Hi, in this bitcoin spam email (https://pastebin.com/da6qgg83) __BITCOIN_ID rule does not trigger because the bitcoin address has been divided in two pieces; any idea for a regexp that will match this case as well ? Giovanni
signature.asc
Description: PGP signature