Sendgrid voicemail phish

type.inbound
and headers.return_path.domain.domain == 'sendgrid.net'
and (
  regex.icontains(strings.replace_confusables(subject.subject),
                  'v[o0][il1]cema[il1][li1]',
                  'v[o0][il1]ce message'
  )
  or any(ml.nlu_classifier(body.current_thread.text).topics,
         .name == "Voicemail Call and Missed Call Notifications"
         and .confidence == "high"
  )
)
and any(ml.nlu_classifier(body.current_thread.text).intents,
        .name not in ("benign")
)