit\sInfo|View\sYour\sCoverage\sChanges|Your\sCoverage\sChanges\s\xC2\xBB|View\sKit\s\+\s2026\sCoverage|Access\sBCBS\sKit\sDetails|Select\sYour\sKit|View\sKit\s\+\s2026\splan|View\sKit\s\+\splan\sdetails|Kit\sand\s2026\sDetails|Access\sYour\sBCBS\sKit)(\W|$)/m tflags __JR_BCBS_BODY_BTN1 nosubject body __JR_BCBS_BODY_INC1 /(^|\b|\s)(?:What\s[Yy]our\s[Kk]it\s[Ii]ncludes|[Tt]he\skit\sincludes\svarious\smedical\ssupplies\sfor\shousehold\suse\.|selection\sof\shelpful\sitems\sis\savailable\sfor\syour\shousehold|See\swhat\xE2\x80\x99s\sincluded\sin\syour\sMedicare\sKit|following\sitems\sare\sincluded\sin\syour\sMedicare\sKit|What\sthis\sMedicare\sKit\sprovides|Supplies\sIncluded\sin\sYour\sKit|kit\sincludes\svarious\smedical\sitems\sto\ssupport\sroutine|See\swhat\sis\sincluded\sin\syour\skit|What\s[Yy]our\s[Kk]it\s[Cc]ontains|What\xE2\x80\x99s\sin\sYour\sKit|[Ee]ach\skit\scontains\sthe\sfollowing\smedical\ssupplies|What\xE2\x80\x99s\sincluded\sin\syour\spackage|What\xE2\x80\x99s\sinside\sthis\skit|Contents\sof\sYour\s(Medical)?\s?Kit|What\syou\xE2\x80\x99ll\sfind\sin\syour\skit|Medicare\sKit\sDetails|What\syou\'ll\sfind\sinside\syour\skit|WHAT\sYOUR\sKIT\sINCLUDES|What\syou\xE2\x80\x99ll\sfind\sin\sthe\skit|Your\sBlueCross\sBlueShield\sMedicare\sKit|In\syour\sMedicare\sKit|What\xE2\x80\x99s\sincluded\sin\syour\skit|What\scomes\sin\syour\sMedicare\skit|See\swhat\xE2\x80\x99s\sincluded\sin\syour\skit|What\swe\xE2\x80\x99re\ssending\sand\swhy|What\syou\xE2\x80\x99ll\sreceive\sin\sthe\skit|Included\sin\syour\scomplimentary\skit|Kit\s(contents|inventory)\s\((assorted|essential)\smedical\s(supplies|items)\)|What\syou\xE2\x80\x99ll\sreceive\swith\sthe\skit|Comes\sWith\sAll\sRequired\sItems|Kit\sContents\sOverview|Includes\sEverything\sYou\sNeed|In\syour\skit\:\ssupplies\slist)(\W|$)/m tflags __JR_BCBS_BODY_INC1 nosubject body __JR_BCBS_BODY_LMT1 /(^|\b|\s)(?:One\skit\sis\savailable\sper\shousehold|(quantity\sof\skits\sis|Quantities\aare)\sdetermined\sby\s(the\s)?(current\s)?program\sallocation|Your\sArea\'s\sMedicare\sKit\sAllocation|([Pp]rovided|[Oo]ffered)\s(at\sno|without\sa)\s(cost|charge)\sto\s(residents|households)\sin\s(the|your)\s(area|locality|vicinity)|\xE2\x80\x94\sone\sper\shousehold|[Pp]lease\srespond\sbefore\stomorrow\sto\ssecure\syour\skit|restricted\sto\sone\sper\shousehold|receive\sone\sMedicare\sKit\sper\shousehold|([Tt]his|[Tt]he)\sprogram\sends\sTomorrow|[Tt]otal\sallocation(\:|\sis)\s800\skits|Program\sdetails:\sone\sper\shousehold|quantities\sare\sdetermined\sby\sthe\sprogram\sallocation|the\srequest\swindow\sends\sTomorrow|program\sallocation\sand\shousehold\seligibility\sverification|Offer\sends\sTomorrow|One\skit\sper\shousehold|Allocation\:\s800\skits|800\skits\stotal|limited\sprogram\sallotment|quantities\sare\sdetermined\sby\sprogram\sallocation|distributed\son\sa\sfirst\-served\sbasis|offer\sfor\sthe\sMedicare\skit\sends\stomorrow|total\sallocation\sof\s800\skits|Quantities\sare\sdetermined\sby\sprogram\sallocation|one\skit\sper\sresidence|by\send\sof\sday\stomorrow|window\scloses\stomorrow|The\sprogram\scloses\stomorrow\.|Allocation\:\s[2-9][0-9]{2}\skits)(\W|$)/m tflags __JR_BCBS_BODY_LMT1 nosubject body __JR_BCBS_BODY /(^|\b|\s)(?:(providing|offering)\sa\sMedicare\s(Package|Kit)\s(for|to)\sresidents|Your\sMedicare\sKit\sfrom\sBlueCross|medical\ssupplies\sprovided\sat\sno\scharge|Medicare\sKit\sProgram\sNotification|BlueShield\sis\sproviding\sa\sMedicare\skit\sto\syou|Medicare\sPackage\snow\sobtainable|Your\sMedicare\sKit\sis\sReady|Your\sMedicare\sSupport\sKit|Medicare\sKit\sat\sno\scharge|information\sregarding\soptional\splan\scoverage\sfor\s2026\swill\sbe\sincluded\sfor\syour\sreview|You\scan\sreceive\sa\sMedicare\sKit|Your\sMedicare\sKit\sfrom\sBlueCross|Your\sMedicare\skit\sis\savailable|Medicare\sKit\sfor\syour\shousehold|Medicare\sKit\sprovided\sat\sno\scharge|and\saccess\syour\sfree\sHealth\sKit|Health\sKit\sloaded\swith\suseful\sitems|\[CHAT\-INSERT\-HERE\]|enjoy\sa\sHealth\sKit|Medicare\sKit\sat\sno\scharge\sto\seligible\sresidents|Medicare\sKit\sis\sprovided\sat\sno\scharge\sthrough\sthe\sprogram|Alongside\syour\skit\,\syou\scan\sreview\sinformation\sabout\splan\scoverage\sadjustments\santicipated\sfor\s2026|Medicare\sKit\sAvailable\sin\sYour\sArea|Medicare\skit\sat\sno\scharge\sto\sresidents\snearby|Medicare\skit\savailable\sto\shouseholds|Update\sfrom\sBlueCross:\sYour\s2026\sCoverage|Medicare\s[Kk]it\savailable\s(to|for)\s(your|local)\shouseholds?|2026\sCoverage\supdates\sand\sa\skit|plan\scoverage\sfor\s2026\sis\savailable\salongside\sthe\skit|Medicare\skit\savailable\sin\syour\s(area|locality|vicinity|region|neighborhood)|2026\splan\supdate\sand\san\son\xE2\x80\x91home\skit|highlights\sand\sa\sMedicare\skit|view\sthe\supcoming\schanges\sfor\syour\s2026\sCoverage|Your\sHealth\sComes\sFirst|Your\s2026\sMedicare\sKit|Coverage\supdate\s\+\skit\savailability|coverage\supdates\sand\syour\sMedicare\sKit\snotice|new\soptions\sand\sa\sMedicare\sKit\sfor\syour\shousehold)(\W|$)/m tflags __JR_BCBS_BODY nosubject body __JR_BCBS_BODY1 /(^|\b|\s)(?:this\skit\sand\sis\sprovided\sat\sno\scharge\sto\shouseholds\sin\sthe\sarea\slisted|Medicare\sPackage\snow\saccessible\sin\syour\slocation|Medicare\sPackage\sfor\sresidents\sin\syour\svicinity|Access\sYour\sBCBS\sKit\sDetails|selection\sof\shelpful\ssupplies\sis\sreserved\sfor\syour\shousehold|Medicare\sKit\sat\sno\scharge\sto\sresidents\sin\syour\sarea|Medicare\sKit\savailable\s(for|to)\sresidents|[rR]esidents\sin\syour\sarea\scan\sreceive\sa\sMedicare\sKit|kit\sis\sprovided\sto\shelp\syou\sprepare\sfor\syour\sMedicare\sneeds|Medicare\sKit\sis\snow\savailable|[Rr]esidents\sin\syour\sarea\scan\sreceive\sa\sMedicare\sKit|A\sMedicare\sKit\sfrom\sBlueCross|Medicare\sKit\savailable\sto\sresidents|Medicare\skit\sis\savailable\sfor\syour\shousehold|Program\sDetails\:\sYou\scan\sreceive\sa\sMedicare\sKit|Medicare\sKit\sannouncement|questions\sabout\sthe\skit\scontents\sor\sthe\s2026\splan\sinformation\sincluded|Important\:\sYour\sMedicare\sKit\sis\savailable\sto\srequest|kit\sis\sprovided\sat\sno\scharge\sto\shouseholds|providing\sa\skit\sof\smedical\ssupplies\sat\sno\scharge|Medicare\sPackage\snow\saccessible\sin\syour\svicinity|BlueCross\sBlueShield|2026\splan\supdates\sand\sa\sMedicare\skit|2026\scoverage\supdates\sa\sMedicare\sKit\sInformation|Important\supdate\:\syour\s2026\splan\soverview\sand\sMedicare\skit|Review\syour\sCoverage\sChanges\sfor\s2026|How\sthe\skit\sand\s2026\scoverage\sdetails\swork\stogether|on\xE2\x80\x91home\skit\sfor\syour\shousehold|unlock\syour\scomplimentary\sHealth\sKit|Unlock\sYour\sHealth\sKit\sOn\sUs|send\syou\sa\sHealth\s\&\sWellness\sKit|Unlock\sYour\sComplimentary\sHealth\sKit|Your\s2026\sPlan\s\&\sKit\sInformation|coverage\supdate\sand\slocal\sMedicare\skit|Your\sCoverage\sPlan\s\xE2\x80\x94\sMedicare\sKit\sAvailable)(\W|$)/m tflags __JR_BCBS_BODY1 nosubject body __JR_BCBS_BODY2 /(^|\b|\s)(?:set\sof\shealth\ssupplies\sprovided\sat\sno\scharge\sto\seligible\sresidents|providing\sa\sMedicare\sKit\sfor\sresidents|Medicare\sKit\sAvailable\sin\sYour\sPlan|selection\sof\smedical\ssupplies\sis\sprovided\sat\sno\scharge|Medicare\sKit\sas\spart\sof\sa\scommunity\ssupport\seffort|Medicare\skit\sReady\sfor\syour\shousehold|kit\sand\sthe\saccompanying\soptional\s2026\splan\sinformation|Medicare\skit\swith\sessential\ssupplies\sis\sprovided\sat\sno\scharge|offering\sa\sMedicare\sKit\sas\spart\sof\sthis\s(program|initiative)|Medicare\sKit\sto\seligible\shouseholds|In\sconnection\swith\syour\sarea\,\sBlueCross|notice\sabout\san\simportant\shealth\skit\sdistribution|Medicare\sKit\sis\savailable\sto\sresidents|this\sMedicare\sKit\sto\ssupport\syour\shealth|selection\sof\smedical\ssupplies\sprovided\sat\sno\scharge|eligible\sto\sreceive\sone\sMedicare\sKit|Medicare\skit\sto\sresidents|sampler\sis\scovered\sby\sthe\sprogram\sfor\sthis\skit|program\supdate\sfor\sresidents\sin\syour\sarea|Medicare\skit\sas\spart\sof\sthis\sprogram|regarding\splan\schanges\sand\sa\smedical\skit|2026\splan\sinformation\sand\syour\slocal\sMedicare\skit|Medicare\skit\savailable\sto\seligible\shouseholds|with\sthe\skit\swe\sprovide\san\soverview\sof\soptional\s2026\splan\scoverage|plan\supdates\sand\sa\sMedicare\skit|2026\splan\sinformation\s\+\sMedicare\sKit|2026\splan\supdate\sand\sa\sMedicare\skit|2026\scoverage\supdates\s\+\sMedicare\skit|Medicare\sKit\sis\scomplimentary\sfor\squalifying\shouseholds|Medicare\sKit\snotice\sfor\sresidents\sin\syour\sarea|thoughtful\sset\sof\sessentials\sto\ssupport\syour\swell\-being|Your\s2026\sPlan\sInformation\s\&\sKit|2026\scoverage\supdate\sand\slocal\sMedicare\sKit|Coverage\sUpdates\s\&\sYour\sMedicare\sKit|Coverage\sUpdate\s\&\sMedicare\sKit)(\W|$)/m tflags __JR_BCBS_BODY2 nosubject body __JR_BCBS_BODY_LO1 /(^|\b|\s)(?:Thank\syou\sfor\s(reviewing|viewing|reading|noting)\sthis\s(message|update)\sfrom\sBlueCross\sBlueShield\.|We\svalue\s(clear\sinformation\sand\ssteady\sservice|your\sengagement|your\shealth\sjourney)\.|We\s(value|appreciate)\syour\sattention\sto\s(this\sinformation|your\shealth)|your\songoing\srelationship\swith\sour\sorganization|Your\sinput\shelps\sus\skeep\scommunity\sresources\sclear\sand\suseful\.|We\sappreciate\syour\sparticipation(\sin\sBlueCross\sBlueShield)?\.|Your\sperspective\shelps\sus\sshape\s(supportive\sresources|our\sservices)\.|Thank\syou\sfor\sbeing\sa\spart\sof\sour\scommunity\.|We\sare\shere\sto\ssupport\syour\shealth(\sjourney)?\.|We\sappreciate\syour\s(engagement|involvement|participation)\s(in|with)\s((the|this)\s)?(BlueCross\sBlueShield|BCBS)(\s(community|program))?\.|Your\sperspective\shelps\sus\sserve\sbetter\.|Thank\syou\sfor\sbeing\spart\sof\sthe\sBlueCross\sBlueShield\scommunity\.|Your\shealth\sjourney\smatters\sto\sus\.|(Thank\syou|Thanks)\sfor\staking\stime\sto\sreview\sthis\s(BlueCross\sBlueShield\s(update|message|(Medicare\sKit\s)?announcement|notice)|(message|notice|update)\sfrom\sBlueCross\sBlueShield)\.|Your\swell\-being\sis\sour\sfocus\.|Your\sinput\shelps\sus\skeep\scommunity\sresources\sclear\sand\suseful\.|We\svalue\sclear\sinformation\sand\ssteady\sservice\.|We\sappreciate\sthe\sopportunity\sto\ssupport\syour\sMedicare\splanning\.|Your\sperspective\shelps\sus\sserve\sour\scommunity\.|Your\sfeedback\sis\svaluable\sto\sus\.|Thank\syou\sfor\sbeing\spart\sof\sBlueCross\sBlueShield\.|Your\sperspective\shelps\sus\simprove\.|Thank\syou\sfor\syour\sattention|appreciate\syour\sparticipation\sin\scommunity\shealth\sefforts|Help\sus\sshape\sbetter\sservices\sat\sBlue\sCross\sBlue\sShield|Your\swell\-being\sis\sour\spriority\.|Your\sengagement\shelps\sus\simprove\sservices\.|We\sappreciate\syour\sparticipation\sin\sthe\sBlueCross\sBlueShield\scommunity|appreciate\syour\sparticipation\sin\sBlueCross\sBlueShield\sprograms|Your\sinput\shelps\sus\sserve\syou\sbetter|This\sis\sa\sservice\sannouncement\sfrom\sBlueCross\sBlueShield|Your\sperspective\shelps\sinform\sour\sservice\sapproach\.|Thank\syou\sfor\syour\smembership\swith\sBlueCross\sBlueShield|We\svalue\syour\spartnership\sin\shealth\.)(\W|$)/m tflags __JR_BCBS_BODY_LO1 nosubject body __JR_BCBS_BODY_LO2 /(^|\b|\s)(?:We\sappreciate\syour\sengagement\.|Thank\syou\sfor\strusting\sBlueCross\sBlueShield\.|We\sappreciate\sbeing\spart\sof\syour\scommunity\scare\sresources\.|We\sappreciate\syour\s(engagement|involvement|participation)\.|Thank\syou\sfor\sbeing\s(a\s)?part\sof\sthe\sBlueCross\sBlueShield\s(network|community)\.|Thank\syou\sfor\syour\s(continued\s)connection\s(to|with)\sBlueCross\sBlueShield\.|We\sare\sglad\sto\sprovide\sthis\sservice\.|Thanks\sfor\sbeing\spart\sof\sBlueCross\sBlueShield|Your\sinput\shelps\sus\sserve\sthe\scommunity|Your\sinput\shelps\sus\simprove\sour\sservices|Your\sinput\shelps\sus\skeep\s(communications|these\supdates)\sclear\sand\suseful|Your\sparticipation\shelps\sus\splan\sfor\sbetter\sservice\sin\s2026\.|This\smessage\sshares\sgeneral\sinformation\sand\sdoes\snot\sreplace\splan\sdocuments|We\sappreciate\syou\staking\sa\smoment\sto\sreview\sthe\skit\sdetails|Your\sfeedback\shelps\sus\simprove\sservice\sin\sthe\sneighborhood|Your\sparticipation\shelps\sus\splan\sfor\sbetter\sservice\sin\s2026|This\smessage\sis\sintended\sto\sshare\sMedicare\skit\sinformation\sfor\syour\sarea|Your\sfeedback\shelps\sus\simprove\show\swe\sserve\syou\.|Your\sinput\sallows\sus\sto\srefine\sthese\scommunications|Your\sinput\shelps\sus\skeep\sthese\supdates\sclear|BlueCross\sBlueShield\s\xE2\x80\x94\scommunity\sservices|Help\sus\sshape\sbetter\sservices\sat\sBlue\sCross\sBlue\sShield|Your\sinput\shelps\sus\simprove\sservices\.|We\slook\sforward\sto\scontinuing\sto\ssupport\syour\shealth\sjourney|Help\sus\sshape\sbetter\sservices\sat\sBlue\sCross\sBlue\sShield|We\sappreciate\sthe\sopportunity\sto\skeep\syou\sinformed\.)(\W|$)/m tflags __JR_BCBS_BODY_LO2 nosubject meta __JR_BCBS_BODY_LO (__JR_BCBS_BODY_LO1 || __JR_BCBS_BODY_LO2) meta JR_BCBS_SPAM ((__JR_BCBS_BODY + __JR_BCBS_BODY1 + __JR_BCBS_BODY2 + __JR_BCBS_BODY_LO + T_JR_BCBS_BODY_OBJ + __JR_BCBS_BODY_BTN1 + __JR_BCBS_BODY_INC1 + __JR_BCBS_BODY_LMT1 + __JR_BCBS_SUBJ_A + __JR_BCBS_SUBJ_B + JR_BCBS_SUBJ_LO + JR_BCBS_FROM_NAME + JR_BCBS_FROM_ADDR + __JR_BCBS_FROM_ADD_GEN + __JR_PISST_TLD) > 2) describe JR_BCBS_SPAM NIL: Email contains multiple BlueCross BlueShield spam markers score JR_BCBS_SPAM 5.0 ########################### ### COSTCO WHOLESALE ### ########################### header __JR_COSTCO_FROM_ADD1 From:addr =~ /^(cardc0stc0sp|cardc0stc0sp[0-9]{2}|costcogoto|cstcdepartmentchange|whoiesalebycstc|cstcmemberspeciai|membercstcspeciai|costcocard|costcotable|speciaicstcmember|costco[0-9]{2}|costcomember|c0stc0keurig[0-9]{2}|c0stc0|costccostcomember-routeomember|c0stc0t[0-9]|c0stc0keurig|c0stc0\-step|c0stc0specia|c0stc0-flow|c0stc0stag|c0stc0\-link|c0stc0ds|costcomember[0-9]{2}|c0stc0visi|c0stc0uy|keurigc0stc0|keurigc0stc0[0-9]{2}|costcopath|costcor[0-9]|costcokh|costcowholes[0-9]{2}|costcowholes|costco8o|costcobg|c0stc0ws|c0stc0flow|c0stc0a[0-9]|c0stc0next|c0stc0[0-9]u|c0stc0specia[0-9]{2}|c0stc0s[0-9]|costcovisi|c0stc0link|c0stc0en|c0stc0y[0-9]|c0stc0goto|c0stc0[0-9]{2}|c0stc0page|c0stc0ri|c0stc0step|c0stc0rout|c0stc0[0-9]o|c0stc0w[0-9]|c0stc0specia1[0-9]|c0stc0[0-9]w|c0stc0de|c0stc0path|yourc0stc0ke|yourc0stc0ke\-goto|c0stc0ep|c0stc00y|c0stc0pe|c0stc0ar|c0stc0nr|c0stc0hp|c0stc0et|c0stc0fq|c0stc0es|c0stc0qw|c0stc0xd|c0stc0xh|c0stc0ec|c0stc0lb|costco_warehouse|costcoz[0-9]|costcory|costcostep|costco2y|c0stc0tk|costco[0-9]a|costcodr|keurigcostco|costcokeurig[0-9]{2}|costconext|woodyshipcz\.name|costcorewards|costcogcard100|Costco\.?Voucher|Costco\*Shopper\*Feedback|costco[\-_\.](shoppers|success)\-.*|costco(warehousecard|warehouseclub|rewarddept)|report2026directory[0-9]{9}|costcostag|C0STC0SLUSHiSpeciaI|(keurigc0stc0|c0stc0|costco|memberupdate|costcomember|memberc0stc0|costcowholes|cardc0stc0sp|c0stc0cardpr|c0stc0specia|c0stc0cardsp|c0stc0carded|c0stc0accoun)\-?(goto|next|stage|flow|page|route|path|step|link|visit))\@/ header __JR_COSTCO_FROM_ADD2 From:addr =~ /^(costcomeatdeIivery|cstcspecialannouncements?|c0stc0cardme|C0STC0Release|C0STC0MemberReport|C0STC0WhoIesale|C0STC0SpeciaIs|C0STC0iCeamiSpeciaI|c0stc0coffee|C0STC0Announcement|C0STC0SpeciaI|C0STC0AppIianceSpeciaI|C0STC0KeurigExcIusive|C0STC0KeurigGiveway|C0STC0KeurigCoffee|C0STC0sKeurigSpeciaI|C0STC0MembershipStatus|CostcoNewSpecial|CostcoKeurig|ExcIusiveCostcoSpeciaI|C0STC0Member(Update|Status).*|myC0STC0(Membership|SpeciaI)|C0STC0SpeciaIMember|YourCostcoMembership|KeurigSpeciaI|MyC0STC0SpeciaI|C0STC0MemberUpdate|C0STC0MemberStatus|myC0STC0Membership|C0STC0Support|c0stc0member|C0STC0Connect|C0STC0Notice|C0STC0Zone|C0STC0NewUpdate|C0STC0Communication|C0STC0Memo|C0STC0HeIp|c0stc0ltd|C0STC0SpeciaIKeurig|costco(memberdeais|membersaver|memberbook)\-.*|techniqueeee?|serviiceee?|special\-flow|memberupdate[0-9]{2}|yourc0stc0up|memberc0stc0|C0STC0\sSLUSHi\sSpeciaI|C0STC0Perks?|EventatC0STC0|c0stc0f[0-9]|c0stc0n[0-9]|c0stc0mx|costcolink|c0stc0specia[0-9]{2}|c0stc0vouche[0-9]{2}|c0stc0accoun|c0stc0cardsp|c0stc0cardsp[0-9]{2}|c0stc0specca([0-9]{2})?|speciaicstcwhoiesaie|costco\+ninja|costco_meatdept|c0stc0carded|c0stc0cardin|costcoteamwh[0-9]{2}|costco_desserts|costco_ninja|thecstcspecial|cstcspecials?|specialcstcco|cstcinformation|warehouseofferscstc|specialscostco|meatpickscostco|hellocstc|specialatcstc|specialcstc|cocstcspecial|costcomemberselect|costcomemberupdate|costcospecialmember|savingscstc|boxcostcomeat|cstcprimemeatbox|costcomeatboxupdate|departmentcostco)\@/ header __JR_COSTCO_FROM_ADD3 From:addr =~ /^c0stc0.*\@/i meta JR_COSTCO_FROM_ADDR (__JR_COSTCO_FROM_ADD1 || __JR_COSTCO_FROM_ADD2 || __JR_COSTCO_FROM_ADD3) describe JR_COSTCO_FROM_ADDR NIL: From Address contains a Costco spam identifier score JR_COSTCO_FROM_ADDR 1.25 header __JR_COSTCO_FROM_ADD_GEN From:addr =~ /^(your|[Kk]eurig|keurighk|eurigrout|keurigqj|memberpage|techniquue|serviice|memberupdate|memberflow|costco|costcoig|costcodg|costcovj|costcoks|c0stc0k2|c0stc0h5|costco5n|c0stc0r0|c0stc021|costcoa4|costcovt|costcobe|costcoum|costcoey|costcoiv|costcoj1|costcoi7|c0stc0pq|c0stc0xk|c0stc0se|costcocm|costcofh|costcoxh|costcocv|c0stc0k0|costcouu|costcohn|costcoo6|costcoj3|costco2b|costco7o|costcozo|costco0h|costcogd|costcoli|costcor6|costcoi1|costcopg|c0stc05v|c0stc0ff|c0stc06k|c0stc09t|c0stc0o8|c0stc0p6|c0stc0ru|c0stc0e8|c0stc0ft|c0stc0zi|c0stc0yh|costcow0|costcoxn|costco0r|costco1j|costcoka|c0stc09j|costcoan|costcok1|c0stc0v0|c0stc0gi|c0stc0o5|c0stc0tj|c0stc0za|c0stc0sl|costcod9|cstcwarehouse|cstcmeatsspecial|updatedeptcstc|meatvaluecostco|cstcspeciaimeat|cstcmeatselection|cstcmeatcuts|cstcshopper|cstcmeatspecial|costcomeatselection|specialmeatfromcostco|yourcostcodept|speccostco|boxmeatcostco|costcovp|micostco|specialcstcmeat|cstcshop)\@/ header __JR_COSTCO_FROM_NAM1 From:name =~ /^(Costco[\s\.\-_]?Gift[\s\.\-_]?Card|Costco[\s\.\-_]?(stock[\s\.\-_]?up|Cash)|Costco[\s\.\-_]?Voucher|Costco\s(Giveaway|Rewards)|Enrollment\sUpdate|From[\s\.\-_]?Costco|costco[\s\.\-_]cashcard|Costco\sMember\sDept|COSTCO\s?Rewards?|Costco\sShopper\s(Gift\sOpportunity|Feedback)|Costco\sCM|CostcoMember(Book|Saver|DeaIs)|Costco_Opinion_Requested|FL\sCostco\sMember\sDept|Costco_Winner|C0STC0\sRelease|Costco_Surprise|Costco\sExpiration|Costco\sSummer\sTeam|Costco\sPrize\sGiveaway|Costco\sHQ|Costco\sDepartment|Costco\-Online\s?\.|Service\s?\-\s?Costco\s?\.|Costco\sLounge\sBeach|Extension\-costco\s\.|Costco[\s_\.\-]Extension\s?\.|Exc[Il]usive\sCostco\sSpeciaIs?|Costco\sNew\sSpecials?|C0STC0\sSpeciaI\sMember|C0STC0\sMember\s(Status|Update)|_COSTCO_|C0STC0\sSupport|C0STC0\sAnnouncement|C0STC0\sMember\sReport|C0STC0\s(Feedback|Connection|Member\sPerk|Member\-Only\sSpecial|Connect|Zone|Notification|Memo|Ltd\.|LTD|Communication|Ann?ouncement)|C0STC0\@.*|Special\sKeurig\sC0STC0|C0STC0[\s\-]SpeciaIs?|C0STC0\@([A-z\-_0-9\.]{2,40}\.)?[A-z\-_0-9\.]{2,40}\.[A-z]{2,8}\:.*|SpeciaI\sKeurig\sC0STC0|.*FromCostco.*|Specia[Il]\sC0STC0\sKeurig|C0STC0\sWhoIesale|Costco\sVoucher|C0STC0\siCeami\sSpeciaI|C0STC0\sKeurig\sSpeciaIs?|C0STC0\sKeurig\sCoffee|myC0STC0\s(Membership|SpeciaI)|Your\sCostco\sMembership|Keurig\sSpeciaIs?|WholesaleShopping\s\.|Extension\-costco\s\.|Costco\-Extension\s\.|ExcIusive\sCostco\sSpeciaI|myC0STC0\sMembership|C0STC0\sSupport|C0STC0\sMember\sPerk|C0STC0\sMember\-Only\sSpecials?|C0STC0\sConnect|C0STC0\sNotice|C0STC0\sZone|C0STC0\sCommunication|C0STC0\sMemo|C0STC0\sHeIp|C0STC0\sLTD|C0STC0[\s\-]SpeciaI|Keurig\sC0STC0\sSpecial|Keurig\sSpecial\sC0STC0|Member\sC0STC0\sUpdate|Your\sC0STC0\sUpdate|Member\sUpdate\sC0STC0|C0STC0\sPerks?|Event\sat\sC0STC0|Member\sC0STC0\sSpeciaI|SpeciaI\sC0STC0\sMember|SpeciaI\sC0STC0\sWhoIesaIe|The\sC0STC0\sSpecial|Warehouse\sOffers\sC0STC0|Specials\sCostco|Hello\sC0STC0|Special\sat\sC0STC0|Special\sC0STC0|Special\sC0STC0\sCo|Co\sC0STC0\sSpecial|Savings\sC0STC0)\"?$/ header __JR_COSTCO_FROM_NAM2 From:name =~ /\b(c0stc[O0]|WhoIesaIe)\b/i meta JR_COSTCO_FROM_NAME (__JR_COSTCO_FROM_NAM1 || __JR_COSTCO_FROM_NAM2) describe JR_COSTCO_FROM_NAME NIL: From Name contains a Costco spam element score JR_COSTCO_FROM_NAME 1.25 header __JR_COSTCO_FROM_GEN From:name =~ /^(Be\shonest|McCormick\-50\-Piece\s\.|New\sUpdate|member\sUpdates?|Announcement)\"?$/ header __JR_COSTCO_SUBJ Subject =~ /your\sCostco\scustomer\sfeedback\ssurvey|Final\snotice\sfor\sCostco\srewards|\$[0-9]{2,4}\sCostco\sGift\sreward|Congratulations\!\sA\sCostco\|?Rewards?\shas\sarrived\!|Costco\sreward\s\-\sOpen\simmediately|Survey\sfor\sa\s\$[0-9]{3}\sCostco\sReward|50\.00\ssent\sby\sCostco|50\sdols\savailable:\sfrom\sCostco|\$50\ssent\sby\sCostco\s\(about\sto\sexpire\)|Your\s[0-9]{2,3}\sfrom\sCostco|Get\sYour\sFREE\sCostco\sMembership|Costco\sMembership\sIs\sAwaiting\sActivation|Surprise\sFor\sCostco\sCustomers|Your\s[0-9]\sC0STCO|Costco\smembership\sfor\scontinued\sbenefits\.|\(for\sCostco\scustomers\sOnly\)|Our\sCostco\sSurvey\sZone|Your\sCostco\sNinja|reward\sto\srenew\syour\sCostco\smembership|Have\s\[[0-9]\]\sPending\sCostco\sOffer|You\sCan\sGet\s\$[0-9]{2,3}\sCostco\sRewards?|FREE\sDyson\sV15\sfrom\sCostco\sToday|Get\sa\sComplimentry\sMembership|Ninja\sCREAMi\slce\sCream\sMaker|K\-Elite\sMachine\splus\s12\-Month\sMembership|Special:\s(Keurig\sK\-Elite\sMachine|12\-Month\sMembership)|Membership\s\+\sKeurig\sK\-Elite|Keurig\sK\-Elite\sCoffee\sMachine\sfor\sYou|\bC0STC0\b|12\-Month\sMembership\sUpgrade|Costco\sSpecial\s\-\sHeres\s12\-Month\sMembership|PLUS\sthe\sKeurig\sK\-Elite|Free\sKeurig\sCoffee\sMaker|Ninja\sCREAMi\sIce\sCream\sMaker|Costco\sLounge\sBeach\sWagon|extend\syour\sCostco\smembership|Your\sCostco\sLoyalty\sMembership|Have\s\[1\]\sPending\sCostco\sOffer|Renew\syour\sCostco\smembership\sfor\scontinued\sbenefits|Unlock\syour\s\$100\sreward\sNow\!|Costco\sMcCormick\s50\sPiece\sSpices\sSet|Today:\sCompIimentary\sMembership\s(\+|and|PLUS)|Get\sYour\sCourtesy\sMembership\sNinja\s(SLUSHi|CREAMi)|Don\xE2\x80\x99t\sMiss\sToday\x3A\sComplimentary\sMembership|Ninja\s(SLUSHi|CREAMi)\sMaker|Today\sOnly:\sNinja\s(SLUSHi|CREAMi)|Today\s\-\sComplimentary\sMembership|Limited\sToday:\sComplimentary\sMembership|Free\sMembership\s\xE2\x80\x93\sToday\sOnly|Today\sOnly:\sGet\s(Your|a)\sComplimentary\sMembership|Complimentary\sMembership\sToday|Ice\sCream\sMaker\sIncluded|Last\sChance:\sComplimentary\sMembership|a\sKeurig\sK-Elite\sMachine|Costco\sSpeciaI:|C0STC0\sSpeciaI:|Membership\s\+\sa\sNinja\s(SLUSHi|CREAMi)|Costco\sSpecial\s\-\sYour\s12\-Month\sMembership|coffee\smaker\swith\syour\smembership|membership\sand\sa\scoffee\smachine|membership\sbundle\sfeatures\sa\scoffee\smachine|membership\spackage:\sincludes\sa\sKeurig\smachine|Updates\sto\syour\sC0STC0\smembership|An\supdate\son\syour\smembership\sbenefits|Costco\smembership\sis\sgetting\san\supdate|A\squick\supdate\son\syour\smembership|Membership\s\+\sKeurig\sK\-Cup|Complimentry\sMembership\sToday\sOnly|Meat\sBox\sSpeciaI|your\srecent\sC0STC0\sVisit|Recent\sC0STC0\sVisit|Special\sMeat\sBox\sfrom\sCOSTCO|COSTCO\sfor\smembers\s0nly/m tflags __JR_COSTCO_SUBJ multiple maxhits=3 body __JR_COSTCO_BODY /(^|\b|\s)(?:Ninja\sCREAMi\sIce\sCream\sMaker\sas\sour\sspecial\sthank\syou|fulfill\sour\sshort\ssurvey\sabout\syour\sexperience\swith\sCostco|complimentary\sNinja\sCREAMi\sIce\sCream\sMaker|CLAIM\sYOUR\sCOMPLIMENTARY\sMEMBERSHIP|MEMBERSHIP\sNINJA\sCREAMi|Your\sMembership\sBenefits\sRefresh|Begin\sthe\sMember\sQuestionnaire|share\syour\sopinions\sthrough\sa\sbrief\squestionnaire|Share\sYour\sFeedback\sReview\sBenefits|Your\sAnnual\sMembership\sUpdate|An\sUpdate\sfor\sValued\sCostco\sMembers|token\sof\sappreciation\sfor\sbeing\sa\svalued\sCostco\sMember|program\sis\sopen\sto\smembers\sin\sselected\sregions|12\-month\smembership\sat\szero\scost|Start\sYour\sParticipation|Your\sMembership\sBenefits\sUpdates?|Participate\sin\sthe\sQuestionnaire|12\-month\smembership\sterm\s\xE2\x80\x93\sprovided\sat\sno\scharge|An\sUpdate\sfor\sCostco\sMembers|Costco\sWholesale\sMember\sin\sa\sparticipating\sregion|\$[0-9]{2,3}\sCOSTCO\sGift\sCard\sOpportunity|Weekend\swishes\sfrom\sCostco|Costco\sMembers\sin\sparticipating\slocations|Redeem\syour\smembership\sterm\s\+\sKeurig\sCoffee\sMaker|Extend\sYour\sCostco\sLoyalty\sLoyalty|Costco\sLoyalty\sLoyalty\sProgram|Customer\sService\s\-\sCostco|Costco\sMcCormick\s50\sPiece\sSpices\sSet|with\s+Costco\sLounge\sBeach\sWagon|CIaim\sYour\s12\/month\sCourtesy\sMembership|Ninja\sCREAMi\s\xC2\xBB|Exclusive\sUpdate\sfor\sOur\sMembership\sCommunity|New\sOpportunity\sfor\sCostco\sMembers|Ninja\sCREAMi\sDessert\sMaker\s\xC2\xBB|gather\syour\sperspective\sabout\syour\svisit\sin\sreturn\sfor\sa\sspecial\sgesture|A\sTreat\sfor\sOur\sMembers|Join\sthe\sSurvey\s\xC2\xBB|Costco\sMember\sCare\sTeam|Hello\sValued\sCostco\sMember|Dear\sTrusted\sMember|The\sMembership\sServices\sTeam|Your\sCostco\sService\sTeam|A\sGift\sfor\sCostco\sMembers|CIaim\sYour\s12\-Month\sMembership|The\sCostco\sMember\sServices\sTeam|Exclusive\sOpportunity\sfor\sOur\sMembers|The\sMember\sCare\sTeam\sat\sCostco|Share\sYour\sThoughts\s\xC2\xBB|Claim\sYour\sAnnual\s\+\sNinja|Ninja\sCREAMi\sDessert\sMaker\s\xC2\xBB|The\sCostco\sGuest\sSupport\sCrew|A\sBonus\sfor\sCostco\sMembers|Complimentary\s1\-Year\sMembership|Redeem\sYour\sYear\s\+\sNinja\sCREAMi|The\sCostco\sMembership\sServices\sTeam|(Hi|Hello|Greetings)\sVa[Il]ued\sMember|An\sUpdate\sfor\sCostco\sMembers|Access\sYour\s12\-Months\s\+\sNinja\sCREAMi|Review\sMembership\sChanges\s\&\sPerks)(\W|$)/m tflags __JR_COSTCO_BODY nosubject multiple maxhits=3 body __JR_COSTCO_BODY1 /(^|\b|\s)(?:Exciting\sUpdate\sfor\sCostco\sShoppers\!|50\sdols\sfrom\sCostco|\(for\sCostco\scustomers\sOnly\)|Welcome\sto\sCostco\sReward\sPanel|eVouch\sat\sCostco|Go\sHere\sTo\sActivate\sYour\sCostco\sMembership|Costco\sis\sgiving\syou\sa\sFREE\s1\syear\smembership|dols\suse\snow\sat\sCostco|Survey\sfor\sa\s\$[0-9]{3}\sCostco\sReward|eM0ney\sfrom\sCostco|YOU\sCAN\sGET\sA\s\$\d{2,3}\sCostco\sGIFT\sCARD|Get\sYour\sCostco\sCashcard|Start\sTo\sGet\sYour\sMembership\sUpdate|Your\sCostco\sMember\sSupport\sTeam|Participate\sToday\s\xC2\xBB|An\sUpdate\sOn\sYour\sCostoco\sMembership|Ice\sCream\sMaker\s\xC2\xBB|A\sNotice\sfor\sCostco\sMembers|Dear\sLoyal\sMember|An\sAnnouncement\sfor\sCOSTCO\sMembers|A\sBulletin\sfor\sCoscto\sMembers|Join\sUs\sToday|A\sMessage\sfor\sCostco\sMembers|(Dear|Greetings)\sHonored\sMember|Dear\sValued\sSupporter|A\sNote\sfor\sCostco\sMembers|Engage\sNow|A\sNews\sUpdate\sfor\sCostco\sMembers|The\sCostco\sMembership\sServices\sGroup|Dear\sRespectable\sMember|A\sRevision\sfor\sCostco\sMembers|Participate\sToday|Complimentary\syearlong\sMembership|Ninja\sCREAMi\sIce\sImplement|Ninja\sCREAMi\sIce\sCream\sCreator|Free\sOne\-Year\sMembership|The\sCostco\sMember\sService\sUnit|A\sBriefing\sfor\sCostco\sMembers|Ninja\sCREAMi\sDessert\sMaker|Exciting\sNews\sfor\sOur\sMembers|The\sCostco\sMember\sSupport\sGroup|membership\sterm\s\+\sKeurig\sCoffee\sMaker|membership\sterm\sprovided\sat\sno\scharge|\*\*Keurig\sCoffee\sMaker\*\*|A\sKeurig\sCoffee\sMaker\sfor\sthe\sfirst|Keurig\sCoffee\sMaker\sand\sa\sno\-charge\smembership|Costco\sLoyalty\sMembership|Your\sMembership\sDetails\sAre\sUpdated|Share\sYour\sFeedback\sto\sParticipate|12\-Month\sMembership\s\+\sNinja|Membership\s\+\sNinja\sSLUSHi|Membership\sTerm\sProvided\sat\sno\scharge\sto\seligible\s(participants|members)|based\son\savailability\sand\smember\seligibility|Updates\sto\sYour\sMember\sExperience|Your\sCostco\sReward\sStatus|\$100\sCostco\sShop\sCard\salong\swith\sa\s12\-month\smembership|recover\s\$[0-9]{3}\sin\sCostco\sShop\sCard\srewards|Start\sYour\sParticipation|Your\sAnnual\sPerks\sAre\sUpdated|An\sUpdate\sfor\sCostco\sMembers|Important\sUpdate\sto\sYour\sCostco\sMember\sPerks|New\sMember\sBenefit\sIs\sNow\sReady\sfor\sYour\sReview)(\W|$)/m tflags __JR_COSTCO_BODY1 nosubject multiple maxhits=3 body __JR_COSTCO_BODY_LO /(^|\b|\s)(?:\xC2\xA9\s2025\sCostco\sWholesale\.\sAll\srights\sreserved.|Thank\syou\sfor\syour\stime\sand\scontinued\sparticipation\swith\sCostco\sWholesale\.|Costco\sMembers?\sin\s(a\s)?participating\slocations?|As\sa\sCostco\smember\sin\san\seligible\sarea|Thank\syou\sfor\syour\songoing\smembership\.|We\svalue\syour\sperspective\sas\swe\swork\sto\senhance\syour\sCostco\sexperience\.|\xC2\xA9\sCostco\sWholesale.\sAll\srights\sreserved.|Thank\syou\sfor\sbeing\sa\svalued\spart\sof\sCostco\.|We\sappreciate\syour\stime\sand\songoing\smembership\swith\sCostco\sWholesale\.|Thank\syou\sfor\sbeing\sa\sCostco\sMember\sand\sfor\sconsidering\sthis\srequest\sto\sshare\syour\sperspective|Thank\syou\sfor\schoosing\sCostco\.|We\sappreciate\syour\sinput\sand\scommitment\sto\sour\scommunity\.|2025\sWholesale\sInc\.|2025\sCostco\sWholesale\.|Hello\sValued\sCostco\sMember|Thank\syou\sfor\sbeing\spart\sof\sour\snetwork\.|We\sare\seager\sto\sassist\syou\son\syour\sfuture\svisit\sand\smore|We\sappreciate\syour\srole\sin\sour\snetwork\.|We\santicipate\shelping\syou\sduring\syour\supcoming\svisit|Thank\syou\sfor\sbeing\spart\sof\sour\suniverse\.|We\slook\sforward\sto\sengaging\swith\syou\son\syour\snext\svisit\sand\sfurther\.|receiving\sthis\snotice\sas\sa\sCostco\sWholesale\sMember\sin\sa\sparticipating\sregion|Costco\sMember\sin\sa\sparticipating\slocation|Thank\syou\sfor\syour\scontinued\smembership\.|We\sappreciate\syour\stime\sand\sperspective\.|Costco\sWholesale\sMember\sServices|This\sinvitation\sis\sextended\sto\sCostco\sMembers\sin\sparticipating\sregions|The\sCostco\sMembership\sTeam|We\svalue\syour\sperspective\sand\sthank\syou\sfor\syour\scontinued\smembership\.|Thank\syou\sfor\syour\scontinued\smembership\sand\svaluable\stime.|Costco\sWholesale\sMember\sServices|We\sappreciate\syour\stime\sand\syour\scontinued\smembership\swith\sCostco\sWholesale|Your\sfeedback\sis\sinstrumental\sin\sour\songoing\sefforts\sto\sserve\syou\sbetter|message\swas\ssent\sto\syou\sregarding\syour\sCostco\sWholesale\smembership|Costco\sWholesale\s\xC2\xA9\.\sAll\srights\sreserved\.|Your\sinsights\shelp\sshape\sthe\sCostco\smember\sexperience)(\W|$)/m tflags __JR_COSTCO_BODY_LO nosubject meta JR_COSTCO_SPAM ((__JR_COSTCO_BODY + __JR_COSTCO_BODY1 + __JR_COSTCO_BODY_LO + __JR_COSTCO_SUBJ + JR_COSTCO_FROM_NAME + __JR_COSTCO_FROM_GEN + JR_COSTCO_FROM_ADDR + __JR_COSTCO_FROM_ADD_GEN + __JR_PISST_TLD) > 2) describe JR_COSTCO_SPAM NIL: Email contains multiple Costco campaign markers score JR_COSTCO_SPAM 5.0 ################## ### MARRIOTT ### ################## header JR_MARRIOTT_FROM_ADDR From:addr =~ /^(hellomarriot|welcomemarri|warmwelcomemarriot|welcomeaboardmarriot|welcomingyoumarriot|hellofrommarriot|withmarriott|greetingsmarriot|welcomebackmarriot|welcometomarriott?|rewardsteammarriott|welcomemarriott|meetmarriotconcierge|welcomeatmarriot|himarriot|marriotwarmwelcome|guestgreetingmarriot|marriotrewardswelcome|guestwelcomefrommarriott|bonvoyawelcomemarriot|tomarriotwelcome|guesthellomarriot|frommarriot|welcommarriot|guestwelcomemarriot|welcomeguest|welcometomarriot|welcomefrommarriott|welcomeguestmarriot|welcomemarriotvisitor|welcomemarriotguest|welcomemarriotmember|welcometoourmarriottnow|guestwelcomemarriott|hellomarriotguest|welcometomarriottguest|welcomemarriottraveler|YourMarriotWelcome|omahamarriot|HotelMarriottStay|join\-stage|TheMarriotHotel|HotelsfromMarriott|YourMarriottHotels|HotelsbyMarriott|yourmarriott|TheBestofMarriott|WelcomeToMarriottHoteIs|TheMarriott|TheMarriottHotels?|[Ww]elcome[Tt]o[Mm]arriott?|DiscoverMarriott|YourMarriott|MyMarriott|[Ww]elcometo[Mm]arriott[Hh]otels|hotelmarriot|hotelmarriot[0-9]{2}|yourmarriott[0-9]{2}|StaywithMarriott|StayatMarriott|CourtyardbyMarriott|HotelsbyMarriot|HotelMarriott|WelcomefromMarriot|StayMarriott|staymarriott|DiscoverMarriot|[Tt]he[Mm]arriot|themarriothotels|greetingstomarriot|welcometoourmarriot|hotelsmarriot|welcomemarriottteam|welcomemarriot|welcomefrommarriot|hellotomarriot|towelcomemarriot|hitomarriot|greetingsfrommarriot|youarewelcomedbymarriot|marriottmemb|marriottmemb[0-9]{2}|marriottteam|(marriott|hotelmarriot|marriottmemb|marriotthote|staymarriott)\-?(goto|next|stage|flow|page|route|path|step|link|visit))\@/ describe JR_MARRIOTT_FROM_ADDR NIL: From Address contains a Marriott spam identifier score JR_MARRIOTT_FROM_ADDR 1.5 header JR_MARRIOTT_FROM_ADDR1 From:addr =~ /^marriot(txx|hotels?|suites?|step|hospitality|welcomesyouhere|hostsyou|welcomesyousoon|welcomingyou|welcomesvisitor|welcomesfriends|resorts?|group|hotelshello|welcomesguests|sayshello|extendswelcome|greetsyou|greetings?|welcome|guesthello|welcomeseveryone|welcommessage|guestconcierge|welcomesyou|welcomesyouagain|welcomestravelers|welcomes|welcomemessage|hoteiswelcome|guestservice|note|hospitaiity|hotelint|hotelextends|t?corporationhotels|hotelsco|hotelsint|hoteigroup|hoteladventures|marriotwelcomesyoufriend|signature|hotelchains|guest|groupstays|hotelstays|rooms|hoteiwelcoming|hotelwelcome|propertiesco|stayservices?|inthotels?|inns|int|hoteis?|hotelsinte|hotelteam|worldwide|\.?am2az3be|guestwelcome|guestgreetings|newguest|visitorwelcome|helloguest|getaways?|3469027|7573786|memberwelcome|propertiesinc|hotelsresorts|resort|8370525|travels?|welcomeguest|updates?|bonvoywelcomes|intco|message|team|sayswelcome|invitesyou|awaitsyou|hello|awaits|greetsyou|sayswelcome|bnvstays|welcomeyou|hotei|saysw|inn|saysh)\@/i describe JR_MARRIOTT_FROM_ADDR1 NIL: From Address contains a Marriott spam identifier score JR_MARRIOTT_FROM_ADDR1 1.5 header JR_MARRIOTT_FROM_ADDR2 From:addr =~ /^[Mm]arriott(guesthello|hello?|travelerwelcome|warmwelcome|welcomesyoutoday|GuestServices?|Hote[Il]Stays?|guestwelcomeemail|Network|CourtesyWelcome|Courtesy|Signature|hote|visi|LuxuryHoteIs|HotelCorp|HotelSuites|IntHotel|Hotels|your|Co|InternationaI|HotelGroup|HotelChain|CourtesyStay|Comfort|Bonvoya|HotelResorts|next|Properties|Hospitality|HotelTeam|[Ss]tays?|Vacations?|Travels?|HotelServices?|GuestService|HoteIsChain|Lodging|CityHotels|HotelConnection|InternationaIGrou|HotelStays?|International|HotelNetwork|Accommodations?|HoteICo|bonv\-route|bonv\-link|reso|luxu|Center|bonv\-goto|Welcomes|bonv|StayAccommodations|InternationalHote|9d|HoteIs?|ThanksYou|HotelsSuites|HotelsResorts|Suite|HoteINetwork|Inn|rout|hote[0-9]{2}|mi|stay[0-9]{2}|bonv[0-9]{2}|stag|omah[0-9]{2}|hotelwelcomesyou|welcomesyou|hotelwelcome|welcomesguests|q0|guestwelcomenote|welcomeguest|trav|sendswelcome|welc|saysh)\@/ describe JR_MARRIOTT_FROM_ADDR2 NIL: From Address contains a Marriott spam identifier score JR_MARRIOTT_FROM_ADDR2 1.5 header __JR_MARRIOTT_FROM_ADD_GEN From:addr =~ /^(marriottpp|marriottvs|marriotttr|marriottvd|marriottls|marriottql|marriottvs|marriottft|marriott6a|marriottvr|marriottks|marriottgl|marriottcd|marriottsw|marriottj4|marriott1a|marriottxm|marriotttv|marriottyf|marriottbf|marriottj9|marriott3k|marriott[0-9]{2}|marriott3p|marriottjw|marriotto3|marriottva|marriottzk|marriott1r|marriottij|marriottq3|marriott3c|marriottwt|marriottv5|marriottt4|marriottrz|marriotthd|marriothotels?|marriott7s|marriottfy|marriottkt|marriott0k|marriottsg|marriottloya[0-9]{2}|welcomemarriotteam|welcomenewmarriot)\@/ header JR_MARRIOTT_FROM_NAME From:name =~ /^\"?(Marriott?\s(Hotels\sInt\.|Hotel\sStay|Hotel\sStay\sInfo|Hotel\sNetwork|Accommodations?|Stay\sAccommodations|International\sHotels|Lodging|City\sHotels|Hotels\sInte|Hospitality|Hotel\sTeam|Stays|Inns|Travels|Hotel\sServices?|International|Team|Hello)|Omaha\sMarriott\sHotel|Marriot[\-\s._](Winner|Shipment|Luxury)|Marriot[\-\s.]Luxury[\-\s.]Pillows[\-\s.]Surprise|Marriot[\-\s.]Luxury[\-\s.]Pillow[\-\s.]Set|.*\sSheet\sSet\s\-\sMarriott?|Hotel\sMarriott?\sStay|The\sMarriott?\sHotel|Marriot\sHoteI|Marriott\sInt\sHotel|Marriot\sSuites|Marriott\sHotel\sReservation|Marriot\sWinner|Marriot\sTravel|Marriot\sGetaways|Hotels\sfrom\sMarriott|Your\sMarriott\sHotels|Marriot\sShipment|Marriot\sLuxury\sPillows|Marriot\-Luxury\sPillow\sSet|Marriot_Luxury|Marriott\sInternational\sHotels|Marriot\sHotels\sInt\.|Marriot\sInt|Hotel\sMarriott\sStay|Marriot[\-\s.]Luxury[\-\s.]Pillows[\-\s.]Surprise|Marriott\sSuite|Marriott\sInn|Marriott\sHote[Il]\sNetwork|Marriott\sGuest\sService|Marriot\sHotels\sResorts|Marriott\sHote[Il]s\sChain|Hotels\sby\sMarriott|Marriott\sInternationaI|Marriott\sCourtesy|Marriott\sVacations?|Marriott\sNetwork|Marriott\sCourtesy\sWelcome|Marriott\sSignature|Marriott\sLuxury\sHoteIs|Marriott\sHotel\sChain|Marriott\sCourtesy\sStay|Marriott\sComfort|The\sBest\sof\sMarriott|Welcome\sTo\sMarriott\sHoteIs|The\sMarriott|Marriott\sHotels\sResorts|Marriott\sGuest\sServices|Marriott\sGuest\sServices|Marriott\sHoteI\s.*|Welcome\sTo\sMarriot|Discover\sMarriott|Marriott\sHotel\sResorts|The\sMarriott\sHotels|Your\sMarriott|MyMarriott|Marriott\sStay\sHotel|Welcome\sto\sMarriott\sHotels|Marriott\sBonvoy|Marriott\sHotel\sConnection|Stay\s(at|with)\sMarriott|Marriott\sThanks\sYou|Marriott\sHotels\sSuites|Marriot\sHotel\sAdventures|Courtyard\sby\sMarriott|Marriot\sHotel\sWelcome|Hotels\sby\sMarriot|Marriot\sHospitaIity|Marriot\sHotel\sExtends|Marriott\sCorporation\sHotels|Marriot\sHotels\sCo|Hotel\sMarriott|Welcome\sfrom\sMarriot|Marriott\sCenter|Marriot\sProperties\sCo\.?|Marriot\sStay\sServices?|Marriott\sWelcomes|Stay\sMarriott|Marriott\sBonvoya|Marriot\sProperties\sInc\.?|Marriot\sInt\.?\sHotels|Marriott\sHoteI\sCo\.?|Marriot\sHotel\sChains|Discover\sMarriot|Marriot\sGroup\sStays|Marriot\sRooms|Marriot\sHoteI\sWelcoming|Your\sMarriot\sWelcome|Marriot\sSignature|Welcome\sto\sMarriot|TheMarriot|Marriot\shotels|The\sMarriot\sHotels|[Mm]arriot\s[Gg]reetings|[Gg]reetings\s[Tt]o\s[Mm]arriot|[Ww]elcome\s[Tt]o\s[Oo]ur\s[Mm]marriot|Marriot\sGroup|Marriot\sHotels\sHello|Welcome\sMarriott\sTeam|Welcome\sMarriot|Marriot\sHoteIs\sWelcome|Marriot\sGuest\sConcierge|Hi\sTo\sMarriot|Marriot\sWelcome|Greetings\sFrom\sMarriot|Marriott\sStays|Marriot\sSays\sHello|Marriot\sExtends\sWelcome|Marriot\sGreets\sYou|Marriot\sGreetings|Marriott\sMember\sCare|Marriott\-Hotels?|Marriot\sWelcom(ing|es)\s.*|Welcom\sMarriot|Welcome\sMarriot\sVisitor|Marriot\sGuest\sHello|Welcome\sGuest\sMarriot|Marriot\sNote|Marriot\sGuestService|Hi\sMarriot|Welcome\sat\sMarriot|Hello\sMarriot|Hello\sFrom\sMarriot|Warm\sWelcome\sMarriot|Marriot\sGreetings?|Marriot\sWelcomes\sYou|Welcome\sAboard\sMarriot)\"?$/ describe JR_MARRIOTT_FROM_NAME NIL: From Name contains a Marriott spam element score JR_MARRIOTT_FROM_NAME 1.2 header __JR_MARRIOTT_SUBJ Subject =~ /(Luxury\sPillows\sReward|(A|Your)\sthank[\-\s]you\sgift\s(following|from)\s(a|your)\s(last|past|recent|memorable|previous)\s(stay\swith\sMarriott?|Marriott?\s(visit|stay|experience))|(From\s)?[Yy]our\sMarriott?\sstay(:\sA)?\sthank[\-\s]you\sgift|(A\s)?([Tt]hank[\-\s]you|An\sappreciation)(\sgift)?\s(from|after)\syour\s(past|recent|previous|earlier|last)\sMarriott?\s(stay|visit|experience)|Your\sthank\syou\sgift\sfrom\syour\sMarriott?\s(visit|stay|experience)|A\ssmall\sthank[\-\s]you\s(from|for|after|following)\syour\s(last|past|recent|previous)\sMarriott?\s(visit|stay|experience)|[Yy]our\s?(recent|past|previous|last)?\sMarriott?\s(visit|stay|experience)\scomes\swith\s(an\sappreciation|a\sthank[\-\s]you)\sgift|Here\'s\sa\slittle\ssomething\sto\ssay\sthanks\sfor\sstaying\swith\sus|Marriott\xE2\x80\x99s\sPillow\sSet|Marriot[\-\s._]Luxury[\-\s._]Pillows|Luxury\sPillows\s2\-Piece\sSet\sReward|about\syour\sMarriott\sLuxury\sPillows|Marriott\sHotel\smystery\sbox|Marriott\sHoteIs?|Courtesy\sPillow\sSet|with\sa\spersonalized\spillow|America\'s\s\#1\sPillow|Remember\syour\sMarriott\sstay|Marriott\sstay\sWe\shave\sa\sthank-you\sgift\sfor\syou|A\sspeciaI\sthank\syou\sfrom\syour\sPast\sMarriott\sstay|^Information\sregarding\syour\sstay|A\s(special\sthank[\-\s]you\sgift|Token\sof\sThanks)\sfrom\sYour\s(Last|Past|Recent|Latest)\sMarriott\s(Visit|Stay|Experience)|You\sStayed\swith\sMarriott\s\xE2\x80\x94\sA\sThank\sYou|Your\spast\sMarriott\sstay\sand\sa\sthank\syou\sgift\sawait|A\sthank[\-\s]you\stoken\sfrom\syour\s(previous|last|past|recent|latest)\sMarriott\s(stay|visit|experience)|Information\sabout\syour\sstay\stoday|get\sa\sMarriott\sHotel\smystery\sbox|token\sof\sappreciation\sfor\syour\s(past|latest|previous|recent)\sMarriott\s(stay|visit)|(courtesy|thank\-you)\s(present|gift)\s(following|from)\syour\s(recent|previous|prior|last|memorable|past)\sMarriott\sstay|gift\sfrom\syour\sMarriott\s(visit|stay)|Thanks\sfor\sstaying\swith\sMarriott|thoughtful\sthank\syou\sgift\sfrom\syour\sMarriott|Marriott\sstay\'s\sthank\syou\sgift|Marriott\sstay\scomes\swith\sa\sthank\-you\sgift|Thank\-you\sfor\syour\srecent\sMarriott\s(stay|visit|experience)|thank\syou\s(memento|recognition|gesture)\sfrom\syour\s(last|past|previous)\sMarriott\s(visit|stay)|thank\syou\sfor\syour\sMarriott\sstay\swith\sa\sgift|From\syour\s(previous|last|recent|past)\sMarriott\s(visit|stay)\,\sa\s(thank\-you|(small\s)?gesture)|A\sthank[\-\s]you\sfrom\syour\s(past|recent|previous|earlier|last)\sMarriot\s(visit|stay)|your\sstay\swith\sMarriot|receive\sPillows\s\+\s2\sNight\sStay|Marriot\sIs\sSending\sYour\sPillows|Pillows\sSet\s\x2B\s2\sNight\sStay|thank\-you\snote\sand\sa\slittle\sgift\sfrom\sMarriott|We\sremember\syour\svisit\sto\sMarriott|Access\sPillow\sSet\s\+\sStay|We\senjoyed\shaving\syou\sat\sMarriott|Marriott\sstay:\swe\shave\sa\sthank\-you\s(gift\s)?for\syou|We\sappreciate\syour\sstay\s\-\sa\slittle\ssomething\sfor\syou|Remembering\syour\sstay\swith\sa\sthank\syou|A\stoken\sof\sappreciation\sfor\syour\srecent\sMarriott\svisit|A\ssmall\sthank\-you\sfor\syour\srecent\sMarriott\sstay|Details\sRegarding\sYour\sUpcoming\sStay|Confirm\sfor\sa\ssurprise\sinside|A\sgift\sfrom\sMarriott\sto\sthank\syou|Confirm\sfor\sa\ssurprise\sinside|thank\-you\sgift\safter\syour\sMarriott\sstay|A\sthank\-you\sfrom\sMarriott\sfor\syour\srecent\sstay|A\slittle\sthank\-you\sfor\syour\srecent\sMarriott\svisit|Confirm\sfor\sa\ssurprise\sinside|A\sgift\sto\sthank\syou\sfor\sstaying\sat\sMarriott|thoughtful\sfollow\-up\sto\syour\sMarriott\sstay|thank\-you\sfrom\syour\sPast\sMarriott\sstay|Thank\-You\sNote\sfor\sYour\sLast\sMarriot\sStay|Sending\sappreciation\sfor\syour\sMarriot\sstay|For\sYour\sMarriot\sStay\,\sa\sThank\-You|Gift\sof\sThanks\sfrom\sYour\sLast\sMarriott\sExperience|previous\sMarriott\sstay\sincludes\sa\sthank\-you\sgift|Appreciation\sToken\sFrom\sYour\sPrevious\sMarriott|Gift\sof\sappreciation\sfrom\syour\sMarriott\sexperience|grateful\sfor\syour\sprevious\sMarriot\sExperience|Your\sMarriott\sstay\sgift|Marriott\sstay\srewards\syou\swith\sa\sthank\-you\sgift|previous\sMarriott\sstay\sgets\sour\sthanks|What\sYour\sLast\sMarriott\sStay\sIncluded|Saying\sthanks\sfor\sthe\sMarriot\sStay|Marriot\sStay\sdetails\sare\sready\sto\sview)(\W|$)/m tflags __JR_MARRIOTT_SUBJ multiple maxhits=3 body __JR_MARRIOTT_BODY /(^|\b|\s)(?:Pillow\sSet\sand\sStay|Get\sYour\sPillows\s\+|Your\sPillow\sSet\s\+\sStay|thank\syou\sfrom\sMarriot\:\sreceive\sa\sluxury\scooling\spillow\sset|Participate\sto\sReceive\sPillows\s\+\s2\sNights\sStay|provide\sthat\s\xE2\x80\x9Cluxury\shotel\ssleep\xE2\x80\x9D\sat\shome|two\-pillow\sluxury\scooling\sset\sprovided\sat\sno\scharge|Get\sYour\sPillows\s\+\s2\sNights|Redeem\sYour\sPillows\s\+\s2\sNights|Participate\sTo\sGet\sYour\sPillows\s\+\s\(2\)\sNight\sStay|to\sreceive\sa\stwo\-pillow\sluxury\scooling\sset|View\sPillows\s\+\s2\sNight|Marriott\sLuxury\sPillows\s\(2\-piece\sset\)|Your\sMarriott\sPillow\sSet|ultra\-cozy\spillows\sguests\sappreciate\sin\sMarriott|eligible\sto\sreceive\sa\stwo\-pillow\sluxury\scooling\sset|Pillow\sSet\s\+\sStay\sNights|providing\sa\sluxury\scooling\spillow\sset\sat\sno\scharge|Marriott\xE2\x80\x99s\sluxurious\spillows|Enjoy\sYour\sMarriott\sLuxury\sPillow\sSet|A\sthank[\-\s]you\sfrom\sMarriot|thank\-you\sfrom\sMarriot\:\sreceive\sa\sluxury\scooling\spillow\sset|Pillow\sSet\s\+\sStay\sDetails|cooling\sset\sprovided\sat\sno\scharge\sto\shouseholds\sin\syour\sarea|from\sMarriot\:\sa\sluxury\scooling\spillow\sset|pleased\sto\soffer\syou\sa\s2\-pillow\sluxury\scooling\sset|ATTRIBUTES\sOF\sTHE\sCOOLING\sPILLOW\sCOLLECTION|providing\sa\sluxury\scooling\spillow\sset\,\swith\stwo\spillows\,\sat\sno\scharge\sto\syou|Attributes\sof\sthe\sCooling\sPillow\sSet|A\sthank\-you\sfrom\sMarriot:\spillows\sand\sa\sstay\son\sus|Marriott\xE2\x80\x99s\sluxurious\spillows|you\sstayed\sat\sa\sMarriot\sHotel\sor\sa\sMarriot\spartnered\shotel|small\sthank[\-\s]you\sfor\sstaying\swith\sMarriot\sin\sthe\spast\syear|Attributes\sof\sthe\sCooling\sPillows|Continue\sto\sPillow\sSet\sDetails|claim\sa\s2\-night\sstay\sat\sselect\slocations\sprovided\sat\sno\scharge|A\sthank\-you\sfrom\sMarriot\sfor\syour\srecent\s(visit|stay)|Pillow\sSet\sCharacteristics|Pillows\s\+\s2\sNight\sStay|(Recognition|Acknowledgment)\s(for|of)\sYour\s(Past|Last|Previous|Recent)\s(Visit|Stay)|Pilows\s\x2B\s2\sNight|Past\-year\sstay\sappreciation:\sshipping\srequest|quick\squestionnaire\sfor\syour\spillow\sshipment|The\snumber\sof\spillow\ssets\sis\sdetermined\sby\sthe\sprogram|Complete\sthe\squestionnaire\s\+\sclaim\spillows|pillows\s\+\s2\snights|A\sNote\son\sYour\sRecent\sVisit|Features\sof\sthe\sCooling\sPillow\sSet|Confirm\sYour\sPillow\sSet|claim\sa\stwo\-night\sstay\sat\sselect\slocations|Redeem\sYour\sPillows\s\+\s2\sNightsAcknowledging\sYour\sRecent\sVisit|Your\sMarriott\sstay\sgift\sis\swaiting|Details\son\sthe\sCooling\sPillow\sSet|Recognition\sfrom\sMarriot\sHotels|LIMITED\sCOMPLIMENTARY\sINVENTORY|What\xE2\x80\x99s\sincluded\swith\sthis\sMarriot\sstay\sfollow\xE2\x80\x91up|Claim\sYour\sMarriott\sPillows\sNow|special\spillow\sreward\sis\sone\sway\swe\sshow\sappreciation\sfor\sguests|Marriott\spillow\soffer\sinside\.|Claim\sYour\sComplimentary\sPillows|A\sGesture\sfor\sOur\sGuests|A\sstay\-following\supdate\sfor\srecent\sguests|Secure\sYour\sLuxury\sPillows|A\sstay\-based\sguest\snotice\sfor\syour\shousehold|Previous\sstay\sfollow\-up\sfor\srecent\sguests|What\sstands\sout\sabout\sthis\scooling\spillow\spair|Warm\sThank\sYou\sfor\sYour\sRecent\sStay|A\sQuiet\sThank\sYou\sfor\sStaying\sWith\sUs)(\W|$)/m tflags __JR_MARRIOTT_BODY nosubject multiple maxhits=3 body __JR_MARRIOTT_BODY1 /(^|\b|\s)(?:A\sthank\-you\sfrom\sMarriot\sfor\sstaying\swith\sus|one\spillow\sset\sper\shousehold|Claim\sYour\sPillows\s\+\s2\sNights|your\sstay\sat\sa\sMarriot\sor\spartner\shotel\swithin\sthe\spast\syear\squalifies\syou|Recognizing\sYour\sRecent\sVisit|Appreciation\sfor\sYour\s(Last|Previous|Recent|Past)\s(Visit|Stay)|noted\syour\svisit\sto\sa\sMarriot\sor\spartner\shotel|Sweepstakes\sMarriot\sLuxury\sPillows\sentry|Hotel\sStay\sAppreciation\sfrom\sMarriott?|because\syou\sstayed\swith\sus\sor\sa\spartner\shotel|[Bb]ecause\syou\sstayed\sat\sa\sMarriott\sHotel\sor\spartner\shotel|stayed\sat\sa\sMarriot\sor\spartner\shotel\sin\sthe\slast\stwelve\smonths|receive\sa\stwo\-piece\sluxury\scooling\spillow\sset|2\-pillow\sluxury\scooling\sset|A\sthank\-you\sfrom\sMarriot\sHotels\sfor\sguests\swho\sstayed|you\swill\snot\sbe\sbilled\sfor\sthe\spillows\sor\sthe\squalifying\sstay\snights|pillows\sand\sa\sstay\sto\ssay\sthanks|two\-pillow\sset\sis\savailable\sfor\sthe\sfirst|Arrange\sfor\sYour\sPillow\sSet|2\-night\sstay\sat\sselect\slocations|gesture\sof\sthanks\sfor\sstaying\sat\sa\sMarriott\sHotel|Participate\sto\sReceive\sYour\sPillows|A\sNote\sfor\sOur\sRecent\sGuests|Arrange\sfor\sYour\sPillow\sSet\sStay|A\sGesture\sof\sOur\sAppreciation|your\stravels\sincluded\sa\sMarriott\sor\spartner\shotel\swithin\sthe\slast\syear|luxury\scooling\spillows\sat\sno\scharge|set\sof\stwo\sluxury\scooling\spillows|Features\sof\sthe\sCooling\sPillow\s(Kit|Set|Pack)|pillow\sset\sis\soffered\sto\spast\sguests|Luxury\sCooling\sPillows|not\sbe\sbilled\sfor\sthe\spillows\sor\sthe\squalifying\sstay|Attributes\sof\sthe\sluxury\scooling\spillow\sset\:|extended\sto\syou\sbased\son\syour\s(last|previous|recent|past)\s(visit|stay)|Redeem\sYour\sPillow\sSet|included\sa\s(visit|stay)\sat\sa\sMarriott\sor\spartner\shotel|View\sPillow\sSet\sStay|claim\sa\stwo\-night\sstay\sat\sselect\slocations|Pillow\sSet\sand\s2\-Night|View\sYour\sPillow\sSet|2\-Night\sStay\s\xC2\xBB|What\smakes\sluxury\scooling\spillows\sa\sgreat\schoice|Pillows\s\x2B\s2-Night\sStay\xC2\xBB\s|past\-year\sstay\squalifies\syou\sfor\sa\scooling\spillow|Past\-year\sstay\sappreciation\sannouncement|Past\-year\sstay\sappreciation\x3A\sshipping\srequest|Redeem\sYour\sPillow\sSet|included\sin\sthe\sluxury\scooling\spillow\sset|Past\-year\sstay\sappreciation|Pillow\sSet\s\+\sStay\sDetails|Acknowledgment\sof\sYour\sRecent\sVisit|because\syou\svisited\sa\sMarriott\-affiliated\sproperty|(you\sstayed|your\sstay)\sat\sa\sMarriot\s[Hh]otel\sor\s(a\spartner\s(property|hotel)|partnered\slocation)\swithin\sthe\spast\syear|Your\sPillows\sand\sStay|Arrange\sfor\sYour\sPillows|Review\sPillow\sSet\sand\sStay\sInformation|MARRIOTT\sSIGNATURE\sPILLOW\sCOLLECTION|complimentary\sset\sof\sour\sSignature\sMarriott\sLuxury\sPillows|questionnaire\s\+\spillow\sset|receive\sa\sset\sof\stwo\sluxury\scooling\spillows|Get\sthe\sMarriott\sPillow\sSet|Previous\sstay\supdate\sfor\seligible\sguests|What\sstands\sout\sabout\sthis\spillow\sset|invite\syou\sto\sexperience\sthe\srenowned\sMarriott\ssleep|What\sDefines\sthe\sMarriott\sExperience|comfort\sshipment\shas\sbeen\sset\saside|What\sMakes\sa\sLuxury\sCooling\sPillow\sWorth\sHaving)(\W|$)/m tflags __JR_MARRIOTT_BODY1 nosubject multiple maxhits=3 body __JR_MARRIOTT_BODY_LO /(^|\b|\s)(?:A\sGesture\sfor\sOur\sRecent\sGuests|We\sappreciate\syour\srecent\svisit\.|We\sappreciate\syour\sstay\sat\sa\sMarriott?\sHotel\.|Your\sfeedback\shelps\sus\senhance\sour\sservice\.|Thanks\sfor\sstaying\sat\sa\sMarriot\sHotel[\;\.]|We\svalue\syour\schoice\sto\sstay\swith\sus\.|Your\sfeedback\sis\simportant\sto\sus.|Thank\syou\sfor\schoosing\sMarriot\.|We\svalue\sthe\stime\syou\sspent\swith\sus\sand\swelcome\syour\sfeedback\.|appreciate\syour\schoice\sto\sstay\swith\sMarriott?\.|Thank\syou\sfor\schoosing\sMarriot\.|[Yy]our\s(perspective|insights?|feedback)\shelps?\sus\s(refine|enhance|improve)\s(the\s|our\s)?(hospitality|guest\sexperiences?|services)|Thank\syou\sfor\sbeing\sour\sguest\.|We\sappreciate\syour\stime\sand\sfeedback\.|Marriot\sHotels\s\xC2\xA9\s2023\.|Your\sfeedback\shelps\sshape\sfuture\sstays|We\svalue\syour\stime\swith\sMarriott?\sHotels|Thank\syou\sfor\schoosing\sMarriott?\sHotels\.|We\svalue\syour\sexperience\sand\sinput\.|Your\sfeedback\shelps\sus\simprove\sguest\sexperiences\.|Thank\syou\sfor\sstaying\swith\sMarriott?\sHotels[\;\.]|[Yy]our\sfeedback\shelps\sus\senhance\sguest\scomfort\.|HOTEL\sCOMFORT\sAT\sHOME|Travelers\sPrefer\sStaying\swith\sMarriott|[Oo]ur\steams\sfocus\son\sgenuine\shospitality|We\sappreciate\syour\svisit\.|Your\sexperience\shelps\sinform\sour\sservice\.|Your\sinput\sassists\sour\sservice\senhancements\.|We\svalue\syour\sstay\sat\sMarriott?\sHotels\.|We\svalue\syour\srecent\svisit\.|Sharing\syour\sperspective\shelps\sus\srefine\sthe\sexperience\sfor\sfuture\sguests\.|This\sis\sa\sservice\sacknowledgment\sfor\spast\sguests\.|We\sappreciate\syour\sstay\swith\sMarriot\sHotels|We\svalue\syour\s(last|past|previous)\svisit\.|Your\sperspective\shelps\sus\senhance\sthe\sexperience\sfor\sfuture\sguests\.|Your\sperspective\shelps\sus\srefine\sthe\sexperience\sfor\sfuture|We\svalue\syour\srecent\sstay\.|Hospitality\sAnnouncement|We\svalue\syour\sexperience\swith\sus\.|Thank\syou\sfor\schoosing\sMarriott?\.|Your\sinsights\shelp\sus\senhance\sguest\sexperiences\.|your\sexperience\sand\sfeedback\shelp\sguide\show\swe\srecognize\spast\-year\sguests|your\stime\swith\sus\shelps\sshape\sthe\sexperience\swe\sdeliver\.|your\sinput\shelps\sus\simprove\sthe\sguest\sexperience|We\svalue\syour\spatronage\sat\sMarriot\sHotels\.|Your\sinsights\scontribute\sto\sour\songoing\simprovements|We\svalue\syour\sexperience\swith\sMarriot\sHotels|we\sappreciate\syou\staking\sa\smoment\sto\scomplete\sthe\squestionnaire|We\svalue\syour\spast\sstay\.|Your\sinput\sassists\sour\songoing\senhancements|THE\sMARRIOTT\sDIFFERENCE|Why\sTravelers\sPrefer\sMarriott\sStays|The\sEssence\sof\sMarriott\sHospitality|To\sOur\sEsteemed\sMarriott\sGuest|Your\sperspective\shelps\sus\senhance\sthe\sexperience\sfor\sall\sguests|bring\sthe\sMarriott\ssanctuary\sinto\syour\sbedroom)(\W|$)/m tflags __JR_MARRIOTT_BODY_LO nosubject meta JR_MARRIOTT_SID ((__JR_MARRIOTT_BODY + __JR_MARRIOTT_BODY1 + __JR_MARRIOTT_BODY_LO + __JR_MARRIOTT_SUBJ + JR_MARRIOTT_FROM_NAME + JR_MARRIOTT_FROM_ADDR + JR_MARRIOTT_FROM_ADDR1 + JR_MARRIOTT_FROM_ADDR2 + __JR_MARRIOTT_FROM_ADD_GEN + __JR_PISST_TLD) > 2) describe JR_MARRIOTT_SID NIL: Email contains multiple Marriott spam markers score JR_MARRIOTT_SID 5.0 ###################### ### OMAHA STEAKS ### ###################### header JR_OMAHA_FROM_ADDR From:addr =~ /^(0maha(\-.*)?|0mahasteak.*|omahagoto|mahasteaks|omahasteakss[0-9]{2}|omahasteaksa|omahasteak[ps][escam][0-9]{2}|OmahaSteakSamplePack|0mahaSteakAssortmentPack|0mahaSteakSamples|OmahaSteaksSpecial|0mahaSteakCuts|OmahaSteaksOnline|OmahaSteaks|OmahaSteakOffer|VirmBhIi|omahasteaksc|omahaflow|0mahaSteakSamplePack|0mahaSteakSamplerBox|sampler\-path|sampler\-goto|0mahasteakss|0mahasteakss\-stage|0mahaSteakAnnouncement|0mahaSteakBund[Il]e|0mahaSteakSamp[Il]er?|0mahaSteaks|0mahaSteakSe[Il]ection|0mahaSteakFeasting|OmahasSteakSamp[Il]er|0mahaSteakSamp[Il]erSet|0mahaSteakSeries|0mahaSteakBund[Il]e|0mahaSteakSamp[Il]er|0mahaSteakAssortment|0mahaSteakTasting|0mahaSteaksCo[Il]{2}ection|steaksampler[0-9]{2}|steaksampler|steakflow|OmahaSteaksAlert|[O0]mahaSteak(Samples|Special|Alert|Medley)|omahasteaks96|0mahaSteakSamplerSet|OmahaSteakDelight|0mahaSteakCombo|0mahaSteakSampIeBox|omahasteakpath|steak0mahasa|0maha[\.\-_]?[Ss]teak.*|omahamx|omahasteakpa|omahapage|omahalink|omahavisi|steakomahasa|omahanext|omahapath|CourtesySteakSamp[Il]er|0mahaSteakVariety|omahabeefsam[0-9]{2}|omahasteakbo|0mahasampler[0-9]{2}|0mahasampler|0mahastag|sampleromaha|sampleromaha[0-9]{2}|omahasteakse|0mahastep|0mahaflow|omahasteaksn|omahasteaks|0mahapremium[0-9]{2}|steaksomahas?|steaksomahas?[0-9]{2}|omahasampler|omaharout|(steaksampler|[O0o]mahasteaks[esca]|omahastep|steak|[0o]maha|[Ss]ampler|omahasampler|sampleromaha|[0Oo]mahasteak[ps][escam]|omahasteakss)\-(goto|next|stage|flow|page|route|path|step|link|visit)|samplerfrommahasteak|steakmahasampler|mahabeefsampler|samplersteaksomaha|omahasteakchoices|samplermahasteak|omahassteaks|omahasteakassortment|mahasteakhouse|steakomahaspecial|mahasteakspecial|omahastealselection|steaksamplermaha|beefcutsmaha|steakspecialomaha|omahastealbites|samplersomahasteak|mahasamplersteak|stealomahasampier|omahasteakselection|omahasteakcuts|omahasteaksample|mahasteakbestcuts|omahasamplersteak|speciaiomahasteak|steakspecialmaha|steakcutsfrommaha|mahasteakprime|primespecialmaha|omahastealsampier|omahabeef|steaksmaha|omahastealvariety|omahasteakpack|mahasteakreserve|mahasteaksel?|stealsampler|omahasteakcu|omahasteakch|mahasteakopt|omahasteakta)\@/ describe JR_OMAHA_FROM_ADDR NIL: From Address contains an Omaha Steaks spam identifier score JR_OMAHA_FROM_ADDR 1.5 header __JR_OMAHA_FROM_ADD_GEN From:addr =~ /^(18SWnvcK|steakht|0mahakt|omahanv|omahael|omahad9|omahana|omahavi|omahak0|0mahaa1|0mahaop|0mahay4|0mahajx|omahazf|omahai0|0mahazb|0mahaxi|omahasi|omahaf8|omaha5w|omahaoh|mahasteaksampler|omahaspecialsteak|mahagrills)\@/ header JR_OMAHA_FROM_NAME From:name =~ /^\"?(Omaha\sSteakSampler|OmahaSteak\sSampler|Sample\sPack|0maha\-Steak\sAssortment\sPack|0maha\-Steak\sSamples|Omaha\sSteaks\sSpecial|0maha\-Steak\-Cuts|Omaha\sSteaks\sOnline|Your\sSteak_Source|Savory\sSampIes|DeIicious\sBy\sMaiI|0maha\sCuIsine|Premium\sSampIes|Omaha_Steaks\sFlash\!|Omaha\sSteaks\sPromotions|Omaha\sSteaks\sCustomer|0maha\-Steak\sSample\sPack|0maha\-Steak\sSampler\sBox|Sampler\sOmaha\sSteak|0mahaSteaks\sSampler|Your\sBonus\sfrom\sOmaha\sSteaks|0maha\sSteak\sAnnouncement|0maha\sSteak\sBundle|0maha\sSteak\sSe[Il]ection|0maha\sSteak\sSample|Omahas\sSteak\sSampIer|0maha\sSteak\sTasting|0maha\sSteak\sTasting|0maha\sSteaks\sCo[Il]{2}ection|0maha\sSteak\sAssortment|0maha[\.\-_\s]?[Ss]teak.*|Steak\sPromotion\sDetails|0maha\-Steak.*|.*0maha\-Steak|Courtesy\sSteak\sSamp[IL]er|0maha\sSteak\ssampler|Sampler\sfrom\s0maha\sSteak|OMAHA\.\sSteaks\sSurprise\sv6|0maha\sBeef\sSampler|0maha\s|Omaha\sSteaks\sSavings?|Omaha\sSteaks\sSelection|Omaha\sSteaks\sKit|Sampler\sSteaks\sOmaha|Sampler\s0maha\sSteak|Omahas\sSteaks|Omaha\sSteak\sAssortment|Omaha\sSpecial\sSteak|Steak\sOmaha\sSpecial|Omaha\sSampler\sSteak|Omaha\sSteal\sSampler|Steal\sSampler\sOmaha)\"?$/ describe JR_OMAHA_FROM_NAME NIL: From Name contains an Omaha Steaks spam element header __JR_OMAHA_SUBJ Subject =~ /Shipping\syour\sholiday\ssteak|Great\sSteaks\sSampler|Holiday\sSteak\sSampler\sSet|Holiday\sSteak\sCollection|[Ss]teak\s[Ss]ampler\s[Ss]ets?|Omaha\sSteaks\sSampler\sAwaits|Omaha\sSteaks\sSampler|\bComplimentry\b|\bCompIimentary\b|\bExcIusive\b|\bCoIIect\b|Steak\-Box\sis\sShipping\sToday|0maha[\s\-]Steaks|A\sSample\sGlFT\sNow|Giving\sYou\sa\sSteak\sSampler|0maha\-Steaks|Shipping\sToday:\sYour\sOmaha|Omaha\sSteak\-Box|Omaha\-Steaks\s(Gives\sYou|Is\sGiving\sYou)|Get\sA\sSteak\sSampler|On[Il]y\s5OO\sAvailable|500\sSteaks\sSamplers\sLeft|Just\s500\sSteak\sSamplers|Free\sGreat\sSteaks\sSampler|Steaks\sSampler\spreparing\sfor\sdelivery|Great\sSteaks\sSampler\sprize|Sampler\sis\sready\s\xE2\x80\x93\sshipment|Your\-Great\sSteaks|Sampler\sis\sbeing\spackaged\sfor\sdelivery|Steaks\sSampler\sconfirmed|Great\sSteaks\sSampler\sready|Omaha\sSteaks\s\-\sYour\sorder\shas\sbeen\sshipped\!|Limited\-Time\sOmaha\sSteaks\sOffer|Sampler\sis\sready\s\xE2\x80\x93\sshipment\sprocessing|Omaha\sSteaks:\sGreat\sSteaks|0maha[\.\-_\s]?[Ss]teak|\bVaIued\sOver\b|Great\sSteaks\sDeal\sIs\sHere|Complimentary\sSteak\sDeal|Get\sYour\sExclusive\sA\sSteak\sTreat|Complimentary\sSteak\sGlFT|Courtesy\sSteak|SampIer\sForm|Steak\sSelection\sfrom\sOmaha\sSteaks|Omaha\sSteaks\sRewards|Omaha\sSteaks\swith\sa\ssampler\soffer|^Your\sOmaha\sSteaks\ssampler|Steaks\ssampler\sis\snow\savailable|Steak\s0maha\sSampler|Omaha\sSteaks\ssampler\sawaits|Please\sconfirm\syour\sreciept\su\swon\sv6|about\syour\ssteak\ssampler|Steak\-?Box\sShips\sToday|Complimentary\sOmaha\sSteak\-?Box|^0maha[\s\-]Steak|You\'re\sHas\sBeen\sSelected|Steak\sSampIer|SampIer\sAwaits|Notification:\sReward\sID\s\#[A-Z]{3}\-[0-9]{6}\sis\sready|SampIer\sFr0m\s0maha|Grab\sY0ur\sSteak|0nIy\s5OO\sAvaiIabIe|T0day\s0nIy|0maha\sSteak\'s\sOffers|5OO\sRemaining\s\-\sToday\s0nly|0maha\sSteak\'s\sSteak\sSampler|0maha\sSteakhouse|0maha\sSteak\sSamplers|by\s0maha\-Steak\'s|0maha\-Steak\'s|Offers\sYou\sA\sSteak\sSampler|0maha\-Steak\'s|Yours\sToday\s0nIy|0maha\-Steak\'s|SampIers\sRemain/m tflags __JR_OMAHA_SUBJ multiple maxhits=3 body __JR_OMAHA_CLICK /(^|\b|\s)(?:Access\sYour\sSampler\sDetails|Click\sHere\sTo\sClaim\sYour|Secure\sYour\sExclusive\sBox\sToday|Claim\sYour\sSteak\sPackage|Claim\sYour\sExclusive\sSteak\sBox|Reserve\sMy\sOmaha\sSelection|Claim\sMy\sGourmet\sBox|Get\sIt\sNow\!|Claim\sYour\sSteak\sSampler|\bCIaim\b|\bExcIusive\b|Exclusive\sSample\sSelection|CompIimentary\sSampler|Your\sCompIimentary|CompIimentary\sOmaha\sSteaks|CompIimentary\sSteak|My\sCourtesy\sSteak\sSampler|Complementary\sPremium\sSteak\sSelection|See\sWhat\'s\sIncluded|Your\sSampler\sContents|See\sYour\sSampler\sContents|Get\sMy\sGourmet\sCollection|Steak\sBox\sContents|Your\sSteak\sBox\sFeatures|Steak\sBox\s\xE2\x86\x92|Claim\s[aA]\sPremium\sSteak\sExperience|Your\sSteak\sSampler\sContains|Omaha\sSelection\sSampler\s\xE2\x86\x92|Discover\sYour\sGourmet\sSampler|Book\sYour\sSteak\sCollection\sNow|Discover\sthe\sPerfect\sCrafted\sPackage|Our\sSpecial\sSteak\sCollection|Explore\sWhat\'s\sInside|Discover\sYour\sIncluded\sSteaks|Sampler\sNow\s\xE2\x86\x92|Steak\sSampler\sToday|CLAIM\sYOUR\sSTEAK\sBOX|Access\syour\ssampler|View\sSteak\sAssortment\sDetails|What\sYou\sCan\sExpect\sInside|See\swhat\xE2\x80\x99s\sincluded|Claim\sYour\sReward|See\s(what\sis|what\'s)\sincluded|View\syour\ssampler)(\W|$)/m tflags __JR_OMAHA_CLICK nosubject multiple maxhits=3 body __JR_OMAHA_BODY /(^|\b|\s)(?:Holiday\sSteak\sCollection\sFor\sYou|A\sPresent\sFrom\sOmaha\sSteaks|Holiday\sSteak\sSampler\sSet|Steak\sSampler\sSets\sare\sgiven\son\sa\sfirst\-come\,\sfirst\-served\sbasis|Great\sSteaks?\sSampler|few\squick\squestions\sregarding\syour\sexperience\swith\sOmaha\sSteaks.|Limited\-Time\sOmaha\sSteaks\sOffer|Holiday\sSteak\sCollection|You\scan\swin\san\sexclusive\sprize|Steak\sSampler\sSets|Omaha\sSteaks\sCountdown|\bCompIimentary\b|\bComplimentry\b|\bCoIIect\b|What\sOur\sWinners\sSay|]bCoIIect\b|Clover\sand\sCenterfull\sTeam|Collection\sof\sExquisite\,\sFlavorful\sSteaks|Omas\,\sPTR\sData\-Smith|Omaha\sSteaks\snever\sdisappoints|completely\sC0MPLIMENTARY|Discover\sa\sNew\sCulinary\sRealm|Sample\sSelection\sof\sSteaks|access\sto\s500\sgourmet\sbundles|Collection\sof\sPremium\sSteaks|Omaha\sSteaks\sExperience|Our\sSignature\sSteak\sMedley|Premium\sSteak\sSampler|Steak\sSampler\sComplimentary|Gourmet\sSteak\sCollection|Indulge\sin\sa\sComplimentary\sGourmet\sSteak|Exclusive\sSteak\sCollection|Omaha\sSteaks\soffers\s500\spremium\sboxes|Omaha\sSteaks\sSample\sBundle|Gourmet\sflavors\sdelivered\sto\syour\sdoor|get\sa\staste\sof\sgourmet\sexcellence\swithout\sbeing\sbilled\sfor\sthe\ssampler|these\sboxes\sare\sthoughtfully\scovered\sby\sour\sprogram|Omaha\sSteaks\sgourmet\ssampler\sat\sno\scharge|only\sone\ssampler\sis\savailable\sper\shousehold|A\sGourmet\sSampler\sfor\sYour\sTable|selection\sof\sour\sgourmet\ssampler\sboxes|sampler\sis\sprovided\sat\sno\scharge\sto\sparticipants|ANSWER\s\&\sWIN|A\sSPECIAL\sCHRISTMAS\sGIFT|answer\sa\sfew\squick\squestions\sregarding\syour\sexperience\swith\sOmaha\sSteaks|receive\sa\sGreat\sSteaks\sSampler|Exclusive\sSteak\sCollection\sOn\sUs|Premium\sSteak\sSampler\sComplimentary|Special\sSteak\sCollection\sAt\sNo\sCost|Omaha\sSteaks\sCountdown\!|115\sE\s23rd\sSt\sNew\sYork\,\sNY\,\sUS\s10010|Free\sSteak\sCollection|Bonus\sSteak\sPack\swith\sOmaha\sSteaks|Steak\sSampler\sComplimentary|name\swas\sselected\sfor\san\sOmaha\sSteaks\sreward|Sample\sBundle\sfrom\sOmaha\sSteaks|gourmet\ssteak\ssampler\sat\sno\scharge|Sampler\sProgram\sDetails|[0-9]{3}\sgourmet\ssteak\ssamplers\savailable|Invitation\sto\sExperience\sOmaha\sSteaks|\xF0\x9F\xA5\xA9\sOmaha\sSteaks\sSpecial|Limited\ssupply\s\xE2\x80\x94\sPremium\sSteak\sBox\sAvailable|A\sGourmet\sSampling\sOpportunity|considering\sthis\sgourmet\ssampling\sopportunity|Inside\sThe\sCurated\sSteak\sAssortment|Choose\sYour\sOmaha\sSteaks\sBox|What\sthis\sOmaha\sSteaks\sbox\sis\sbuilt\sfor|View\sOmaha\sSteaks\sTasting\sDetails|Omaha\sSteaks\ssampler\sdetails|complimentary\spremium\sOmaha\sSteaks\sreward|Special\sGourmet\sReward\sIs\sWaiting|The\sOmaha\sSteaks\sGourmet\sSampler|Gourmet\sSampler\sSelection|Gourmet\sSampler\sIs\sReserved\sfor\sYou|gourmet\ssampler\sboxes\sto\sprogram\sparticipants)(\W|$)/m tflags __JR_OMAHA_BODY nosubject multiple maxhits=3 body __JR_OMAHA_BODY_LO /(^|\b|\s)(?:Congratulations\!|distinct\sOmaha\sSteaks\sflavor\svisitors\sadore|We\svalue\syour\sfeedback\!|the\sOmaha\sSteaks\stotal\ssatisfaction\spromise|steaks\sare\smade\sto\sdelight|The\sOmaha\sSteaks\sQuality\sDifference|Your\sorder\sis\sprotected\sby\sour\stotal\ssatisfaction\spromise|commitment\sto\sexcellence\sand\scustomer\ssatisfaction|Omaha\sSteaks\shas\sbecome\sa\strusted\sname|Omaha\sSteaks\shas\sbeen\sdedicated\sto\sdelivering|Omaha\sSteaks\s\|\sBeyond\sOrdinary\s\|\s2024\s\xC2\xA9\s(Every\sright\sreserved|All\srights\sreserved)|Omaha\sSteaks\ssets\sthe\sstandard\sin\sexcellence|America\'s\sOriginal\sButcher|Omaha\sSteaks\sInternational\,\sInc\.|The\sOriginal\sAmerican\sButcher|America\'s\sHeritage\sButcher|Your\sinterest\smeans\sthe\sworld\sto\sus\.|Curated\sexcellence\sin\severy\scut|Thank\syou\sfor\sevaluating\sour\sexceptional\soffer.|We\sappreciate\syour\sinterest\sin\sOmaha\sSteaks.|Exceptional\scuts\,\sdelivered\sto\syour\skitchen|Curated\smeats\sfor\sdiscerning\spalates|We\sappreciate\syour\sconsideration\sof\sthis\soffering\.|Curated\sselections\sfor\syour\skitchen|Handcrafted\scuts\sfor\sdiscerning\stables|Unforgettable\sCulinary\sJourneys|Steak\sOffer\sNotification\sService|Handcrafted\squality\sfor\syour\stable|Hand\-Crafted\sSteaks\sFor\sThoughtful\sPartners|Thoughtfully\sprepared\sprotein\sfor\sat\-home\smeals\sand\sgatherings|Hand\-selected\scuts\,\sprepared\swith\scare|Hand\-chosen\scuts\,\saged\sand\sprepared\swith\scare|Thank\syou\sfor\sreviewing\sthis\soffering\sfrom\sOmaha\sSteaks|Hand\-selected\scuts\sdelivered\sto\syour\sdoor)(\W|$)/m tflags __JR_OMAHA_BODY nosubject meta JR_OMAHA_SPAM ((__JR_OMAHA_CLICK + __JR_OMAHA_BODY + __JR_OMAHA_BODY_LO + __JR_OMAHA_SUBJ + JR_OMAHA_FROM_NAME + __JR_OMAHA_FROM_ADD_GEN + JR_OMAHA_FROM_ADDR + __JR_PISST_TLD) > 2) describe JR_OMAHA_SPAM NIL: Email contains multiple Omaha Steaks campaign markers score JR_OMAHA_SPAM 5.0 ############################################ ### EMAIL USER-PARTS AND IMPROBABLE TLDs ### ############################################ header __JR_NILS_EUP From:addr =~ /^(cars|revolutions|test|testing|RuGirls|coatfloor|iminur|renttoown[0-9]{0,2}|Bureaucenter|psychology|dibzees|adtdealer|fixit|home\-pros|autonews|yourcredit|hiringnow|autoclearanceInvite|checker|freescore|supporting|NoPhoneBills?|fordclearance|desk\.admin|specialoffer|admin\.floor|matchsingles|earth4energy|FamilyEdu|MusicBullet|(noreplay|notification|live|microsoft)\-(live|microsoft|notification|windows)\.com|Anataflex|BestCigars|touchfire\-mobilities|SecretCrush|adidanos\.club|USAPharmacy\-FinalPrice|serviiiice|stechniquueeee|tsereviiice|supportt|atechnqiuue|techniquee|serviice|technqiue|sosupportt|techniqueeeeeee|serverice|vestechnique|serviiiice|serviiice|stechnqiue|vpwholesaleteam|wholesalemembers|wholesaledivisionvp|buybesttech|bestbuyhq|bestbuyvip|welcomefrombestbuy|kenteerviiice|technqiuee|suportt|supporttyy|courtesypack|C0STC0SpeciaIs|24x7Pharmacy\-FinalPrice|wholesalevp|C0STC0KeurigSpeciaI|costrade|KeurigSpeciaI|serviceexpir\-goto|C0STC0SpeciaI|wholesalecos|C0STC0SpeciaIKeurig|autoinsuranc\-route|speciaikeuri86|sampler\-goto|sampler\-path|tendo\-owner|specialc0stc11|courtesykitt77|supskdosoeeesdsd|bloodsugarfix|join\-stage|.*\sdusdbhheeeesdsdsd|.*\sxpsdsopeedddd|joints_healed|wetransfer\.sharedfiles\.support|besurewithth|membercarete|scanner\.invs\-payables|hellocstc|costcoquarter|specialcstc|clubsamsvp|samclubcrew|samsteam|bestbuyupdate|toolsharborfreight|toolsharbor|MemoryBoost|samscrew|samsciub|harborfreighttoolset|savingscstc|toolsharbor|freighttoolharbor|harbortool|harborfreightgear|mobileweekly\-path|tractor(suppl)?\-(route|flow|visit)|harborpowertools|xfinitypixelmax|netflixfirst|awelcomefromnetflix|netflixteam|netflixcommunications|netflixprime|premieresnetflix|besttechbuy|besttechvalue|aarpteam|aarpgroup|aarpvip|aarpwelcome|aarp\.do_not_mail|ssa\-noreply|grocer\.info|yeti\.auto\-response|wholesaiewar|greetingsfro|welcome\.mailbot|AmericanOnlineAlerts|vipbestbuy|supportteama|steakselecti|marriottrese|quickhellofr|lifelinenetw|lifelinenetw[0-9]{1,2}|lifeline\-visit)\@/ header __JR_NILS_EUP_A From:addr =~ /^(mylowesspeciaiinfo|mylowesspecial|mylowesspecialupdate|mylowesspeciai|lowesegospeciai|lowesspecialforyou|lowesegospeciaipromo|lowesegospecial|lowesegospecialoffer|egolowesupdate|lowesaccntpts|mylowesrewards?|lowesmypoints?|lowesstore|lowessayswelcome|vipmylowes|loweshardwarestore|lowestools|mylowesbalance|mylowesvip|lowessupply|loweshardware|mypointslowes|lowespointssummary|lowestoois|loweshello|lowesrewards?|loweswelcome|mylowespts|myloweselect|alertslowespotins|lowesrewardsmy|lowesnearme|ourlowes|toollowe|pointsmylowes|MyLowesSpeciaI|potinsfromlowes|lowespotin|loweshomemy|lowesmy|mylowesrewardpts|welcometolowesstore|lowesptsvip|lowespotinsupdate|mylowesmembers?|lowesweekly|mylowesstore|mylowesmemberplus|mylowes\.no\.reply\.alerts|mylowesvlp|mylowespoints?|lowes\.system|mylowescardm|mylowesmembe|LowesPtsSpeciaI|lowesaccount|yourlowes|mylowesloyal|lowes\.automated\-mail|mylowes\.reminder|loweshb|mylowespoints?|lowespotins|mylowes\.client|mylowes\.admin|lowespts|pointslowes|lowessupply|mylowesloyalmember|lowespointsmy|subscribermylowes|lowesvippts|myloweshub|greetingsfromlowes|lowesdepot|lowespremierpoints|mylowesassociate|mylowesmemberclub|welcomeaboardlowes|lowespointsvip|mylowescommunity|mylowesshopper|myrewardslowes|tooislowes|lowestool|mylowessubscriber|welcomefroml|pointsatlowe|membermylowe|yourlowesrew|lowesmyaccou|mylowesrewar|mylowescircl|mylowesupdat|lowesmember[a-z]|mylowesaccou|lowessayswel|lowesmemberp|lowespoints[a-z])\@/ header __JR_NILS_EUP_B From:addr =~ /^(biuecrossins|BlueCrossInsChange|bluecrosspage|bluecrossd5|bluecrossflow|bluecrossstag|bluecros\-step|bluecros\-goto|biuecrossrout|biuecrosscov|biuecross|BlueCrossSummary|BlueCrossInsDetaiIs|BIueCrossInslnsights|biuecross|BlueCrossIns|BlueCrossDetaiIs|BlueCrossOfMCT|bluecrosspla23|BlueCrossDetaiIs|BIueCrossInsBuIIetin|BIueCrossIns|BIueCrossInsReport|BIueCrossInsCoverage|BlueCrossInsNote|bluecrossrout|BIueCrossPolicy2026|BIueCrossCoverageChanges?|bluecrossflow|BlueCrossInsights|biuecrossgoto|biuecrossins29|IBIueCrossInsSupport|bluecrosswel|newtobiuecro)\@/ header __JR_NILS_EUP_C From:addr =~ /^(vipprobass|bassproteam|bassproshopswelcomesyou|welcomebassproshops|bassspecialpro|bassprovipelite|yetibasspro|bassproofficial|greetingsbassproshops?|probass|bassproshopswelcome|probassshops?|vipbasspro|bassprospecial|bassproelite|bassprooutdoors|thebasspro|bassproshopshello|bassprovip|bassprowelcomesyou|bassproyetiofficial|bassprospecial|yetibybasspro|bassproguide|welcomebassproshop|welcometobasspro|bassprooutdoors|bassproshop|bassproyeti|greetingsbassproshops|welcometobassproshops|hifrombassproshops|basselitepro|bassproaccess|bass\.help|bassproprior|bassprowelco|yetibassprof|bass\.email|bassprofamil|bassprosigna|bassproshops?|bass\.talk|basspro\.noreplies|bass\.hello|basspro\.news|bassprooutdo|bass\.bot|bassprospeci|hibassproshops|bassprooutfitters)\@/ header __JR_NILS_EUP_D From:addr =~ /^(serviceswaimart|walmartselect|cowaimart|pluswalmart|walmartcorp|walmartvalue|waimartmi|mywalmart|walmartspeciai|speciaiwalmart|walmartplusaccess|walmarthighlight|waimartgreetings|retailwaimart|walmartteams\-flow|waimartsupport|waimartmember|walmartplusbenefits|waimartcare|waimartkindness|serviceswalmart|walmartplus|waimartcompany|waimartrspdetails|walmartteam|waimartelite|walmartmembership|walmartpointrdps?|pointwalmartrdps?|waimartdesk|walmartservice|mswaimartonline|waimartassist|sdcwaimart|pointswalmart|waimartsdc|mywalmarthome|rspwalmartupdate|waimartspeciai|welcomewaimart|walmartfinds|walmartpartners|waimartms|walmartrewards|personalwalmartteam|walmartpersonal|walmartcompa|walmartpersonalaccount|walmartcompany|walmartplus\.?member|waimart\.?automated\-notice|waimartcs|walmartperso|walmart\.notifications?|waimarts\.delivery|walmartplusb|walmartspeci|waimartreply|walmart\.delivery\-notice|walmartservi|walmartco|walmartgroup|walmartindiv|waimartoffic|welcometowal|csfromwaimart|walmarttoday|waimarthi|waimartplus|waimartsuppo|walmartpicks?|walmartcusto|specialatwal|walmartnotic|walmartaccou|walmarthelp[a-z]|walmartplus[a-z]|waimartwelco|waimartvip|waimartco)\@/ header __JR_NILS_EUP_E From:addr =~ /^(MarriotHoteIGroup|MarriottHotelStay|MarriottInternational|marriott\-stage|MarriottHotelNetwork|MarriotHotelTeam|MarriottVacations?|MarriotInns|MarriottHotelCorp|MarriotInt|MarriotResort|MarriottLodging|MarriottCityHotels|MarriotHotelsInte|marriott\-link|omahamarriot|Hotel\sMarriott\sStay|MarriottStayAccommodations|MarriottInternationalHote|TheMarriotHotel|MarriottProperties|MarriotWorldwide|MarriottHospitality|MarriottHotelTeam|MarriottStays|MarriotHotelsInt|marriotthote79|MarriottAccommodations)\@/ header __JR_NILS_EUP_F From:addr =~ /^(welcomefromkroger|krogerteamwelcome|krogerpts|mykrogercard|krogerpoints?|krogeraccount|mykroger|krogerpage|yourkroger|krogerpointswelcome|krogerpick|vipatkroger|ptsmykroger|mkrogerpts|krogersayswelcome|vipkroger|welcometokroger|welcomekroger|krogervips?|krogergreetsyou|krogervipelite|krogerplusrewards|krogerfamily|welcomeaboardkroger|krogergreetingpoints|pointsfuelkroger|mykrogerstore|krogervipteam|krogerprime|pointsmykroger|krogersayshello|krogerpointswelcome|krogermystore|fuelkrogerpoints|krogerpointsmy|hellokrogerpoints|krogermember|krogerplus|hellokroger|krogerpremier?|krogerpreferred|krogerwelcomepoints?|krogerrewardswelcome|krogerwelcomesyou|mykrogerpoints|krogervip|krogerwelcomedpoints|krogeralerts?|krogermarket|krogervipmember|krogerstore|krogerwelcome|welcomekrogerpoints|krogervipaccess|mykrogerperks|krogerclubcard|krogervalue|cardkrogerplus|hellofromkroger|mykrogerpoint|krogerupdate|krogernewpoints|krogerinsider|greetingskroger|joinkrogervip|krogervipgroup|krogervipinsider|krogerclubvip|krogervipclub?|krogereliteclub|krogerpremiumclub|greetingsfromkroger|pluskrogercard|vipkrogerclub?|krogerclubelite|krogerpremierclub|krogermembers?club|krogerplusmembership|krogervipwelcome|krogervipfamily|krogervipcircle|krogersayshi|krogerclubmember|krogercorner|krgervipciub|krogerviphello|yourkrogerstore|krogerfriends|krogerpreferredclub|krogerelite|pluskroger|krogerdigitalhub|krogervipprogram|krogersdaily|krogersweekly|krogermemberclub|pointskrogerwelcome|krogerdine|krogervipsalutations|krogercst|krogerrewardcard|krogersgrocery|selectkroger|vlpkrger|krokerpointsdaily|krogerpluscard|krogerstarclub|krogerrepiy|yourfriendlykroger|krogervipcir|krogerdigita|krogerdi|kroger\.automated\-notice|kroger\.mailbot|krogers\.desk|krogerplusca|dikroger|krogeronline|onlinekroger|krogerecomme|krogerpicks|digitalkroge|krogervipmem|krogervipgro|difromkroger|krogerintell|krogervipfam|yourkrogervi|krogeroffers?|krogersavings?|krogerinside|krogerannoun|krogerdinews|krogervipacc|krogervipcor|yourkrogerdi|krogerdiline|dailykrogeri|joinkrogervi|krogervipsta|krogersaving|dikrogers|krogerviproo|krogeredeals?|krogerdatain|krogerspecia|krogervipsel|krogerweekly|krogerdeals?d?|krogerviphub|mykrogerdigi|krogerdailyn?|krogerdiupdat?e?)\@/ header __JR_NILS_EUP_G From:addr =~ /^(fedexcourier|parcifedex|shipmentfedex|parcelfromfedex|fedexpackagestatus|fedexcenter|fedexsite|parcels?fedex|fedexparci|fedexdepot|deliveryfromfedex|fedexparcels?|fedexservice|fedexshipment|fedexhub|fedexlocation|fedexpackages?|fedexdeliveries|deliveryfedexparcels?|parcistatusfedex|fedexlocal|packagefromfedex|parcelfedex|fedexcustomer|fedexloc|fedexdelivery|fedexarrival|locationfedex|yourfedexparcel|fedexparceinotice|fedexnotice|fedexpackageupdate|yourfedexpackage|fedexlocale|customerfedex|fedexparc|fedexparcelinfo|fedexmail|localfedexlocation|packagefedex|fedex\.automated|fedexhc|fedexcustome|fedexspot|deliveryfedex|fedexpackagearrival|fedextracking|yourfedexdelivery|fedexupdate|fedexstore|fedexparcel)\@/ header __JR_NILS_EUP_H From:addr =~ /^(acehardwarevipmember|premieracehardware|acehardwaretool|acehelpfulhub|acetools|toolsace|ace\-step|acehardwares|vipacehardware|acehardwarevip|acehardwarewelcomesyou|hardwareaces|acehardwarepro|HardwareACETools|ACEToolsSeasonal|LocalACEHardware|ACEHardwaresTeam|primeacehardware|acetp|hardwarevisi|hardware\-goto|hardwarenext|hardwarekj|youarewelcomeace|acehelpfuispotthe|youwelcomeareace|welcometoace|acetoois|acetoolshardware|aceelite|acevipgroup|acehandtools|tooisace|welcomeyouareace|viphardwareace|youacearewelcome|acethehelpfuicenter|acewelcomeyou|youareacewelcome|aceyouarewelcome|youarewelcomedace|acesayshello|acehardwaretools|acehardwarevalued|acehardwaresupply|acehardwarewelcome|acehw|aceone|hardwareace|acehardwarestore|acetooishardware|acethehelpfu)\@/ header __JR_NILS_EUP_I From:addr =~ /^(steakmahaspe|omahastealsampler|cutsmahastea|0mahasteakss\-stage|omahaegoupdate|mahabeef|maha\.auto|omahasteakss|mahabeefcuts|steakselectionomaha|omahaspeciaisteak|mahasteakprime|steakselectionmaha|specialmahasteak|omahasamplersteal|mahasteakpack|sampleomahasteal|mahacutssteak|mahasteakspecial|mahasteakselection|steaksomaha|omahasteaksampler|steakcutsmaha|cutsmahasteak|mahasteakspec|mahasteakbox|omahasampiersteal|mahasteaksdirect|omahasteaksco|omahacutssteak|sampieromahasteal|omahasteakcuts|omahasamplerbundle|mahasteakchoice|mahasteak|steaksmaha)\@/ header __JR_NILS_EUP_J From:addr =~ /^(deltaskymiles?|yourdeltaskymiles|deltatravelmiles|deltarewards|skymilesbydelta|skymilesdelta|mydeltamiles|milesdelta|deltaairmiles?|delta\.auto_reply|deltaskymiies?|delta\.helpdesk|deltamembermiles|skymiles\.bulletin|skymiiesdeita|milesdeltask|deitaskymiie)\@/ header __JR_NILS_EUP_K From:addr =~ /^(cvs\.notifier|cvsextrapts|cvsphteam|cvs\.response|cvs\.no_response|cvsselect|transfercvs|todaycvsspec|switchtocvs|cvshighlight|cvsspecial|cvstransfers|cvspharmacy|cvspointplus|cvsneighborhoodpharmacy|cvsextracred|cvspointsextra|cvsextracare\.account|cvsneighborhood|cvsswitch|cvslocale|cvsrx|cvsgreeting|cvsgreetsyou|welcomefromcvs|cvscommunity|speciaicvs|cvsph|cvsupdate|transfertocvs|cvsscript|shiftcvs|cvsspecialchoice|cvspharm|cvsscripttransfer|cvsarea|welcometocvs|specialcvs|extrapointscvs|cvshub|yourcvsspecial|cvschange|carecvs|cvsshop|relocationcvs|cvssayshello|cvsadditionalpts|neighborhoodcvs|cvslocal|yourcvstransfer|additionalcvspoints|extracvspoints|hellofromcvs|cvswelcomes?you|cvsspecialpick|welcomecvs|cvswelcome|cvsrelocate|uniquecvs|pharmacycvs|phcvs|cvsnote|cvsrewardpts|welcomeatcvs|cvstransfer|cvsneighborh|cvsspeciai|cvspts)\@/ header __JR_NILS_EUP_L From:addr =~ /^(verizonwelcomes|welcomefromverizon|verizonwelcomesall|hellofromverizon|verizonsaysgreetings|verizonyourwelcome|greetingsfromverizon|verizongreet|verizonextendswelcome|verizonwelcomesyou|verizongivingwelcome|verizonsayswelcome|yourverizonwelcome|verizonsendsgreetings|verizonsayshi|verizonsayshello|verizongreetsyou|verizoncordialwelcome|verizonwelcomenow|verizonsendswelcome|welcomeverizonsay|verizongreetings|verizonsayshey|awelcomefromverizon|verizongiveswelcome|welcomeverizonsays|verizonwarmlywelcomes|verizonpresentswelcome|welcomeverizon|verizonwisheswelcome|verizonwelcomemessage|warmwelcomeverizon|welcometoverizon|hifromverizon|verizonwelco|verizon\.noresponse|verizonsaysh|verizonbringswelcome)\@/ header __JR_NILS_EUP_M From:addr =~ /^(aaamembertea\-(goto|next|step|flow|visit)|aaa\-(goto|next|step|flow|visit)|AAACortesyRoadside|aaacustomers\-(goto|next|step|flow|visit)|roadside\.newsletter|aaacourtesyr|aaali|aaacourtesyb|tripleacourt|TripleACourtesyKit|roadsidecour|tripieakits|roadsidecourtesypack|tripleagoto|triplecourte|triplecourtevd)\@/ meta JR_NILS_IEUP1 (__JR_NILS_EUP || __JR_NILS_EUP_A || __JR_NILS_EUP_B || __JR_NILS_EUP_C || __JR_NILS_EUP_D || __JR_NILS_EUP_E || __JR_NILS_EUP_F || __JR_NILS_EUP_G || __JR_NILS_EUP_H || __JR_NILS_EUP_I || __JR_NILS_EUP_J || __JR_NILS_EUP_K || __JR_NILS_EUP_L || __JR_NILS_EUP_M) describe JR_NILS_IEUP1 NILS: Email User Part is frequently abused score JR_NILS_IEUP1 1.2 meta JR_NILS_IEUP_TLD (__JR_PISST_TLD && JR_NILS_IEUP1) score JR_NILS_IEUP_TLD 3.0 describe JR_NILS_IEUP_TLD NILS: Email User Part with an improbable Top-Level Domain