can not block domain @*.top

Support forum for MailWasher Enterprise Server
cwh168998
Travelling Tuatara
Posts: 38
Joined: Wed Oct 28, 2015 4:10 am

can not block domain @*.top

Fri Nov 13, 2015 4:21 am

Most spam was sent from domain ".top"
I put *.top, @*.top, *@*.top in to "Spam Filters"-->"Emails"
But it still come.
How can I block the whole domain from ".top" ?
User avatar
nick.bolton
The Big Cheese
Posts: 2468
Joined: Thu Aug 28, 2008 4:02 pm

Re: can not block domain @*.top

Fri Nov 13, 2015 8:14 am

Can you post the headers from one of these spam emails here?
cwh168998
Travelling Tuatara
Posts: 38
Joined: Wed Oct 28, 2015 4:10 am

Re: can not block domain @*.top

Sat Nov 14, 2015 6:48 am

Return-Path: <1Ink@kehr.top>
X-Original-To: ****@****.com
Delivered-To: ****@****.com
Received: from 0b26f528.kehr.top (assp.****.com [192.168.0.68])
by mail.****.com (Postfix) with ESMTP id 8FF36B21B1
for <****@****.com>; Tue, 10 Nov 2015 10:59:02 -0500 (EST)
Received: from 0bad5502.cli3bc.kehr.top ([127.0.0.1]:29309 helo=cli3bc.kehr.top)
by cli3bc.kehr.top with ESMTP id 0BDCJYDGRHRBAD55KRLTDMXJCK02;
for <****@****.com>; Tue, 10 Nov 2015 08:04:27 -0800
To: <****@****.com>
Content-Type: text/html; charset="UTF-8"
Message-ID: <1930913819588955719309774828565166662@cli3bc.kehr.top>
From: "1 Ink" <1Ink@kehr.top>
Subject: Printer Ink Sale Up To 85% Off Plus Free Shipping Option
Content-Transfer-Encoding: 8bit
Content-Language: en-us
MIME-Version: 1.0
List-Unsubscribe: <http://www.kehr.top/?func=u>
Date: Tue, 10 Nov 2015 08:04:27 -0800
X-MWES-scanned: Checked by MailWasher Enterprise Server 3.0.0.3 {U64}(2015-11-10 11:04:28)
X-MWES-status: Clean
X-MWES-reason: Not Found in filters
X-MWES-sourceip: 66.199.230.149
X-MWES-smtp-from: <1ink@kehr.top>
X-MWES-header-from: <1ink@kehr.top>
User avatar
nick.bolton
The Big Cheese
Posts: 2468
Joined: Thu Aug 28, 2008 4:02 pm

Re: can not block domain @*.top

Sat Nov 14, 2015 7:09 am

That header looks all ok. We're using these types of TLD blocks as well and they're working well. We even have a .top filter. Can you check it looks like this on this page.
wildcards.jpg
wildcards.jpg (69.38 KiB) Viewed 16748 times
We've had hundreds of these too, being blocked.
cwh168998
Travelling Tuatara
Posts: 38
Joined: Wed Oct 28, 2015 4:10 am

Re: can not block domain @*.top

Tue Nov 17, 2015 3:20 am

another one passed through this morning:
Return-Path: <TrimFatFast@foreveryone.top>
X-Original-To: ****@****.com
Delivered-To: ****@****.com
Received: from 017547b9.foreveryone.top (assp.eta.com [192.168.0.68])
by mail.****.com (Postfix) with ESMTP id 659C9B2051
for <****@****.com>; Sat, 14 Nov 2015 06:13:41 -0500 (EST)
Received: from 017547b9.fgnf7dxiu.foreveryone.top (amavisd, port 10034)
by fgnf7dxiu.foreveryone.top with ESMTP id 01BEMXSGJSHG7547IWMYXJQRXFB9;
for <****@****.com>; Sat, 14 Nov 2015 03:18:58 -0800
To: <****@****.com>
Message-ID: <34302244632553413114860@fgnf7dxiu.foreveryone.top>
Date: Sat, 14 Nov 2015 03:18:58 -0800
From: "Trim Fat Fast" <TrimFatFast@foreveryone.top>
Subject: DOCTOR DISCOVERS DIET PILL BREAKTHROUGH
Content-Language: en-us
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: multipart/alternative;
boundary="----=Part.840.9954.1447499938"
X-MWES-scanned: Checked by MailWasher Enterprise Server 3.0.0.3 {U64}(2015-11-14 06:19:10)
X-MWES-status: Clean
X-MWES-reason: Custom Filter White::1133
X-MWES-sourceip: 104.223.39.67
X-MWES-smtp-from: <trimfatfast@foreveryone.top>
X-MWES-header-from: <trimfatfast@foreveryone.top>

*
*.date edit delete
*.download edit delete
*.eu edit delete
*.faith edit delete
*.pcconnection.com edit delete
*.top edit delete
*.xyz edit delete
*@*.top edit delete
*@153t7.com edit delete
*@2tcgm.com edit delete
*@3tzi8.com edit delete
*@3x62z.com edit delete
*@3y3wj.com edit delete
*@4kesaksian.com edit delete
*@54fo.com edit delete
*@adamwlad.com edit delete
*@anjiaoa.com edit delete
*@arcadezero.com edit delete
*@artantida.com edit delete
*@beritahari.com edit delete
*@bestnewledspecials.com edit delete
*@cyierm.com edit delete
*@desteaess.com edit delete
*@dialdau.com edit delete
*@dialwow.com edit delete
*@furstclub.com edit delete
*@gfalse.com edit delete
*@gftfh.com edit delete
*@heaoread.com edit delete
*@hnknmc.com edit delete
*@huggabebe.com edit delete
*@implantsdentalpluslocals.com edit delete
*@inxela.com edit delete
*@jellp.com edit delete
*@karthoruz.com edit delete
*@klipakov.net edit delete
*@kmsoudao.com edit delete
*@kt1ksi.com edit delete
*@lazygamez.com edit delete
*@les-fofolles.com edit delete
*@mchool.com edit delete
*@mixmazika.com edit delete
*@moispa.com edit delete
*@mosstele.com edit delete
*@newflightdomesticone.com edit delete
*@nopbuy.com edit delete
*@opensro.com edit delete
*@passionmercadeo.com edit delete
*@pbankt.com edit delete
*@phonecallsinternetphone.com edit delete
*@pqtne.com edit delete
*@rcjump.com edit delete
*@readyournewestchangeshere.com edit delete
*@redlevelnetworks.com edit delete
*@reportingupdatesscore.com edit delete
*@rxzgx.com edit delete
*@snamw.com edit delete
*@specialonlineledlights.com edit delete
*@stpatnmb.com edit delete
*@summitir.com edit delete
*@suttipot.com edit delete
*@thompsogna.top edit delete
*@tnsonora.com edit delete
*@unuoh.com edit delete
*@vwrgr.com edit delete
*@wangads.com edit delete
*@whatdocatseat.com edit delete
*@wpader.com edit delete
*@xwase.com edit delete
*@ydhaus.com edit delete
*@yearendenrollinfoc.com edit delete
*@yippieya.com edit delete
*@zamtasty.com edit delete
*@zhenjie88.com edit delete
*@zippiseo.com edit delete

.
.eu edit delete

2
20clips.com edit delete

4
42clips.com edit delete

9
92mckinleyave.com edit delete

@
@*.top edit delete
@11thstar.com edit delete
@banksecars.com edit delete
@domianmu.com edit delete
@edm1.anjieurostilefurniture.com edit delete
@implorable.incorve.work edit delete
@indiwin.com edit delete
@kt1ksi.com edit delete
@paventy.work edit delete
@pocke.work edit delete
@radioprocess.com edit delete
@stayfe.com edit delete

A
amazingsouthamertrips.com edit delete
andrea.tang@gmail.com edit delete
attunesugary.com edit delete

B
barrmesoinfo.com edit delete
bassmenschecks.com edit delete
bentleyrespiratory.com edit delete
bergaya.net edit delete
bestengagement.com edit delete
besttablelampidea.com edit delete
bestworkweb.com edit delete
bishopnetsolutions.com edit delete
bizinthebox101.com edit delete
blackacreranch.com edit delete
blakeschools.com edit delete
bonillambacourses.com edit delete
boosthive.work edit delete
botainfo.com edit delete
bradshawhomeredo.com edit delete
bucksmor.org edit delete
bugunhavakacderece.com edit delete
buktidft.net edit delete
burgesscooling.com edit delete

C
cams.pvcq9@yahoo.com edit delete
cantrelltoursim.com edit delete
chapmanhomemods.com edit delete
clarkeskincare.com edit delete
clinesafaris.com edit delete
computersolutionseast.com edit delete
conleybizdegrees.com edit delete
cornerstoneondemand.us edit delete
counselorcomet.com edit delete
counselorcontrol.com edit delete
csodgrowthedition.com edit delete
cyberagogo.com edit delete

D
dbkpyt.link edit delete
deleonbillingedu.com edit delete
dennisphones.com edit delete
denturesonlinedrgerald.com edit delete
dimmp.link edit delete
dlhwebconsultancy.co.uk edit delete
dogideasite.com edit delete
domianmu.com edit delete
dominguezravel.com edit delete
doughertyarthritishelpp.com edit delete
dpctravel.com edit delete
duean.link edit delete
dukestalker.com edit delete
duncanmbas.com edit delete

E
ebooksjournal.net edit delete
epetit.com edit delete
escobarmbaprogram.com edit delete
esparzareverals.com edit delete
estesstairlifts.com edit delete
europeandreamtripspackage.com edit delete
euroscript.com edit delete
everydayy.net edit delete

F
fhcollins.com edit delete
fireform.net edit delete
flemingarthritishelp.com edit delete
fleurdepeche.com edit delete
floor-kyl.com edit delete
fotomat.net edit delete
frailqbhurt.review edit delete
friested.com edit delete
frostmesoinfo.com edit delete

G
gaptektekno.com edit delete
gfsmail.us edit delete
globalbizshop.com edit delete
goliathsolo.com edit delete
goliaththevirtual.co edit delete
goliaththis.com edit delete
goliathtop.com edit delete
greenappletree.com edit delete
greerhealthymale.com edit delete
greydb.xyz edit delete
grocorporation.com edit delete
guaranteeconsult.com edit delete
guideacademic.com edit delete

H
harpercopdfacts.com edit delete
haysautoservice.com edit delete
hcpmembers.com edit delete
holtbizdegrees.com edit delete
hoodcancercenters.com edit delete
hostmost.us edit delete
hubbardskincare.com edit delete

I
indiwin.com edit delete
indosongs.com edit delete
info@goliath edit delete
integratoriperdimagrire.net edit delete
inthemixoffers.com edit delete
intrinsim.com edit delete
inxela.com edit delete
ixyoga.xyz edit delete

J
jgainesonline.com edit delete
josephcopdsource.com edit delete

K
kempfranchising.com edit delete
king.gong27@yahoo.com edit delete
kinksandqwirks.com edit delete
kirbyconversions.com edit delete
kngwd.com edit delete
konnectforce.biz edit delete

L
leachacinstalls.com edit delete
libertyunlimitedsupport.com edit delete
lpozhmf@vip.sina.com edit delete
lusianne.com edit delete

M
makemydaymarketing.com edit delete
mccannbillingcourses.com edit delete
merrittflightupgrades.com edit delete
mooneyvacations.com.xs edit delete
mouthfuldiamonds.com edit delete
mpwembleypark.com edit delete
murilloveteranresources.com edit delete
mybookshare.net edit delete

N
naplesromevacationspackage.com edit delete
nationwidefund.com edit delete
nedhares.net edit delete
nortonmesosource.com edit delete

O
onecartflair.com edit delete
onlineinformchecklookup.com edit delete
ordosleks.com edit delete
orozcotravel.com edit delete

P
pahamulus.net edit delete
patrickconcrete.com edit delete
perftvsn.org edit delete
personalactioncams.com edit delete
photos2portraits.com edit delete
placesindex.com edit delete
pointendemn.review edit delete
prestonredorooms.com edit delete

Q
qualityonprojects.com edit delete

R
raqhive.com edit delete
realcelebpics.com edit delete
remaxlaketravis.com edit delete
removiet.work edit delete
resultednapoll.science edit delete
review edit delete
reviravoltta.com edit delete
riggsmedsupply.com edit delete
rodgerscooling.com edit delete
rosariobusinessschool.com edit delete
ryaneggold.net edit delete

S
salesforce.com edit delete
sampsonschooling.com edit delete
sawyertours.com edit delete
seriendeneral.review edit delete
shannondermatology.com edit delete
singhnursedegrees.com edit delete
solidworks-community edit delete
stayfe.com edit delete
summitithardware.com edit delete
suttonreversals.com edit delete
sweeneybathredos.com edit delete

T
tamilycoyota.link edit delete
tenthpeak.com edit delete
tin.it edit delete
todd@nisparks.com edit delete
travelbelizecoastsbeaches.com edit delete
tsender.net edit delete
tyrinova.com edit delete

U
uplusq.com edit delete

V
videospiral.com edit delete

W
wharfsnug.com edit delete
wk1business.com edit delete
work edit delete
writemyapp.com edit delete

X
xchudai.com edit delete

Y
yacafeco.com edit delete
User avatar
nick.bolton
The Big Cheese
Posts: 2468
Joined: Thu Aug 28, 2008 4:02 pm

Re: can not block domain @*.top

Tue Nov 17, 2015 9:03 am

Are any getting stopped by the .top filter if you search in the 'All Emails' screen? Can you send us the logs from when this email got through?
User avatar
nick.bolton
The Big Cheese
Posts: 2468
Joined: Thu Aug 28, 2008 4:02 pm

Re: can not block domain @*.top

Tue Nov 17, 2015 9:33 am

Actually looking at that header, you can see the reason it came through

X-MWES-reason: Custom Filter White::1133

So, there's a custom filter (Good) which let it through
cwh168998
Travelling Tuatara
Posts: 38
Joined: Wed Oct 28, 2015 4:10 am

Re: can not block domain @*.top

Wed Nov 18, 2015 4:56 am

Thank you so much.
But there is no 1133 in the email:

RFC822 Message body

Return-Path: <CloudComputingSolutions@thompsogna.top>
X-Original-To: ****@****.com
Delivered-To: ****@****.com
Received: from 0f3ef1e2.thompsogna.top (assp.****.com [192.168.0.68])
by mail.****.com (Postfix) with ESMTP id E21C9B205E
for <****@****.com>; Wed, 11 Nov 2015 20:29:45 -0500 (EST)
Received: from 0d53726b.s4annvcth.thompsogna.top ([127.0.0.1]:27113 helo=s4annvcth.thompsogna.top)
by s4annvcth.thompsogna.top with ESMTP id 0DQNMFNM5372XKPUUH6B;
for <****@****.com>; Wed, 11 Nov 2015 17:35:09 -0800
Date: Wed, 11 Nov 2015 17:35:09 -0800
Content-Type: text/html; charset="UTF-8"
List-Unsubscribe: <mailto:unsub-21113-2897-33499-776-223551474@thompsogna.top?subject=unsubscribe>, <http://www.thompsogna.top/unsubscribe/2 ... *@****.com>
From: "Cloud Computing Solutions" <CloudComputingSolutions@thompsogna.top>
Subject: Connect With Others Through Simple And Secure Cloud Solutions!!!!
Message-ID: <2111313722355147421113562556289733499@s4annvcth.thompsogna.top>
Content-Language: en-us
MIME-Version: 1.0
To: <****@****.com>
Content-Transfer-Encoding: 8bit
X-MWES-scanned: Checked by MailWasher Enterprise Server 3.0.0.3 {U64}(2015-11-11 20:35:13)
X-MWES-status: Clean
X-MWES-reason: Custom Filter White::1133
X-MWES-sourceip: 162.254.228.175
X-MWES-smtp-from: <cloudcomputingsolutions@thompsogna.top>
X-MWES-header-from: <cloudcomputingsolutions@thompsogna.top>

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<title>PNJ</title>
<style type="text/css">
#PRYEF {
position: absolute;
cursor: default !important;
margin: .4em .9em .9em;
overflow: hidden;
}
#WFRWSC {
background-image: none;
}
#OPYWRFTCDNOQ {
text-align: center;
}
#IYUJDN {
clip: rect(36 33 78 81);
-webkit-transition: background 13ms linear;
-moz-transition: background 51ms linear;
-ms-transition: background 57ms linear;
-o-transition: background 20ms linear;
transition: background 91ms linear;
text-align: center;
cursor: pointer;
/*
race parking weight dark opening win print salt pool July reputation answer chicago bank math weird block bill form president media glad animal damage regular district grade machine worker crash while metal season direction economics session advance fruit promise trash clue human insurance failure spot tree din job condition title manner example comfort mess cover effort highlight control range fall past obligation occasion registration cost cell field drawing difficulty economy tone self chest message ear 19b501d3f4151b614bda1a0701ea2980 native assumption love reply milk career egg assistant particular recipe collection south match concert black fee response mistake difference measurement plane dirt engine management intention bug lie aside while influence jacket answer spring word lock private might formal impress crack entertainment double inside supermarket value balance currency hang wait term lift make two application finance salary reputation October model hello client supermarket departure garage winter celebration staff horror standard worth tale author ability bad ticket activity impact doubt beautiful silly calendar struggle challenge site familiar definition half fight strategy swing one novel purple north upper band way advice consist picture club let big Saturday internal device area child truck anxiety bed suspect monitor horoscope office dust throat talk image property craft order telephone wait grandmother rip image most size poem consist minor June proposal garden rough property repair seat tune north emotion youth blind royal greeting dimension total road monitor single day sample dealer boss look championship fat representative surround quality peak craft atmosphere height setting xo5P8 cigarette estate break living people clue chapter dare positive limit offer joke quality dirt eye oven leave debt branch expression mention physics bus face reply sympathy funny chart elevator list pizza welcome library crash kill practice system regret cheek blind agency point sector oven exercise face evidence menu reminder objective home forecast sister tongue classroom red hit discount gather independence development burn tell analysis group possibility code profile dad bread business information space work election sentence worker airline solid landscape extension duty rate poet tough pair amount percentage story actor dog scheme pen room cow garden return gain abuse statement assistance wrap display shift fishing grand muscle row leg education capital music link test traffic machine moment communication spread award d48bc59125c6d397c35a4ae1d0af5f55 strain candidate dump bit parent progress variety entry muscle membership introduction convert poetry public joint formal reward target help guy emphasis quarter preparation bottle towel feel candle satisfaction awareness bowl base reading mistake yard case bicycle lunch stop entrance delay spend battle foot bar working introduction dare priest depression user sign tongue weekend special quote start view routine bone oil piano leave possession department abuse ad sort steal dead policy interview soup article motor man boat police communication level two manager long stupid success rock plan period cheek spray bird guidance shower location golf visual style republic November work basis hold conflict message trade shoot equipment attitude director move listing importance tea tree examination trick apartment care closet shop border fire corner road month head wrap view task health coat movie sleep scale training republic bother telephone respond stuff arm pride average fill psychology brush chart trust October recent bench dealer mention campaign conclusion technology industry department meeting age employ county kick cancel resource alternative many vacation profession field theory candidate cookie comment resolve effect plastic if twist article advantage solid lay savings preference brave pin drawer being general vacation election fee writer neck gain couple stomach collection prompt transportation lab player budget back item second June pot special tour description kiss wednesday quit illegal appointment rule teaching technology issue recover cable perspective system cup outside government basket fault marketing treat leader roll site category fix conflict watch diet local beat cousin spare imagination health credit emphasis judge interview penalty raw debate payment ad fact girlfriend medium freedom highway application score practice session plane sea king forever change bird nobody hand temporary strength funeral employ escape attack region price consideration tour visit team bite language swim constant song kind analysis load nu puzzle common earth charity it whole mix recipe region family catch trainer cabinet wedding food disease opportunity basket walk latest till fun row evening people <removed> delay shift shoulder store delivery deposit test test meaning ticket contact join young instance inflation stick mine cook baby pain drag sad south friendship run web wealth calm being Sunday degree pause command top account line process leader handle cry mind water head horse sir welcome resident February guitar phase swimming company blank track person atmosphere aspect tower land account alert priority pollution punch point occasion bug art solution energy April purpose horror analyst official politics counter award senior difference wheel grab wall December station young fuel goal emergency daily weakness principle transition weakness wonder confirmation touch sandwich science fly board joke surprise tradition train cloud sun gear guy news mission square apartment stand alarm orange breaking airline reception week laugh guitar designer choice equal smoke passion area wood matter ship fear bridge train wing football natural give smoke chocolate try presentation sand brain arrival request rough painting reservation load detail weekly pour promise oil hurry register newspaper steak appearance time luck host breast medicine environment engineer taste branch roof soil shake bedroom knee spiritual heart mud computer whereas balance sun drive percentage reading reaction internet chemistry perception current handle chocolate tuesday course lift replacement slice concept requirement physical regret instruction associate market gift upper silver call stock feature excuse one gather wake pound wood start vegetable market song sing throat fill refuse star guidance hang sand breakfast shopping blood friend hope highlight importance fight uncle play bottom homework step track push front knowledge brick dear beginning address topic subject reserve February sing term subject tie fan May garbage store village salad window pour print show safety cabinet piano data property flight service middle place mother wake money wear thought go figure condition reply variety cold fall crazy sugar sound upstairs year lake drive power cancel platform wish stable check situation lead procedure revolution glove Sunday reach current panic demand funeral score patient fish release tuesday public divide community rope relief nobody forecast anything hole kill act you tear yard stupid grab loan result product dinner gas economics ring target draw proposal effective surprise September anybody cold <removed> mail following March win give hate bedroom baby elevator suck blue risk case junior lack understanding contact nail official disk tap specific boy confusion weight tale shape boss cook stretch editor slide pipe maintenance advertising partner storage baseball script warning forever photo weekly harm ladder line finding harm travel spiritual construction lip sock boot return fortune passion transition drop tear warning ball god patience bend lady cross sex routine force degree tap item usual profit collar inspector protection development side marriage station read skin consequence pipe half champion sport creative task screw rush actor affair writer week clock knee restaurant leather law comparison client responsibility reflection heavy fortune daughter context economy address issue stroke frame entry opportunity dot punch survey human blow pleasure match December hospital secretary payment fun ease serve nose cookie layer outcome hold strike complex ability respond state prize hit detail vegetable self coast sell commercial dream issue salad strategy dead passage shelter cover scratch temporary bad nasty brown plant nation touch beer shoe negotiation submission assistant nothing primary experience judge guess palm initiative army psychology death push wind advance implement ring light feed put plenty remove hearing design restaurant patience bit picture increase paint beer class use feeling speaker funny database concentrate product trouble glass tackle switch drink dress level desk excitement fruit employee childhood unique horse effect smile climate manufacturer day cancer horoscope save boyfriend judgment intention ball quarter possible resist holiday address good initiative hospital coach finger role few discipline wear statement lawyer brother enthusiasm doctor yesterday judgment sample brief lecture bend perspective table pitch round factor draw common skin toe extent finance ride end audience title yesterday air highly mission annual independent dish explanation western pool meet hurt morning drop profit band flight individual hurry spread gap bread angle necessary friday bed leadership bat sort break fix program order champion selection look bath female file spirit army May variation nasty map signature meal member depth substance sale grass card latest thursday influence bitter dance network charge preparation response ratio beat cat daily university refrigerator coach shine membership record member frame smile security concept feel page surgery king outcome shock tension confidence recognition following stick hall hotel queen radio breath improvement assumption guard purchase slice copy xt2H7 familiar floor remote knife up3H2 construction position historian bike interest specialist request metal minute father administration insurance run jacket part mobile minimum diet feedback comfortable emotion woman reception due singer explanation coast bench highly club Monday engine feedback fish skill contribution confusion share spare concert click district world cu0P1 week steal hair iron reaction Saturday iron signal comfortable daughter word way most bake section salt pension extreme court alarm initial plan signature depth worry consequence rise traffic original medicine revolution prize awareness stay heat sweet check group reveal height message chest wine function service sandwich finding island grandfather church law meeting royal poet interaction active tourist nurse bulletin yahoo plate incident channel courage receipt presence cow comfort history marketing county channel loss hate subject lesson save emergency physical plenty character strength dependent card gene expression ruin die basis pay cost post alert knife text keep tension topic swim buddy yn3B8 park pen advice main exchange improvement hat trainer preference printer holiday government extreme positive tone November press food draft promotion setting affect personal cut resort rush safety rent heat gold purchase low taste recommended stand ordinary disaster main finance drag air space can distribution river dish breath keep office joke role project post background notice suit wind shot extension drunk stranger television ice pollution star hand laugh stay depression international middle camp combine school coat abroad voice rest husband flow campaign indication birthday ladder chicken sail deposit cross copy rate internal maybe sense country shirt rain poetry capital notice topic she anywhere passenger side reality issue peace father mate mix list raw spring fire blame external suspect listen island potato dream access couple teacher vehicle house
*/
text-decoration: none;
}
#FMSGQ {
position: absolute;
filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#40721e', endColorstr='#810c5f');
text-align: center;
-webkit-transition: background 29ms linear;
-moz-transition: background 72ms linear;
-ms-transition: background 34ms linear;
-o-transition: background 27ms linear;
transition: background 26ms linear;
}
#CYMU {
background-color: #c7ba0c;
position: absolute;
background-image: none;
cursor: pointer;
-moz-box-sizing: border-box;
-webkit-box-sizing: border-box;
box-sizing: border-box;
z-index: 121;
z-index: 235;
}
#QFWN {
-moz-box-sizing: content-box;
-webkit-box-sizing: content-box;
box-sizing: content-box;
}
#LWYWO {
list-style: none;
margin: .6em .0em .6em;
}
#ATCPJH {
cursor: default !important;
padding: .7em .6em .4em .8em;
background-color: #ac03de;
vertical-align: middle;
}
#OKFPSTQ {
list-style: none;
padding-left: 0.9em;
padding-right: 5.9em;
-webkit-transition: background 68ms linear;
-moz-transition: background 48ms linear;
-ms-transition: background 16ms linear;
-o-transition: background 64ms linear;
transition: background 70ms linear;
text-indent: -249px;
padding-left: 4.7em;
padding: .3em .5em .4em .6em;
}
#XILFA {
clear: both;
}
#OEOJUV {
padding-left: 8.6em;
}
#IHFJ {
min-height: 0;
font: normal 15px/135% Arial, Helvetica, sans-serif;
padding: .4em .1em .9em .5em;
}
#ETL {
padding-right: 9.0em;
display: table;
}
#AYBKGRWN {
height: 53px;
text-decoration: none;
background-image: none;
}
#HQHBQP {
background: #d596a0;
background-color: #9faf94;
z-index: 202;
padding-right: 9.5em;
list-style: none;
}
#VRBCI {
margin: .5em .0em .8em;
background-color: #bbcd86;
}
#MYEJ {
border-left: 1px solid #1c56a5;
position: absolute;
height: 14px;
padding: 63;
min-height: 0;
text-align: center;
font-weight: bold;
}
#ASSUEUV {
border-bottom: none;
z-index: 185;
cursor: default !important;
background: -moz-linear-gradient(center top, #5b85a9 8%, #69d12e 26%);
filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#185c12', endColorstr='#c37f82');
overflow: hidden;
background-repeat: no-repeat;
}
#EYFR {
overflow: hidden;
background: #e6ea74;
clip: rect(10 73 13 61);
}
#VYKOQ {
margin: 53;
padding: 28;
}
#JBPTNP {
text-decoration: none;
background: #1fb3ad;
clip: rect(14 10 72 74);
line-height: 1.3;
background-repeat: no-repeat;
outline: 57;
width:71px;
}
#BMLUHGBD {
font: normal 18px/187% Arial, Helvetica, sans-serif;
overflow: visible;
}
#LIGKPX {
color: #FFFFFF;
-webkit-transition: background 26ms linear;
-moz-transition: background 97ms linear;
-ms-transition: background 62ms linear;
-o-transition: background 84ms linear;
transition: background 76ms linear;
padding-right: 6.0em;
border-left: 1px solid #f29b45;
background-repeat: no-repeat;
-moz-box-sizing: content-box;
-webkit-box-sizing: content-box;
box-sizing: content-box;
position: absolute;
}
#NYDG {
min-height: 0;
background: -webkit-gradient(linear, left top, left bottom, color-stop(0.05, #bfd833), color-stop(1, #8a4274));
outline: 37;
clear: both;
}
#XUXWASWT {
opacity: 0;
width:94px;
position: absolute;
background-color: #ba0cb6;
}
#KOWAPQ {
border: 75;
height: 96px;
border-bottom: none;
padding: .0em .3em .4em .8em;
}
#LLOKGNJ {
text-indent: -245px;
list-style: none;
}
#LKRRWCH {
font-size: 10%;
border-bottom: none;
overflow: hidden;
font-weight: bold;
width:54px;
}
#JVQRJC {
font: normal 41px/192% Arial, Helvetica, sans-serif;
}
#LLIRY {
background: #8a8547;
background-color: #836432;
}
#AJWT {
cursor: pointer;
width:88px;
z-index: 136;
cursor: default !important;
}
#VSP {
clip: rect(85 47 38 70);
}
#XLHVFWKL {
display: table;
background: -webkit-gradient(linear, left top, left bottom, color-stop(0.05, #f21b22), color-stop(1, #cb93b4));
padding-right: 8.0em;
text-decoration: none;
font-size: 16%;
margin: .7em .1em .6em;
}
#CCEWRH {
filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#bf7f2f', endColorstr='#7f3957');
background: -webkit-gradient(linear, left top, left bottom, color-stop(0.05, #1d4b), color-stop(1, #dc52b1));
display: table;
font-weight: bold;
padding-right: 4.3em;
list-style: none;
}
#GRIFDQ {
height: 24px;
width:99px;
}
#KTLGYN {
padding: .6em .4em .2em .5em;
position: absolute;
min-height: 0;
-webkit-transition: background 99ms linear;
-moz-transition: background 42ms linear;
-ms-transition: background 17ms linear;
-o-transition: background 54ms linear;
transition: background 17ms linear;
padding: .4em .0em .8em .5em;
border-left: 1px solid #d6e246;
opacity: 0;
min-height: 0;
}
#AHFJYSFQF {
filter:Alpha(Opacity=76);
background: #521ae4;
cursor: pointer;
margin: .8em .6em .3em;
overflow: visible;
height: 42px;
font-size: 80%;
background-image: none;
}
#EQAGMFPP {
cursor: pointer;
text-align: center;
position: absolute;
border: 44;
cursor: default !important;
}
#OXI {
color: #FFFFFF;
border-bottom: none;
min-height: 0;
margin: 71;
position: absolute;
background: -webkit-gradient(linear, left top, left bottom, color-stop(0.05, #bbd149), color-stop(1, #31e83e));
}
#CTNK {
font-size: 52%;
background: #dcb398;
clear: both;
background-color: #336623;
text-decoration: none;
padding-left: 8.0em;
padding: .4em .6em .3em .6em;
height: 07px;
}
#XKXQ {
border-bottom: none;
background: #23c542;
padding: 94;
clip: rect(81 98 97 90);
opacity: 0;
background-repeat: no-repeat;
}
#OKKDT {
padding-right: 3.3em;
padding-right: 0.8em;
vertical-align: middle;
list-style: none;
}
#FIEUSI {
clear: both;
}
#HASHENNA {
filter:Alpha(Opacity=99);
clear: both;
color: #FFFFFF;
filter:Alpha(Opacity=57);
background-repeat: no-repeat;
z-index: 171;
padding: .0em .9em .3em .1em;
}
#WYJOFI {
opacity: 0;
clear: both;
display: table;
}
#BSIL {
-moz-box-sizing: border-box;
-webkit-box-sizing: border-box;
box-sizing: border-box;
background-repeat: no-repeat;
padding-right: 5.6em;
font-weight: bold;
opacity: 0;
background: -moz-linear-gradient(center top, #a89e36 7%, #8226c0 96%);
min-height: 0;
border: 80;
}
#XLO {
border: 95;
}
#wAUEHYWSK {
overflow: visible;
overflow: visible;
overflow: hidden;
color: #FFFFFF;
background-color: #7d2b31;
display: table;
text-indent: -142px;
cursor: pointer;
}
#MAEQS {
margin: 80;
background-color: #daae8c;
cursor: default !important;
text-align: center;
text-decoration: none;
filter:Alpha(Opacity=55);
text-align: center;
}
#YJHWYC {
font-weight: bold;
font-size: 38%;
opacity: 0;
clip: rect(44 40 61 94);
overflow: visible;
}
#MKKPEQGYO {
width:40px;
padding: .3em .6em .4em .9em;
-moz-box-sizing: border-box;
-webkit-box-sizing: border-box;
box-sizing: border-box;
color: #FFFFFF;
border-left: 1px solid #6765b2;
}
#DLXC {
-moz-box-sizing: border-box;
-webkit-box-sizing: border-box;
box-sizing: border-box;
background-image: none;
background-color: #307D7E;
width:50px;
padding: 46;
font-size: 53%;
line-height: 1.3;
background-repeat: no-repeat;
}
#LQRYT {
background: -webkit-gradient(linear, left top, left bottom, color-stop(0.05, #8bcdb7), color-stop(1, #9b9f03));
cursor: default !important;
overflow: visible;
color: #00FF00;
}
#YQJTSD {
list-style: none;
z-index: 137;
-webkit-transition: background 46ms linear;
-moz-transition: background 72ms linear;
-ms-transition: background 15ms linear;
-o-transition: background 21ms linear;
transition: background 70ms linear;
font-size: 56%;
clear: both;
clear: both;
}
#TKEEUAUV {
z-index: 239;
background-repeat: no-repeat;
-moz-box-sizing: border-box;
-webkit-box-sizing: border-box;
box-sizing: border-box;
outline: 80;
}
#EOJXLUH {
clip: rect(13 71 55 26);
-moz-box-sizing: content-box;
-webkit-box-sizing: content-box;
box-sizing: content-box;
background: #43BFC7;
font-weight: bold;
margin: .1em .0em .5em;
background: #d6f237;
min-height: 0;
padding: .9em .7em .6em .5em;
}
</style>
</head>
<center>
<div MHd1="2235514742111333499" MYid1="776">
<a href="http://www.thompsogna.top/l/lt1KV21113V ... 3679"><img src="http://www.thompsogna.top/im/A21113PS55 ... 562137.jpg"/>
<br>
<br>
<br>
Connect With Others Through Simple And Secure Cloud Solutions!!!!
<br>
<br>
<br>
<br>
<img src="http://www.thompsogna.top/im/O21113VO55 ... 562137.jpg" border="0" /></a>
<P>
<p>
<div MVid0="22355147477633499" FIid4="334992897">
</div>
<br />
<a href="http://www.thompsogna.top/l/lc4VX21113P ... 2734613679">
<img src="http://www.thompsogna.top/im/V21113TN55 ... 562137.jpg" border="0" /></a>
<div NKid3="223551474776" KEid5="77633499">
</div>
<table><tr><td height="929"></td></tr></table>
<a href="http://www.thompsogna.top/unsF21113AO55 ... 2734613679">
<img src="http://www.thompsogna.top/im/Y21113BJ55 ... .png"/></a>
</div>
</center>

</body>
</html>
User avatar
nick.bolton
The Big Cheese
Posts: 2468
Joined: Thu Aug 28, 2008 4:02 pm

Re: can not block domain @*.top

Wed Nov 18, 2015 9:43 am

That 1133 doesn't refer to anything in the email. If you search for this email in the 'All Emails' screen, then hover your mouse over the status column, it will tell you which White custom filter let it through, so you can check this against the content.
You can test your filters against the email by using the software from http://www.regexlab.com/mtracer/ as we use their code to handle regular expressions.

Return to “MailWasher Enterprise Server”