This rule detects inbound messages that reference the specific toll-free placeholders 1-800-555-0199 or 1-800-555-0299. The numbers are reserved for entertainment industry use and are commonly embedded in LLM-generated campaigns to legitimize outreach or seed spam. The detector inspects inbound content by evaluating either the current thread's text or the subject field with a case-insensitive regex that matches variations of the toll-free numbers, including optional country code prefixes and typical punctuation. If a match is found, the rule flags the message as low-severity Spam, identifying social engineering as the tactic and using content analysis as the detection method to scan message bodies and subjects for these patterns.