false positive: change in whoisguard email address

[kristovatlas]

Example:

Registrant Street: P.O. BOX 0823-03411 Registrant City: PANAMA Registrant State/Province: PANAMA! Registrant Postal Code: Registrant Country: PA Registrant Phone: +507.8365503 Registrant Phone Ext: Registrant Fax: +51.17057182 Registrant Fax Ext:! Registrant Email: [uppercase hex string].PROTECT@WHOISGUARD.COM Registry Admin ID: Admin Name: WHOISGUARD PROTECTED Admin Organization: WHOISGUARD, INC. Admin Street: P.O. BOX 0823-03411 Admin City: PANAMA Admin State/Province: PANAMA! Admin Postal Code: Admin Country: PA Admin Phone: +507.8365503 Admin Phone Ext: Admin Fax: +51.17057182 Admin Fax Ext:! Admin Email: [uppercase hex string].PROTECT@WHOISGUARD.COM Registry Tech ID: Tech Name: WHOISGUARD PROTECTED Tech Organization: WHOISGUARD, INC. Tech Street: P.O. BOX 0823-03411 Tech City: PANAMA Tech State/Province: PANAMA! Tech Postal Code: Tech Country: PA Tech Phone: +507.8365503 Tech Phone Ext: Tech Fax: +51.17057182 Tech Fax Ext: ! Tech Email: [uppercase hex string].PROTECT@WHOISGUARD.COM Name Server: BETH.NS.CLOUDFLARE.COM Name Server: JAY.NS.CLOUDFLARE.COM DNSSEC: unSigned

[kristovatlas]

Could handle this by simply ignoring lines that contain [uppercase hex string].PROTECT@WHOISGUARD.COM

This email address seems to rotate specifically for WHOISGUARD