Hi, The __PHISH_REPLY_E_OLD_292 catches "ad...@gmail.com", which apparently also includes "abcad...@gmail.com" and any other substring matches.
Feb 26 12:38:10.955 [29457] dbg: rules: ran header rule __PHISH_REPLY_E_OLD_292 ======> got hit: "ad...@gmail.com" This tacked on 6 pts creating an FP for me. I believe these are Justin's rules? Is there someone that can correct this for us? Thanks, Alex