svn commit: r1886066 - /spamassassin/trunk/rulesrc/sandbox/jhardin/40_local_419replyto.cf

[jh...@apache.org]

Author: jhardin
Date: Sat Jan 30 19:00:49 2021
New Revision: 1886066

URL: http://svn.apache.org/viewvc?rev=1886066&view=rev
Log:
Update generated ruleset

Modified:
    spamassassin/trunk/rulesrc/sandbox/jhardin/40_local_419replyto.cf

Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/40_local_419replyto.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/40_local_419replyto.cf?rev=1886066&r1=1886065&r2=1886066&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/40_local_419replyto.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/40_local_419replyto.cf Sat Jan 30 19:00:49 2021
@@ -1,5 +1,5 @@
 
-# 419 fraud spam reply-to addresses, generated at Wed Jan 27 17:13:50 2021
+# 419 fraud spam reply-to addresses, generated at Sat Jan 30 11:00:38 2021
 
 header REPTO_419_FRAUD_GM Reply-To =~ /\b(?=[^\s<>@]+\@gmail\.com)(?:(?:01marviswanczyk|41speedlinkdelivery|7912richardtony|a(?:bu(?:lkareem461|shadi0004)|c(?:aalzz11|count\.optionsmr\.jonasarmstrong|e(?:alss11|cere001))|d(?:esilgon77|iallo\.boa)|erofilxeport|gent\.laryedwad|isha(?:1976algaddafi|gaddafiaam)|jaminamo|l(?:\.jo60691737|a(?:n\.austin(?:041|223)|scramac)|ber\.yang222|ex(?:ander(?:daisy911|peterson4499)|hoffman3319|smithznn)|ghafrij13|hajarb|lenholden121|nizmaria|ure\.wawrenka1472)|m(?:b\.w\.stuart\.symington|ericadeliverycomapny1(?:300|800)|ina(?:ltwaijiri02|tasomda))|n(?:d(?:rewumehunitedbankforafrica|yfox0022)|itaminarnguessan|n(?:a(?:choihkkic|llee091|sigurlaug458)|jenijohnsonn)|t(?:honyalvaradollc|o(?:meuenio|niopaco20consultant)))|r(?:adka01|chibaldhamble|thur11alan)|s(?:h(?:0611jnag|westwood7)|ianbae1010|sistance7agent)|t(?:m(?:mastercard41|office929)|tohlawoffice\.tg)|w1614860|yevayawovi190|zi(?:m(?:\.h(?:ashim\.premj|premji13)|hashim(?:2018|donation2019))|z(?:dak
 e0|george50)))|b(?:a(?:lla250abc|nk(?:centralasiahalobca34|ingcentralng)|ochang7a|r(?:bersmadar75|r(?:\.(?:charles(?:1954|office)|martinrichard)|ister(?:\.fidelisokafor|lordruben94)|ubenjames)|teld\.huisman01))|bongo593|c0996013|e(?:linekra1|nezero392)|i(?:anigercash|ll(?:\.lawrence0747|fhome))|laisevodoun|mw(?:automobile242|officeline)|o(?:arddept0|cchenyi)|r(?:avolpaul55|endalaporte112|ianmoynih00)|uff(?:ettwarrene21|ookj))|c(?:a(?:ixaseguros9810001|mluba2017|r(?:eisu98|l(?:os\.s\.helux|thomos)|twrighttownhomesllc))|bnatm847|claimsa|e(?:lineroullier(?:200|nm)|ntraltrustlltd)|h(?:a(?:ngching885|r(?:itylisajohnrobinson41|l(?:esluenga01|tonnewmanus1)))|i(?:enkraymond|mwiakim))|iticonsultantjohncg0|kruger00017|l(?:a(?:im(?:adviser11|officeadm)|xtonpaul00)|s79408)|o(?:l(?:\.(?:ahmedmarani|fakhrialsalabi(?:01)?|hmedismari)|abdullahassi|edavid77032|husseinharmuchc(?:cj|j)|inchrisweir50|mohmanairf|o(?:mbasjuan53|nelsaad00))|mpensationcommitteboard|n(?:sult(?:ancy64|matthias|sto\.u)|tact(?
 :\.kolason|ad00[04]))|operation612)|pt\.eugenebarash|r(?:a(?:bbechambers|wfordgillies1)|ist(?:bru(?:05|n05)|i1537bru))|ustomerservicelacaixa2)|d(?:29laws|a(?:n(?:008629|iel(?:35508109|zulu11)|nydan24532)|v(?:i(?:d(?:\.loanfirm18|ibe718|larbi11|pere337|r(?:amirez\.luis9012|ikhen))|scarolyn334|yax98)|ychan1970))|c(?:layconsult|ole77032)|e(?:btm123|n(?:iwalts|nis(?:clark659|quaid888))|partmentofstate(?:123|321)|tlefeckhardd)|hill27676|i(?:ane\.s\.wojcicki|gitalassetholding|p(?:francis1|lomat(?:\.john\.clerke|sshenry)))|o(?:minicahkye|naldwilliam1988)|r(?:\.(?:meirh|wilsonpaul02)|abodid|davidrhama221|j(?:amesdee|oesimon77)|kennedyuzo|meier\.heidi?|o(?:vieogor1|wenfrederick))|u(?:a1155a|nsilva58|stinmoskovitz\.2facebook)|v\.metus)|e(?:benezero392|christina937|d(?:runity|winfreeman22)|fcc\.financial\.dept|l(?:i(?:bethgomez(?:175|499)|sabethmaria600|zabethedw0)|otocashoffice1?)|m(?:2keld|ailpostlink09|efiele(?:328|g757)|ilyrichmond391)|renakgeorge123|ssexlss1|vgpatmow)|f(?:\.mikhail025|a(?
 :ithdesrie511|tme\.mehmed001)|blott47|e(?:deralreservebankdallasdst|lix88995)|g0067333|irstbank(?:49(?:666|966)|k49666)|j569282|l(?:556249|aurentdz40|uhmann\.dn)|mb\.agent|o(?:ropunionbank|undations\.west)|r(?:a(?:100dub132|n(?:c(?:espatrickconnolly(?:5050|4)|isca(?:mendoza960|samendoza))|k(?:jwangg|laurarivera)))|bbankny\.gov|e(?:derick\.colemanesq|elottosweepstake51))|u(?:lanlan28|ngg1w))|g(?:00gleggewinner19|a(?:b(?:albertoassociates|rielkalia1102)|r(?:ethbull112016|yakinson121))|bill4880|e(?:n(?:\.ahmedmsksi|eral(?:abdulrazak|williamstony990))|orgekwame481|r(?:aldjhjh11|tjanvlieghe787))|g780904|i(?:idp955|lbert12oook)|kwasiiwusu1\.persona|l(?:enmoore0011|oriachow5052)|o(?:glegewinnerteam|o(?:dnessxtra|golteam2019|oglegwiinner219)|vgodwinemefiele111)|r(?:acejackmanwoods|eenergeoffrey776))|h(?:a(?:r(?:old\.dia1100|ryebert101|twellbdaniel)|s(?:h(?:imyreem78|mireem801)|sanalshujairy))|e(?:a(?:dofficecentre0210|therbrooeke101)|cto(?:alon|r(?:castillos653|scastillo6))|lpdesk47321)|gol
 d8080|heba\.hhassan207|i(?:ldad837|toshurui)|klee\.mike|o(?:lsemeyerole6|nmackjohn518|rnbeckmajordennis63[478]|seoky(?:34|9))|sbchgm|trryt34|uichmh)|i(?:1955smael|amannjejosonn|bed627|n(?:fo(?:\.(?:abogadosmfontana|g00gleclaim|questiondesk|ulmusau)|64240|98cbnoffice7|aprl06|fdrserve)|gridrolle2|t(?:ernationallppp1|linvestorsfirm))|terryoffice)|j(?:35809121|a(?:888179|cobmaseon5995|m(?:alpriv8un|es(?:husmansdesk2240|okoh82))|nusensecureprivate|sonyeungchiwai|vierlesme001)|b5406424|c2222222rrr|e(?:ff(?:deandk2|erydean1960)|nniannjhsonn|ssikasingh4)|imyang977|k3311131|mpowellfr|o(?:e(?:dward023|kendal540|lmodisen)|hn(?:\.wilde\.oneplusfinance|a9577|griffn818|paton\.alphafmc|r(?:awlings956|oxfordjr1)|son(?:deba|wilson(?:389|490))|tanko214|uba234|walterlove2010)|monkzza|n(?:esandassociates68|monkssa)|s(?:ephacevedo024|ianeangenor)|y(?:ce00011|mrskone5))|rawlings007|s4fernado|uliet\.le(?:222|e2222)|w6935997)|k(?:a(?:lstromjames3|malnizar000|rabo\.ramala39|t(?:ebaronbarr|hilittman7|jamess0
 43|rinaziako56))|e(?:lsawamelia55|n(?:mck(?:ay1980|enziejr)|nedy\.sawadogo19))|js09376|kasbu790|o(?:ntakt\.claim|tokairportcargo|watsusho\.co\.ltd\.jp)|rnkl1109|un(?:gwei7777|ioue28)|wasiowusug)|l(?:a(?:r(?:ateambo|rytoms200)|ursent892|wrencefoundation30)|blackshirepm|e(?:ndfair\.co\.uk1|rynne(?:0west99|west2289))|i(?:amfinchus(?:11|3)|ezlnatashavanessa|li(?:ane\.bettencourt1945|ianchrstph)|n(?:elink008|glung104)|xiung(?:l48|9))|john6132|o(?:g(?:anntomas|eengen)|ttyoffice1|u(?:ghreymargaret67|isdreyfusmargarita5))|p319765|u(?:ckywinners2018|sba\.moored2019)|w94059|y(?:\.cheapiseth909|n(?:\.arthur011|cmba440|nmkl3332)))|m(?:a(?:bel\.manaku|ck(?:enzbezos|oliver324)|incare655|jor(?:dennishornbeck53|townsend01)|k(?:altschmidt|toumsheikhhasher)|nuelfranco(?:727|foundation0)|r(?:cusdembialomr|i(?:a(?:111dembele|27idemba|3(?:31lucas|51lucas)|hhills00)|nacoleman84|opabl26)|k(?:roth456|uses200)|y(?:franson56|jify00aaz01))|s(?:onmanny05|pencer5151)|t(?:hewriaanza|twilly3)|u(?:noveutileina|rhi
 nck11?)|viswanczyk(?:1(?:19|987)|4(?:89|5)|775|foundation45|k112|zz)|xaajn|ydetratt)|c(?:\.cheadychang76|kenthando)|dredban775|e(?:044386|engeoffrey|l(?:lagolan|vidabullock5)|nnss01)|gfrederick80|husameddine|i(?:c(?:he(?:alwuu002|lintagro)|paulla|w954)|k(?:edawson1960s|h(?:\.fridman|ai(?:\.fridman261|lfridm32)))|nfin\.gv|ss(?:\.melisa\.mehmett|boteogottai|yaelronen))|jminabii|k(?:ent7117|untjoro52)|lbriggs08860|m1086771|nmalarge|o(?:ham(?:edabdul1717|madraqab00)|rienkal30)|r(?:\.(?:justinmaxwell09|lusee|wlsonkabore)|7672900|cjames001|d517341|ericfranck|fabianchukwu|hanimuhammad627|martine80|paulfrank01|r(?:echardthomas|ichardanthony1)|s(?:\.(?:biyufungchi16|janetolsen?|olsenjanett|patarkatsishvili|susanread12)|a(?:ishaalqadafi1976|ngela454)|g(?:ezeria|racewoods70)|h(?:amima60|ristinemadeleine)|j(?:ackman123|lleach)|maureens847|nicolefr1marios|r(?:obinsanders185|uthsmith9900)|s(?:arahbenjamin103|ophiac)|veraaellen)|tomcrist\.ca)|s(?:agent02|golaan4|smadar44)|twvvv|u(?:ali000111|stadr
 is22)|y(?:burghhugohendrik|racbally))|n(?:eilt(?:9108|rotter(?:2017|968))|obuyuki\.hirano128|tawdglobal)|o(?:\.peace004|3344nb|ffice(?:\.012123|rricherd876|windowterms)|liviemorgan4|marinyandeng|nufoundationclaims|pcwkdw|swald\.l(?:\.lewis|ewwis)|vieogor1)|p(?:\.compton101|a(?:storfrancesco1|trick(?:\.efcc|andfrancessconnolly)|ul(?:eed1969|n8018)|ymentofficer14)|brookk0|e(?:130304|t(?:er(?:\.waddell204|guggi0|kenin73?|stephen4040)|ronasofficepromo))|h(?:\.cbnl|illip\.richead218)|ieterstevens511|o(?:lloke|wellmrwilliam)|r(?:esleybathini1|o(?:1nvstream|cessing2013general))|trsvermeulen|w178483)|q(?:iquanzhou7|nzeng1)|r(?:19772744|677gfd|a(?:johnfernn|kidy23|lhashimi78|ymond(?:aba200|damon15))|e(?:beccagarang11|em(?:has(?:himy(?:1978|mail)|m044)|n2214)|mittanceofficeasaba|neehii\.omb|plyback00|v(?:\.(?:jamesabel1|mikedadax)|ernestcebi))|i(?:ch(?:ard(?:lustig4u|w(?:ahl511|illis815))|lawandds)|tawilliams4141)|josh200000|o(?:berthanandez6655|s(?:a\.gomes0044|e(?:kipkalya934|tam00)))|svcdu
 san|t(?:\.rev\.ericmark05|honrichardshepherd)|u(?:ssiaworldcuppromo|thmporat1\"))|s(?:a(?:chingrams|l(?:ehhussienconsult1|imzaid7000)|nchoscozfifa|rfiafarfask7)|cottpeters7989|e(?:cretservicce[78]|rgeantrobertbrown1|ydouthiebaconsultant)|g\.offiice\.group|h(?:a(?:msiahmohamadyunusbnegara|nemissler2009)|e(?:ikhalmaktoum79|ry(?:\.gtl131|etr03))|inawatrathaksin93)|i(?:lverlakeconsultant|mlkheng5)|krause680|l5342743|o(?:fia\.adams201|u(?:rcingloggs|thwsltd))|peelman1972|rfredericodehernandez|sdt224|tephentam1(?:47|6)|u(?:iyang(?:\.boc|02)|leiman\.cbnn|n\.hor20|san(?:freeman112x|neklatten502)|zana111bah)|w(?:eeneyjohnson384|islottnl))|t(?:a(?:mmy21gill|y(?:ebsouami0|lorcathy362))|davalvse|erryparkins11|h(?:ailandbankoffice01|e(?:ara\.choy2|bigbiglottowinning77|odorosloannis9|resawilliams7661?|smithfm124))|imothymetheny01|lyerdonald613|mason9w4r|o(?:m(?:\.cristdonor|c(?:hrist1995|rist(?:52|donation12|foundation99|world)))|ny(?:\.chung760|zimpro11)|pchronodesk|shikazusendo101)|p2911220|ran
 sfermoney21\.2|tkhan69s)|u(?:babankbjplc|dregwqr|kponguko|marukareem8|n(?:claimedfunds554|itednation(?:organization70|s(?:8182|councilrefunds)))|sdepartmentofjustice80)|v(?:a(?:mamakazlegalchambers|nderwesthuizen560)|e(?:enapatel883|neerchris20003|r(?:ahollinkvan0|enichekaterinaekaterina4))|i(?:ctoriaabraham2310|dalpamela85|ngut170|pjeferrey)|owpovertyfoundation)|w(?:a(?:dp4726|hlr(?:5990|ichard18)|ldibeatesieberhagen)|b271981|d232633|i(?:ge122|ll(?:iamrobert3852|update123))|kfinancialservice|orldbankregionalmanageroffice|u(?:\.office212|mt722)|ww\.moneygram9054)|y\.oguzhan011|z(?:enithbankplconline98|kiaslan1963|minhong65)))\@gmail\.com/i
 
@@ -101,7 +101,7 @@ tflags REPTO_419_FRAUD_CNS publish
 
 # other domains
 
-header REPTO_419_FRAUD Reply-To =~ /\b(?![^\s<>@]+\@(?:(?:gmail|yahoo|outlook|hotmail|aol|yandex|protonmail|qq|consultant)\.com|yahoo\.co\.jp)(?:$|[>,\s]))(?:(?:01\@imf\-org\.org|a(?:\.aktr\@aim\.com|015\@laposte\.net|aronmichaels005\@163\.com|b(?:d\.aljassem\@dr\.com|igailbanga1975\@yahoo\.co\.uk)|ccountingdrg\@onet\.eu|d(?:a(?:inis\@aliyun\.com|m_moroney\.esq\@fedco\-usa\.com)|min(?:\@bhleu\.com|depart\@firstinlandbnkplc\.com)|vancedsegurosespana\@europe\.com)|hme(?:d3khan\@outlook\.fr|t\.broker\@gmx\.com)|isha\-gaddafi0\@mail\.com|l(?:e(?:rts\-noreply\@bis\.org|xgoodwill129\@ibibo\.com)|fred(?:_cheuk_chow\@yeah\.net|cheuk(?:002\@126\.com|_yuchow\@163\.com))|l(?:anwoodmarko1\@onet\.pl|iance\.consultant\@gmx\.com))|n(?:d(?:ers\.karlsson\@swedbankabgroup\.com|rew(?:\.penning\@penninglegalassociate\.com|h1\@mail2banker\.com))|jer\.keith\@ms\-fsp\-europe\.com)|rroblutt\.paymentoffice\@yahoo\.cn|siafoundationorg\.hr\@zoho\.com|t(?:endimento\-multiplus\-banco\-brasil\@bb\.com|m(?:office
 authoriza\@foxmail\.com|paymentcentttt\@e\-mail\.ua))|vaethan21\@ymail\.com|yishagddafio\@mail\.(?:com|ru)|zimhashim2018\@mail\.com)|b(?:\-calebfirm2007\@webmail\.co\.za|a(?:ankston\@instruction\.com|rrister_hans\@stationlibraryjhelum\.com)|en(?:\.malbon\@googlefps\.co\.uk|cook5511\@yahoo\.co\.nz)|illard\.thompson\@thompsonlawassociates\.com|l(?:lphillips\@att\.net|ueskyanimatedfilm\@usa\.com|ythemasters\@digitalassetholding\.org)|muczdh\@virgilio\.it|n\@getmaworldwide\.org|o(?:a2cb\@yahoo\.com\.vn|b(?:by\.william\@tradent\.net|watson92\@yahoo\.co\.uk)|riscaleb121\@webmail\.co\.za)|r(?:antwbishop\@mailbox\.org|own\.monica_l\@usa\.com))|c(?:a(?:dpayout01\@my\.com|ptain\.lucasadam\@foxmail\.com|rlos\.adan\@aim\.com|storock\@ono\.com)|e(?:ntralbank_malaysia2\@aim\.com|o\@gpromo\-team\.com)|h(?:a(?:nggordon(?:61\@yahoo\.com\.hk|946\@yahoo\.com\.hk)|pelliermadeleine\@yahoo\.ca|rlinebebe22\@yahoo\.fr)|ris(?:dodgshun\@inbound\.plus|tgoldwilliams\@hotmail\.fr))|laim(?:dpts\@europe\.com|revi
 ew\@dr\.com)|o(?:ntact(?:\.(?:hmrc\.gov\.uk\@sudhisalooja\.com|roycockrumgrantoffice\@citromail\.hu)|mee\@mynet\.com|us88\-00\@yahoo\.es)|struire\@bigmat\.it))|d(?:a(?:vi(?:d\.onyeoma\.74\@mail\.ru|son\.warwick\@eclipso\.eu)|ydreamin\@wanadoo\.fr)|e(?:a(?:john\@arubacloub\.com|nie_ron\@aol\.co\.uk)|nbrink\@email\.com|qishanmedical1\@localnet\.com)|i(?:plomaticagent11\@diplomats\.com|rector\@anletco\-jp\.com|tmereduart\@keemail\.me)|johns\@arubacloud\.com|malpasswb\@daum\.net|ouglasflint\@hsbcbank\.group|pt_transferunionwestern\@outlook\.fr|r(?:\.(?:amelia\.george1\@yandex\.ru|pauljames110\@yahoo\.com\.sg)|benardsani\.nnpc\@bsgcpk\.com|danielmminele\@magicmail\.co\.za|ew\@ton\.net\.ru)|uncanttodd\@centrum\.cz|ycheseaan\@sol\.dk)|e(?:\.shaw\@wilmagroup\.com|co(?:\.depo\.services\@onet\.pl|was(?:court\@legislator\.com|payoffice\@protonmail\.ch))|ddy_haryono\@mail\.com|golan2\@foxmail\.com|hagler\@163\.com|lena\.santos\@rollageoup\.com|nq(?:raward\@sbcglobal\.net|uiry\@multiplysearch\.c
 om)|powerball\@mailbox\.sk|u(?:_payment\@foxmail\.com|ropsenderscouriers\@keemail\.me)|xecutivedirector\@box\.az)|f(?:a(?:bio2016\@tim\.it|nliangjen\@mail\.china\.com|ridaomar\@gmx\.com)|b(?:i(?:_1234\@126\.com|director(?:11\@superposta\.com|wadc\@superposta\.com)|payment(?:50\@citromail\.hu|600\@citromail\.hu))|otha2009\@secsuremail\.com)|e(?:deral_ministrayoffinance\@comtube\.com|liciamagi\@ymail\.com|r(?:3nrod1512\@gmx\.com|nrodyup12\@gmx\.fr))|fundsremitunits\@premiumtbnk\.com|inanciero172\@live\.com|or(?:eignoperationmanager\@web\.cg|tinsandrine\@yahoo\.fr)|r(?:ancisbotha65\@securesvsmail\.online|boffice\@webmail\.hu|ed\.grenville\@onet\.pl|iedrich_mayrh1\@yeah\.net)|undyawa2014\@yahoo\.co\.uk)|g(?:arr(?:eth\.webb\@grossfitconsultancy\.biz|y\.quinlan\@australiamail\.com)|ella1\@foxmail\.com|hazal\-a\@mail\.com|loria(?:cmackenzie001\@rogers\.com|moses02\@yahoo\.co\.th)|mackenzie001\@rogers\.com|o(?:ldfish20123\@zing\.vn|ogle(?:_promoaward(?:0\@163\.com|\@163\.com)|claims111\@one
 \.lt))|rahamjoneschambers\@wildblue\.net|takeshi\@htisteel\.com)|h(?:ar(?:r(?:ish\@gmx\.fr|y\.jones\@firstbondcapital\.com)|unajim667\@citromail\.hu)|e(?:len_galloway\@live\.com|nleywatkinss\@y7mail\.com|rrick01\@e1\.ru)|mtreasyru\.ng\@mail\.ru|olt1231\@w\.cn|wc2\@mail2world\.com)|i(?:bralsmma\@seznam\.cz|mf(?:_office_agent\@yahoo\.com\.my|funds\@inbox\.lv)|n(?:fo(?:\-casino888\.com\@ozu\.es|\.(?:clev\.frb\@usa\.com|f(?:ederalreserve\.org\@mail\.com|idelity\.finance\@inbox\.ru)|imfamerica\@usa\.com|jschneider\@spainmail\.com)|04\@sony\.com|1\@sony\.com|\@(?:a(?:idakj\.com|nletco\-jp\.com)|bhleu\.com|classicmail\.co\.za|euro\-pinnacle\.com|fnconsultant\.biz|g(?:cbonline\.co\.ua|ezimarkt\.com)|johnhenryorg\.com|lbafltd\.com|morbicera\.com|p(?:eagent\.net|hillipsmorgan\.co\.za)|r(?:e(?:hapmed\.com|psol\.org\.uk)|oycockrum\.org)|treasury\-(?:departmentdc\.twomini\.com|usa\.3eeweb\.com)|un\-grant\.info)|biz2\@ono\.com|s\@walmart\.com|vsa\@aim\.com)|s(?:titutionaldepartment\@aol\.nl|uranc
 e_contl\@swissmail\.com)|ter01\@c2\.hu)|r(?:di33\@cock\.li|enegeorgiadou\@hellenicbankcy\.com)|starsolar\@163\.com|t(?:giix\@visa\.com|park01\@tpg\.com\.au))|j(?:a(?:bufa\@executivemail\.co\.za|mesmr\.monday\@rocketmail\.com|netyellenoffice\@indamail\.hu|rramos\@ono\.com|yanderson\@yccaifuu\.com)|b\@getmaworldwide\.org|e(?:f(?:errey\@financier\.com|f(?:lindsay\@zoho\.com|william207\@yahoo\.co\.uk))|ntwistle90\@diplomats\.com|romecgb12\@asia\.com|s(?:si(?:c(?:ahunt1960\@net\-c\.com|p1\@yahoo\.com\.sg)|kasingh\@aliyun\.com)|usgacia\@eclipso\.email))|flangvm5nshyazyo7si6jfuqah6jsldw2kw6c2t\@yahoo\.es|imyang77\@sina\.com|o(?:e(?:_modisen\@yahoo\.co\.uk|blp\@163\.com)|h(?:annreimann\@memeware\.net|n(?:\@johnpedroconsults\.com|david\@lawdistributionlimited\.com|k(?:adiri\@englandmail\.com|wanghooi101\@yahoo\.c)|son\.douglas\@gmx\.com))|nes\-co\@cox\.net|xford\@(?:adm\-irs\.com|gmx\.us))|w\.ny\.frb\@webmail\.hu)|k(?:a(?:ith\-angel\@foxmail\.com|t(?:eclough1\@mail\.com|hy_gerald1965\@email\
 .com))|e(?:llyzwo\@cox\.net|ntpace\@sina\.com)|ossihpilip202\@foxmail\.com)|l(?:a(?:nxianjun\@mail2hongkong\.com|primitivaes\@zohomail\.eu|rrypage\@gpa\-team\.com)|ewiscarl\@keemail\.me|i(?:ndsaytrembley\@oimail\.com|zawong\@infohsbc\.net)|loydsbanksb\@yahoo\.co\.uk|mj82717\@yahoo\.es|o(?:ngchii\@126\.com|rdsmartin\@yahoo\.com\.hk))|m(?:\.(?:johnson10012\@googlemail\.com|khan1\@outlook\.sa)|a(?:il\@101private\.com|ktoum\.shasher\@yahoo\.pt|r(?:ia\.louge\@aim\.com|k(?:eting\@homebg\.in|johnson650\@live\.com)|tin\@claudiatrincado\.com|yjosen\@post\.com)|thew\.yon2\@abbsinvestment\.com|vis(?:_wanczyk\@126\.com|wanczyk01\@yeah\.net)|xedwards\@octopusinvestment\.co\.uk)|boyaeth\@post\.com|e(?:\@myprivatemail\.website|gaclaimcenter\@email\.com)|hua\@tbochk\.com|i(?:crosoft(?:_office16\@163\.com|award01\@163\.com)|dwestern\@adexec\.com|guel\@miguel\-sanchez\.com|kiwilliams\@knol\-power\.nl|nistersoffinance\@mynet\.com|ra(?:iminaki\@gmx\.fr|minaki\@lycos\.com))|mpaulsmith145\@frontier\.com|
 oni(?:catorres001\@rogers\.com|torunitbelgium\@europe\.com)|r(?:\.(?:angelabenjamin\@yahoo\.es|ikokuoya\@web\.cg|o(?:licadams\@web\.cg|nyeadams\@outlook\.fr)|tonyelumelu\@accountant\.com|williamrigule\@live\.fr)|ch(?:au1\@gala\.net|eongg2012\@mailbox\.hu)|iamchombo1968\@mail\.com|s(?:\.rachel2013\@safe\-mail\.net|alice09\@ono\.com|fatimahhassan(?:1\@itbox\.ro|2\@itbox\.ro)|helen\@btarneauds\.com|sabah_ibrahim7\@aol\.fr))|s(?:oftgbcmanager\@aol\.co\.uk|rangelabne32\@yahoo\.es)|undo\.europe\@aol\.co\.uk)|n(?:a(?:ncyvee80\@mail\.com|vas1\@1email\.eu)|i(?:cola\@brighenti\.net|diabustamante\@registerednurses\.com)|nbank\@szm\.sk|o(?:\-reply\@economizar\-na\-web\.com\.br|reply\.fujvfes\@bibliothequegaillard\.com|tice\@fnb\.co\.za))|o(?:c(?:hiaisatoruasistbank\@brew\-master\.com|taviancm\@gmx\.co\.uk)|ffice(?:\.uk\@bol\.com\.br|me\@indamail\.hu)|l(?:ga\.ingrif\@ecb\-securities\.com|ivia_simon\@lihat\.dds\-akaun\.com)|rlando\.bloom\@gmx\.co\.uk|wengreen70\@yahoo\.co\.uk)|p(?:\.hamedmoff\@gm
 x\.com|a(?:blomancilla1\@orange\.es|nyawein\@163\.com|ul\.chang\@msn\.com)|b\-2pb012\@live\.co\.uk|chwinningoffice1953\@foxmail\.com|eterddeng\@secsuremailer\.com|hiliphampton\@lec20\.com|olicyaddmin\.file\@usa\.com|ublishers_clearinghouse\@mail\.uk)|q(?:atardonations16\@foxmail\.com|fdonation\@126\.com)|r(?:a(?:lphwjohnson\@citromail\.hu|y(?:\-thomas7h\@1email\.eu|mondchanjp\@hkmaltd\.org))|bi\-e\@mit\.tc|e(?:beccajoe98\@yahoo\.co\.uk|em(?:alhashimi\@daum\.net|hashimi2020\@daum\.net)|mittancedept001\@accountant\.com|n(?:\.deqi212\@mail\.com|ataapsilva\@bol\.com\.br)|v(?:\.williamschurch\@mail\.uk|larrutycoker2015\@yahoo\.com\.hk)|x\@departmentofsecretary\.com)|i(?:chwetton\@aol\.co\.uk|m43505\@cantv\.net|ta_will001\@yahoo\.fr)|o(?:gersteare02\@e1\.ru|hitjain0\@outlook\.fr|sicboteruff\@gmx\.com)|ussia2018worldcuplotto5\@accountant\.com)|s(?:a(?:m(?:bo_dasuki\@mail\.ru|ue95\@yahoo\.co\.uk)|ntiagomachado\@presidency\.com|rahjiwooali\@aim\.com)|e(?:an(?:dyyches\@sol\.dk|sdychh\@sol\.dk
 )|rvicio\.correo\@orange\.fr)|gt\.dave\@inmano\.com|h(?:eikhwahab\@islamicfb\.com|illay\@mail\.bg)|madartsadik\@foxmail\.com|peakers\@012\.net\.il|te(?:phan(?:falzer\@myself\.com|iehans\.euromillionlottery\@yahoo\.be)|ven\@federalreservebanks\.us)|u(?:ndarpichai\@gpromoteam(?:\.com|uk\.com)|san(?:\.lampard\@bk\.ru|ibrahim\@exclusivemail\.co\.za))|wat\@sltdchambers\.com)|t(?:bryant6\@woh\.rr\.com|epnherve00\@foxmail\.com|homaspeter227\@yahoo\.com\.hk|ra(?:oreahmed\@barid\.com|visalex\@aliyun\.com)|urkish\-air\@outlook\.com\.tr)|u(?:kdebtmanagement5\@yahool\.com|ni(?:1\@rayana\.ir|onbatmpaymentsection\@rediffmail\.com|ted\.globeawardoffice\@post\.cz)|s\.secretaryofstate\@ex\.ua)|v(?:ankoning\@volny\.cz|er(?:a\@safrica\.com|ificationsector\@webname\.com|onicabright\@terra\.com\.pe)|ictorwang67\@imail\.com)|w(?:a(?:lter_anderson\@gmx\.com|n(?:czykmavis101\@rogers\.com|g\@abconline\.hk))|b(?:fefft\@aim\.com|uk0(?:1\@katamail\.com|3\@katamail\.com))|e(?:boffice05\@web\.de|sternunion817\@y
 mail\.com)|il(?:liamsda(?:vid_3r\@hotmail\.co\.uk|wson\@mail\.com\.tr)|s\@send\.com)|n\.buffett\@aim\.com|o(?:ng(?:_shiu(?:09\@163\.com|2016\@163\.com)|shiu_ki\@163\.com)|od\@poczta\.onet\.eu|rldauthorization\@foxmail\.com)|ujames\@naver\.com)|xiankailu\@taiyaubank\-hk\.com|yakuyaya77\@financier\.com|z(?:e(?:n(?:\@fpg\.com\.co|ith\@nmk\.ugu\.pl)|tiaziz\@barid\.com)|hu\.shumin\@yahoo\.com\.hk|imcargoservicehelpdesks\@tlen\.pl)))\b/i
+header REPTO_419_FRAUD Reply-To =~ /\b(?![^\s<>@]+\@(?:(?:gmail|yahoo|outlook|hotmail|aol|yandex|protonmail|qq|consultant)\.com|yahoo\.co\.jp)(?:$|[>,\s]))(?:(?:01\@imf\-org\.org|a(?:\.aktr\@aim\.com|015\@laposte\.net|aronmichaels005\@163\.com|b(?:d\.aljassem\@dr\.com|igailbanga1975\@yahoo\.co\.uk)|ccountingdrg\@onet\.eu|d(?:a(?:inis\@aliyun\.com|m_moroney\.esq\@fedco\-usa\.com)|min(?:\@bhleu\.com|depart\@firstinlandbnkplc\.com)|vancedsegurosespana\@europe\.com)|hme(?:d3khan\@outlook\.fr|t\.broker\@gmx\.com)|isha\-gaddafi0\@mail\.com|l(?:e(?:rts\-noreply\@bis\.org|xgoodwill129\@ibibo\.com)|fred(?:_cheuk_chow\@yeah\.net|cheuk(?:002\@126\.com|_yuchow\@163\.com))|l(?:anwoodmarko1\@onet\.pl|iance\.consultant\@gmx\.com))|n(?:d(?:ers\.karlsson\@swedbankabgroup\.com|rew(?:\.penning\@penninglegalassociate\.com|h1\@mail2banker\.com))|jer\.keith\@ms\-fsp\-europe\.com)|rroblutt\.paymentoffice\@yahoo\.cn|siafoundationorg\.hr\@zoho\.com|t(?:endimento\-multiplus\-banco\-brasil\@bb\.com|m(?:office
 authoriza\@foxmail\.com|paymentcentttt\@e\-mail\.ua))|vaethan21\@ymail\.com|yishagddafio\@mail\.(?:com|ru)|zimhashim2018\@mail\.com)|b(?:\-calebfirm2007\@webmail\.co\.za|a(?:ankston\@instruction\.com|rrister_hans\@stationlibraryjhelum\.com)|en(?:\.malbon\@googlefps\.co\.uk|cook5511\@yahoo\.co\.nz)|illard\.thompson\@thompsonlawassociates\.com|l(?:lphillips\@att\.net|ueskyanimatedfilm\@usa\.com|ythemasters\@digitalassetholding\.org)|muczdh\@virgilio\.it|n\@getmaworldwide\.org|o(?:a2cb\@yahoo\.com\.vn|b(?:by\.william\@tradent\.net|watson92\@yahoo\.co\.uk)|riscaleb121\@webmail\.co\.za)|r(?:antwbishop\@mailbox\.org|own\.monica_l\@usa\.com))|c(?:a(?:dpayout01\@my\.com|ptain\.lucasadam\@foxmail\.com|rlos\.adan\@aim\.com|storock\@ono\.com)|e(?:ntralbank_malaysia2\@aim\.com|o\@gpromo\-team\.com)|h(?:a(?:nggordon(?:61\@yahoo\.com\.hk|946\@yahoo\.com\.hk)|pelliermadeleine\@yahoo\.ca|rlinebebe22\@yahoo\.fr)|ris(?:dodgshun\@inbound\.plus|tgoldwilliams\@hotmail\.fr))|laim(?:dpts\@europe\.com|revi
 ew\@dr\.com)|o(?:ntact(?:\.(?:hmrc\.gov\.uk\@sudhisalooja\.com|roycockrumgrantoffice\@citromail\.hu)|mee\@mynet\.com|us88\-00\@yahoo\.es)|struire\@bigmat\.it))|d(?:a(?:vi(?:d\.onyeoma\.74\@mail\.ru|son\.warwick\@eclipso\.eu)|ydreamin\@wanadoo\.fr)|e(?:a(?:john\@arubacloub\.com|nie_ron\@aol\.co\.uk)|nbrink\@email\.com|qishanmedical1\@localnet\.com)|i(?:plomaticagent11\@diplomats\.com|rector\@anletco\-jp\.com|tmereduart\@keemail\.me)|johns\@arubacloud\.com|malpasswb\@daum\.net|ouglasflint\@hsbcbank\.group|pt_transferunionwestern\@outlook\.fr|r(?:\.(?:amelia\.george1\@yandex\.ru|pauljames110\@yahoo\.com\.sg)|benardsani\.nnpc\@bsgcpk\.com|danielmminele\@magicmail\.co\.za|ew\@ton\.net\.ru)|uncanttodd\@centrum\.cz|ycheseaan\@sol\.dk)|e(?:\.shaw\@wilmagroup\.com|co(?:\.depo\.services\@onet\.pl|was(?:court\@legislator\.com|payoffice\@protonmail\.ch))|ddy_haryono\@mail\.com|golan2\@foxmail\.com|hagler\@163\.com|lena\.santos\@rollageoup\.com|nq(?:raward\@sbcglobal\.net|uiry\@multiplysearch\.c
 om)|powerball\@mailbox\.sk|u(?:_payment\@foxmail\.com|ropsenderscouriers\@keemail\.me)|xecutivedirector\@box\.az)|f(?:a(?:bio2016\@tim\.it|nliangjen\@mail\.china\.com|ridaomar\@gmx\.com)|b(?:i(?:_1234\@126\.com|director(?:11\@superposta\.com|wadc\@superposta\.com)|payment(?:50\@citromail\.hu|600\@citromail\.hu))|otha2009\@secsuremail\.com)|e(?:deral_ministrayoffinance\@comtube\.com|liciamagi\@ymail\.com|r(?:3nrod1512\@gmx\.com|nrodyup12\@gmx\.fr))|fundsremitunits\@premiumtbnk\.com|inanciero172\@live\.com|or(?:eignoperationmanager\@web\.cg|tinsandrine\@yahoo\.fr)|r(?:ancisbotha65\@securesvsmail\.online|boffice\@webmail\.hu|ed\.grenville\@onet\.pl|iedrich_mayrh1\@yeah\.net)|undyawa2014\@yahoo\.co\.uk)|g(?:arr(?:eth\.webb\@grossfitconsultancy\.biz|y\.quinlan\@australiamail\.com)|ella1\@foxmail\.com|hazal\-a\@mail\.com|loria(?:cmackenzie001\@rogers\.com|moses02\@yahoo\.co\.th)|mackenzie001\@rogers\.com|o(?:ldfish20123\@zing\.vn|ogle(?:_promoaward(?:0\@163\.com|\@163\.com)|claims111\@one
 \.lt))|rahamjoneschambers\@wildblue\.net|takeshi\@htisteel\.com)|h(?:ar(?:r(?:ish\@gmx\.fr|y\.jones\@firstbondcapital\.com)|unajim667\@citromail\.hu)|e(?:len_galloway\@live\.com|nleywatkinss\@y7mail\.com|rrick01\@e1\.ru)|mtreasyru\.ng\@mail\.ru|olt1231\@w\.cn|wc2\@mail2world\.com)|i(?:bralsmma\@seznam\.cz|mf(?:_office_agent\@yahoo\.com\.my|funds\@inbox\.lv)|n(?:fo(?:\-casino888\.com\@ozu\.es|\.(?:clev\.frb\@usa\.com|f(?:ederalreserve\.org\@mail\.com|idelity\.finance\@inbox\.ru)|imfamerica\@usa\.com|jschneider\@spainmail\.com)|04\@sony\.com|1\@sony\.com|\@(?:a(?:idakj\.com|nletco\-jp\.com)|bhleu\.com|classicmail\.co\.za|euro\-pinnacle\.com|fnconsultant\.biz|g(?:cbonline\.co\.ua|ezimarkt\.com)|johnhenryorg\.com|lbafltd\.com|morbicera\.com|p(?:eagent\.net|hillipsmorgan\.co\.za)|r(?:e(?:hapmed\.com|psol\.org\.uk)|oycockrum\.org)|treasury\-(?:departmentdc\.twomini\.com|usa\.3eeweb\.com)|un\-grant\.info)|biz2\@ono\.com|s\@walmart\.com|vsa\@aim\.com)|s(?:titutionaldepartment\@aol\.nl|uranc
 e_contl\@swissmail\.com)|ter01\@c2\.hu)|r(?:di33\@cock\.li|enegeorgiadou\@hellenicbankcy\.com)|starsolar\@163\.com|t(?:giix\@visa\.com|park01\@tpg\.com\.au))|j(?:a(?:bufa\@executivemail\.co\.za|mesmr\.monday\@rocketmail\.com|netyellenoffice\@indamail\.hu|rramos\@ono\.com|yanderson\@yccaifuu\.com)|b\@getmaworldwide\.org|e(?:f(?:errey\@financier\.com|f(?:lindsay\@zoho\.com|william207\@yahoo\.co\.uk))|ntwistle90\@diplomats\.com|romecgb12\@asia\.com|s(?:si(?:c(?:ahunt1960\@net\-c\.com|p1\@yahoo\.com\.sg)|kasingh\@aliyun\.com)|usgacia\@eclipso\.email))|flangvm5nshyazyo7si6jfuqah6jsldw2kw6c2t\@yahoo\.es|imyang77\@sina\.com|o(?:e(?:_modisen\@yahoo\.co\.uk|blp\@163\.com)|h(?:annreimann\@memeware\.net|n(?:\@johnpedroconsults\.com|david\@lawdistributionlimited\.com|k(?:adiri\@englandmail\.com|wanghooi101\@yahoo\.c)|son\.douglas\@gmx\.com))|nes\-co\@cox\.net|xford\@(?:adm\-irs\.com|gmx\.us))|w\.ny\.frb\@webmail\.hu)|k(?:a(?:ith\-angel\@foxmail\.com|t(?:eclough1\@mail\.com|hy_gerald1965\@email\
 .com))|e(?:llyzwo\@cox\.net|ntpace\@sina\.com)|ossihpilip202\@foxmail\.com)|l(?:a(?:nxianjun\@mail2hongkong\.com|primitivaes\@zohomail\.eu|rrypage\@gpa\-team\.com)|ewiscarl\@keemail\.me|i(?:ndsaytrembley\@oimail\.com|zawong\@infohsbc\.net)|loydsbanksb\@yahoo\.co\.uk|mj82717\@yahoo\.es|o(?:ngchii\@126\.com|rdsmartin\@yahoo\.com\.hk))|m(?:\.(?:johnson10012\@googlemail\.com|khan1\@outlook\.sa)|a(?:il\@101private\.com|ktoum\.shasher\@yahoo\.pt|r(?:ia\.louge\@aim\.com|k(?:eting\@homebg\.in|johnson650\@live\.com)|tin\@claudiatrincado\.com|yjosen\@post\.com)|thew\.yon2\@abbsinvestment\.com|vis(?:_wanczyk\@126\.com|wanczyk01\@yeah\.net)|xedwards\@octopusinvestment\.co\.uk)|boyaeth\@post\.com|e(?:\@myprivatemail\.website|gaclaimcenter\@email\.com)|hua\@tbochk\.com|i(?:crosoft(?:_office16\@163\.com|award01\@163\.com)|dwestern\@adexec\.com|guel\@miguel\-sanchez\.com|kiwilliams\@knol\-power\.nl|nistersoffinance\@mynet\.com|ra(?:iminaki\@gmx\.fr|minaki\@lycos\.com))|mpaulsmith145\@frontier\.com|
 oni(?:catorres001\@rogers\.com|torunitbelgium\@europe\.com)|r(?:\.(?:angelabenjamin\@yahoo\.es|ikokuoya\@web\.cg|o(?:licadams\@web\.cg|nyeadams\@outlook\.fr)|tonyelumelu\@accountant\.com|williamrigule\@live\.fr)|ch(?:au1\@gala\.net|eongg2012\@mailbox\.hu)|iamchombo1968\@mail\.com|s(?:\.rachel2013\@safe\-mail\.net|alice09\@ono\.com|fatimahhassan(?:1\@itbox\.ro|2\@itbox\.ro)|helen\@btarneauds\.com|rose\.hill\@rediffmail\.com|sabah_ibrahim7\@aol\.fr))|s(?:oftgbcmanager\@aol\.co\.uk|rangelabne32\@yahoo\.es)|undo\.europe\@aol\.co\.uk)|n(?:a(?:ncyvee80\@mail\.com|vas1\@1email\.eu)|i(?:cola\@brighenti\.net|diabustamante\@registerednurses\.com)|nbank\@szm\.sk|o(?:\-reply\@economizar\-na\-web\.com\.br|reply\.fujvfes\@bibliothequegaillard\.com|tice\@fnb\.co\.za))|o(?:c(?:hiaisatoruasistbank\@brew\-master\.com|taviancm\@gmx\.co\.uk)|ffice(?:\.uk\@bol\.com\.br|me\@indamail\.hu)|l(?:ga\.ingrif\@ecb\-securities\.com|ivia_simon\@lihat\.dds\-akaun\.com)|rlando\.bloom\@gmx\.co\.uk|wengreen70\@yahoo\
 .co\.uk)|p(?:\.hamedmoff\@gmx\.com|a(?:blomancilla1\@orange\.es|nyawein\@163\.com|ul\.chang\@msn\.com)|b\-2pb012\@live\.co\.uk|chwinningoffice1953\@foxmail\.com|eterddeng\@secsuremailer\.com|hiliphampton\@lec20\.com|olicyaddmin\.file\@usa\.com|ublishers_clearinghouse\@mail\.uk)|q(?:atardonations16\@foxmail\.com|fdonation\@126\.com)|r(?:a(?:lphwjohnson\@citromail\.hu|y(?:\-thomas7h\@1email\.eu|mondchanjp\@hkmaltd\.org))|bi\-e\@mit\.tc|e(?:beccajoe98\@yahoo\.co\.uk|covered\-tax\@daum\.net|em(?:alhashimi\@daum\.net|hashimi2020\@daum\.net)|mittancedept001\@accountant\.com|n(?:\.deqi212\@mail\.com|ataapsilva\@bol\.com\.br)|v(?:\.williamschurch\@mail\.uk|larrutycoker2015\@yahoo\.com\.hk)|x\@departmentofsecretary\.com)|i(?:chwetton\@aol\.co\.uk|m43505\@cantv\.net|ta_will001\@yahoo\.fr)|o(?:gersteare02\@e1\.ru|hitjain0\@outlook\.fr|sicboteruff\@gmx\.com)|ussia2018worldcuplotto5\@accountant\.com)|s(?:a(?:m(?:bo_dasuki\@mail\.ru|ue95\@yahoo\.co\.uk)|ntiagomachado\@presidency\.com|rahjiwooali\
 @aim\.com)|e(?:an(?:dyyches\@sol\.dk|sdychh\@sol\.dk)|rvicio\.correo\@orange\.fr)|gt\.dave\@inmano\.com|h(?:eikhwahab\@islamicfb\.com|illay\@mail\.bg)|madartsadik\@foxmail\.com|peakers\@012\.net\.il|te(?:phan(?:falzer\@myself\.com|iehans\.euromillionlottery\@yahoo\.be)|ven\@federalreservebanks\.us)|u(?:ndarpichai\@gpromoteam(?:\.com|uk\.com)|san(?:\.lampard\@bk\.ru|ibrahim\@exclusivemail\.co\.za))|wat\@sltdchambers\.com)|t(?:bryant6\@woh\.rr\.com|epnherve00\@foxmail\.com|homaspeter227\@yahoo\.com\.hk|ra(?:oreahmed\@barid\.com|visalex\@aliyun\.com)|urkish\-air\@outlook\.com\.tr)|u(?:kdebtmanagement5\@yahool\.com|ni(?:1\@rayana\.ir|onbatmpaymentsection\@rediffmail\.com|ted\.globeawardoffice\@post\.cz)|s\.secretaryofstate\@ex\.ua)|v(?:ankoning\@volny\.cz|er(?:a\@safrica\.com|ificationsector\@webname\.com|onicabright\@terra\.com\.pe)|ictorwang67\@imail\.com)|w(?:a(?:lter_anderson\@gmx\.com|n(?:czykmavis101\@rogers\.com|g\@abconline\.hk))|b(?:fefft\@aim\.com|uk0(?:1\@katamail\.com|3\@kat
 amail\.com))|e(?:boffice05\@web\.de|sternunion817\@ymail\.com)|il(?:liamsda(?:vid_3r\@hotmail\.co\.uk|wson\@mail\.com\.tr)|s\@send\.com)|n\.buffett\@aim\.com|o(?:ng(?:_shiu(?:09\@163\.com|2016\@163\.com)|shiu_ki\@163\.com)|od\@poczta\.onet\.eu|rldauthorization\@foxmail\.com)|ujames\@naver\.com)|xiankailu\@taiyaubank\-hk\.com|yakuyaya77\@financier\.com|z(?:e(?:n(?:\@fpg\.com\.co|ith\@nmk\.ugu\.pl)|tiaziz\@barid\.com)|hu\.shumin\@yahoo\.com\.hk|imcargoservicehelpdesks\@tlen\.pl)))\b/i
 
 describe REPTO_419_FRAUD Reply-To is known advance fee fraud collector mailbox
 score REPTO_419_FRAUD 3.000