# Advance Fee (419) Fraud
#
# Updated and domains verified 2/18/03
# Last reported spam: 2/18/03
# Other Relevant Info:
#
# See the following URLs for the scoop on these slimeballs:
#
#   http://www.secretservice.gov/alert419.shtml
#   http://home.rica.net/alphae/419coal/
#
# Status: Active Spammers
#
:0
* !^Subject: .*\(fwd\)
* -1000^0
*   400^0   ^(From|Received).*((^|[^-_0-9a-z])caramail\.com([^a-z0-9\.]|$)|\
                               (^|[^-_0-9a-z])eircom\.net([^a-z0-9\.]|$)|\
                               (^|[^-_0-9a-z])indiatimes\.com([^a-z0-9\.]|$)|\
                               (^|[^-_0-9a-z])latinmail\.com(\.com)?([^a-z0-9\.]|$)|\
                               (^|[^-_0-9a-z])onebox\.com([^a-z0-9\.]|$)|\
                               (^|[^-_0-9a-z])rediffmail\.com([^a-z0-9\.]|$))
*   400^0   ^Received:.*(62\.19[4-5]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                         64\.86\.155\.[0-9][0-9]?[0-9]?|\
                         80\.88\.129\.[0-9]|\
                         80\.88\.129\.[1-9][0-9]|\
                         80\.88\.129\.1[0-1][0-9]|\
                         80\.88\.129\.12[0-7]|\
                         80\.250\.3[2-9]\.[0-9][0-9]?[0-9]?|\
                         80\.250\.4[0-7]\.[0-9][0-9]?[0-9]?|\
                         193\.110\.[2-3]\.[0-9][0-9]?[0-9]?|\
                         193\.110\.[2-3]\.[0-9][0-9]?[0-9]?|\
                         193\.110\.[2-3]\.[0-9][0-9]?[0-9]?|\
                         195\.166\.231\.[0-9][0-9]?[0-9]?|\
                         212\.96\.[2-3]\.[0-9][0-9]?[0-9]?|\
                         212\.96\.29\.[0-9][0-9]?[0-9]?|\
                         212\.100\.6[4-9]\.[0-9][0-9]?[0-9]?|\
                         212\.100\.[7-8][0-9]\.[0-9][0-9]?[0-9]?|\
                         212\.100\.9[0-5]\.[0-9][0-9]?[0-9]?|\
                         213\.181\.64\.[0-9][0-9]?[0-9]?|\
                         217\.78\.6[4-9]\.[0-9][0-9]?[0-9]?|\
                         217\.78\.7[0-9]\.[0-9][0-9]?[0-9]?|\
                         217.117.[8-9].[0-9][0-9]?[0-9]?|\
                         217.117.1[0-1].[0-9][0-9]?[0-9]?)
*   300^0   ^Subject:.*(ACQUISITION|\
                       anticipated co-operation|\
                       APPEAL|\
                       APPOINTMENT|\
                       ASSIS?T(ANCE)?|\
                       BEQUEST|\
                       BUSINESS|\
                       COLLABORATION|\
                       CONFIDENTIAL|\
                       CONFIDENTIALITY|\
                       CONSIGNMENT|\
                       CONTACT|\
                       DIAMOND|\
                       DO REPLY|\
                       ENDORSEMENT|\
                       ENQUIRIES|\
                       EXPEDIENT|\
                       from Kabul|\
                       INHERITANCE|\
                       INVESTMENT|\
                       IMPORTANT|\
                       LUCKY|\
                       NOTIFICATION|\
                       OFFER|\
                       PARTNER(SHIP)?|\
                       PLEA|\
                       PLEASE|\
                       PRIVA(CY)?(TE)?|\
                       PROPOSAL|\
                       REAL ESTATES?|\
                       RELATIONSHIP|\
                       REQUEST|\
                       RESPOND|\
                       RESPONSE|\
                       STRICT(LY)?|\
                       TITHE|\
                       TRANSACTION|\
                       TRUST|\
                       TRUSTEE|\
                       URGENT|\
                       VERY|\
                       WINNER)
*   600^0   ^Subject:.*(ACQUISITION[ ]+OF[ ]+REAL[ ]+ESTATES|\
                       APPOINTMENT AS TRUSTEE|\
                       AWARD[ ]*NOTT?IFICATT?I?ON|\
                       BEQUEST !!!!|\
                       BUSINESS CONTACT|\
                       BUSINESS PROPOSAL|\
                       CONFIDENTIAL[ ]?(BUSINESS)?[ ]?(PROPOSAL)?[ ]?(TRANSACTION)?|\
                       DIAMOND CONSIGNMENT|\
                       EXPEDIENT INTEREST|\
                       GOD'S WORK|\
                       GOOD DAY|\
                       GOODLUCK|\
                       GREETINGS FROM [A-Z]+ FAMILY|\
                       \# Kingdom Investment \#|\
                       I WON!|\
                       IMMEDIATE RESPONSE|\
                       INHERITANCE CLAIM|\
                       INTERNATIONAL BANK OF AFRICA|\
                       INTRODUCTION\.$|\
                       INVESTMENT|\
                       INVESTMENT/ENQUIRIES|\
                       LUCKY WINNER|\
                       Mutual Overseas? Partnership|\
                       OUR LUCKY WINNER|\
                       Partnership[ ]+Offer|\
                       PLEA FOR ASSISTANCE|\
                       private ok|\
                       REQUEST FOR ASSISTANCE|\
                       REQUEST FOR URGENT BUSINESS|\
                       RESPOND|\
                       Respond/Confidential Matters|\
                       STRICT(LY)? CONFIDENTIAL|\
                       TRUSTEE NEEDED|\
                       URGENT APPEAL|\
                       URGENT ASSISTANCE|\
                       URGENT BUSINESS|\
                       URGENT REPLY|\
                       URGENT RESPONSE|\
                       URGENT[^0-9a-z]*TITHE|\
                       URGENT TRANSACTION|\
                       URGNET|\
                       VERY IMPORTANT|\
                       YOUR ASSISTANCE)\.?$
*   800^0   (^|[^-_0-9a-z])(ABACHA|\
             Malik Abacha|\
             momoh abdul|\
             Abdulsalami Abubakar|\
             Haruna Abubakar|\
             Aret Adams|\
             chima adams|\
             GODWIN ADAMS|\
             JIMOH ADAMS|\
             David AGU|\
             Abubakar Ahmed|\
             amina ahmed|\
             yusuf ahmed|\
             James Ajah|\
             Kingsley Ako|\
             ANTHONY ALLI|\
             Kaloma Alli|\
             Jennifer.*Alfred|\
             Kingsley.*Alfred|\
             ANTHONY ALUGA|\
             Smith.*Andreas|\
             Tony Anennih|\
             AYODELE ANIETIE|\
             JOAO ANTHONIO|\
             CHARLES ANTHONY|\
             jose anthony|\
             lilian anthony|\
             RICHARD APITI|\
             amos babangida|\
             Abdulaz(ee|i)z Bagudu|\
             BAVARA BAKER|\
             ISHAYA BAMAIYI|\
             Anne Bangura|\
             John Bangura|\
             WILSON BANKOLE|\
             Ibrahim Bello|\
             Usman Bello|\
             WILLIAM BELLO|\
             Bennethmor|\
             Alex Bioku|\
             Aduza Bovi|\
             Carlos Buchizo|\
             Tope Buma|\
             Edwin Carlley|\
             Nicolas Chuka|\
             CHARLIES DICKSON CHURCHILL|\
             Hanson CHURCHILL|\
             Barrister Cole|\
             Johnson Creek|\
             Danbaba|\
             markos davidson|\
             Eduado De Mello|\
             CHRIST DIKE|\
             Ukah Dike|\
             Tony Douglasa|\
             BENSON EKEH|\
             edward eku|\
             mike elder|\
             paul ella|\
             Simon( Chukwu)? Emeka|\
             Collins Emordi|\
             Frank Eze|\
             dodi foday|\
             DODI SANKOH FODAY|\
             Barrister Frank|\
             Daniel Fuma|\
             Roselin. Fuma|\
             joseph george|\
             MARTINS GEORGE|\
             Tamuno George|\
             TUNDE GODFREY|\
             George Guei|\
             Stephen Gueye|\
             Williams Gumbeze|\
             Aliu Gwarzo|\
             Ismaila Gwarzo|\
             mohamed hamza|\
             mohamed usman hamza|\
             Duncan Harkinson|\
             chilaka ibeh|\
             MARTINS IBETO|\
             Haladu Idris|\
             Ogbugo Ichie|\
             HAMED IKE IGE|\
             Muyiwa Ige|\
             DAVIDWEST[ ]*ISAAC|\
             duke isdore|\
             sidiki jacobs|\
             ovia jim|\
             Alfred Williams Johnson|\
             ike johnson|\
             Robert Johnson|\
             Tejan Kabbah|\
             JACOB.*Kabila|\
             LA?URENT.*KABILA|\
             Samuel Kabila|\
             Kanali|\
             Eddy Kapend|\
             Christian Kargbo|\
             Hillary Kargbo|\
             Mbella (Albright|Kennedy)|\
             MATTHEW KTNBO|\
             ANTHONY KONU|\
             Sannius Konu|\
             Paul Koroma|\
             IBRAHIM KUTA|\
             Anthony Lawal|\
             Tunde Lawal|\
             Magnus leon|\
             henry leonard|\
             Kapend Leonie|\
             Emile Lluga|\
             ugo louis|\
             Abba Mabutu|\
             Dickson Madu|\
             Calis Maker|\
             Kuku Malinga|\
             marian marian|\
             Michael Matongo|\
             David Mensa|\
             Alfred Messika|\
             omo Mike|\
             Mickhail Miyanovic|\
             PATRICE MILLER|\
             HARRY MOBUTU|\
             Nzanga Seko Mobutu|\
             Abdulahi Mohammed|\
             MURITALA MOHAMAD|\
             Thabo Moloto|\
             Mike Mokoro|\
             abdul momoh|\
             NDIATA MOMOH|\
             Matada Morris|\
             PETER MOSES|\
             Edward Mulete|\
             ATANDA MUSA|\
             Abdulwaheeb Nadir|\
             Michael Ndlovu|\
             David Nicolas|\
             Stella Nkumba|\
             KELVIN  NMBETE|\
             Philip Noel|\
             Richard[ ]+Nze|\
             TIMOTHY NZE|\
             Olusegun Obasanjo|\
             DOMINIC OBI|\
             Clifford Odisi|\
             jeremiah ofor|\
             Ogbugo|\
             NKEM OGE|\
             CALIS OJUKWU|\
             FRANK [ ]?OKOH?|\
             Michael Okon|\
             OKEY OKOYE|\
             PATRICK OLADOKUN|\
             davis omolesix|\
             jim ovia|\
             Adewale Owode|\
             Martins.*Oyegun|\
             Adebayo Peters|\
             JOE.*PUJE|\
             FARUK RAHMAHN|\
             Fondah.*Sankoh|\
             Martins.*Sankoh|\
             ruben sankoh|\
             Jona. Savimbi|\
             Allan P. Seaman|\
             Sese[- ]?Seko|\
             emeka simon|\
             Fredom Sindani|\
             Paul Sindani|\
             Godwin Skosanna|\
             Johnson Smith|\
             Snamprogetti|\
             Sheila Solarin|\
             Tai T. Solarin|\
             Tunde Solarin|\
             chuganzani stone|\
             HAKEEM SULEIMAN|\
             DANNY TAYLOR|\
             Michael Tshedu|\
             Hassan Tukur|\
             Kenneth Uba|\
             marcelue uba|\
             FRANK UBU|\
             Mike Uche|\
             John Udeh|\
             Duke Udi|\
             Stanley Udoh|\
             Clearance Umoru|\
             IDRISU USMAN|\
             ibrahim useni|\
             jeremiah.*useni|\
             Peter Vann|\
             Bibiola Waritimi|\
             Frank Welie|\
             Barrister.*Welie|\
             Dan(ladi)? Williams|\
             dorothy williams|\
             David Willinton|\
             musa yakubu|\
             LABAKE YOUNG|\
             proflabake young|\
             lbrahim.*yusuff|\
             paul zaza|\
             NELSON ZULU|\
             PAUL ZULU|\
             GODWIN.*ZUMA)([^a-z0-9\.]|$)
*   800^0   (^|[^-_0-9a-z])(comsadd@|\
             DELOTTONETHERLANDS@|\
             edudemello@|\
             email\.iloabuchi_t28@|\
             estrada1@|\
             jamesajah@|\
             jeremiahofor@|\
             jsiriki@|\
             juans_rub@|\
             kumalo1@|\
             lottonl@|\
             maacha@|\
             maariamabach@|\
             roselina_fuma@|\
             rotimewilliams@|\
             samkibka@|\
             suleshehu@|\
             wer?kenbi?j@|\
             wilbello11965@)
{ AFF=yes }

:0
* LEANTAG ?? no
* !AFF ?? yes
{
 :0 BH
 * !^Subject: FW:
 * !^Subject: .*\(fwd\)
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * -1000^0
 *   200^0   ^Subject:.*(ACQUISITION|\
                        APPOINTMENT|\
                        ASSIS?T(ANCE)?|\
                        BUSINESS|\
                        CONFIDENTIAL|\
                        CONTACT|\
                        DO REPLY|\
                        ENQUIRIES|\
                        EXPEDIENT|\
                        FROM KABUL|\
                        GREETINGS|\
                        IMPORTANT|\
                        LUCKY|\
                        NOTIFICATION|\
                        OFFER|\
                        PARTNER(SHIP)?|\
                        PLEA|\
                        PLEASE|\
                        PRIVA(CY)?(TE)?|\
                        REAL ESTATE|\
                        RELATIONSHIP|\
                        REQUEST|\
                        RESPONSE|\
                        STRICT(LY)?|\
                        TITHE|\
                        TRANSACTION|\
                        TRUST|\
                        TRUSTEE|\
                        URGENT|\
                        WINNER|\
                        WON)
 *   600^0   ^Subject:.*(ACQUISITION[ ]+OF[ ]+REAL[ ]+ESTATES|\
                        anticipated co-operation|\
                        APPOINTMENT AS TRUSTEE|\
                        AWARD[ ]*NOTT?IFICATT?I?ON|\
                        BEQUEST|\
                        BUSINESS CONTACT|\
                        BUSINESS PROPOSAL|\
                        CONFIDENTIAL[ ]?(BUSINESS)?[ ]?(PROPOSAL)?[ ]?(TRANSACTION)?|\
                        CONTACT ME PLEASE|\
                        DIAMOND CONSIGNMENT|\
                        EXPEDIENT INTEREST|\
                        FROM KABUL|\
                        GOOD DAY|\
                        GOODLUCK|\
                        GREETINGS FROM [a-z]+ FAMILY|\
                        I WON!|\
                        IMMEDIATE RESPONSE|\
                        INHERITANCE CLAIM|\
                        INTERNATIONAL BANK OF AFRICA|\
                        INTRODUCTION\.$|\
                        INVESTMENT|\
                        INVESTMENT/ENQUIRIES|\
                        Mutual Overseas? Partnership|\
                        OUR LUCKY WINNER|\
                        Partnership[ ]+Offer|\
                        PLEA FOR ASSISTANCE|\
                        PLEASE ASSIS?T|\
                        REQUEST FOR ASSISTANCE|\
                        REQUEST FOR URGENT BUSINESS|\
                        RESPOND|\
                        STRICT(LY)? CONFIDENTIAL|\
                        TRUSTEE NEEDED|\
                        URGENT ASSISTANCE|\
                        URGENT BUSINESS|\
                        URGENT REPLY|\
                        URGENT RESPONSE|\
                        URGENT[^0-9a-z]*TITHE|\
                        URGENT TRANSACTION|\
                        VERY IMPORTANT|\
                        YOUR ASSISTANCE)\.?$
 *   600^0   (^|[^-_0-9a-z])(ADC Security Company|\
             African Head of State|\
             assistance security|\
             AUDITOR GENERAL|\
             Auditor in Africa|\
             Bank.*Africa|\
             BANK MANAGER|\
             Bank of Nigeria|\
             BANQUE TOGOLAISE|\
             BILL AND EXCHANGE MANAGER|\
             boxes(.*$)*security(.*$)*company|\
             CHARTERED BANK|\
             Confidential Secretary|\
             De[ ]?Lotto Netherlands|\
             (^|[^-_0-9a-z])delottonetherlands\.net([^a-z0-9\.]|$)|\
             DIRECTOR OF BILLS AND EXCHANGE|\
             Director of Contracts and Finance Allocation|\
             Ecobank Plc|\
             Federal(( )|(.*$))*Ministry(( )|(.*$))*of(( )|(.*$))*Works(( )|(.*$))*and(( )|(.*$))*Housing|\
             Federal Ministr.*Nigeria|\
             FEDERAL MINISTRY OF PETROLEUM|\
             Investment \& Banking Support Service|\
             LUCKY STAR SWEEPSTAKE LOTTERY|\
             MINISTRY OF AVIATION|\
             MINISTRY(.*$)*OF(.*$)*MINERAL(.*$)*RESOURCES(.*$)*AND(.*$)*ENERGY|\
             Nigeria Bar Association|\
             NIGERIAN CHAMBER OF COMMERCE|\
             PHYSICAL CASH|\
             principal Attorney|\
             SOUTH AFRICA GOVERNMENT|\
             South African Based Investment Corporation|\
             Supreme Court of Nigeria|\
             TRUST \& INVESTMENT SERVICES|\
             UK RAHMAHN ESTATE|\
             Union Bank of Nigeria|\
             WERKEN BIJ DE LOTTO|\
             Zenith( International)? Bank( PLC)?)([^a-z0-9\.]|$)
 *   300^0   (^|[^-_0-9a-z])(CONTACT (ADDRESS|INFORMATION)|\
                             Barrister|\
                             BENEFICIAL FINANCIAL ARRANGEMENT|\
                             computerballot|\
                             CONSULTANCY FEE|\
                             DRAW RESULTS|\
                             FROZEN.*GOVERNMENT|\
                             GOOD FAITH FEE|\
                             (IDENTITY|NAME).*REVEAL(ED)?|\
                             International.*Lott(ery|o)|\
                             (MOVE|TRANSFER).*(OVERSEAS|OUT OF COUNTRY)|\
                             OFFER.*(PERCENT(AGE)?|SUM).*(ASSISTANCE|HELP)|\
                             OVERSEAS|\
                             PERCENT(AGE)?.*(FUNDS|MONE(Y|IES)|SUM|TOTAL)|\
                             PRIZE AWARD DEPARTMENT|\
                             PROPERT(Y|IES).*FROZEN|\
                             RECEIV(E|ING) (CASH|FUNDS?|MONE(Y|IES)|PROPERT(Y|IES)|SUM)|\
                             REMITTANCE.*U.?S.?|\
                             REVEAL.*(NAME|IDENTITY)|\
                             RENUMERATION.*SERVICES?|\
                             SMUGGLE.*(CASH|FUNDS?|MONE(Y|IES))|\
                             TRANSFER.*(ACCOUNTS?|CASH|FUNDS?|MONE(Y|IES)|OVERSEAS|PROPERT(Y|IES)|USD)|\
                             TRUSTWORTHY (overseas? )?PARTNER|\
                             Warri Refinery)([^a-z0-9\.]|$)
 *   500^0   (.*$)+([ ]*$)+(BUSINESS PROPOSAL|\
                  CONFIDENTIAL[ ](BUSINESS|PROPOSAL|TRANSACTION)|\
                  NOTIFICATION OF BEQUEST|\
                  OBNOXIOUS.*TRADITIONAL RITES|\
                  PLEA FOR ASSISTANCE|\
                  REQUEST FOR ASSISTANCE|\
                  REQUEST FOR URGENT BUSINESS|\
                  STRICT(LY)? CONFIDENTIAL|\
                  URGENT AND CONFIDENTIAL|\
                  URGENT ASSISTANCE|\
                  URGENT BUSINESS|\
                  URGENT REPLY|\
                  URGENT RESPONSE|\
                  URGENT TRANSACTION|\
                  VERY IMPORTANT)([ ]*$)+(.*$)+
 *   800^0   (102 AUCKLAND STREET(.*$)+MIDRAND.+JOHANNESBURG|\
             5 Yusuf Adejo Street(.*$)+Victoria Island, Lagos|\
             58 SUNSET AVE.*ILLOVO.*2154|\
             ABACHA CRESCENT, GIDADO(.*$)+MINNA - NIGERIA|\
             BARRISTER COLE ESQ.(.*$)+COLE & ASSOCIATES(.*$)+fax 234 1 7592742|\
             BARRISTERS DICKSON MADU & CHAMBERS(.*$)+Solicitors & Advocates(.*$)|\
             Corporate Chambers,(.*$)+[ ]*23 Wharf Road,(.*$)+[ ]*(.*$)+[ ]*Apapa, Lagos|\
             DEACON KINGSLEY|\
             Federal Ministry of Finance(.*$)+Federal Secretariat Complex(.*$)+Obalende Ikoyi|\
             IDRISU & Co.(.*$)+[ ]*NICON HOUSE ste.14,(.*$)+[ ]*LAGOS, NIGERIA|\
             JO, BORG(.*$)+REPUBLIC OF SOUTH AFRICA|\
             Kenyan Airways flight KQ\-430|\
             LOTTO NL(.*$)+72657.*NL.2115 DB AMSTERDAM|\
             NO 10 MEGA PLAZA ACCRA|\
             NO 13 VS 2 CETHSWAYO ESTATE(.*$)+GENERATION.*SOUTH AFRICA|\
             Residential Address(.*$)+Enugu(.*$)+Nigeria|\
             RIDER HAGGARD(.*$)+CLOSE|\
             ROADPASS(.*$)+CLOSE|\
             NO 65 ROCKEY STREET(.*$)+JOHANNESBURG(.*$)+SOUTH AFRICA)
 *   600^0   ^[ ]*$^(ATTN|Attention)[ ]?[:;].*(BENEFICIARY|\
                                       DEAR SERVANT OF GOD|\
                                       DEAREST|\
                                       MANAGING DIRECTOR|\
                                       MANAGING DIRECTOR[ ]?/[ ]?PRESIDENT|\
                                       Chairman[ ]?/[ ]?Managing Director|\
                                       (The )?President[ ]?/[ ]?C.?E.?O(\.|,)?|\
                                       SATELLITE FAX:[ ]*\(YOUR COUNTRY INT\?L\. ACCESS CODE\)|\
                                       SATELITTE PHONE:[ ]*\(YOUR COUNTRY INT\?L\. ACCESS CODE\)|\
                                       SIR(\.|,)?)
 *   800^0   (^|[^-_0-9a-z])(ABACHA|\
             Malik Abacha|\
             momoh abdul|\
             Abdulsalami Abubakar|\
             Haruna Abubakar|\
             Aret Adams|\
             chima adams|\
             GODWIN ADAMS|\
             JIMOH ADAMS|\
             David AGU|\
             Abubakar Ahmed|\
             amina ahmed|\
             yusuf ahmed|\
             James Ajah|\
             Kingsley Ako|\
             ANTHONY ALLI|\
             Kaloma Alli|\
             Jennifer.*Alfred|\
             Kingsley.*Alfred|\
             ANTHONY ALUGA|\
             Smith.*Andreas|\
             Tony Anennih|\
             AYODELE ANIETIE|\
             JOAO ANTHONIO|\
             CHARLES ANTHONY|\
             jose anthony|\
             lilian anthony|\
             RICHARD APITI|\
             amos babangida|\
             Abdulaz(ee|i)z Bagudu|\
             BAVARA BAKER|\
             ISHAYA BAMAIYI|\
             Anne Bangura|\
             John Bangura|\
             WILSON BANKOLE|\
             Ibrahim Bello|\
             Usman Bello|\
             WILLIAM BELLO|\
             Bennethmor|\
             Alex Bioku|\
             Aduza Bovi|\
             Carlos Buchizo|\
             Tope Buma|\
             Edwin Carlley|\
             Nicolas Chuka|\
             CHARLIES DICKSON CHURCHILL|\
             Hanson CHURCHILL|\
             Barrister Cole|\
             Johnson Creek|\
             Danbaba|\
             markos davidson|\
             Eduado De Mello|\
             CHRIST DIKE|\
             Ukah Dike|\
             Tony Douglasa|\
             BENSON EKEH|\
             edward eku|\
             mike elder|\
             paul ella|\
             Simon( Chukwu)? Emeka|\
             Collins Emordi|\
             Joseph Estrada|\
             Louisa Ejercitor Estrada|\
             Frank Eze|\
             dodi foday|\
             DODI SANKOH FODAY|\
             Barrister Frank|\
             Daniel Fuma|\
             Roselin. Fuma|\
             joseph george|\
             MARTINS GEORGE|\
             Tamuno George|\
             TUNDE GODFREY|\
             George Guei|\
             Stephen Gueye|\
             Williams Gumbeze|\
             Aliu Gwarzo|\
             Ismaila Gwarzo|\
             mohamed hamza|\
             mohamed usman hamza|\
             Duncan Harkinson|\
             chilaka ibeh|\
             MARTINS IBETO|\
             Ogbugo Ichie|\
             Haladu Idris|\
             HAMED IKE IGE|\
             Muyiwa Ige|\
             PUIS IKEJOHNSON|\
             DAVIDWEST[ ]*ISAAC|\
             duke isdore|\
             sidiki jacobs|\
             ovia jim|\
             Alfred Williams Johnson|\
             Robert Johnson|\
             Tejan Kabbah|\
             JACOB.*Kabila|\
             LA?URENT.*KABILA|\
             Samuel Kabila|\
             Kanali|\
             Eddy Kapend|\
             Christian Kargbo|\
             Hillary Kargbo|\
             Mbella (Albright|Kennedy)|\
             MATTHEW KTNBO|\
             ANTHONY KONU|\
             Sannius Konu|\
             Paul Koroma|\
             Tumo Kumalo|\
             IBRAHIM KUTA|\
             Anthony Lawal|\
             Tunde Lawal|\
             Magnus leon|\
             henry leonard|\
             Kapend Leonie|\
             Emile Lluga|\
             ugo louis|\
             Abba Mabutu|\
             Dickson Madu|\
             Calis Maker|\
             Kuku Malinga|\
             marian marian|\
             Michael Matongo|\
             David Mensa|\
             Alfred Messika|\
             omo Mike|\
             PATRICE MILLER|\
             Mickhail Miyanovic|\
             HARRY MOBUTU|\
             JOSEPH.*MOBUTU|\
             DÉSIRÉ.*MOBUTU|\
             Nzanga.*Mobutu|\
             Seko.*Mobutu|\
             MURITALA MOHAMAD|\
             Thabo Moloto|\
             Mike Mokoro|\
             abdul momoh|\
             NDIATA MOMOH|\
             Matada Morris|\
             PETER MOSES|\
             Edward Mulete|\
             ATANDA MUSA|\
             Abdulwaheeb Nadir|\
             Michael Ndlovu|\
             David Nicolas|\
             Stella Nkumba|\
             KELVIN  NMBETE|\
             Philip Noel|\
             Richard[ ]+Nze|\
             TIMOTHY NZE|\
             Olusegun Obasanjo|\
             DOMINIC OBI|\
             Clifford Odisi|\
             jeremiah ofor|\
             Ogbugo|\
             NKEM OGE|\
             CALIS OJUKWU|\
             FRANK [ ]?OKOH?|\
             Michael Okon|\
             ANDREW OKORIE|\
             OKEY OKOYE|\
             PATRICK OLADOKUN|\
             davis omolesix|\
             jim ovia|\
             Adewale Owode|\
             Martins.*Oyegun|\
             Adebayo Peters|\
             JOE.*PUJE|\
             FARUK RAHMAHN|\
             Juans Reuben|\
             Fondah.*Sankoh|\
             Martins.*Sankoh|\
             ruben sankoh|\
             Jona. Savimbi|\
             Allan P. Seaman|\
             Sese[- ]?Seko|\
             emeka simon|\
             Fredom Sindani|\
             Paul Sindani|\
             Godwin Skosanna|\
             Johnson Smith|\
             Snamprogetti|\
             Sheila Solarin|\
             Tai T. Solarin|\
             Tunde Solarin|\
             chuganzani stone|\
             HAKEEM SULEIMAN|\
             DANNY TAYLOR|\
             Michael Tshedu|\
             Hassan Tukur|\
             Kenneth Uba|\
             marcelue uba|\
             FRANK UBU|\
             Mike Uche|\
             John Udeh|\
             Duke Udi|\
             Stanley Udoh|\
             Clearance Umoru|\
             IDRISU USMAN|\
             ibrahim useni|\
             jeremiah.*useni|\
             Peter Vann|\
             Bibiola Waritimi|\
             Frank Welie|\
             Barrister.*Welie|\
             Dan(ladi)? Williams|\
             dorothy williams|\
             ROTIME WILLIAMS|\
             David Willinton|\
             musa yakubu|\
             LABAKE YOUNG|\
             proflabake young|\
             lbrahim.*yusuff|\
             paul zaza|\
             NELSON ZULU|\
             PAUL ZULU|\
             GODWIN.*ZUMA)([^a-z0-9\.]|$)
 *   800^0   (^|[^-_0-9a-z])(certifiedxx@maktoob\.com|\
             comsadd@|\
             DELOTTONETHERLANDS@|\
             edudemello@|\
             email\.iloabuchi_t28@|\
             jamesajah@|\
             jeremiahofor@|\
             jsiriki@|\
             kumalo1@|\
             maariamabach@|\
             nzerichard@|\
             roselina_fuma@|\
             rotimewilliams@|\
             samkibka@|\
             wer?kenbi?j@|\
             wilbello11965@)
 *   800^0   (^|[^-_0-9a-z])(Ajaokuta Steel Plant|\
              Department[ ]?[$]?of[ ]?[$]?Mining[ ]?[$]?(\&|and)[ ]?[$]?Natural[ ]?[$]?Resources|\
             ECO[ ]?[$]?BANK[ ]?[$]?OF[ ]?[$]?AFRICA|\
             Economic[ ]?[$]?Community[ ]?[$]?of[ ]?[$]?Wes(r|tern)[ ]?[$]?African[ ]?[$]?States|\
             Ministry[ ]?[$]?of[ ]?[$]?Minerals|\
             National[ ]?[$]?Electric[ ]?[$]?Power[ ]?[$]?Authority|\
             Nigerian[ ]?[$]?Bar[ ]?[$]?Association|\
             Nigerian[ ]?[$]?National[ ]?[$]?Petroleum[ ]?[$]?Corporation|\
             EXPORT[ ]?[$]?PROMOTION[ ]?[$]?COUNCIL|\
             Ivoire[ ]?[$]?Nationa[ ]?[$]?Oil|\
             Ministry[ ]?[$]?of[ ]?[$]?Lands,[ ]?[$]?Mines,[ ]?[$]?\&[ ]?[$]?Energy|\
             PENTAGON.*SECURITY[ ]?[$]?TRUST[ ]?[$]?\&[ ]?[$]?FINANCE|\
             Petrol[ ]?[$]?Ivoire|\
             petroleum[ ]?[$]?trust[ ]?[$]?fund|\
             SECURITY[ ]?[$]?AND[ ]?[$]?FINANCE[ ]?[$]?Benin[ ]?[$]?srl|\
             Security[ ]?[$]?Vault[ ]?[$]?Company|\
             Seed[ ]?[$]?Harvest[ ]?[$]?Ministry|\
             South[ ]?[$]?Africa[ ]?[$]?Export[ ]?[$]?Promotion[ ]?[$]?Council|\
             U\.[ ]?[$]?WILLIAMS[ ]?[$]?\&[ ]?[$]?CO[ ]?[$]?LTD\.|\
             UNION[ ]?[$]?BANK[ ]?[$]?OF[ ]?[$]?NIGERIA)([^a-z0-9\.]|$)
 *    500^0    (^|[^-_0-9a-z])(DRC|\
                ECOMOG|\
                ECOWAS|\
                EPC|\
                MLME|\
                NEPA|\
                NNPC|\
                OMPADEC|\
                PTF|\
                SAEPC|\
                SVC|\
                UNITA)([^a-z0-9\.]|$)
 *   500^0.5 (^|[^-_0-9a-z])(Abidjan|\
             African?|\
             Angolan?|\
             Benin|\
             C.te-? D.Ivoiree?|\
             Democratic Republic of Congo|\
             Gambian?|\
             Ghan(a|ian)|\
             Ivory Coast|\
             Kabul|\
             Lagos|\
             Liberian?|\
             Nigerian?|\
             Sierra.Leon(e|ean)|\
             South African?|\
             Togo(an)?|\
             Zair(e|ian)|\
             Zimbabw(e|ian))([^a-z0-9\.]|$)
 *   200^0   (^|[^-_0-9a-z])([bm]illion dollars?|\
               physical cash|\
               Swiss bank|\
               United$? States?$? dollars|\
               U.?S.? dollars)([^a-z0-9\.]|$)
 *   200^0   (^|[^-_0-9a-z])(escape|\
             escaped|\
             identity|\
             refugee)([^a-z0-9\.]|$)
 *   800^0   [^0-9][0-1]?801[-\. )]*516[-\. ]*7986[^0-9]
 *   400^0   [^0-9][0-1]?(212|225|228|229|234)[-\. ()]*[0-9][0-9]?[0-9]?[-\. )]*[0-9][0-9][0-9][-\. ]*[0-9][0-9][0-9][0-9][^0-9]
 *   800^0   [^0-9](0)?(0)?(1)?(\+)?(212[-\. )]*308[-\. ]*7788[^0-9]|\
             225[-\. ()]*07[-\. )]*86[-\. ]*23[-\. ]*17[^0-9]|\
             225[-\. ()]*07[-\. )]*68[-\. ]*84[-\. ]*85[^0-9]|\
             225[-\. ()]*07[-\. )]*77[-\. ]*77[-\. ]*56[^0-9]|\
             228[-\. ()]*911[-\. )]*29[-\. ]*11[^0-9]|\
             229[-\. ()]*338466[^0-9]|\
             229[-\. ()]*981587[^0-9]|\
             234[-\. ()]*1[-\. )]*481[-\. ]*7905[^0-9]|\
             234[-\. ()]*1[-\. )]*759[-\. ]*3311[^0-9]|\
             234[-\. ()]*1[-\. )]*759[-\. ]*7512[^0-9]|\
             234[-\. ()]*1[-\. )]*759[-\. ]*9446[^0-9]|\
             234[-\. ()]*1[-\. )]*775[-\. ]*5791[^0-9]|\
             234[-\. ()]*1[-\. )]*776[-\. ]*0618[^0-9]|\
             234[-\. ()]*1[-\. )]*776[-\. ]*1459[^0-9]|\
             234[-\. ()]*1[-\. )]*776[-\. ]*1576[^0-9]|\
             234[-\. ()]*1[-\. )]*759[-\. ]*1483[^0-9]|\
             234[-\. ()]*42[-\. )]*253586[^0-9]|\
             234[-\. ()]*802[-\. )]*32[-\. )]*13181[^0-9]|\
             234[-\. ()]*80[-\. )]*23144221[^0-9]|\
             234[-\. ()]*803[-\. )]*3267618[^0-9]|\
             234[-\. ()]*80[-\. )]*33185767[^0-9])
 *   800^0   (27[-\. ()]*72[-\. ]*151[-\. ]*3454[^0-9]|\
              27[-\. ()]*83[-\. ]*773([-\. ]*)?2725[^0-9]|\
              27[-\. ()]*732[-\. ]*208([-\. ]*)?992[^0-9])
 *   600^0   (transaction o\.k|\
              you are not embarrassed(.*$)*contacting(.*$)*you|\
              you may be surprised(.*$)*receive(.*$)*letter)
 *   600^0   since(.*$)*you(.*$)*do(.*$)*not(.*$)*know(.*$)*me(.*$)*personally
 *   300^1   (basically( )*$?( )*prayer.*deliverance( )*$?( )*ministry|\
              Calvary greetings.*name.*lord jesus|\
              decided.*involve you.*transaction|\
              due to.*ceaseless problems.*in our country|\
              economic.*enviromental stability|\
              found.*contact.*business journal|\
              landed properties|\
              Listen and read carefully|\
              no risk involved o\.k|\
              redeemed( )*$?( )*piller( )*$?( )*fire( )*$?( )*ministry|\
              shortly o\.k|\
              spread.*investment.*other countries|\
              United States Dollars|\
              woman.*substance.*importance.*nation.*society)
 { AFF=yes }
}

:0
* AFF ?? yes
{
 PATSCORE=$=

 :0 f
 | ${FORMAIL} -A"X-SBRule: Advance Fee (419) Fraud"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0
  { GRIPETO=419.fcd@usss.treas.gov,uce@ftc.gov }

  :0
  * ^Received:.*(^|[^0-9])(12\.37\.112\.[0-9]|12\.37\.112\.1[0-5])([^0-9\.]|$)
  { GRIPETO=$GRIPETO,postmaster@sydneymicrosystems.com,abuse@att.net }

  :0
  * ^Received:.*(^|[^0-9])62\.49\.6[0-3]\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@demon.net }

  :0
  * ^Received:.*(^|[^0-9])62\.19[4-5]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@a2000.nl }

  :0
  * ^Received:.*(^|[^0-9])63\.238\.14[0-7]\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@skyweb.net }

  :0
  * ^Received:.*(^|[^0-9])64\.86\.155\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,postmaster@21ctl.com,wajisebutu@21ctl.com,toc@hyperia.com,yabatan@21ctl.com,abuse@teleglobe.net }

  :0
  * ^Received:.*(^|[^0-9])(64\.136\.[0-9]\.[0-9][0-9]?[0-9]?|\
                           64\.136\.[1-5][0-9]\.[0-9][0-9]?[0-9]?|\
                           64\.136\.6[0-3]\.[0-9][0-9]?[0-9]?)([^0-9\.]|$)
  { GRIPETO=$GRIPETO,postmaster@untd.com,abuse@netzero.net,abuse@juno.com }

  :0
  * ^Received:.*(^|[^0-9])65\.52\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@hotmail.com }

  :0
  * ^Received:.*(^|[^0-9])(66\.133\.[0-9]\.[0-9][0-9]?[0-9]?|\
                           66\.133\.[1-5][0-9]\.[0-9][0-9]?[0-9]?|\
                           66\.133\.6[0-3]\.[0-9][0-9]?[0-9]?|\
                           216\.226\.19[2-9]\.[0-9][0-9]?[0-9]?|\
                           216\.226\.2[0-4][0-9]\.[0-9][0-9]?[0-9]?|\
                           216\.226\.25[0-5]\.[0-9][0-9]?[0-9]?)([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@interpacket.net,abuse@verestar.com }

  :0
  * ^Received:.*(^|[^0-9])(66\.178\.[0-9]\.[0-9][0-9]?[0-9]?|\
                           66\.178\.[1-5][0-9]\.[0-9][0-9]?[0-9]?|\
                           66\.178\.6[0-3]\.[0-9][0-9]?[0-9]?|\
                           216\.236\.19[2-9]\.[0-9][0-9]?[0-9]?|\
                           216\.236\.2[0-1][0-9]\.[0-9][0-9]?[0-9]?|\
                           216\.236\.22[0-3]\.[0-9][0-9]?[0-9]?)([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@newskies.net }

  :0
  * ^Received:.*(^|[^0-9])80\.3[2-5]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,nemesys@telefonica.es }

  :0
  * ^Received:.*(^|[^0-9])(80\.88\.129\.[0-9]|\
                           80\.88\.129\.[1-9][0-9]|\
                           80\.88\.129\.1[0-1][0-9]|\
                           80\.88\.129\.12[0-7])([^0-9\.]|$)
  { GRIPETO=$GRIPETO,omololumajek@yahoo.com,abuse@emperion.net,omololu@oneworldng.com }

  :0
  * ^Received:.*(^|[^0-9])80\.179\.100\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@012.net }

  :0
  * ^Received:.*(^|[^0-9])(80\.250\.3[2-9]\.[0-9][0-9]?[0-9]?|\
                           80\.250\.4[0-7]\.[0-9][0-9]?[0-9]?)([^0-9\.]|$)
  { GRIPETO=$GRIPETO,postmaster@skannet.com,postmaster@wia.cz,abuse@ntlworld.com }

  :0
  * ^Received:.*(^|[^0-9])193\.70\.19[2-5]\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@libero.it }

  :0
  * ^Received:.*(^|[^0-9])193\.230\.240\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@codec.ro,abuse@rnc.ro }

  :0
  * ^Received:.*(^|[^0-9])195\.166\.231\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,tunde@linkserve.net,postmaster@linkserve.com.ng }

  :0
  * ^Received:.*(^|[^0-9])(199\.181\.129\.[0-9][0-9]?[0-9]?|\
                           199\.181\.13[0-5]\.[0-9][0-9]?[0-9]?)([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@go.com,abuse@disney.com }

  :0
  * ^Received:.*(^|[^0-9])200\.161\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@telesp.net.br }

  :0
  * ^Received:.*(^|[^0-9])203\.199\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@vsnl.com }

  :0
  * ^Received:.*(^|[^0-9])208\.31\.17[6-7]\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@sprint.net }

  :0
  * ^Received:.*(^|[^0-9])208\.6[0-3]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@bellsouth.net }

  :0
  * ^Received:.*(^|[^0-9])208\.160\.14[4-7]\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,postmaster@comete.ci,abuse@africaonline.co.ci,zano@africaonline.co.ci,abuse@cw.net }

  :0
  * ^Received:.*(^|[^0-9])(208\.19[2-9]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                           208\.2[0-4][0-9]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                           208\.25[0-5]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?)([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@uu.net,abuse-mail@wcom.com }

  :0
  * ^Received:.*(^|[^0-9])209\.132\.220\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@bigmailbox.com }

  :0
  * ^Received:.*(^|[^0-9])(209\.88\.5[6-9]\.[0-9][0-9]?[0-9]?|\
                           209\.88\.6[0-2]\.[0-9][0-9]?[0-9]?|\
                           cable\.net\.co)([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@dotster.com,abuse@gip.net,postmaster@tvcable.net }

  :0
  * ^Received:.*(^|[^0-9])(210\.82\.159\.[0-9]|\
                           210\.82\.159\.[1-9][0-9]?|\
                           210\.82\.159\.1[0-1]?[0-9]?|\
                           210\.82\.159\.12[0-7])([^0-9\.]|$)
  { GRIPETO=$GRIPETO,daihy@china-netcom.com,postmaster@china-netcom.com,huyu@china-netcom.com,tech-group@china-netcom.com }

  :0
  * ^Received:.*(^|[^0-9])212\.96\.[2-3]\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@super300.net }

  :0
  * ^Received:.*(^|[^0-9])(212\.100\.6[4-9]\.[0-9][0-9]?[0-9]?|\
                           212\.100\.[7-8][0-9]\.[0-9][0-9]?[0-9]?|\
                           212\.100\.9[0-5]\.[0-9][0-9]?[0-9]?)([^0-9\.]|$)
  { GRIPETO=$GRIPETO,joe@cybaaspace.com,abuse@cybaaspace.net }

  :0
  * ^Received:.*(^|[^0-9])213\.181\.64\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,ifiok@cyberspace.net.ng,postmaster@btlimited.com }

  :0
  * ^Received:.*(^|[^0-9])216\.34\.4\.2(4[0-9]|5[0-5])([^0-9\.]|$)
  { GRIPETO=$GRIPETO,don@xeno-technology.com,postmaster@xeno-technology.com }

  :0
  * ^Received:.*(^|[^0-9])216\.3[2-5]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@exodus.net,abuse@cw.net }

  :0
  * ^Received:.*(^|[^0-9])(217\.10\.163\.[0-9]|\
                           217\.10\.163\.[1-9][0-9]|\
                           217\.10\.163\.1[0-1][0-9]|\
                           217\.10\.163\.12[0-7])([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@khighway.net }

  :0
  * ^Received:.*(^|[^0-9])(217\.78\.6[4-9]\.[0-9][0-9]?[0-9]?|\
                           217\.78\.7[0-9]\.[0-9][0-9]?[0-9]?)([^0-9\.]|$)
  { GRIPETO=$GRIPETO,george@siotel.net,gopara@mailcity.com,ladi@siotel.net,postmaster@siotel.net }

  :0
  * ^Received:.*(^|[^0-9])(217\.117\.[8-9]\.[0-9][0-9]?[0-9]?|\
                           217\.117\.1[0-1]\.[0-9][0-9]?[0-9]?)([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@supernet300.net }

  :0
  * ^Received:.*(^|[^0-9])(217\.146\.[0-3]\.[0-9][0-9]?[0-9]?|\
                           warsun\.com)([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@warsun.com }

  :0 BH
  * (^|[^0-9a-z])bigmailbox\.com([^a-z0-9\.]|$)
  * ! ^Received:.*(^|[^0-9])209\.132\.220\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@bigmailbox.com }

  :0 BH
  * (^|[^0-9a-z])caramail\.com([^a-z0-9\.]|$)
  { GRIPETO=$GRIPETO,postmaster@caramail.com,cs@caramail.fr,abuse@colt.net }

  :0 BH
  * (^|[^0-9a-z])hotmail\.com([^a-z0-9\.]|$)
  * ! ^Received:.*(^|[^0-9])65\.52\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?([^0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@hotmail.com }

  :0 BH
  * (^|[^0-9a-z])indiatimes\.com([^a-z0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@indiatimes.com }

  :0 BH
  * (^|[^0-9a-z])irangate\.net([^a-z0-9\.]|$)
  { GRIPETO=$GRIPETO,postmaster@irangate.net,abuse@teleglobe.net }

  :0 BH
  * (^|[^0-9a-z])(lycos|mailcity)\.com([^a-z0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@lycos.com }

  :0 BH
  * (^|[^0-9a-z])maktoob\.com([^a-z0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@maktoob.com,post_master_new@maktoob.com }

  :0 BH
  * (^|[^0-9a-z])(mail\.com|outblaze\.com)([^a-z0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@mail.com,abuse@outblaze.com }

  :0 BH
  * (^|[^0-9a-z])netexecutive\.com([^a-z0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@myownemail.com }

  :0 BH
  * (^|[^0-9a-z])ny\.com([^a-z0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@interliant.com }

  :0 BH
  * (^|[^0-9a-z])onebox\.com([^a-z0-9\.]|$)
  { GRIPETO=$GRIPETO,support@onebox.com }

  :0 BH
  * (^|[^0-9a-z])personal\.ro([^a-z0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@email.ro }

  :0 BH
  * (^|[^0-9a-z])phantomemail\.com([^a-z0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@phantomemail.com }

  :0 BH
  * (^|[^0-9a-z])rediffmail\.com([^a-z0-9\.]|$)
  { GRIPETO=$GRIPETO,postmaster@rediffmail.com,ajitb@rediff.co.in }

  :0 BH
  * (^|[^0-9a-z])talk\.com([^a-z0-9\.]|$)
  { GRIPETO=$GRIPETO,postmaster@talk.com,abuse@aol.com }

  :0 BH
  * (^|[^0-9a-z])ureach\.com([^a-z0-9\.]|$)
  { GRIPETO=$GRIPETO,abuse@ureach.com }

  :0 BH
  * (^|[^0-9a-z])whowhere\.(com|[a-z][a-z])\.?([a-z][a-z])?([^a-z0-9\.]|$)
  { GRIPETO=$GRIPETO,antispam@whowhere.com,spam@whowhere.com }

  :0 BH
  * (^|[^0-9a-z])yahoo\.(com|[a-z][a-z])\.?([a-z][a-z])?([^a-z0-9\.]|$)
  { GRIPETO=$GRIPETO,mail-abuse@yahoo-inc.com }

  :0 BH
  * (^|[^0-9a-z])ziplip\.com([^a-z0-9\.]|$)
  { GRIPETO=$GRIPETO,domobi@ziplip.com,postmaster@hyperia.com,karstenf.motophone@hyperia.com,marcelk.motophone@hyperia.com }

  :0 BH c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: ${GRIPETO}" \
     -I"Subject: Advance Fee (419) Fraud spam (No Loss)" \
     -A"X-Loop: ${NOLOOP}";\
     echo " ";\
     echo "Attached is an Advance Fee (419) Fraud spam.  My spam filter automatically";\
     echo "forwards these spams to the abuse addresses at the ISPs from which the spam";\
     echo "was sent, or where the spammer refers victims to an email address.  If an IP";\
     echo "or domain belonging to you appears anywhere in this email, you will receive";\
     echo "a notification.";\
     echo " ";\
     echo "Please close all accounts associated with this spam, and take any other";\
     echo "appropriate action.";\
     echo " ";\
     echo "For more information about the Advance Fee Fraud scam, see:";\
     echo " ";\
     echo "http://home.rica.net/alphae/419coal/";\
     echo " ";\
     echo "U.S. Secret Service -- this is for your records; there was no financial loss.";\
     echo " ";\
     echo "=-=-=-=-=-=-=-=-=-=";\
     echo " ";\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# eBay/PayPal Fraud
#
# Updated and domains verified 2/18/03
# Last reported spam/fraud:  1/19/03
# Other Relevant Info:
#
#   This recipe is for eBay and PayPal "phisher" scam/spam that tries
#   to fool users into thinking it is official email from eBay or PayPal,
#   and to obtain their eBay or PayPal access information. :(
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z].*(ebay\.com([^a-z0-9\.]|$)|\
          paypal\.com([^a-z0-9\.]|$))
* ! ^Received:.*[^0-9a-z].*(65\.206\.22[8-9]\.[0-9][0-9]?[0-9]?|\
                            65\.206\.23[0-1]\.[0-9][0-9]?[0-9]?|\
                            216\.32\.120\.[0-9][0-9]?[0-9]?)
{ PAYPALFRAUD=yes }

:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z].*(paypalsys\.com|\
          paypalupdate\.com)([^a-z0-9\.]|$)
{ PAYPALFRAUD=yes }

:0
* LEANTAG ?? no
* !PAYPALFRAUD ?? yes
{
 :0 BH
 * !^Subject: .*\(fwd\)
 * !--.*forwarded message --
 * !^forwarded message:
 * !^-----BEGIN PGP SIGNED MESSAGE-----
 * (^|[^-_0-9a-z])http://www.paypal.com/images/([^a-z0-9\.]|$)
 * (^|[^-_0-9a-z])http://www.paypal.seclogin.com([^a-z0-9\.]|$)
 * (^|[^-_0-9a-z])http://www.paypalsys.com([^a-z0-9\.]|$)
 * (^|[^-_0-9a-z])http://www.paypalupdate.com([^a-z0-9\.]|$)
 * (^|[^-_0-9a-z])http://[0-9a-z][-_0-9a-z.]+\.[a-z][a-z]+/.*[^a-z0-9\.]https?://[a-z]+\.ebay\.com/
 { PAYPALFRAUD=yes }
}

:0
* PAYPALFRAUD ?? yes
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: Probable Fraudulent eBay/PayPal"

 :0
 { BLOCKTAG=yes }

 :0
 * BLOCKREPLY ?? NOTIFY
 { BLOCKTHIS=yes }
}


# U.S. Domestic Dialed International Phone Numbers Fraud
#
# Updated and domains verified 4/26/02
# Last reported spam: 4/26/02
# Other Relevant Info:
#   This filter looks for numbers in Caribbean area codes that are
#   international calls, but look to an unwary U.S.-based user like
#   domestic long distance.  Since there is some possibility (albeit
#   remote) that a user might receive legitimate email referring
#   to a Caribbean phone number, this recipe classifies email as
#   suspicious/blocked instead of as outright spam.
# Status: Active Spammers
#
:0 B
* LEANTAG ?? no
* !^Subject: .*\(fwd\)
* !--.*forwarded message --
* !^forwarded message:
* !^-----BEGIN PGP SIGNED MESSAGE-----
* -1000^0
*  -200^1   ^[:;#>]
*  1100^1    (^|[^a-z0-9]|[^\.])242[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])246[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])264[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])268[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])284[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])340[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])345[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])441[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])473[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])649[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])664[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])670[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])671[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])758[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])767[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])768[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])784[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])787[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])809[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])868[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])869[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])876[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
*  1100^1    (^|[^a-z0-9]|[^\.])939[-\. )][-\. )]?[0-9][0-9][0-9][-\. ][-\. ]?[0-9][0-9][0-9][0-9]([^a-z0-9]|[^\.]|$)
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: International U.S.-Style Area Code Phone Number"

 :0
 { BLOCKTAG=yes }

 :0
 * BLOCKREPLY ?? NOTIFY
 { BLOCKTHIS=yes }
}
