# 419 fraud spam reply-to addresses, generated at Fri Oct  4 18:56:19 2024

header REPTO_419_FRAUD_GM Reply-To:addr =~ /^(?=[^\s<>@]+\@gmail\.com)(?:(?:01marviswanczyk|1magnumsecuritiesllc|7912richardtony|9porssts9|a(?:\.wafager1|12udubello|b(?:d(?:97412345|u(?:kfahim|llahmundani019))|u(?:lkareem461|shadi0004))|c(?:count\.optionsmr\.jonasarmstrong|ecere001)|d(?:iallo\.boa|rabidiahmed)|gent\.laryedwad|isha(?:1976(?:algaddafi|gaddafi25)|gaddafi(?:aam|libya5|sdaughter))|l(?:\.jo60691737|a(?:n\.austin(?:041|223)|scramac)|ber\.yang222|ex(?:anderpeterson4499|hoffman3319)|ghafrij13|icedoris0000|kasimunadi221|l(?:enholden121|isoncluade11)|nizmaria|phabankofgreecerepublic|ure\.wawrenka1472)|m(?:b(?:\.w\.stuart\.symington|assadormarybethleonardl4)|ericadeliverycomapny1(?:300|800)|ina(?:ltwaijiri02|medjahed95))|n(?:d(?:rewumehunitedbankforafrica|yfox0022)|itaminarnguessan|n(?:a(?:choihkkic|llee091|sigurlaug458)|ettrevor|jenijohnsonn)|t(?:hony(?:alvaradollc|jblinken61)|o(?:meuenio|niopaco20consultant)))|office1office1|r(?:adka01|chibaldhamble|thur11alan)|s(?:h(?:0611jnag|westwood7)|sistance7agent)|t(?:mcarddepartment0024|tohlawoffice\.tg)|ustinbillmark9|w1614860|yevayawovi190|z(?:i(?:m(?:\.h(?:ashim\.premj|premji13)|hashim(?:2018|donation2019))|z(?:dake0|george50))|zedineguessous))|b(?:a(?:lla250abc|nk(?:centralasiahalobca34|ingcentralng)|ochang7a|r(?:bersmadar75|clays\.kenya\.bank|rister(?:\.fidelisokafor|clarkephillips(?:2(?:02|4)|4[59])|lordruben94)|teld\.huisman01)|uknechtk\.shoreline)|bongo593|c0996013|e(?:alitoniua9|linekra1|n(?:ezero392|gatl80|jaminsarah195)|rnard\.arnult01|tsyholden940)|i(?:anigercash|ll(?:\.lawrence0747|fhome))|laisevodoun|mw(?:automobile242|officeline)|o(?:arddept0|cchenyi|ussambairenepatricia)|r(?:a(?:ndy\.heavenscenttt|volpaul55)|endalaporte112)|uff(?:ettwarrene21|ookj)|w1832621)|c(?:1nicele|a(?:ixaseguros9810001|mluba2017|pinolly|r(?:eisu98|twrighttownhomesllc))|bnatm847|claimsa|e(?:da\.ogada77|li(?:cerez|neroullier(?:200|nm)))|h(?:a(?:ngching885|r(?:itylisajohnrobinson41|l(?:es(?:luenga01|wrightdepartments)|tonnewmanus1)))|e(?:mchung1011|nchung1011)|ienk(?:raymond|wongp))|iticonsultantjohncg0|kruger00017|l(?:a(?:im(?:adviser11|officeadm)|xtonpaul00)|s79408)|o(?:l(?:\.(?:ahmedmarani|hmedismari)|abdullahassi|edavid77032|husseinharmuchc(?:cj|j)|ombasjuan53)|mp(?:asationsettlement|ensationcommitteboard)|n(?:nellyfrances\.cf|sult(?:matthias|sto\.u)|tactad00[04])|operation612)|pt\.eugenebarash|r(?:a(?:bbechambers|wfordgillies1)|ist(?:bru(?:05|n05)|davis67|i1537bru|ydavis(?:donation1|foundation0101)))|u(?:nninghammrssharonloren|stomerservicelacaixa2))|d(?:29laws|a(?:n(?:008629|i(?:el35508109|shlokija)|n(?:uar4|ydan24532))|tukannuarbinmusa|vi(?:d(?:\.loanfirm18|ibe718|kaltschmidtmaureend|larbi11|pere337|r(?:amirez\.luis9012|ikhen))|scarolyn334|yax98))|cole77032|e(?:btm123|n(?:iwalts|nis(?:clark659|quaid888))|partmentofstate(?:123|321)|tlefeckhardd)|h(?:ill27676|lexpresscompany176|sdevice)|i(?:ane\.s\.wojcicki|gitalassetholding|p(?:francis1|lomatsshenry))|minique200|o(?:minicahkye|na(?:ldwilliam1988|tionhelpercare5))|r(?:\.(?:meirh|wilsonpaul02)|abodid|davidrhama221|j(?:amesdee|oesimon77)|kennedyuzo|meier\.heidi?|owenfrederick|rhamahassan22)|u(?:a1155a|breuilgmbh|nsilva58|stinmoskovitz\.2facebook)|v\.metus|willslevens)|e(?:benezero392|christina937|d(?:mundventura689|runity)|fcc\.financial\.dept|l(?:i(?:bethgomez(?:175|499)|sabeth(?:gmuer11|maria600)|zabethedw0)|o(?:diesawadogo123|tocashoffice1?))|m(?:2keld|efiele(?:328|g757)|ilyrichmond391)|ngr\.des01|r(?:e(?:evemusk681|nakgeorge123|zcelic0)|ioncarter\.private)|s(?:sexlss1|therkatherine1960)|vgpatmow|wynn284)|f(?:\.mikhail025|a(?:ithdesrie511|rahwasam101|tme\.mehmed001)|b(?:589767|lott47)|e(?:deralreservebankdallasdst|lix88995|yzaybrahim)|g0067333|irstbank(?:49(?:666|966)|6669|k49666)|j569282|l(?:556249|uhmann\.dn)|o(?:ropunionbank|undations\.west)|p462558|r(?:a(?:100dub132|n(?:c(?:es(?:\.connelly2|patrickconnolly(?:5050|4))|isca(?:mendoza960|samendoza))|k(?:j(?:ane984|ody2|wangg)|l(?:aurarivera|inpiesie6))))|eelottosweepstake51)|spero8[02]|u(?:lanlan28|n(?:dinternationalmonetary214|gg1w)))|g(?:00gleggewinner19|a(?:b(?:albertoassociates|riel(?:eschmitt002|kalia1102))|r(?:ciavincent500|ethbull112016|yakinson121))|b(?:528796|ill4880)|e(?:n(?:\.ahmedmsksi|eralwilliamstony990)|orge(?:brownhoward02|kwame481)|r(?:aldjhjh11|tjanvlieghe787))|i(?:idp955|lbert12oook|ocastano21)|kwasiiwusu1\.persona|l(?:enmoore0011|oriachow5052)|o(?:dfreyscottdonation|glegewinnerteam|o(?:dnessxtra|golteam2019|oglegwiinner219))|r(?:aceobia001|e(?:ant311|energeoffrey776))|veraallen|w522834)|h(?:a(?:r(?:gate2909|ryebert101|twellbdaniel)|s(?:h(?:imyreem78|mireem801)|sanalshujairy)|uperthilbigbeate|zimissa03)|e(?:a(?:dofficecentre0210|therbrooeke101)|cto(?:alon|r(?:castillos653|scastillo6))|l(?:en(?:adamsidaho|giggs88)|pdesk47321)|ritagetrustbank1985)|g(?:8669000|old8080)|heba\.hhassan207|i(?:ldad837|toshurui)|o(?:lsemeyerole6|nmackjohn518|rnbeckmajordennis63[478]|seoky(?:34|9))|sbchgm|trryt34|uichmh)|i(?:1955smael|amannjejosonn|b(?:ed627|rahimelizabeth654)|mf(?:deputyoff000|grantinter)|n(?:fo(?:\.(?:a(?:bogadosmfontana|nnedouglas10)|g00gleclaim|marviswanczyk360|orangedor|ulmusau)|64240|asminternationalpk|bankofamerikaa|dessk\.dfwairportonline|fdrserve|t(?:ech4st255|tcuckk))|gridrolle2|t(?:ernationallppp1|linvestorsfirm))|rvinekim67|smail(?:eman874|tarkan533))|j(?:35809121|a(?:6002932|888179|cobmaseon5995|m(?:alpriv8un|es(?:carlos17885|okoh82))|n(?:ahramadanabu|nsjonifer|usensecureprivate)|sonyeungchiwai|vierlesme001)|b(?:5406424|lsuntrust)|c2222222rrr|e(?:fferydean1960|nn(?:iannjhsonn|ybrown01222)|robtt|ssikasingh4)|j(?:7291634|osvu)|k3311131|m(?:3461128|powellfr)|o(?:edward023|hn(?:\.wilde\.oneplusfinance|a9577|griffn818|nietaylor242|paton\.alphafmc|r(?:awlings956|oxfordjr1)|son(?:deba|wilson(?:389|490))|tanko214|uba234|walterlove2010)|monkzza|n(?:a(?:haskel19|thanhaskel377)|esandassociates68|hugo1964|monkssa)|seph(?:acevedo024|babatunde192|ichael41)|vannyanderson001|y(?:ce00011|mrskone5))|rawlings007|s4fernado|u(?:lie(?:t\.le(?:222|e2222)|watson975)|sticellawgroup)|w6935997)|k(?:a(?:dulinayulii(?:ia|a)|l(?:iaksandr5|stromjames3|tschmidtdavid8)|malnizar000|rabo\.ramala39|t(?:ebaron(?:barr|xq)|hilittman7|jamess043|rinaziako56))|e(?:lsawamelia55|n(?:mckenziejr|nedy\.sawadogo19))|halidbuhazza99|js09376|kasbu790|o(?:ntakt\.claim|tokairportcargo|watsusho\.co\.ltd\.jp)|r(?:istinewellenstein024|nkl1109)|un(?:gwei7777|ioue28)|wasiowusug)|l(?:a(?:r(?:ateambo|rytoms200)|ursent892|w(?:officealouancooparation|rencefoundation30))|blackshirepm|e(?:enasinghs97|ndfair\.co\.uk1|onidasresearch|rynne(?:0west99|west(?:2289|5412)))|i(?:amfinchus(?:11|3)|ezlnatashavanessa|fecshortt63|li(?:ane\.bettencourt1945|ianchrstph)|n(?:elink008|glung104)|sa(?:milner001|robin117)|xiung(?:l48|9))|jo(?:bsfoundation|hn6132)|o(?:ganntomas|rrainewirengee|ttyoffice1|u(?:ghreymargaret67|isdreyfusmargarita5))|p319765|s(?:arbn01|chantal86)|u(?:ckywinners2018|sba\.moored2019)|w94059|y(?:\.cheapiseth909|diawright836|n(?:\.arthur011|cmba440|nmkl3332)))|m(?:\.francco9[14]|a(?:bel\.manaku|ck(?:enzbezos|oliver324)|damkoenig\.ruhama1b|incare655|j(?:ialfutt|or(?:dennishornbeck53|townsend01))|kaltschmidt|ll(?:am\.mlawal|etman2021)|mastar33m|n(?:ankovefimovich|duesq58|fran6(?:30|56)|uelfranco(?:727|donation02|foundation0|spende8))|r(?:i(?:a(?:111dembele|27idemba|3(?:31lucas|51lucas)|hhills00|nnewoosley90)|nacoleman84|opabl26|tinesecurityusa)|k(?:roth456|uses200)|shalh011|tin(?:amayer903|eziglesiasabogados|jrschwarz)|y(?:franson56|josen(?:62|81)))|s(?:onmanny05|pencer5151)|thewriaanza|u(?:hin52|noveutileina|rhinck11?)|viswan(?:142|czyk(?:01478|1(?:19|987)|4(?:89|5)|775|foundation45|k112|zz))|xaajn|ydetratt|zerfexi)|brons667|c(?:\.cheadychang76|kenthando)|dredban775|e(?:044386|engeoffrey|l(?:aniekreiss1971|lagolan|vidabullock5))|gfrederick80|husameddine|i(?:c(?:h(?:ael\.woosley1972|eal(?:sjohnj|wuu002))|paulla|w954)|k(?:e\.weirsky\.foundational001|h(?:\.fridman|ai(?:\.fridman261|lfridm32)))|n(?:fin\.gv|tonjustin98)|ss(?:\.(?:aminaibrahim|melisa\.mehmett|yasmineibrahim101)|boteogottai|yaelronen))|jminabii|k(?:ent7117|untjoro52)|lbriggs08860|m(?:1086771|argaritalouisdreyfus|ohammadaljllilati|rstephen16)|nmalarge|o(?:ham(?:edabdul1717|m(?:adraqab00|daljililati1|edshamekh24))|rienkal30)|r(?:\.(?:elbahi\.mohammed\.2021|justinmaxwell09|lusee|tonyelumelu60|wlsonkabore)|7672900|cjames001|d517341|eric(?:franck|schmid4002)|georgeemera|hanimuhammad627|jamesmc6|morgangomez56|r(?:echardthomas|ichardanthony1)|s(?:\.(?:biyufungchi16|janetolsen?|marinakuznetsov|olsenjanett|su(?:sanread12|zarawanmaling))|a(?:isha(?:alqadafi1976|gaddafi62)|ngela454|shaalqaddfi117)|catherineyokes|dominiquethomas7777|evelynbrown7|fatimaamiraqureshi1983|gezeria|h(?:amima60|ristinemadeleine)|isabelladz|j(?:ackman123|essicajeffrey3|lleach)|lisamilner08|m(?:a(?:riaelizabethscheffle98|ureens847|yaoliver31)|ugan)|nicolefr1marios|r(?:eem362|obinsanders185|uthsmith9900)|s(?:ar(?:ahbenjamin103|iamirahwulu)|ophiac)|v(?:eraaellen|ictoriaedmond03))|tomcrist\.ca|vi(?:ktorzubkovv|ncentandrea))|s(?:\.ellagolan56|agent02|golaan4|smadar44)|twvvv|u(?:ali000111|stadris22)|y(?:burghhugohendrik|racbally))|n(?:aomiiwasaki181|ckniem|eilt(?:9108|rotter(?:2017|968))|icholas\.jose73|obuyuki\.hirano128|tawdglobal|v637245)|o(?:\.peace004|3344nb|ffi(?:c(?:e(?:\.012123|emaill0002|rricherd876|windowterms)|ialserviceuae)|zielllk)|hallkenneth1|lenasheve73|marinyandeng|nufoundationclaims|pcwkdw|rabankheadofficelometogo1985|swald\.l(?:\.lewis|ewwis)|xfaminternationa1980)|p(?:a(?:storfrancesco1|tric(?:ia881a|k(?:\.efcc|andfrancessconnolly))|ul(?:eed1969|n8018)|ymentofficer14)|b(?:ph202lay2|rookk0)|e(?:130304|nding(?:redirections|waletsfortrust)|rezdonlorenzo336|t(?:er(?:\.waddell204|guggi0|kenin73?|stephen4040)|ronasofficepromo))|good60000|h(?:\.cbnl|illip\.richead218)|i(?:eterstevens511|lz37754)|o(?:lloke|usazgullaume|wellmrwilliam)|r(?:esleybathini1|imecapitalfianceltd|o(?:1nvstream|cessing2013general))|trsvermeulen|w178483)|q(?:iquanzhou7|nzeng1)|r(?:19772744|677gfd|a(?:johnfernn|kidy23|lhashimi78|ymond(?:aba200|damon15))|e(?:alyh596|beccagarang11|em(?:has(?:himy(?:1978|mail)|m044)|n(?:2214|asser003302))|lpandemic|mittanceofficeasaba|neehii\.omb|plyback00|sultbox1404|v(?:\.(?:jamesabel1|mikedadax)|ernestcebi|fr(?:ankjackson91|paulwilliams2)))|i(?:ch(?:a(?:miller18|rd(?:lustig4u|w(?:ahl511|il(?:lis815|son19091))))|lawandds)|tawilliams4141)|josh200000|main2028|o(?:b(?:erthanandez6655|inf036)|naldmorris786|s(?:a\.gomes0044|ekipkalya934))|raya9989|svcdusan|t(?:\.rev\.ericmark05|honrichardshepherd)|u(?:ddicklana561|ssiaworldcuppromo|thshoreline))|s(?:a(?:chingrams|l(?:ehhussienconsult1|imzaid(?:09|7000))|nchoscozfifa|rfiafarfask7|vicperez)|cott(?:henryjames91|peters7989)|e(?:cretservicce[789]|rgeantrobertbrown1|ydouthiebaconsultant)|g(?:\.offiice\.group|t(?:\.monicab03|ireneb2))|h(?:a(?:msiahmohamadyunusbnegara|nemissler(?:2009|3))|ery(?:\.gtl131|etr03)|inawatrathaksin93)|i(?:lverlakeconsultant|m(?:lkheng5|onhei47))|l5342743|o(?:fia\.adams201|p(?:adam3|hiajesse41)|u(?:rcingloggs|thwsltd))|p(?:a(?:cex\.inititative|gentrose)|eelman1972)|t(?:anleyjohn1469|e(?:phen(?:7tam|tam1(?:47|6))|venchamberonline))|u(?:iyang(?:\.boc|02)|n\.hor20|san(?:freeman112x|neklatten502)|zana111bah)|w(?:eeneyjohnson384|islottnl))|t(?:a(?:mmy(?:21gill|webster24)|y(?:ebsouami0|lorcathy362))|ch33555|davalvse|e(?:am\.spacex02|nreyrosilvana54|rryparkins11)|h(?:ailandbankoffice01|e(?:ara\.choy2|odorosloannis9|resawilliams7661?|smithfm124))|imothymetheny01|lyerdonald613|mason9w4r|o(?:m(?:\.cristdonor|ander231|c(?:hrist1995|rist(?:52|donation12|foundation99|world))|spende480)|ny(?:\.chung760|robins777|zimpro11)|pchronodesk|shikazusendo101)|p2911220|rustfoundationsigridrausing|sfoundation65|tkhan69s)|u(?:ba(?:\.bankofaffican|bank(?:bjplc|headoffice471))|d(?:erleyen52|regwqr)|kponguko|marukareem8|n(?:claimedfunds554|ited(?:bankforafrica\.plc102|nation(?:organization70|s(?:8182|councilrefunds))))|s(?:alotery2|departmentofjustice80))|v(?:a(?:mamakazlegalchambers|nderwesthuizen560)|e(?:enapatel883|linagreen|neerchris20003|r(?:a(?:aellen7|hollinkvan0)|enichekaterinaekaterina4))|i(?:ctoriaabraham2310|dalpamela85|ngut170|p(?:financeace|jeferrey))|johannes271|n935990|owpovertyfoundation)|w(?:a(?:dp4726|hlr(?:5990|ichard18)|ldibeatesieberhagen|nczykm61|rrenebuffett(?:398|2))|b(?:271981|6159980|uffetdonationprogram)|c5000dle|d232633|ellensteinfoundation251|hatsappofficial001|i(?:elandherzog\.sw\.herad16|ll(?:clark(?:2618|629)|iam(?:robert3852|smartyrs888)))|kfinancialservice|orldbankregionalmanageroffice|u(?:\.office212|mt722)|ww\.moneygram9054)|y(?:\.oguzhan011|anghoseok5|doo974|inglukshinawtra|o(?:ngkm00|usefzongo5722))|z(?:bank8876|enithbankplconline98|kiaslan1963|minhong65|ubkovmrviktor)))\@gmail\.com$/i

describe REPTO_419_FRAUD_GM Reply-To is known advance fee fraud collector mailbox
score REPTO_419_FRAUD_GM 3.000
tflags REPTO_419_FRAUD_GM publish



header __REPTO_419_FRAUD_GM_LOOSE Reply-To:addr =~ /^(?=[^\s<>@]+\@gmail\.com)(?:(?:9porssts|a(?:\.wafager|b(?:dullahmundani|u(?:lkareem|shadi))|cecere|isha(?:1976gaddafi|gaddafilibya)|l(?:an\.austin|ber\.yang|ex(?:anderpeterson|hoffman)|ghafrij|icedoris|kasimunadi|l(?:enholden|isoncluade)|ure\.wawrenka)|m(?:bassadormarybethleonardl|ericadeliverycomapny|ina(?:ltwaijiri|medjahed))|n(?:dyfox|na(?:llee|sigurlaug)|thonyjblinken)|office1office|radka|shwestwood|tmcarddepartment|ustinbillmark|yevayawovi|zi(?:m(?:\.hpremji|hashim(?:donation)?)|z(?:dake|george)))|b(?:a(?:nkcentralasiahalobca|r(?:bersmadar|rister(?:clarkephillips|lordruben)|teld\.huisman))|bongo|e(?:alitoniua|linekra|n(?:ezero|gatl|jaminsarah)|rnard\.arnult|tsyholden)|ill\.lawrence|mwautomobile|oarddept|r(?:avolpaul|endalaporte)|uffettwarrene)|c(?:a(?:mluba|reisu)|bnatm|e(?:da\.ogada|lineroullier)|h(?:a(?:ngching|r(?:itylisajohnrobinson|l(?:esluenga|tonnewmanus)))|e(?:mchung|nchung))|iticonsultantjohncg|la(?:imadviser|xtonpaul)|o(?:lombasjuan|ntactad|operation)|r(?:awfordgillies|ist(?:brun?|davis|ydavis(?:donation|foundation)))|ustomerservicelacaixa)|d(?:a(?:nnuar|vi(?:d(?:\.loanfirm|ibe|larbi|pere|ramirez\.luis)|scarolyn|yax))|e(?:btm|nnis(?:clark|quaid)|partmentofstate)|hlexpresscompany|ipfrancis|minique|ona(?:ldwilliam|tionhelpercare)|r(?:\.wilsonpaul|davidrhama|joesimon|rhamahassan)|unsilva)|e(?:benezero|christina|dmundventura|l(?:i(?:bethgomez|sabeth(?:gmuer|maria)|zabethedw)|o(?:diesawadogo|tocashoffice))|m(?:efieleg?|ilyrichmond)|ngr\.des|re(?:evemusk|nakgeorge|zcelic)|s(?:sexlss|therkatherine)|wynn)|f(?:\.mikhail|a(?:ithdesrie|rahwasam|tme\.mehmed)|blott|irstbank|r(?:a(?:100dub|n(?:c(?:es(?:\.connelly|patrickconnolly)|iscamendoza)|k(?:j(?:ane|ody)|linpiesie)))|eelottosweepstake)|spero|u(?:lanlan|ndinternationalmonetary))|g(?:00gleggewinner|a(?:briel(?:eschmitt|kalia)|r(?:ciavincent|yakinson))|bill|e(?:neralwilliamstony|orge(?:brownhoward|kwame)|r(?:aldjhjh|tjanvlieghe))|i(?:idp|ocastano)|l(?:enmoore|oriachow)|oo(?:golteam|oglegwiinner)|r(?:aceobia|e(?:ant|energeoffrey)))|h(?:a(?:r(?:gate|ryebert)|sh(?:imyreem|mireem)|zimissa)|e(?:a(?:dofficecentre|therbrooeke)|ctor(?:castillos|scastillo)|lengiggs|ritagetrustbank)|gold|heba\.hhassan|ildad|o(?:lsemeyerole|nmackjohn|rnbeckmajordennis|seoky)|trryt)|i(?:b(?:ed|rahimelizabeth)|mfdeputyoff|n(?:fo\.(?:annedouglas|marviswanczyk)|gridrolle|ternationallppp)|rvinekim|smail(?:eman|tarkan))|j(?:a(?:cobmaseon|mesokoh|vierlesme)|e(?:fferydean|ssikasingh)|o(?:edward|hn(?:griffn|nietaylor|r(?:awlings|oxfordjr)|sonwilson|tanko|uba|walterlove|a)|n(?:a(?:haskel|thanhaskel)|esandassociates|hugo)|seph(?:acevedo|babatunde|ichael)|vannyanderson|ymrskone)|rawlings|ulie(?:t\.lee?|watson))|k(?:a(?:l(?:iaksandr|stromjames|tschmidtdavid)|malnizar|rabo\.ramala|t(?:hilittman|jamess|rinaziako))|e(?:lsawamelia|nnedy\.sawadogo)|halidbuhazza|kasbu|r(?:istinewellenstein|nkl)|un(?:gwei|ioue))|l(?:a(?:rrytoms|ursent|wrencefoundation)|e(?:enasinghs|ndfair\.co\.uk|rynne(?:0west|west))|i(?:amfinchus|fecshortt|liane\.bettencourt|n(?:elink|glung)|sa(?:milner|robin)|xiungl?)|john|o(?:ttyoffice|u(?:ghreymargaret|isdreyfusmargarita))|s(?:arbn|chantal)|u(?:ckywinners|sba\.moored)|y(?:\.cheapiseth|diawright|n(?:\.arthur|cmba|nmkl)))|m(?:\.francco|a(?:ckoliver|incare|jor(?:dennishornbeck|townsend)|lletman|n(?:duesq|fran|uelfranco(?:(?:donation|foundation|spende))?)|r(?:i(?:a(?:hhills|nnewoosley)|nacoleman|opabl)|k(?:roth|uses)|shalh|tinamayer|y(?:franson|josen))|s(?:onmanny|pencer)|u(?:hin|rhinck)|viswan(?:czyk(?:(?:foundation|k))?)?)|brons|c\.cheadychang|dredban|el(?:aniekreiss|vidabullock)|gfrederick|i(?:c(?:h(?:ael\.woosley|ealwuu)|w)|k(?:e\.weirsky\.foundational|hai(?:\.fridman|lfridm))|ntonjustin|ss\.yasmineibrahim)|k(?:ent|untjoro)|mrstephen|o(?:ham(?:edabdul|m(?:adraqab|daljililati|edshamekh))|rienkal)|r(?:\.(?:elbahi\.mohammed\.|justinmaxwell|tonyelumelu)|cjames|ericschmid|hanimuhammad|jamesmc|morgangomez|richardanthony|s(?:\.(?:biyufungchi|susanread)|a(?:isha(?:alqadafi|gaddafi)|ngela|shaalqaddfi)|dominiquethomas|evelynbrown|fatimaamiraqureshi|hamima|j(?:ackman|essicajeffrey)|lisamilner|ma(?:riaelizabethscheffle|ureens|yaoliver)|r(?:eem|obinsanders|uthsmith)|sarahbenjamin|victoriaedmond))|s(?:\.ellagolan|agent|golaan|smadar)|ustadris)|n(?:aomiiwasaki|eilt(?:rotter)?|icholas\.jose|obuyuki\.hirano)|o(?:\.peace|ffice(?:emaill|rricherd)|hallkenneth|lenasheve|rabankheadofficelometogo|xfaminternationa)|p(?:a(?:storfrancesco|ul(?:eed|n)|ymentofficer)|b(?:ph202lay|rookk)|e(?:rezdonlorenzo|ter(?:\.waddell|guggi|kenin|stephen))|hillip\.richead|ieterstevens|resleybathini)|q(?:iquanzhou|nzeng)|r(?:a(?:kidy|lhashimi|ymond(?:aba|damon))|e(?:alyh|beccagarang|em(?:has(?:himy|m)|n)|plyback|sultbox|v(?:\.jamesabel|fr(?:ankjackson|paulwilliams)))|i(?:cha(?:miller|rdw(?:ahl|illis))|tawilliams)|main|o(?:b(?:erthanandez|inf)|naldmorris|s(?:a\.gomes|ekipkalya))|raya|t\.rev\.ericmark|uddicklana)|s(?:a(?:l(?:ehhussienconsult|imzaid)|rfiafarfask)|cott(?:henryjames|peters)|e(?:cretservicce|rgeantrobertbrown)|gt(?:\.monicab|ireneb)|h(?:anemissler|ery(?:\.gtl|etr)|inawatrathaksin)|im(?:lkheng|onhei)|o(?:fia\.adams|p(?:adam|hiajesse))|peelman|t(?:anleyjohn|ephentam)|u(?:iyang|n\.hor|sanneklatten)|weeneyjohnson)|t(?:a(?:mmywebster|y(?:ebsouami|lorcathy))|e(?:am\.spacex|nreyrosilvana|rryparkins)|h(?:ailandbankoffice|e(?:ara\.choy|odorosloannis|resawilliams|smithfm))|imothymetheny|lyerdonald|o(?:m(?:ander|c(?:hrist|rist(?:(?:donation|foundation))?)|spende)|ny(?:\.chung|robins|zimpro)|shikazusendo)|sfoundation)|u(?:babankheadoffice|derleyen|marukareem|n(?:claimedfunds|ited(?:bankforafrica\.plc|nation(?:organization|s)))|s(?:alotery|departmentofjustice))|v(?:anderwesthuizen|e(?:enapatel|r(?:a(?:aellen|hollinkvan)|enichekaterinaekaterina))|i(?:ctoriaabraham|dalpamela|ngut)|johannes)|w(?:a(?:dp|hlr(?:ichard)?|nczykm|rrenebuffett)|ellensteinfoundation|hatsappofficial|i(?:elandherzog\.sw\.herad|ll(?:clark|iam(?:robert|smartyrs)))|u(?:\.office|mt)|ww\.moneygram)|y(?:\.oguzhan|anghoseok|doo|o(?:ngkm|usefzongo))|z(?:bank|enithbankplconline|kiaslan|minhong)))\d+\@gmail\.com$/i

meta REPTO_419_FRAUD_GM_LOOSE __REPTO_419_FRAUD_GM_LOOSE && !REPTO_419_FRAUD_GM
describe REPTO_419_FRAUD_GM_LOOSE Ends-in-digits Reply-To is similar to known advance fee fraud collector mailbox
score REPTO_419_FRAUD_GM_LOOSE 1.000
tflags REPTO_419_FRAUD_GM_LOOSE publish



header REPTO_419_FRAUD_YH Reply-To:addr =~ /^(?=[^\s<>@]+\@yahoo\.com)(?:(?:a(?:driantongson13|gaaintl\-4g5ee\.w3|ilmohammed11|lesiakalina2006|mbassador\.l|nn(?:awax48|hester\.usa4))|b(?:a(?:che\.delfine|nk\.phbng14|rr(?:\.thomasclark|ister\.dennis11|william_davies))|e(?:linekra1144|n(?:jaminb34|nicholas22))|illlawrenceee|riceangela45)|c(?:\.(?:aroline90|coulibaly2)|a(?:binet_maitre_emmanuel_patris|mpbellwilliamms)|h(?:arlesscharf112|hoy\.t|jackson65)|juan852|o(?:mpliment\.sseason|ntelamine)|ythiamiller\.un10)|d(?:hamilton9099|iaanesoto190|r(?:\.aminramli|_raymondfung|kobiorah|obiorahkenneth|victorobaji))|e(?:denvictor71|ricalbert24)|f(?:aizaadama2016|bicompensation_funds|ederal\.r73)|g(?:ov\.ukmessageboard|uesfilet1336523)|harry1vans|i(?:\.project33411|befranfgnfmf|nfo(?:bank1|money)|project32411)|j(?:\.edwards228|a(?:ckson\.davis915|netemoon150)|essica\.p_family|inping\.tw|kimyong21|lawrencefrb|ulietjohnsonn)|k(?:altschmidtdavid8|elvinmark629|im(?:\.leang2018?|leang(?:575|90)))|l(?:e(?:a_edem13|hman(?:909|bila))|i(?:m_kaan|sarobinson_555|uhngbin)|o(?:an\.assist|rrainewirengee)|y_cheapiseth(?:11|2019))|m(?:\.kogi81|a(?:itre_arthur\.catheau|rie_avis12)|d(?:\.ps|zsesszika672)|elissalewis(?:10001|4004)|iss\.zarryb|o(?:hammedaahil46|keye79)|r(?:\.viktorzubkovv|s(?:\.esthernicolas|isabella\.dzesszikan|themo))|s\.gracie_olakun|unny(?:\.sopheap207|_sopheap30))|n(?:adhowc|estordaniel2)|o(?:biorahkenneth8|fficial_franksylvester88|legkozyrev1|mranshaalan52)|p(?:ackerkelvin|eterlee1950|rincerasmane)|r(?:alphw(?:\.johnson78|johnson78)|i(?:chard\.w94|taadamsw10)|o(?:b(?:ertbailey2004|orts20)|serichard655))|s(?:amthong4040|igurlauganna34|leo25|mith(?:\.dr|colin767)|o(?:ftc2|pheap\.munny)|pwalker101|te(?:fanopessina573|vecox\.98))|t(?:\.murasawa|ep1chen|heara\.chhoy|ylerhess\.43)|u(?:butu16|kdebtmanagement5)|vanserge2001|will(?:clark0010|smi68)|xianglongdai60|zhaodonghk))\@yahoo\.com$/i

describe REPTO_419_FRAUD_YH Reply-To is known advance fee fraud collector mailbox
score REPTO_419_FRAUD_YH 3.000
tflags REPTO_419_FRAUD_YH publish



header __REPTO_419_FRAUD_YH_LOOSE Reply-To:addr =~ /^(?=[^\s<>@]+\@yahoo\.com)(?:(?:a(?:driantongson|gaaintl\-4g5ee\.w|ilmohammed|lesiakalina|nn(?:awax|hester\.usa))|b(?:a(?:nk\.phbng|rrister\.dennis)|e(?:linekra|n(?:jaminb|nicholas))|riceangela)|c(?:\.(?:aroline|coulibaly)|h(?:arlesscharf|jackson)|juan|ythiamiller\.un)|d(?:hamilton|iaanesoto)|e(?:denvictor|ricalbert)|f(?:aizaadama|ederal\.r)|infobank|j(?:\.edwards|a(?:ckson\.davis|netemoon)|kimyong)|k(?:altschmidtdavid|elvinmark|im(?:\.leang|leang))|l(?:e(?:a_edem|hman)|isarobinson_|y_cheapiseth)|m(?:\.kogi|arie_avis|dzsesszika|elissalewis|o(?:hammedaahil|keye)|unny(?:\.sopheap|_sopheap))|nestordaniel|o(?:biorahkenneth|fficial_franksylvester|legkozyrev|mranshaalan)|peterlee|r(?:alphw(?:\.johnson|johnson)|i(?:chard\.w|taadamsw)|o(?:b(?:ertbailey|orts)|serichard))|s(?:amthong|igurlauganna|leo|mithcolin|oftc|pwalker|te(?:fanopessina|vecox\.))|tylerhess\.|u(?:butu|kdebtmanagement)|vanserge|will(?:clark|smi)|xianglongdai))\d+\@yahoo\.com$/i

meta REPTO_419_FRAUD_YH_LOOSE __REPTO_419_FRAUD_YH_LOOSE && !REPTO_419_FRAUD_YH
describe REPTO_419_FRAUD_YH_LOOSE Ends-in-digits Reply-To is similar to known advance fee fraud collector mailbox
score REPTO_419_FRAUD_YH_LOOSE 1.000
tflags REPTO_419_FRAUD_YH_LOOSE publish



header REPTO_419_FRAUD_YJ Reply-To:addr =~ /^(?=[^\s<>@]+\@yahoo\.co\.jp)(?:(?:a(?:drianbayford|lainminc73)|b(?:arrevansthomas213|ealife4god)|d(?:eborahmark2|raymndch)|e(?:d(?:032000100|ithi0iochou)|millybrownnc|velynjoshua56)|fred_gamba|henrybanko1970|m(?:24erc|aryp1799_8335|eghanbutlerfca|oneygram100|rs_chen_00001)|nikbnson1|o(?:fficefile_0112|livia_mabor)|pamgells|r(?:acheljude000|eplykasikorn|itawi668)|s(?:andrabates418|d203077)))\@yahoo\.co\.jp$/i

describe REPTO_419_FRAUD_YJ Reply-To is known advance fee fraud collector mailbox
score REPTO_419_FRAUD_YJ 3.000
tflags REPTO_419_FRAUD_YJ publish



header REPTO_419_FRAUD_OL Reply-To:addr =~ /^(?=[^\s<>@]+\@outlook\.com)(?:(?:a(?:16u71|a23423|b(?:rahamwilliamsonrpsltduk|s0000200)|l(?:bertchebe|exw113)|ndrew(?:_hai|gamble7))|b(?:a(?:rrmarkphillip|sidris)|etty\.c_investment|illgfile203)|c(?:bforeignremitdept|harlie\.j\.goodmand|laimunit\.facebook|ompensationfunding)|d(?:eborahleeconsult|hl(?:customercares|express\.fastservice)|onation_dept|rjonathankuku)|e(?:benezernonyeagwuceozbplc|urope\.win2)|f(?:abienna\.s|iduciarybmw2020|mr01|oundation701|p\.conn|rancescogaetano01)|g(?:20compessdesk|eoffreynicolas\.esq|ilbertowosukk|race\.manonfoundation)|huyennvoha|j(?:ackson4steve|e(?:anedo1?|ssicameir30))|k(?:aujong|kkunited1|officollins)|l(?:\.williams722|ui1480)|m(?:card\.msoftuk|illerjeffreylawchambers|oussa\.sayyid|r(?:\.henrichkisker|antonioguterress|b(?:illgate9|ryandavisuk44)|mduku|s(?:\.(?:coraluttah|olhaoschad)|_elizabeth20|michelleallison|roseallen))|spvt2020)|olhalytvynenko20|p(?:aul\.walter120|hilcohen0012)|qanejmhffgg|r(?:ichardwahlfreegrant|obertleeonly01)|s(?:aaman10|gi2019|ilv(?:anatenreyro0|erlakeconsultantllc)|t(?:\.monica|eve\.lenkathomson11))|t(?:g331965|oyotadrawboard2019|reff11)|unvanzyl_mrs|w(?:esteruniontransferunite7|hatsapp_givewin|inuklotocash2018)))\@outlook\.com$/i

describe REPTO_419_FRAUD_OL Reply-To is known advance fee fraud collector mailbox
score REPTO_419_FRAUD_OL 3.000
tflags REPTO_419_FRAUD_OL publish



header __REPTO_419_FRAUD_OL_LOOSE Reply-To:addr =~ /^(?=[^\s<>@]+\@outlook\.com)(?:(?:a(?:lexw|ndrewgamble)|billgfile|europe\.win|f(?:iduciarybmw|mr|oundation|rancescogaetano)|je(?:anedo|ssicameir)|kkkunited|l(?:\.williams|ui)|m(?:r(?:b(?:illgate|ryandavisuk)|s_elizabeth)|spvt)|olhalytvynenko|p(?:aul\.walter|hilcohen)|robertleeonly|s(?:aaman|gi|ilvanatenreyro|teve\.lenkathomson)|t(?:oyotadrawboard|reff)|w(?:esteruniontransferunite|inuklotocash)))\d+\@outlook\.com$/i

meta REPTO_419_FRAUD_OL_LOOSE __REPTO_419_FRAUD_OL_LOOSE && !REPTO_419_FRAUD_OL
describe REPTO_419_FRAUD_OL_LOOSE Ends-in-digits Reply-To is similar to known advance fee fraud collector mailbox
score REPTO_419_FRAUD_OL_LOOSE 1.000
tflags REPTO_419_FRAUD_OL_LOOSE publish



header REPTO_419_FRAUD_HM Reply-To:addr =~ /^(?=[^\s<>@]+\@hotmail\.com)(?:(?:a(?:brahambeniam|licewalton7653|n(?:ikal01|nagray00)|zezul\.idrisazezulidris)|benarnault0|c(?:h(?:angxinjuan|oi21)|laytousey)|d(?:ealings100|l13139|r\.dukanalycoulibaly)|egorbunova22|f(?:axttransfer\.skyebk\.service\.care\.th|ridmanmikhail511)|homlandsecdept|infos(?:43|8)|jacques\.bouchex|katabettencourt2018|l(?:e(?:a_edem|galcosme|wisarm44)|imfu201677|ulihongm)|m(?:oneygrampayfund|pay\-live00924|r(?:abrahambeniamfc|pedrohilldonations|s(?:\.(?:chantal_bill|roselinejac)|helenbgeorge|micheleallison2003)))|n(?:inajohn226|waigwe2765)|ocbc\-ba\-nkonline|p(?:atrickmullinfinaceservs|owen10001)|quickcashloansservices|s(?:a(?:jda\.andleeb|nchamps798)|ilvanatenreyrompc|tuboardgntdirector|ulaimaninfante)|t(?:a(?:baka_williamshsbbc|shacap)|omashntr)|unb(?:2015|int)|yostinbellamohammad))\@hotmail\.com$/i

describe REPTO_419_FRAUD_HM Reply-To is known advance fee fraud collector mailbox
score REPTO_419_FRAUD_HM 3.000
tflags REPTO_419_FRAUD_HM publish



header __REPTO_419_FRAUD_HM_LOOSE Reply-To:addr =~ /^(?=[^\s<>@]+\@hotmail\.com)(?:(?:a(?:licewalton|n(?:ikal|nagray))|benarnault|choi|dealings|egorbunova|fridmanmikhail|infos|katabettencourt|lewisarm|mrsmicheleallison|n(?:inajohn|waigwe)|sanchamps|unb))\d+\@hotmail\.com$/i

meta REPTO_419_FRAUD_HM_LOOSE __REPTO_419_FRAUD_HM_LOOSE && !REPTO_419_FRAUD_HM
describe REPTO_419_FRAUD_HM_LOOSE Ends-in-digits Reply-To is similar to known advance fee fraud collector mailbox
score REPTO_419_FRAUD_HM_LOOSE 1.000
tflags REPTO_419_FRAUD_HM_LOOSE publish



header REPTO_419_FRAUD_AOL Reply-To:addr =~ /^(?=[^\s<>@]+\@aol\.com)(?:(?:a(?:\.dordevicii|b(?:000137|rajjohn)|f\.2[06]|gneselizabethgiftfoundationssss|ljaber111|meliageorge|nd(?:_bley|rew_hans)|rthur\.alan)|b(?:a(?:anidleewy|rr_luc)|claimdept|rownchurchill2)|c(?:\.european|allumfoundation|h(?:anprivacy03|eungdavidd|ngeric|ristyruwalt)|laimdept21|ristinabruno38|ustom_service58)|d(?:avid\.kms|hodgkins001|ianwaynie|onald_anderson44)|e(?:ng(?:joej|r\.abdulla)|ricalbertdpm|velynjoshua44)|f(?:d\.29|ernandezfernandez3|oundation\.charity)|g(?:arang\.rebeca|eorge_clifford4|roupfacility)|hernandezrosemary632|info\.dieter_charity|jmesaud|k\.doreen00|l(?:\.b162k|erynnewest99|i(?:sarobinson5\.0|zcarroll101)|orrainewirangee|uciacorraomanagerbocub|ynnpage44)|m(?:\.francco91|_l\.wanczyk62|a(?:sayohara21|viswanczyk[do])|rs(?:isabelladzsesszika|janetedwards0001|safiagaddafi))|normapatto|officework172|p(?:a(?:tricia(?:\.hans|hans)|ulpollard2)|eterwong345|otfolio\.management)|royalpalace2018|s(?:\.fofo|afiiagadafi|ovchan|pwalker721|t(?:aatsloterijnederlands|efano_pessina))|usembassy330|w(?:attson\.renwick|ebank244)|yurdaaytarkan5))\@aol\.com$/i

describe REPTO_419_FRAUD_AOL Reply-To is known advance fee fraud collector mailbox
score REPTO_419_FRAUD_AOL 3.000
tflags REPTO_419_FRAUD_AOL publish



header __REPTO_419_FRAUD_AOL_LOOSE Reply-To:addr =~ /^(?=[^\s<>@]+\@aol\.com)(?:(?:a(?:f\.|ljaber)|brownchurchill|c(?:hanprivacy|laimdept|ristinabruno|ustom_service)|d(?:hodgkins|onald_anderson)|evelynjoshua|f(?:d\.|ernandezfernandez)|george_clifford|hernandezrosemary|k\.doreen|l(?:erynnewest|izcarroll|ynnpage)|m(?:\.francco|_l\.wanczyk|asayohara|rsjanetedwards)|officework|p(?:aulpollard|eterwong)|royalpalace|spwalker|usembassy|webank|yurdaaytarkan))\d+\@aol\.com$/i

meta REPTO_419_FRAUD_AOL_LOOSE __REPTO_419_FRAUD_AOL_LOOSE && !REPTO_419_FRAUD_AOL
describe REPTO_419_FRAUD_AOL_LOOSE Ends-in-digits Reply-To is similar to known advance fee fraud collector mailbox
score REPTO_419_FRAUD_AOL_LOOSE 1.000
tflags REPTO_419_FRAUD_AOL_LOOSE publish



header REPTO_419_FRAUD_YN Reply-To:addr =~ /^(?=[^\s<>@]+\@yandex\.com)(?:(?:a(?:lhashimi123|m(?:andarandle|g3333txx101)|n(?:a\.mariposa|n(?:acooper2019|zainab))|wesome\.mariacarmen)|b(?:ayemahama|igghandgrant|radely\.j)|c(?:harles\.kable|lemlau)|de(?:edee\-paul|jongpeter|ptoversea)|f(?:3dex\.courier|ed\.r3v|reedommarketinvestments)|gadd4fi\.aisha|h(?:ashimireem|halesbbanddd?)|irenaa\.georgiadou|j(?:efrey\-dean|o(?:hnnicholsonjr|seph\-scott2k5)|uliet\.lee2222)|l(?:es20sc|otointernational\.elgordo)|m(?:a(?:hama\.baye|rcarmenguty)|fdpm|ohamed\.bennani|r(?:\.kongkea|akram\.elkerrami|s(?:\.elizabeth\.graham2022|percy)))|nokiahouse1[03]|olivia\.mabor|p(?:aragonloansinc|ri(?:ncedarren0244|vatemail24))|rich(?:ard\.wahl|lawands)|skyeloanand\.financelimited|t(?:\.baloyi|an\.sung|resor\.mambo)|w(?:b\.foundation|ill(?:1amsmarg1|iam(?:simon1960|wilbert1)))|za\.dc2016))\@yandex\.com$/i

describe REPTO_419_FRAUD_YN Reply-To is known advance fee fraud collector mailbox
score REPTO_419_FRAUD_YN 3.000
tflags REPTO_419_FRAUD_YN publish



header REPTO_419_FRAUD_PM Reply-To:addr =~ /^(?=[^\s<>@]+\@protonmail\.com)(?:(?:armstrong0244|berndkoch|davidmetus|euclaim|p(?:a(?:melagriffi|t\.nwankwo)|rotonydonation)|scottpeter012|the\.trustees1|v\.brianpierre|wraggsmk|yihsbltan|ziraatbankasi))\@protonmail\.com$/i

describe REPTO_419_FRAUD_PM Reply-To is known advance fee fraud collector mailbox
score REPTO_419_FRAUD_PM 3.000
tflags REPTO_419_FRAUD_PM publish



header REPTO_419_FRAUD_QQ Reply-To:addr =~ /^(?=[^\s<>@]+\@qq\.com)(?:(?:1(?:731419584|821317384)|2(?:0(?:32508290|90641921)|3(?:72948239|89029403|97857528))|3523284224|akia\.j55|claimoffice1|dennisonctrenton|l\.valiant|peterwong20177|qatarfoundation01|sabrinacrawford000|treasury_deptment0|wang_cjianlin))\@qq\.com$/i

describe REPTO_419_FRAUD_QQ Reply-To is known advance fee fraud collector mailbox
score REPTO_419_FRAUD_QQ 3.000
tflags REPTO_419_FRAUD_QQ publish



header REPTO_419_FRAUD_CNS Reply-To:addr =~ /^(?=[^\s<>@]+\@consultant\.com)(?:(?:anthonyalvarad|davidhenri|l(?:egacylawfirmdakar|ottomaxclaims7)|m(?:iguel\-pinto|orrisherb)|pchonline|t(?:eo\.westin|he\.trustees1?|rustees202000)|westernunio(?:n1659|payment\.agent0018)))\@consultant\.com$/i

describe REPTO_419_FRAUD_CNS Reply-To is known advance fee fraud collector mailbox
score REPTO_419_FRAUD_CNS 3.000
tflags REPTO_419_FRAUD_CNS publish



# other domains

header REPTO_419_FRAUD Reply-To:addr =~ /^(?![^\s<>@]+\@(?:(?:gmail|yahoo|outlook|hotmail|aol|yandex|protonmail|qq|consultant)\.com|yahoo\.co\.jp)(?:$|[>,\s]))(?:(?:speakers)\@012\.net\.il|(?:mail)\@101private\.com|(?:(?:alfredcheuk002|fbi_1234|mavis_wanczyk))\@126\.com|(?:(?:alfredcheuk_yuchow|ehagler|google_promoaward0?|panyawein|wongshiu_ki))\@163\.com|(?:ray\-thomas7h)\@1email\.eu|(?:mathew\.yon2)\@abbsinvestment\.com|(?:wang)\@abconline\.hk|(?:ibrahimtafa)\@abienceinvestmentsfze\.com|(?:russia2018worldcuplotto5)\@accountant\.com|(?:midwestern)\@adexec\.com|(?:joxford)\@adm-irs\.com|(?:office)\@admntline\.ml|(?:info)\@aidakj\.com|(?:(?:infovsa|maria\.louge|w(?:bfefft|n\.buffett)))\@aim\.com|(?:(?:attorneygeorgewalter|jessikasingh|lawmensa|travisalex))\@aliyun\.com|(?:(?:director|info))\@anletco-jp\.com|(?:(?:deanie_ron|mundo\.europe|richwetton))\@aol\.co\.uk|(?:mrssabah_ibrahim7)\@aol\.fr|(?:institutionaldepartment)\@aol\.nl|(?:support)\@apostlesfoundation\.com|(?:deajohn)\@arubacloub\.com|(?:djohns)\@arubacloud\.com|(?:jeromecgb12)\@asia\.com|(?:jefferson)\@athenaeumbd\.com|(?:(?:bllphillips|desousafam05))\@att\.net|(?:traoreahmed)\@barid\.com|(?:atendimento\-multiplus\-banco\-brasil)\@bb\.com|(?:(?:admin|info))\@bhleu\.com|(?:noreply\.fujvfes)\@bibliothequegaillard\.com|(?:costruire)\@bigmat\.it|(?:susan\.lampard)\@bk\.ru|(?:(?:office\.uk|renataapsilva))\@bol\.com\.br|(?:onmydestiny18)\@boulevardmalls\.com|(?:luciamariacampbell)\@boximail\.com|(?:ochiaisatoruasistbank)\@brew-master\.com|(?:nicola)\@brighenti\.net|(?:mrshelen)\@btarneauds\.com|(?:inter01)\@c2\.hu|(?:jessica)\@cadencebankdept\.us|(?:hello)\@captnbb\.com|(?:judith_faulkner63)\@cash4u\.com|(?:cbn)\@cbofficialmail\.cf|(?:201(?:47237|5(?:5765|648[48])))\@ce\.pucmm\.edu\.do|(?:duncanttodd)\@centrum\.cz|(?:gregwingo)\@cheapnet\.it|(?:(?:andrelwotti|contact\.roycockrumgrantoffice|dbank12|fbipayment(?:50|600)|harunajim667|manuel\.rabelais|paul\.wilson|r(?:alphwjohnson|ev_markbless)|trustees101))\@citromail\.hu|(?:info)\@classicmail\.co\.za|(?:martin)\@claudiatrincado\.com|(?:irdi33)\@cock\.li|(?:federal_ministrayoffinance)\@comtube\.com|(?:cc(?:hendik|jjdesk))\@consultancydesk\.co\.ua|(?:mundo_seguros)\@contorli\.site|(?:(?:jones\-co|kellyzwo))\@cox\.net|(?:(?:investmentfince\.com|lottery(?:\.support|usa\.com)|sama_williams|warren(?:\.buffett19|_edward)))\@cpn\.it|(?:(?:angelicainiguez|brunoso|lisatroutman))\@currently\.com|(?:(?:dmalpasswb|i(?:lanasoloshneor|nfo90000)|joseramonjr1|m(?:hzitafrank0|ynewmission)|r(?:e(?:covered\-tax|em(?:2018|alhashimi|ealhashimi|hashimi2020))|onconway)))\@daum\.net|(?:rex)\@departmentofsecretary\.com|(?:info)\@dieterchwarz-charity\.com|(?:blythemasters)\@digitalassetholding\.org|(?:jorgezalesky)\@diplomats\.com|(?:bar_sahil)\@dominionassociates\.uk|(?:zahvoedir)\@donations\.christchurchliverpool\.xyz|(?:(?:abd\.aljassem|claimreview))\@dr\.com|(?:health\-support)\@drjohnashworthherbalmeds\.com|(?:atmpaymentcentttt)\@e-mail\.ua|(?:(?:herrick01|rogersteare02))\@e1\.ru|(?:olga\.ingrif)\@ecb-securities\.com|(?:jesusgacia)\@eclipso\.email|(?:davison\.warwick)\@eclipso\.eu|(?:(?:denbrink|facebook\.in(?:structor|tructor)|kathy_gerald1965|megaclaimcenter|pch\.cliamdept))\@email\.com|(?:infoleonfredberbst)\@emailgroups\.net|(?:info)\@emteslastock\.com|(?:johnkadiri)\@englandmail\.com|(?:info)\@euro-pinnacle\.com|(?:(?:a(?:bogado\.antoniopaco|dvancedsegurosespana)|claimdpts|monitorunitbelgium))\@europe\.com|(?:us\.secretaryofstate)\@ex\.ua|(?:susanibrahim)\@exclusivemail\.co\.za|(?:lottomax)\@execs\.com|(?:jabufa)\@executivemail\.co\.za|(?:adam_moroney\.esq)\@fedco-usa\.com|(?:steven)\@federalreservebanks\.us|(?:(?:jeferrey|yakuyaya77))\@financier\.com|(?:customercare)\@findlaycb\.com|(?:mrsdebbielevin)\@firemail\.de|(?:steve_dickson)\@firemail\.eu|(?:harry\.jones)\@firstbondcapital\.com|(?:admindepart)\@firstinlandbnkplc\.com|(?:info)\@fnconsultant\.biz|(?:(?:e(?:golan2|u_payment)|gella1|k(?:aith\-angel|ossihpilip202)|pchwinningoffice1953|qatardonations16|smadartsadik|tepnherve00))\@foxmail\.com|(?:zen)\@fpg\.com\.co|(?:(?:mmpaulsmith145|t\.fitzgerald))\@frontier\.com|(?:mrchau1)\@gala\.net|(?:info)\@gcbonline\.co\.ua|(?:(?:bn|jb))\@getmaworldwide\.org|(?:info)\@gezimarkt\.com|(?:octaviancm)\@gmx\.co\.uk|(?:(?:ahmet\.broker|f(?:aridaomar|er3nrod1512)|kevin\-office|p\.hamedmoff|rosicboteruff|w(?:alter_anderson|esternunionrespond)))\@gmx\.com|(?:(?:fernrodyup12|harrish|miraiminaki))\@gmx\.fr|(?:juliairis)\@gmx\.net|(?:(?:arthur1alan|joxford))\@gmx\.us|(?:m(?:\.johnson10012|aryclayton123))\@googlemail\.com|(?:gordoncole)\@gordoncole\.co\.uk|(?:ceo)\@gpromo-team\.com|(?:garreth\.webb)\@grossfitconsultancy\.biz|(?:solotexglobalcouriercompany)\@groupesgb\.net|(?:irenegeorgiadou)\@hellenicbankcy\.com|(?:raymondchanjp)\@hkmaltd\.org|(?:marketing)\@homebg\.in|(?:(?:cocacolaofficialprize1|williamsdavid_3r))\@hotmail\.co\.uk|(?:christgoldwilliams)\@hotmail\.fr|(?:douglasflint)\@hsbcbank\.group|(?:gtakeshi)\@htisteel\.com|(?:alexgoodwill129)\@ibibo\.com|(?:victorwang67)\@imail\.com|(?:bo_li)\@imgrantfunds\.com|(?:patrickc)\@inbox\.com|(?:irdi33)\@inbox\.lt|(?:imffunds)\@inbox\.lv|(?:info\.fidelity\.finance)\@inbox\.ru|(?:(?:a\.josepaulino|jonardossantos|m(?:\.wood|ingmui0012)|off(?:er2021|iceme)|pierresgift_2021))\@indamail\.hu|(?:lizawong)\@infohsbc\.net|(?:baankston)\@instruction\.com|(?:info)\@intarpol-int\.online|(?:jacek_urbanski)\@irishdoorsystemsltd\.com|(?:sheikhwahab)\@islamicfb\.com|(?:mrsfatimahhassan[12])\@itbox\.ro|(?:contactme)\@jimmyofficial\.info|(?:info)\@johannaconsultancy\.com|(?:info)\@johnhenryorg\.com|(?:john)\@johnpedroconsults\.com|(?:(?:annzainab2022|h(?:ashimirrr22|re187390)|lotteryusa\.com|paulagonzalez|re(?:e(?:m\.alhashimi|ninvestor111)|mmhashimi)))\@kakao\.com|(?:wbuk03)\@katamail\.com|(?:(?:ditmereduart|europsenderscouriers|lewiscarl))\@keemail\.me|(?:mikiwilliams)\@knol-power\.nl|(?:a015)\@laposte\.net|(?:johndavid)\@lawdistributionlimited\.com|(?:info)\@lbafltd\.com|(?:philiphampton)\@lec20\.com|(?:ecowascourt)\@legislator\.com|(?:fatih)\@leventsimsek\.com\.tr|(?:olivia_simon)\@lihat\.dds-akaun\.com|(?:pb\-2pb012)\@live\.co\.uk|(?:(?:financiero172|helen_galloway|markjohnson650))\@live\.com|(?:mr\.williamrigule)\@live\.fr|(?:miraminaki)\@lycos\.com|(?:drdanielmminele)\@magicmail\.co\.za|(?:andrewh1)\@mail2banker\.com|(?:bmwofficeinfo)\@mail2consultant\.com|(?:lanxianjun)\@mail2hongkong\.com|(?:bjic)\@mail2one\.com|(?:hwc2)\@mail2world\.com|(?:shillay)\@mail\.bg|(?:(?:a(?:isha\-gaddafi0|yishagddafio|zimhashim2018)|info\.federalreserve\.org|johnkofithomas|kateclough1|mriamchombo1968|nancyvee80|philiproger101))\@mail\.com|(?:(?:ayishagddafio?|sambo_dasuki))\@mail\.ru|(?:(?:publishers_clearinghouse|rev\.williamschurch))\@mail\.uk|(?:mrcheongg2012)\@mailbox\.hu|(?:epowerball)\@mailbox\.sk|(?:cb(?:nofficemail|officemail))\@mailsire\.com|(?:managing\-director_schaefflergroup)\@mariaelisabeth\.gisb\.com\.my|(?:doo\.yusin)\@matherline-trade\.com|(?:johannreimann)\@memeware\.net|(?:sarb_bnk086)\@meta\.ua|(?:miguel)\@miguel-sanchez\.com|(?:info)\@morbicera\.com|(?:anjer\.keith)\@ms-fsp-europe\.com|(?:cadpayout01)\@my\.com|(?:me)\@myprivatemail\.website|(?:stephanfalzer)\@myself\.com|(?:(?:benoitdageville2023|nancytseling|reem9999|wujames))\@naver\.com|(?:abel)\@nbdeil\.com|(?:jessicahunt1960)\@net-c\.com|(?:zenith)\@nmk\.ugu\.pl|(?:maxedwards)\@octopusinvestment\.co\.uk|(?:info)\@officepch\.com|(?:lindsaytrembley)\@oimail\.com|(?:googleclaims111)\@one\.lt|(?:(?:accountingdrg|emmy\.marty))\@onet\.eu|(?:(?:allanwoodmarko1|eco\.depo\.services|fred\.grenville))\@onet\.pl|(?:secretservicce8)\@onionmail\.org|(?:info)\@onlinepch\.com|(?:dieterbe451)\@onmail\.com|(?:(?:castorock|infobiz2|jarramos|mrsalice09))\@ono\.com|(?:pablomancilla1)\@orange\.es|(?:servicio\.correo)\@orange\.fr|(?:info)\@ousos-elearning\.com|(?:turkish\-air)\@outlook\.com\.tr|(?:schaeffler(?:ariaelisabeth|mariaelisabeth))\@outlook\.de|(?:(?:ahmed3khan|dpt_transferunionwestern|mr\.onyeadams))\@outlook\.fr|(?:m\.khan1)\@outlook\.sa|(?:info\-casino888\.com)\@ozu\.es|(?:info)\@peagent\.net|(?:andrew\.penning)\@penninglegalassociate\.com|(?:info)\@phillipsmorgan\.co\.za|(?:support)\@piraeusegrecebnk\.com|(?:wood)\@poczta\.onet\.eu|(?:(?:m(?:aryjosen|boyaeth)|uncch\-info))\@post\.com|(?:(?:martinahrivnakova|united\.globeawardoffice))\@post\.cz|(?:ffundsremitunits)\@premiumtbnk\.com|(?:santiagomachado)\@presidency\.com|(?:(?:charitylisajohnrobinson700|leonardbain|noelldosi|stwrightsmaxinvestment))\@proton\.me|(?:ecowaspayoffice)\@protonmail\.ch|(?:uni1)\@rayana\.ir|(?:(?:franciscoperezc|garethbull808|leyen|mrsrose\.hill|robert\.cota|unionbatmpaymentsection))\@rediffmail\.com|(?:trust\-wallet)\@redirectionsdepartment\.xyz|(?:nidiabustamante)\@registerednurses\.com|(?:info)\@rehapmed\.com|(?:info)\@repsol\.org\.uk|(?:msn)\@resrubini\.com|(?:(?:gmackenzie001|wanczykmavis101))\@rogers\.com|(?:elena\.santos)\@rollageoup\.com|(?:info)\@roycockrum\.org|(?:mrs\.rachel2013)\@safe-mail\.net|(?:(?:deputygov_kuben|rcassim\.sarb|vera))\@safrica\.com|(?:enqraward)\@sbcglobal\.net|(?:fbotha2009)\@secsuremail\.com|(?:peterddeng)\@secsuremailer\.com|(?:francisbotha65)\@securesvsmail\.online|(?:smtpfox\-ys2n8)\@semillasdeamor\.com\.co|(?:wils)\@send\.com|(?:ibralsmma)\@seznam\.cz|(?:olena\.shevchenko)\@shumejda\.co\.uk|(?:(?:jimyang77|kentpace))\@sina\.com|(?:stan)\@soborka\.net|(?:(?:dycheseaan|sean(?:dyyches|sdychh)))\@sol\.dk|(?:info(?:04|1))\@sony\.com|(?:trevor)\@southernphone\.com\.au|(?:info\.jschneider)\@spainmail\.com|(?:mroliverbergmuellers)\@specialautokins\.com|(?:barrister_hans)\@stationlibraryjhelum\.com|(?:alexander)\@stny\.rr\.com|(?:fbidirector(?:11|wadc))\@superposta\.com|(?:anders\.karlsson)\@swedbankabgroup\.com|(?:insurance_contl)\@swissmail\.com|(?:nnbank)\@szm\.sk|(?:xiankailu)\@taiyaubank-hk\.com|(?:mhua)\@tbochk\.com|(?:clory)\@technet\.it|(?:billard\.thompson)\@thompsonlawassociates\.com|(?:fabio2016)\@tim\.it|(?:zimcargoservicehelpdesks)\@tlen\.pl|(?:bobby\.william)\@tradent\.net|(?:punit)\@traficoanalytica\.com|(?:lopez\.rios)\@udttld\.com|(?:2100973645smsgateway)\@ukraine\.wheat-farmers\.website|(?:info)\@un-grant\.info|(?:(?:b(?:lueskyanimatedfilm|rown\.monica_l)|david\.r\.malpass|info\.(?:clev\.frb|imfamerica)|kristinewellensteinn|policyaddmin\.file))\@usa\.com|(?:team)\@veraphanteepsuwan\.com|(?:dataphilanthropy)\@vipmail\.hu|(?:bmuczdh)\@virgilio\.it|(?:itgiix)\@visa\.com|(?:jvona)\@viscom\.net|(?:holt1231)\@w\.cn|(?:daydreamin)\@wanadoo\.fr|(?:(?:foreignoperationmanager|mr\.(?:ikokuoya|olicadams)))\@web\.cg|(?:weboffice05)\@web\.de|(?:portiaw)\@webbe\.work|(?:b(?:\-calebfirm2007|enklerk\-postpact2|oriscaleb121))\@webmail\.co\.za|(?:(?:elizabethlyonsfield|frboffice|jw\.ny\.frb))\@webmail\.hu|(?:verificationsector)\@webname\.com|(?:e\.shaw)\@wilmagroup\.com|(?:tbryant6)\@woh\.rr\.com|(?:henleywatkinss)\@y7mail\.com|(?:johnkwanghooi101)\@yahoo\.c|(?:chapelliermadeleine)\@yahoo\.ca|(?:arroblutt\.paymentoffice)\@yahoo\.cn|(?:bencook5511)\@yahoo\.co\.nz|(?:gloriamoses02)\@yahoo\.co\.th|(?:(?:abigailbanga1975|jeffwilliam207|owengreen70|samue95))\@yahoo\.co\.uk|(?:(?:changgordon(?:61|946)|thomaspeter227))\@yahoo\.com\.hk|(?:jessicp1)\@yahoo\.com\.sg|(?:boa2cb)\@yahoo\.com\.vn|(?:contactus88\-00)\@yahoo\.es|(?:(?:fortinsandrine|rita_will001))\@yahoo\.fr|(?:ukdebtmanagement5)\@yahool\.com|(?:dr\.amelia\.george1)\@yandex\.ru|(?:(?:alfred_cheuk_chow|maviswanczyk01))\@yeah\.net|(?:(?:avaethan21|westernunion817))\@ymail\.com|(?:goldfish20123)\@zing\.vn|(?:(?:asiafoundationorg\.hr|jefflindsay))\@zoho\.com|(?:(?:benaffleck1977|monicadaniels909))\@zohomail\.com|(?:(?:laprimitivaes|robert166003))\@zohomail\.eu)$/i

describe REPTO_419_FRAUD Reply-To is known advance fee fraud collector mailbox
score REPTO_419_FRAUD 3.000
tflags REPTO_419_FRAUD publish



# 419 fraud spam body addresses, generated at Fri Oct  4 18:56:20 2024

uri __BODY_EMAIL_419_FRAUD_GM /^mailto:(?=[^\s<>@]+\@gmail\.com)(?:(?:01marviswanczyk|1magnumsecuritiesllc|3dazimhashimpremji7|7912richardtony|9porssts9|a(?:\.(?:bankofaffican|wafager1)|0(?:egbutuu|info\.foreign\.manager1)|12udubello|arenic1|b(?:d(?:97412345|u(?:kfahim|l(?:karim2880|lahmundani019)))|u(?:lkareem461|shadi0004))|c(?:count\.optionsmr\.jonasarmstrong|e(?:cere001|x\.inititative))|d(?:iallo\.boa|rabidiahmed)|gent(?:\.laryedwad|mrssolomon)|isha(?:1976(?:algaddafi|gaddafi25)|gad(?:afi210|dafi(?:aam|libya5|sdaughter)))|jordennishornbeck53|l(?:\.jo60691737|a(?:inminc73|n\.austin(?:041|223)|s(?:cramac|tmacaulay))|ber\.yang222|ex(?:anderpeterson44(?:77|99)|hoffman3319)|ghafrij13|icedoris0000|kasimunadi221|l(?:enholden121|isoncluade11)|nizmaria|phabankofgreecerepublic|ure\.wawrenka1472)|m(?:b(?:\.w\.stuart\.symington|assadormarybethleonardl4)|ericadeliverycomapny1(?:300|800)|ina(?:ltwaijiri02|medjahed95))|n(?:ager1|c(?:ebenin|ials|ospende8)|d(?:re(?:aclark1219|lwotti|w(?:bailey449|umehunitedbankforafrica))|trewbailey774|yfox0022)|itaminarnguessan|kheadofficelometogo1985|n(?:a(?:choihkkic|llee091|sigurlaug458)|ettrevor|jenijohnsonn)|t(?:hony(?:alvaradollc|jblinken61)|o(?:meuenio|niopaco20consultant))|yuan006)|office1office1|r(?:adka01|chibaldhamble|nethgracelg01|thur11alan)|s(?:h(?:0611jnag|westwood7)|sistance7agent)|t(?:mcarddepartment0024|sappinc2022|tohlawoffice\.tg)|ustin(?:billmark9|esino)|w1614860|yevayawovi190|z(?:i(?:m(?:\.h(?:ashim\.premj|premji13)|hashim(?:2018|donation2019|premji7))|z(?:dake0|george50))|zedineguessous))|b(?:a(?:lla250abc|nk(?:1985|centralasiahalobca34|ingcentralng)|ochang7a|r(?:\.jacksonwilliams|bersmadar75|clays\.kenya\.bank|lesme002|rister(?:\.fidelisokafor|clarkephillips(?:2(?:02|4)|4[589])|lordruben94)|teld\.huisman01)|uknechtk\.shoreline)|bongo593|c0996013|e(?:alitoniua9|l(?:inekra1|miromalta)|n(?:ezero392|gatl80|jaminsarah195)|rnard\.arnult01|t(?:h17780|syholden940))|i(?:anigercash|ll(?:\.lawrence0747|fhome))|laisevodoun|mw(?:automobile242|officeline)|o(?:arddept0|cchenyi|ussambairenepatricia)|r(?:a(?:ndy\.heavenscenttt|volpaul55)|endalaporte112)|uff(?:ettwarrene21|ookj)|w1832621)|c(?:1nicele|a(?:dpayout|ixaseguros9810001|mluba2017|pinolly|r(?:eisu98|twrighttownhomesllc))|bnatm847|claimsa|e(?:da\.ogada77|li(?:cerez|neroullier(?:200|nm))|x02)|fc\.atmoffice56|h(?:a(?:ngching885|r(?:itylisajohnrobinson41|l(?:es(?:luenga01|scharf2112|wrightdepartments)|tonnewmanus1)))|e(?:mchung1011|nchung1011)|ienk(?:raymond|wongp))|iticonsultantjohncg0|k(?:enzbezos|ruger00017)|l(?:a(?:im(?:\.facebook001|adviser11|officeadm)|xtonpaul00)|s79408)|o(?:l(?:\.(?:ahmedmarani|hmedismari)|abdullahassi|edavid77032|husseinharmuchc(?:cj|j)|ombasjuan53)|mp(?:asationsettlement|ensationcommitteboard)|n(?:nellyfrances\.cf|sult(?:matthias|sto\.u)|tactad00[04])|operation612)|pt\.eugenebarash|r(?:a(?:bbechambers|wfordgillies1)|i(?:mildaeduardontuintui|st(?:bru(?:05|n05)|davis67|i1537bru|ydavis(?:donation1|foundation0101))))|u(?:berichard61|nninghammrssharonloren|stomerservicelacaixa2)|zyk775)|d(?:29laws|a(?:fi1976|n(?:008629|i(?:el35508109|shlokija)|n(?:uar4|ydan24532))|tukannuarbinmusa|vi(?:d(?:\.loanfirm18|ibe718|kaltschmidtmaureend|larbi11|pere337|r(?:amirez\.luis9012|ikhen))|scarolyn334|yax98))|cole77032|e(?:an\.johnston570|btm123|n(?:iwalts|nis(?:clark659|quaid888))|partmentofstate(?:123|202|321)|t(?:ails\.\-shery\.gtl131|lefeckhardd))|h(?:amilton9099|ill27676|lexpresscompany176|sdevice)|i(?:a(?:monddiamondfinancebenin|n(?:e\.s\.wojcicki|nasherylab)|rrahchantal36)|gitalassetholding|p(?:francis1|lomatsshenry))|j970146|minique200|o(?:minicahkye|na(?:ldwilliam1988|tion(?:gafundtion|helpercare5)))|r(?:\.(?:meirh|wilsonpaul02)|29876dr|a(?:bodid|ymdm)|davidrhama221|frederickowen7|j(?:amesdee|oesimon77)|ken(?:nedyuzo|obiorah1?)|meier\.heidi?|owenfrederick|rhamahassan22)|scolder4|u(?:a1155a|b(?:efrank1970|reuilgmbh)|nsilva58|stinmoskovitz\.2facebook)|v\.metus|willslevens|yuzo)|e(?:434051|b(?:enezero392|ook)|christina937|d(?:envictor71|mundventura689|runity|winandersonprivate)|fcc\.financial\.dept|gbutuu|ign\.manager1|kiana|l(?:i(?:bethgomez(?:175|499)|sabeth(?:gmuer11|maria600)|zabethedw0)|o(?:diesawadogo123|tocashoffice1?))|m(?:2keld|efiele(?:328|g757)|ilyrichmond391)|n(?:court1945|gr\.des01)|r(?:2009|e(?:evemusk681|nakgeorge123|zcelic0)|ioncarter\.private)|s(?:sexlss1|therkatherine1960)|togo1985|vgpatmow|wynn284)|f(?:\.mikhail025|a(?:ithdesrie511|milyofsmith112|rahwasam101|tme\.mehmed001)|b(?:589767|lott47)|e(?:deralreserve(?:bankdallasdst|dbankdallas)|lix88995|yzaybrahim)|fle98|g0067333|i(?:duciarybmw2020|nanciera175|rstbank(?:49(?:666|966)|6669|9966|k49666))|j569282|l(?:556249|uhmann\.dn)|o(?:ropunionbank|undations\.west)|p462558|r(?:a(?:100dub132|n(?:c(?:es(?:\.connelly2|patrickconnolly(?:5050|4))|isca(?:mendoza960|samendoza))|k(?:j(?:ane984|ody2|wangg)|l(?:aurarivera|inpiesie6))))|e(?:ddiejohn655|elottosweepstake51)|idmanmikhail511)|spero8[02]|u(?:lanlan28|n(?:dinternationalmonetary214|gg1w)))|g(?:00gleggewinner19|a(?:b(?:albertoassociates|riel(?:eschmitt002|kalia1102))|ddafidraisha990|r(?:ciavincent500|ethbull112016|yakinson121))|b(?:528796|ill4880)|e(?:n(?:\.ahmedmsksi|eralwilliamstony990)|orge(?:brownhoward02|kwame481)|r(?:aldjhjh11|tjanvlieghe787))|i(?:idp955|lbert12oook|ocastano21)|kwasiiwusu1\.persona|l(?:enmoore0011|oriachow5052)|n\.manager1|o(?:dfreyscottdonation|glegewinnerteam|o(?:dnessxtra|golteam2019|oglegwiinner219)|rdondallen52)|r(?:aceobia001|e(?:ant311|en(?:ergeoffrey(?:64|776)|lanternlawfirm)|ykuta20))|ubarevaelena58|veraallen|w522834)|h(?:a(?:alqadafi1976|r(?:gate2909|r(?:ison\.williams5000|yebert101)|twellbdaniel)|s(?:h(?:imyreem78|mireem801)|sanalshujairy)|uperthilbigbeate|zimissa03)|dpaymentoffice2018|e(?:a(?:doffice(?:471|centre0210)|therbrooeke101)|cto(?:alon|r(?:castillos653|scastillo6))|l(?:en(?:adamsidaho|giggs88)|pdesk47321)|ritagetrustbank1985)|g(?:8669000|old8080)|heba\.hhassan207|i(?:ldad837|toshurui|ygohscurtis)|o(?:lsemeyerole6|nmackjohn518|p00|rnbeckmajordennis63[478]|seoky(?:34|9))|sbchgm|trryt34|uichmh|warz)|i(?:1955smael|amannjejosonn|b(?:ed627|rahimelizabeth654)|cbcnewyork5|gn\.manager1|jheidi17|l(?:iane\.bettencourt1945|lianbrown)|mf(?:deputyoff(?:000|ice)|grantinter)|n(?:c02|fo(?:\.(?:a(?:b(?:dulrafiqmusau|ogadosmfontana)|nnedouglas10)|diplomat0[78]|foreign\.manager1|g00gleclaim|jschneider|marviswanczyk360|orangedor|ulmusau)|64240|asminternationalpk|bankofamerikaa|dessk\.dfwairportonline|fdrserve|t(?:ech4st255|tcuckk)|vidalpamela00)|gridrolle2|t(?:ernationallppp1|linvestorsfirm)|vestmentinfo11)|onhelpercare5|rvinekim67|s(?:mail(?:eman874|tarkan533)|tfoundation99)|tagetrustbank1985)|j(?:35809121|a(?:6002932|888179|cobmaseon5995|m(?:alpriv8un|es(?:carlos17885|okoh82))|n(?:ahramadanabu|nsjonifer|usensecureprivate)|sonyeungchiwai|vierlesme001)|b(?:5406424|lsuntrust)|c2222222rrr|e(?:fferydean1960|nn(?:iannjhsonn|ybrown01222)|robtt|ssikasingh4)|j(?:7291634|osvu|umelelo)|k3311131|m(?:3461128|powellfr)|o(?:edward023|hn(?:\.wilde\.oneplusfinance|a9577|griffn818|nietaylor242|paton\.alphafmc|r(?:awlings956|oxfordjr1)|son(?:deba|rmorris|wilson(?:389|490))|tanko214|uba234|walterlove2010)|monkzza|n(?:a(?:ahaskel19|haskel19|thanhaskel377)|esandassociates68|hugo1964|monkssa)|rtownsend01|se(?:ffeldrich|ph(?:acevedo024|babatunde192|ichael41))|vannyanderson001|y(?:ce00011|mrskone5))|rawlings007|s4fernado|u(?:lie(?:leach77|t\.le(?:222|e2222)|watson975)|sticellawgroup)|w6935997)|k(?:a(?:dulinayulii(?:ia|a)|l(?:iaksandr5|stromjames3|tschmidtdavid8)|malnizar000|rabo\.ramala39|t(?:ebaron(?:barr|xq)|hilittman7|jamess043|rinaziako56))|buhazza1|e(?:lsawamelia55|n(?:mckenziejr|nedy\.sawadogo19))|halidbuhazza99|ipkalyabekiana|js09376|kasbu790|o(?:n(?:emrsjoy|takt\.claim)|ssiphilip202|tokairportcargo|watsusho\.co\.ltd\.jp)|r(?:istinewellenstein024|nkl1109)|un(?:gwei7777|ioue28)|wasiowusug)|l(?:a(?:ie66v|r(?:ateambo|rytoms200)|ur(?:a\.chashih147|sent892)|w(?:fem15|officealouancooparation|rencefoundation30))|blackshirepm|e(?:enasinghs97|n(?:dfair\.co\.uk1|netth)|onidasresearch|rynne(?:0west99|west(?:2289|5412)))|gaddafi|i(?:a(?:mfinchus(?:11|3)|ne\.bettencourt1945)|ezlnatashavanessa|fecshortt63|li(?:ane\.bettencourt1945|ianchrstph)|n(?:elink008|glung104)|sa(?:milner001|robin117)|xiung(?:l48|9))|jo(?:bsfoundation|hn6132)|lee091|o(?:g(?:anntomas|insemails)|rrainewirengee|t(?:eriaenlinea17|tyoffice1)|u(?:ghreymargaret67|isdreyfusmargarita5))|p319765|s(?:8409209|arbn01|chantal86)|tant|u(?:c(?:iamariacampbell|kywinners2018)|sba\.moored2019)|w94059|y(?:\.cheapiseth909|diawright836|n(?:\.arthur011|brown7|cmba440|n(?:mkl3332|piet1982))))|m(?:\.franc(?:co9[14]|o10001)|a(?:bel(?:\.manaku|manakuuu)|ck(?:enzbezos|oliver324)|dam(?:gadafiaisha|koenig\.ruhama1b)|i(?:eralois59|ncare655)|j(?:ialfutt|or(?:dennishornbeck53|townsend01))|kaltschmidt|ll(?:am\.mlawal|etman2021)|mastar33m|n(?:a(?:ger1|nkovefimovich)|duesq58|fran6(?:30|56)|uelfranco(?:4313|727|donation02|foundation0|spende8))|r(?:i(?:a(?:111dembele|27idemba|3(?:31lucas|51lucas)|hhills00|nne(?:jeanne849|woosley90))|celharriison99|nacoleman84|opabl26|tinesecurityusa)|k(?:roth456|uses200)|shalh011|tin(?:amayer903|eziglesiasabogados|jrschwarz)|y(?:franson56|josen(?:62|81)))|s(?:ayohara001|onmanny05|pencer5151)|t(?:hewriaanza|insbrien22)|u(?:hin52|noveutileina|rhinck11?)|viswan(?:044|142|czyk(?:01478|1(?:19|987)|4(?:89|5)|775|foundation45|k112|zz))|xaajn|ydetratt|zerfexi)|brons667|c(?:\.cheadychang7(?:33|6)|kenthando|lennetth)|dredban775|e(?:044386|engeoffrey|l(?:aniekreiss1971|lagolan|vidabullock5))|g(?:a(?:brielarthurr|ddafi506)|frederick80)|husameddine|i(?:c(?:h(?:ael\.woosley1972|eal(?:armstrong68|sjohnj|wuu002))|paulla|w954)|k(?:e(?:\.weirsky\.foundation(?:001|al001)|austinesino)|h(?:\.fridman|ai(?:\.fridman261|lfridm32)))|n(?:fin\.gv|tonjustin98)|ss(?:\.(?:aminaibrahim|melisa\.mehmett|yasmineibrahim101)|boteogottai|yaelronen))|j(?:568566|minabii)|k(?:ent7117|untjoro52)|lbriggs08860|m(?:1086771|argaritalouisdreyfus|gfrederick81|ohammadaljllilati|rstephen16)|nmalarge|o(?:ham(?:edabdul1717|m(?:adraqab00|daljililati1|edshamekh24))|rienkal30)|r(?:\.(?:elbahi\.mohammed\.2021|justinmaxwell09|lusee|tonyelumelu60|wlsonkabore)|4021212|7672900|abelaise|cjames001|d517341|eric(?:franck|schmid4002)|george(?:emera|wilson41)|hanimuhammad627|jamesmc6|m(?:ichael\.bishop00|organgomez56)|r(?:echardthomas|ichardanthony1)|s(?:\.(?:athenajacky492|biyufungchi16|janetolsen?|marinakuznetsov|olsenjanett|su(?:sanread12|zarawanmaling))|a(?:isha(?:alqadafi1976|gaddafi(?:55|62))|n(?:gela454|nchan47)|shaalqaddfi117)|catherineyokes|dominiquethomas7777|e(?:lisabeth73peter|velynbrown7)|f(?:atimaamiraqureshi1983|p2001)|gezeria|h(?:amima60|ristinemadeleine|wee199)|isabelladz|j(?:ackman123|essicajeffrey3|illianbrown|lleach)|katherinepascal9|l(?:isamilner08|ouisabenson2002|uciacorrao)|m(?:a(?:riaelizabethscheffle98|ureens847|yaoliver31)|icheleallison51|ugan)|nicole(?:fr1marios|marois89)|r(?:eem362|obinsanders(?:185|0)|uthsmith9900)|s(?:ar(?:ahbenjamin103|iamirahwulu)|ophiac(?:hrist)?)|v(?:eraaellen|ictoriaedmond03)|winlytheresa)|tomcrist\.ca|vi(?:ktorzubkovv|ncentandrea)|zaishaalqadafi1976)|s(?:\.ellagolan56|agent02|cotthenryjames91|feyzaybrahim|golaan4|smadar44)|twvvv|u(?:ali000111|s(?:ahahmed7d|tadris22))|wmwe10|y(?:burghhugohendrik|racbally))|n(?:a(?:ger1|omiiwasaki181)|c(?:essconnolly|kniem|uberichard61)|eilt(?:9108|rotter(?:2017|968))|fo\.(?:annedouglas10|foreign\.manager1)|harmuchccj|i(?:cholas\.jose73|eberri)|obuyuki\.hirano128|t(?:awdglobal|uintui)|uelfrancodonation02|v637245)|o(?:\.peace004|3344nb|ffi(?:c(?:e(?:\.012123|emaill0002|rricherd876|windowterms)|ialserviceuae)|zielllk)|hallkenneth1|lenasheve73|m(?:arinyandeng|cristworld)|n(?:lineresourcesworldbankb|ufoundationclaims)|p(?:cwkdw|hiachrist)|r(?:abankheadofficelometogo1985|karpatrick)|swald\.l(?:\.lewis|ewwis)|xfaminternationa1980)|p(?:a(?:cex02|storfrancesco1|tric(?:ia881a|k(?:\.efcc|andfrancessconnolly|frances743))|ul(?:eed1969|n8018|richard4k)|ymentofficer14)|b(?:ph202lay2|rookk0)|e(?:130304|nding(?:redirections|waletsfortrust)|rezdonlorenzo336|t(?:er(?:\.waddell204|guggi0|kenin73?|stephen4040)|ronasofficepromo))|good60000|h(?:\.cbnl|il(?:iprogerr|lip\.richead218))|i(?:eterstevens511|lz37754)|o(?:lloke|usazgullaume|wellmrwilliam)|pinc02|r(?:esleybathini1|imecapitalfianceltd|o(?:1nvstream|cessing2013general))|trsvermeulen|ublic|w178483)|q(?:iquanzhou7|nzeng1|pedrohillsdonations|uirlduga)|r(?:19772744|677gfd|83718446|a(?:hashimi80|johnfernn|kidy23|lhashimi78|rivera|ymond(?:aba200|damon(?:15|2)))|e(?:alyh596|beccagarang11|em(?:has(?:himy(?:1978|mail)|m044)|n(?:2214|asser003302))|lpandemic|m(?:ittanceofficeasaba|ji7)|neehi(?:i\.omb|ll1817)|plyback00|sultbox1404|ttayuen|v(?:\.(?:jamesabel1|mikedadax)|ernestcebi|fr(?:ankjackson91|paulwilliams2))|wumehunitedbankforafrica)|i(?:ch(?:19williams|a(?:miller18|rd(?:4k|lustig4u|w(?:ahl511|il(?:lis815|son19091))))|lawand(?:ds|s))|ffn818|tawilliams4141)|josh(?:200000|5858)|kuofung18|main2028|o(?:b(?:ert(?:cota391|hanandez6655)|inf036)|naldmorris786|s(?:a\.gomes0044|ekipkalya934))|raya9989|svcdusan|t(?:\.rev\.ericmark05|honrichardshepherd)|u(?:ddicklana561|ssiaworldcuppromo|thshoreline))|s(?:a(?:chingrams|l(?:ehhussienconsult1|imzaid(?:09|7000))|nch(?:e\.pedroz33|oscozfifa)|rfiafarfask7|vicperez)|cott(?:henryjames91|pete(?:89658|rs7989))|e(?:c(?:\.steventernermnuchin|retservicce[789])|phichael41|r(?:geantrobertbrown1|vicemoneygram8)|ydouthiebaconsultant)|g(?:\.offi(?:ce\.group|ice\.group)|t(?:\.monicab03|ireneb2))|h(?:a(?:msiahmohamadyunusbnegara|nemissler(?:2009|3))|ery(?:\.gtl131|etr03)|inawatrathaksin93)|i(?:lverlakeconsultant|m(?:lkheng5|onhei47))|ky\.foundation001|l5342743|o(?:fia\.adams201|p(?:adam3|hiajesse41)|u(?:rcingloggs|thwsltd))|p(?:a(?:cex(?:\.inititative|02)|gentrose)|eelman1972)|t(?:anleyjohn1469|bank1985|e(?:fanpersson886|phen(?:7tam|tam1(?:47|6))|ve(?:acrabbe|n(?:chamberonline|priceprivate)))|hval446119)|u(?:iyang(?:\.boc|02)|n(?:\.hor20|gw\.wong1)|san(?:freeman112x|neklatten502)|zana111bah)|w(?:eeneyjohnson384|islottnl))|t(?:a(?:mmy(?:21gill|webster24)|y(?:ebsouami0|lorcathy362))|ch33555|davalvse|e(?:am\.spacex02|lexgraphicremit\.cbn1|nreyrosilvana54|p0chen|rryparkins11)|h(?:ailandbankoffice01|e(?:ara\.choy2|o(?:dorosloannis9|sfoundation60)|resawilliams7661?|smithf(?:amily124|m124)))|imothymetheny01|lyerdonald613|mason9w4r|o(?:m(?:\.cristdonor|ander231|c(?:hrist1995|rist(?:52|donation12|foundation99|world))|spende480)|ny(?:\.chung760|robins777|zimpro11)|pchronodesk|shikazusendo101)|p2911220|r(?:ansferriamoney0|embleylindsay|ustfoundationsigridrausing)|sfoundation65|t(?:encourt1945|khan69s))|u(?:ba(?:\.bankofaffican|bank(?:bjplc|headoffice471))|d(?:erleyen52|o27657|regwqr)|gauthorization|kponguko|maru(?:godwin599|kareem8)|n(?:claimedfunds554|ited(?:bankforafrica\.plc102|nation(?:organization70|s(?:8182|councilrefunds))))|s(?:a(?:department\.treasuryunit|lotery2)|departmentofjustice80))|v(?:a(?:mamakazlegalchambers|nderwesthuizen560)|e(?:enapatel883|linagreen|neerchris20003|r(?:a(?:aellen7|hollinkvan0)|enichekaterinaekaterina4))|i(?:ct(?:marc1|oriaabraham2310)|dalpamela85|n(?:centgarcia6000|gut(?:170|7))|p(?:financeace|jeferrey)|sa\.incusa1101|vianyuan006)|johannes271|n935990|owpovertyfoundation)|w(?:a(?:dp4726|hlr(?:5990|ichard18)|ldibeatesieberhagen|nczyk(?:m61|ooo006)|rrenebuffett(?:398|2))|b(?:271981|6159980|uffetdonationprogram)|c5000dle|d232633|e(?:llensteinfoundation251|stleygraham4t)|hatsapp(?:inc(?:02|2022)|official001)|i(?:elandherzog\.sw\.herad16|ll(?:clark(?:0010|2618|629)|iam(?:robert3852|smartyrs888)|uyun)|naticket)|kfinancialservice|orldbankregionalmanageroffice|u(?:\.office212|mt722)|ww\.(?:africafinancials|feltonandrew|moneygram9054))|y(?:\.oguzhan011|anghoseok5|doo974|i(?:hsbctanmd|nglukshinawtra)|mentoffice2018|o(?:ngkm00|usefzongo5722))|z(?:bank8876|en(?:etth01|ithbankplconline98)|hangweisheng199|kiaslan1963|minhong65|ubkovmrviktor|yk(?:1987|k112))))\@gmail\.com$/i

meta BODY_EMAIL_419_FRAUD_GM __BODY_EMAIL_419_FRAUD_GM && !REPTO_419_FRAUD_GM && !__HAS_IN_REPLY_TO 
describe BODY_EMAIL_419_FRAUD_GM Email address in body is likely advance fee fraud collector mailbox
score BODY_EMAIL_419_FRAUD_GM 2.500
#tflags BODY_EMAIL_419_FRAUD_GM nopublish



uri __BODY_EMAIL_419_FRAUD_GM_LOOSE /^mailto:(?=[^\s<>@]+\@gmail\.com)(?:(?:3dazimhashimpremji|9porssts|a(?:\.wafager|0info\.foreign\.manager|arenic|b(?:dul(?:karim|lahmundani)|u(?:lkareem|shadi))|cecere|isha(?:1976gaddafi|gad(?:afi|dafilibya))|jordennishornbeck|l(?:a(?:inminc|n\.austin)|ber\.yang|ex(?:anderpeterson|hoffman)|ghafrij|icedoris|kasimunadi|l(?:enholden|isoncluade)|ure\.wawrenka)|m(?:bassadormarybethleonardl|ericadeliverycomapny|ina(?:ltwaijiri|medjahed))|n(?:ager|cospende|d(?:re(?:aclark|wbailey)|trewbailey|yfox)|kheadofficelometogo|na(?:llee|sigurlaug)|thonyjblinken|yuan)|office1office|r(?:adka|nethgracelg)|shwestwood|t(?:mcarddepartment|sappinc)|ustinbillmark|yevayawovi|zi(?:m(?:\.hpremji|hashim(?:(?:donation|premji))?)|z(?:dake|george)))|b(?:a(?:nk(?:centralasiahalobca)?|r(?:bersmadar|lesme|rister(?:clarkephillips|lordruben)|teld\.huisman))|bongo|e(?:alitoniua|linekra|n(?:ezero|gatl|jaminsarah)|rnard\.arnult|tsyholden)|ill\.lawrence|mwautomobile|oarddept|r(?:avolpaul|endalaporte)|uffettwarrene)|c(?:a(?:mluba|reisu)|bnatm|e(?:da\.ogada|lineroullier|x)|fc\.atmoffice|h(?:a(?:ngching|r(?:itylisajohnrobinson|l(?:es(?:luenga|scharf)|tonnewmanus)))|e(?:mchung|nchung))|iticonsultantjohncg|la(?:im(?:\.facebook|adviser)|xtonpaul)|o(?:lombasjuan|ntactad|operation)|r(?:awfordgillies|ist(?:brun?|davis|ydavis(?:donation|foundation)))|u(?:berichard|stomerservicelacaixa)|zyk)|d(?:a(?:fi|nnuar|vi(?:d(?:\.loanfirm|ibe|larbi|pere|ramirez\.luis)|scarolyn|yax))|e(?:an\.johnston|btm|nnis(?:clark|quaid)|partmentofstate|tails\.\-shery\.gtl)|h(?:amilton|lexpresscompany)|i(?:arrahchantal|pfrancis)|minique|ona(?:ldwilliam|tionhelpercare)|r(?:\.wilsonpaul|davidrhama|frederickowen|joesimon|kenobiorah|rhamahassan)|scolder|u(?:befrank|nsilva))|e(?:benezero|christina|d(?:envictor|mundventura)|ign\.manager|l(?:i(?:bethgomez|sabeth(?:gmuer|maria)|zabethedw)|o(?:diesawadogo|tocashoffice))|m(?:efieleg?|ilyrichmond)|n(?:court|gr\.des)|re(?:evemusk|nakgeorge|zcelic)|s(?:sexlss|therkatherine)|togo|wynn)|f(?:\.mikhail|a(?:ithdesrie|milyofsmith|rahwasam|tme\.mehmed)|blott|fle|i(?:duciarybmw|nanciera|rstbank)|r(?:a(?:100dub|n(?:c(?:es(?:\.connelly|patrickconnolly)|iscamendoza)|k(?:j(?:ane|ody)|linpiesie)))|e(?:ddiejohn|elottosweepstake)|idmanmikhail)|spero|u(?:lanlan|ndinternationalmonetary))|g(?:00gleggewinner|a(?:briel(?:eschmitt|kalia)|ddafidraisha|r(?:ciavincent|yakinson))|bill|e(?:neralwilliamstony|orge(?:brownhoward|kwame)|r(?:aldjhjh|tjanvlieghe))|i(?:idp|ocastano)|l(?:enmoore|oriachow)|n\.manager|o(?:o(?:golteam|oglegwiinner)|rdondallen)|r(?:aceobia|e(?:ant|energeoffrey|ykuta))|ubarevaelena)|h(?:a(?:alqadafi|r(?:gate|r(?:ison\.williams|yebert))|sh(?:imyreem|mireem)|zimissa)|dpaymentoffice|e(?:a(?:doffice(?:centre)?|therbrooeke)|ctor(?:castillos|scastillo)|lengiggs|ritagetrustbank)|gold|heba\.hhassan|ildad|o(?:lsemeyerole|nmackjohn|rnbeckmajordennis|seoky|p)|trryt)|i(?:b(?:ed|rahimelizabeth)|cbcnewyork|gn\.manager|jheidi|liane\.bettencourt|mfdeputyoff|n(?:fo(?:\.(?:annedouglas|diplomat|foreign\.manager|marviswanczyk)|vidalpamela)|gridrolle|ternationallppp|vestmentinfo|c)|onhelpercare|rvinekim|s(?:mail(?:eman|tarkan)|tfoundation)|tagetrustbank)|j(?:a(?:cobmaseon|mesokoh|vierlesme)|e(?:fferydean|ssikasingh)|o(?:edward|hn(?:griffn|nietaylor|r(?:awlings|oxfordjr)|sonwilson|tanko|uba|walterlove|a)|n(?:a(?:ahaskel|haskel|thanhaskel)|esandassociates|hugo)|rtownsend|seph(?:acevedo|babatunde|ichael)|vannyanderson|ymrskone)|rawlings|ulie(?:leach|t\.lee?|watson))|k(?:a(?:l(?:iaksandr|stromjames|tschmidtdavid)|malnizar|rabo\.ramala|t(?:hilittman|jamess|rinaziako))|buhazza|e(?:lsawamelia|nnedy\.sawadogo)|halidbuhazza|kasbu|ossiphilip|r(?:istinewellenstein|nkl)|un(?:gwei|ioue))|l(?:a(?:rrytoms|ur(?:a\.chashih|sent)|w(?:fem|rencefoundation))|e(?:enasinghs|ndfair\.co\.uk|rynne(?:0west|west))|i(?:a(?:mfinchus|ne\.bettencourt)|fecshortt|liane\.bettencourt|n(?:elink|glung)|sa(?:milner|robin)|xiungl?)|john|lee|o(?:t(?:eriaenlinea|tyoffice)|u(?:ghreymargaret|isdreyfusmargarita))|s(?:arbn|chantal)|u(?:ckywinners|sba\.moored)|y(?:\.cheapiseth|diawright|n(?:\.arthur|brown|cmba|n(?:mkl|piet))))|m(?:\.francco|a(?:ckoliver|i(?:eralois|ncare)|jor(?:dennishornbeck|townsend)|lletman|n(?:ager|duesq|fran|uelfranco(?:(?:donation|foundation|spende))?)|r(?:i(?:a(?:hhills|nne(?:jeanne|woosley))|celharriison|nacoleman|opabl)|k(?:roth|uses)|shalh|tinamayer|y(?:franson|josen))|s(?:ayohara|onmanny|pencer)|tinsbrien|u(?:hin|rhinck)|viswan(?:czyk(?:(?:foundation|k))?)?)|brons|c\.cheadychang|dredban|el(?:aniekreiss|vidabullock)|g(?:addafi|frederick)|i(?:c(?:h(?:ael\.woosley|eal(?:armstrong|wuu))|w)|k(?:e\.weirsky\.foundation(?:al)?|hai(?:\.fridman|lfridm))|ntonjustin|ss\.yasmineibrahim)|k(?:ent|untjoro)|m(?:gfrederick|rstephen)|o(?:ham(?:edabdul|m(?:adraqab|daljililati|edshamekh))|rienkal)|r(?:\.(?:elbahi\.mohammed\.|justinmaxwell|tonyelumelu)|cjames|ericschmid|georgewilson|hanimuhammad|jamesmc|m(?:ichael\.bishop|organgomez)|richardanthony|s(?:\.(?:athenajacky|biyufungchi|susanread)|a(?:isha(?:alqadafi|gaddafi)|n(?:gela|nchan)|shaalqaddfi)|dominiquethomas|evelynbrown|f(?:atimaamiraqureshi|p)|h(?:amima|wee)|j(?:ackman|essicajeffrey)|katherinepascal|l(?:isamilner|ouisabenson)|m(?:a(?:riaelizabethscheffle|ureens|yaoliver)|icheleallison)|nicolemarois|r(?:eem|obinsanders|uthsmith)|sarahbenjamin|victoriaedmond)|zaishaalqadafi)|s(?:\.ellagolan|agent|cotthenryjames|golaan|smadar)|ustadris|wmwe)|n(?:a(?:ger|omiiwasaki)|cuberichard|eilt(?:rotter)?|fo\.(?:annedouglas|foreign\.manager)|icholas\.jose|obuyuki\.hirano|uelfrancodonation)|o(?:\.peace|ffice(?:emaill|rricherd)|hallkenneth|lenasheve|rabankheadofficelometogo|xfaminternationa)|p(?:a(?:cex|storfrancesco|trickfrances|ul(?:eed|n)|ymentofficer)|b(?:ph202lay|rookk)|e(?:rezdonlorenzo|ter(?:\.waddell|guggi|kenin|stephen))|hillip\.richead|ieterstevens|pinc|resleybathini)|q(?:iquanzhou|nzeng)|r(?:a(?:hashimi|kidy|lhashimi|ymond(?:aba|damon))|e(?:alyh|beccagarang|em(?:has(?:himy|m)|n)|mji|neehill|plyback|sultbox|v(?:\.jamesabel|fr(?:ankjackson|paulwilliams)))|i(?:cha(?:miller|rdw(?:ahl|illis))|ffn|tawilliams)|josh|kuofung|main|o(?:b(?:ert(?:cota|hanandez)|inf)|naldmorris|s(?:a\.gomes|ekipkalya))|raya|t\.rev\.ericmark|uddicklana)|s(?:a(?:l(?:ehhussienconsult|imzaid)|nche\.pedroz|rfiafarfask)|cott(?:henryjames|peters)|e(?:cretservicce|phichael|r(?:geantrobertbrown|vicemoneygram))|gt(?:\.monicab|ireneb)|h(?:anemissler|ery(?:\.gtl|etr)|inawatrathaksin)|im(?:lkheng|onhei)|ky\.foundation|o(?:fia\.adams|p(?:adam|hiajesse))|p(?:acex|eelman)|t(?:anleyjohn|bank|e(?:fanpersson|phentam))|u(?:iyang|n(?:\.hor|gw\.wong)|sanneklatten)|weeneyjohnson)|t(?:a(?:mmywebster|y(?:ebsouami|lorcathy))|e(?:am\.spacex|lexgraphicremit\.cbn|nreyrosilvana|rryparkins)|h(?:ailandbankoffice|e(?:ara\.choy|o(?:dorosloannis|sfoundation)|resawilliams|smithf(?:amily|m)))|imothymetheny|lyerdonald|o(?:m(?:ander|c(?:hrist|rist(?:(?:donation|foundation))?)|spende)|ny(?:\.chung|robins|zimpro)|shikazusendo)|ransferriamoney|sfoundation|tencourt)|u(?:babankheadoffice|derleyen|maru(?:godwin|kareem)|n(?:claimedfunds|ited(?:bankforafrica\.plc|nation(?:organization|s)))|s(?:alotery|departmentofjustice))|v(?:anderwesthuizen|e(?:enapatel|r(?:a(?:aellen|hollinkvan)|enichekaterinaekaterina))|i(?:ct(?:marc|oriaabraham)|dalpamela|n(?:centgarcia|gut)|sa\.incusa|vianyuan)|johannes)|w(?:a(?:dp|hlr(?:ichard)?|nczyk(?:ooo|m)|rrenebuffett)|ellensteinfoundation|hatsapp(?:inc|official)|i(?:elandherzog\.sw\.herad|ll(?:clark|iam(?:robert|smartyrs)))|u(?:\.office|mt)|ww\.moneygram)|y(?:\.oguzhan|anghoseok|doo|mentoffice|o(?:ngkm|usefzongo))|z(?:bank|en(?:etth|ithbankplconline)|hangweisheng|kiaslan|minhong|ykk?)))\d+\@gmail\.com$/i

meta BODY_EMAIL_419_FRAUD_GM_LOOSE __BODY_EMAIL_419_FRAUD_GM_LOOSE && !__BODY_EMAIL_419_FRAUD_GM && !REPTO_419_FRAUD_GM && !REPTO_419_FRAUD_GM_LOOSE
describe BODY_EMAIL_419_FRAUD_GM_LOOSE Ends-in-digits email address in body is likely advance fee fraud collector mailbox
score BODY_EMAIL_419_FRAUD_GM_LOOSE 1.000
#tflags BODY_EMAIL_419_FRAUD_GM_LOOSE nopublish



uri __BODY_EMAIL_419_FRAUD_YH /^mailto:(?=[^\s<>@]+\@yahoo\.com)(?:(?:a(?:driantongson13|gaaintl\-4g5ee\.w3|ilmohammed11|kidy2|lesiakalina2006|mbassador\.l|n(?:drebotha|n(?:awax48|hester\.usa4)))|b(?:a(?:che\.delfine|nk\.phbng14|rr(?:\.(?:richard_wilson1|thomasclark)|ister\.dennis11|william_davies))|e(?:linekra1144|n(?:jaminb34|nicholas22))|illlawrenceee|oa2c|riceangela45)|c(?:\.(?:aroline90|coulibaly2)|a(?:binet_maitre_emmanuel_patris|mpbellwilliamms)|h(?:a(?:nggordon61|rlesscharf112)|hoy\.t|jackson65)|juan852|o(?:mpliment\.sseason|n(?:nollyfamilytrust|sultantgeneral0000|telamine))|rlnd65|ythiamiller\.un10)|d(?:hamilton9099|iaanesoto190|r(?:\.aminramli|_raymondfung|k(?:ennethobiorah2|obiorah)|obiorahkenneth|victorobaji))|e(?:denvictor71|ricalbert24)|f(?:aizaadama2016|bicompensation_funds|ederal\.r73)|g(?:ov\.ukmessageboard|regabbott1958|uesfilet1336523)|harry1vans|i(?:\.project33411|befranfgnfmf|nfo(?:bank1|m(?:oney|ybsnonline))|project32411)|j(?:\.edwards228|a(?:ckson\.davis915|netemoon150)|essica\.p_family|inping\.tw|kimyong21|lawrencefrb|ohnkwanghooi101|ulietjohnsonn)|k(?:altschmidtdavid8|elvinmark629|im(?:\.leang2018?|leang(?:575|90))|limowiczd)|l(?:anxianjun440|e(?:a_edem13|hman(?:909|bila))|i(?:m_kaan|sarobinson_555|uhngbin)|nl\.173|o(?:an\.assist|rrainewirengee)|y_cheapiseth(?:11|2019))|m(?:\.kogi81|a(?:itre_arthur\.catheau|ri(?:a_lucas99|e(?:_avis12|hyppolitesmith)))|d(?:\.ps|zsesszika672)|elissalewis(?:10001|4004)|iss\.zarryb|o(?:hammedaahil46|keye79)|r(?:\.viktorzubkovv|s(?:\.esthernicolas|isabella\.dzesszikan|the(?:mo|resaheidi1)))|s\.gracie_olakun|unny(?:\.sopheap207|_sopheap30))|n(?:adhowc|estordaniel2|ralph3(?:31|4))|o(?:biorahkenneth8|fficial_franksylvester88|legkozyrev1|mranshaalan52)|p(?:ackerkelvin|eter(?:lee1950|thomas242)|once_maria51|rince(?:rasmane|ssmercy68))|r(?:alphw(?:\.johnson78|johnson78)|i(?:chard(?:\.w94|angelammaxwell)|taadamsw10)|o(?:b(?:b1759|ertbailey2004|orts20)|serichard655)|stheresaheidi1)|s(?:amthong4040|igurlauganna34|leo25|mith(?:\.dr|colin767)|o(?:ftc2|pheap\.munny)|pwalker101|te(?:fanopessina573|vecox\.98))|t(?:\.murasawa|ep1chen|h(?:eara\.chhoy|omaspeter227)|imberbase4u|ylerhess\.43)|u(?:butu16|kdebtmanagement5)|vanserge2001|will(?:clark0010|smi68)|xianglongdai60|zhaodonghk))\@yahoo\.com$/i

meta BODY_EMAIL_419_FRAUD_YH __BODY_EMAIL_419_FRAUD_YH && !REPTO_419_FRAUD_YH
describe BODY_EMAIL_419_FRAUD_YH Email address in body is likely advance fee fraud collector mailbox
score BODY_EMAIL_419_FRAUD_YH 2.500
#tflags BODY_EMAIL_419_FRAUD_YH nopublish



uri __BODY_EMAIL_419_FRAUD_YH_LOOSE /^mailto:(?=[^\s<>@]+\@yahoo\.com)(?:(?:a(?:driantongson|gaaintl\-4g5ee\.w|ilmohammed|kidy|lesiakalina|nn(?:awax|hester\.usa))|b(?:a(?:nk\.phbng|rr(?:\.richard_wilson|ister\.dennis))|e(?:linekra|n(?:jaminb|nicholas))|riceangela)|c(?:\.(?:aroline|coulibaly)|h(?:a(?:nggordon|rlesscharf)|jackson)|juan|onsultantgeneral|rlnd|ythiamiller\.un)|d(?:hamilton|iaanesoto|rkennethobiorah)|e(?:denvictor|ricalbert)|f(?:aizaadama|ederal\.r)|gregabbott|infobank|j(?:\.edwards|a(?:ckson\.davis|netemoon)|kimyong|ohnkwanghooi)|k(?:altschmidtdavid|elvinmark|im(?:\.leang|leang))|l(?:anxianjun|e(?:a_edem|hman)|isarobinson_|nl\.|y_cheapiseth)|m(?:\.kogi|ari(?:a_lucas|e_avis)|dzsesszika|elissalewis|o(?:hammedaahil|keye)|rstheresaheidi|unny(?:\.sopheap|_sopheap))|n(?:estordaniel|ralph)|o(?:biorahkenneth|fficial_franksylvester|legkozyrev|mranshaalan)|p(?:eter(?:lee|thomas)|once_maria|rincessmercy)|r(?:alphw(?:\.johnson|johnson)|i(?:chard\.w|taadamsw)|o(?:b(?:ertbailey|orts|b)|serichard)|stheresaheidi)|s(?:amthong|igurlauganna|leo|mithcolin|oftc|pwalker|te(?:fanopessina|vecox\.))|t(?:homaspeter|ylerhess\.)|u(?:butu|kdebtmanagement)|vanserge|will(?:clark|smi)|xianglongdai))\d+\@yahoo\.com$/i

meta BODY_EMAIL_419_FRAUD_YH_LOOSE __BODY_EMAIL_419_FRAUD_YH_LOOSE && !__BODY_EMAIL_419_FRAUD_YH && !REPTO_419_FRAUD_YH && !REPTO_419_FRAUD_YH_LOOSE
describe BODY_EMAIL_419_FRAUD_YH_LOOSE Ends-in-digits email address in body is likely advance fee fraud collector mailbox
score BODY_EMAIL_419_FRAUD_YH_LOOSE 1.000
#tflags BODY_EMAIL_419_FRAUD_YH_LOOSE nopublish



uri __BODY_EMAIL_419_FRAUD_AOL /^mailto:(?=[^\s<>@]+\@aol\.com)(?:(?:a(?:\.dordevicii|b(?:000137|rajjohn)|f(?:\.2[06]|zzallahmed)|gneselizabethgiftfoundationssss|ljaber111|meliageorge|nd(?:_bley|rew_hans)|rthur\.alan)|b(?:a(?:anidleewy|rr_luc)|claimdept|rownchurchill2)|c(?:\.european|allumfoundation|h(?:anprivacy03|eungdavidd|ngeric|ristyruwalt)|laimdept21|ristinabruno38|ustom_service58)|d(?:avi(?:d\.kms|scarolyn2)|hodgkins001|ianwaynie|onald_anderson44)|e(?:becca\.garang|ng(?:jo(?:ej|z)|r\.abdulla)|r(?:_charity|icalbertdpm)|velynjoshua44)|f(?:d\.29|ern(?:andezfernandez3|rodyup1215)|oundation\.charity)|g(?:arang\.rebeca|eorge_clifford4|roupfacility)|he(?:nkfranklin|rnandezrosemary632)|info\.dieter_charity|j(?:mesaud|uniormpumelelo)|k(?:\.doreen00|oo\.jr)|l(?:\.b162k|erynnewest99|i(?:sarobinson5\.0|zcarroll101)|nl\.173|orrainewirangee|uc(?:as\.jeff|iacorraomanagerbocub|kyforlife21)|ynnpage44)|m(?:\.francco91|_l\.wanczyk62|a(?:sayohara21|viswanczyk(?:oo?|d))|oni(?:rosefernandes|sfernandes)|rs(?:isabelladzsesszika|janetedwards0001|safiagaddafi))|normapatto|officework172|p(?:a(?:tricia(?:\.hans|hans)|ulpollard2)|eterwong345|otfolio\.management)|r(?:ebecca\.garang|oyalpalace2018)|s(?:\.fofo|af(?:fiagadaffi|i(?:aagaddafi|iagadafi))|ovchan|pwalker721|t(?:aatsloterijnederlands|efano_pessina))|usembassy330|w(?:a(?:shington\.dc5|ttson\.renwick)|ebank2(?:24|44))|yurdaaytarkan5))\@aol\.com$/i

meta BODY_EMAIL_419_FRAUD_AOL __BODY_EMAIL_419_FRAUD_AOL && !REPTO_419_FRAUD_AOL
describe BODY_EMAIL_419_FRAUD_AOL Email address in body is likely advance fee fraud collector mailbox
score BODY_EMAIL_419_FRAUD_AOL 2.500
#tflags BODY_EMAIL_419_FRAUD_AOL nopublish



uri __BODY_EMAIL_419_FRAUD_AOL_LOOSE /^mailto:(?=[^\s<>@]+\@aol\.com)(?:(?:a(?:f\.|ljaber)|brownchurchill|c(?:hanprivacy|laimdept|ristinabruno|ustom_service)|d(?:aviscarolyn|hodgkins|onald_anderson)|evelynjoshua|f(?:d\.|ern(?:andezfernandez|rodyup))|george_clifford|hernandezrosemary|k\.doreen|l(?:erynnewest|izcarroll|nl\.|uckyforlife|ynnpage)|m(?:\.francco|_l\.wanczyk|asayohara|rsjanetedwards)|officework|p(?:aulpollard|eterwong)|royalpalace|spwalker|usembassy|w(?:ashington\.dc|ebank)|yurdaaytarkan))\d+\@aol\.com$/i

meta BODY_EMAIL_419_FRAUD_AOL_LOOSE __BODY_EMAIL_419_FRAUD_AOL_LOOSE && !__BODY_EMAIL_419_FRAUD_AOL && !REPTO_419_FRAUD_AOL && !REPTO_419_FRAUD_AOL_LOOSE
describe BODY_EMAIL_419_FRAUD_AOL_LOOSE Ends-in-digits email address in body is likely advance fee fraud collector mailbox
score BODY_EMAIL_419_FRAUD_AOL_LOOSE 1.000
#tflags BODY_EMAIL_419_FRAUD_AOL_LOOSE nopublish



uri __BODY_EMAIL_419_FRAUD_HM /^mailto:(?=[^\s<>@]+\@hotmail\.com)(?:(?:a(?:brahambeniam|licewalton7653|n(?:ikal01|nagray00)|zezul\.idrisazezulidris)|benarnault0|c(?:h(?:angxinjuan|oi21|ristyruthwalt)|laytousey)|d(?:ealings100|l13139|r\.dukanalycoulibaly)|egorbunova22|f(?:axttransfer\.skyebk\.service\.care\.th|irstinlbnkplc|ridmanmikhail511)|garethbull809|h(?:amzibra1972|omlandsecdept)|infos(?:43|8)|j(?:acques\.bouchex|ohnkapore11)|katabettencourt2018|l(?:e(?:a_edem|galcosme|wisarm44)|imfu(?:201677|345)|ouisdreyfusmarg|ulihongm)|m(?:icpaull|oneygrampayfund|pay\-live00924|r(?:abrahambeniamfc|pedrohilldonations|s(?:\.(?:chantal_bill|roselinejac)|aishagaddafi76|helenbgeorge|micheleallison2003)))|n(?:inajohn226|waigwe2765)|ocbc\-ba\-nkonline|p(?:atrickmullinfinaceservs|owen10001)|quickcashloansservices|ro(?:ffic|sedoudou2018)|s(?:a(?:jda\.andleeb|nchamps798)|ilvanatenreyrompc|tuboardgntdirector|ulaimaninfante)|t(?:a(?:baka_williamshsbbc|shacap)|omashntr)|unb(?:2015|int)|yostinbellamohammad))\@hotmail\.com$/i

meta BODY_EMAIL_419_FRAUD_HM __BODY_EMAIL_419_FRAUD_HM && !REPTO_419_FRAUD_HM
describe BODY_EMAIL_419_FRAUD_HM Email address in body is likely advance fee fraud collector mailbox
score BODY_EMAIL_419_FRAUD_HM 2.500
#tflags BODY_EMAIL_419_FRAUD_HM nopublish



uri __BODY_EMAIL_419_FRAUD_HM_LOOSE /^mailto:(?=[^\s<>@]+\@hotmail\.com)(?:(?:a(?:licewalton|n(?:ikal|nagray))|benarnault|choi|dealings|egorbunova|fridmanmikhail|garethbull|hamzibra|infos|johnkapore|katabettencourt|l(?:ewisarm|imfu)|mrs(?:aishagaddafi|micheleallison)|n(?:inajohn|waigwe)|rosedoudou|sanchamps|unb))\d+\@hotmail\.com$/i

meta BODY_EMAIL_419_FRAUD_HM_LOOSE __BODY_EMAIL_419_FRAUD_HM_LOOSE && !__BODY_EMAIL_419_FRAUD_HM && !REPTO_419_FRAUD_HM && !REPTO_419_FRAUD_HM_LOOSE
describe BODY_EMAIL_419_FRAUD_HM_LOOSE Ends-in-digits email address in body is likely advance fee fraud collector mailbox
score BODY_EMAIL_419_FRAUD_HM_LOOSE 1.000
#tflags BODY_EMAIL_419_FRAUD_HM_LOOSE nopublish



uri __BODY_EMAIL_419_FRAUD_OL /^mailto:(?=[^\s<>@]+\@outlook\.com)(?:(?:a(?:16u71|a23423|b(?:rahamwilliamsonrpsltduk|s0000200)|l(?:bertchebe|exw113)|ndrew(?:_hai|gamble7))|b(?:a(?:rrmarkphillip|sidris)|etty\.c_investment|illgfile203)|c(?:bforeignremitdept|harlie\.j\.goodmand|laimunit\.facebook|ompensationfunding)|d(?:eborahleeconsult|hl(?:customercares|express\.fastservice)|onation_dept|rjonathankuku)|e(?:benezernonyeagwuceozbplc|urope\.win2)|f(?:abienna\.s|iduciarybmw2020|mr01|oundation701|p\.conn|rancescogaetano01)|g(?:20compessdesk|eoffreynicolas\.esq|ilbertowosukk|race\.manonfoundation)|huyennvoha|j(?:ackson4steve|e(?:anedo1?|ssicameir30))|k(?:aujong|kkunited1|officollins)|l(?:\.williams722|ui1480)|m(?:card\.msoftuk|illerjeffreylawchambers|oussa\.sayyid|r(?:\.henrichkisker|antonioguterress|b(?:illgate9|ryandavisuk44)|mduku|s(?:\.(?:coraluttah|olhaoschad)|_elizabeth20|michelleallison|roseallen))|spvt2020)|olhalytvynenko20|p(?:aul\.walter120|hilcohen0012)|qanejmhffgg|r(?:ichardwahlfreegrant|obertleeonly01)|s(?:aaman10|gi2019|ilv(?:anatenreyro0|erlakeconsultantllc)|t(?:\.monica|eve\.lenkathomson11))|t(?:g331965|oyotadrawboard2019|reff11)|unvanzyl_mrs|w(?:esteruniontransferunite7|hatsapp_givewin|inuklotocash2018)))\@outlook\.com$/i

meta BODY_EMAIL_419_FRAUD_OL __BODY_EMAIL_419_FRAUD_OL && !REPTO_419_FRAUD_OL
describe BODY_EMAIL_419_FRAUD_OL Email address in body is likely advance fee fraud collector mailbox
score BODY_EMAIL_419_FRAUD_OL 2.500
#tflags BODY_EMAIL_419_FRAUD_OL nopublish



uri __BODY_EMAIL_419_FRAUD_OL_LOOSE /^mailto:(?=[^\s<>@]+\@outlook\.com)(?:(?:a(?:lexw|ndrewgamble)|billgfile|europe\.win|f(?:iduciarybmw|mr|oundation|rancescogaetano)|je(?:anedo|ssicameir)|kkkunited|l(?:\.williams|ui)|m(?:r(?:b(?:illgate|ryandavisuk)|s_elizabeth)|spvt)|olhalytvynenko|p(?:aul\.walter|hilcohen)|robertleeonly|s(?:aaman|gi|ilvanatenreyro|teve\.lenkathomson)|t(?:oyotadrawboard|reff)|w(?:esteruniontransferunite|inuklotocash)))\d+\@outlook\.com$/i

meta BODY_EMAIL_419_FRAUD_OL_LOOSE __BODY_EMAIL_419_FRAUD_OL_LOOSE && !__BODY_EMAIL_419_FRAUD_OL && !REPTO_419_FRAUD_OL && !REPTO_419_FRAUD_OL_LOOSE
describe BODY_EMAIL_419_FRAUD_OL_LOOSE Ends-in-digits email address in body is likely advance fee fraud collector mailbox
score BODY_EMAIL_419_FRAUD_OL_LOOSE 1.000
#tflags BODY_EMAIL_419_FRAUD_OL_LOOSE nopublish