This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Wannan tattunawa ta zama daɗaɗɗiya. Yi sabuwar tambaya idan ka na bukatar taimako.

message filtering

  • 1 amsa
  • 1 yana da wannan matsala
  • 3 views
  • Amsa ta ƙarshe daga Matt

ss 2115
ss 2115
more options

For a few months now I'm plagued with a certain group of spam messages. Viewing their origins through 'properties' shows these particular spam mails are coming from sources that are in brackets. Outside the brackets is always different and adding them to Junk doesn't cull them. I have tried everything I can think of to get Thunderbirds message filtering to recognise them but my lowly skills obviously aren't good enough. They are a curse. Always from one of three variants of "webstudio.com and always the last IP address numbers are different. The problem to me seems to be that the filtering ignores anything in brackets. I have tried including the brackets and excluding them. I've tried just the vpsnodexx.webstudioxx.com. I've tried just webstudioxx.com. I've tried just webstudio. I've tried the first three number bundles of the IP address. Can anyone suggest how to combat this plague.

But a small sample below: by mail.apparentlyinterested.com (vpsnode16.webstudio30.com [185.243.181.60]) from mail.newandoutstanding.com (vpsnode16.webstudio30.com [185.243.181.54]) from mail.activatethefeatures.com (vpsnode16.webstudio30.com [185.243.181.234]) from mail.totallyoutstanding.com (vpsnode16.webstudio30.com [185.243.181.52]) from mail.alternativesmeasures.com (vpsnode16.webstudio30.com [185.243.181.20]) from mail.valueandquantities.com (vpsnode16.webstudio30.com [185.243.181.10]) from mail.aboutthedesigns.com (vpsnode16.webstudio30.com [185.243.181.226]) from mail.additionalstability.com (vpsnode16.webstudio30.com [185.243.181.236])

from mail.newlyredesigned.com (vpsnode12.webstudio26.com [45.136.7.142]) from mail.dimensionsredesigned.com (vpsnode12.webstudio26.com [45.136.7.138]) from mail.impressiveresulting.com (vpsnode12.webstudio26.com [45.136.7.146]) from mail.reflectedreviews.com (vpsnode12.webstudio26.com [45.136.7.136]) from mail.similarinconcept.com (vpsnode12.webstudio26.com [45.136.7.110]) from mail.totallynewandoutstanding.com (vpsnode12.webstudio26.com [45.136.7.144])

from mail.arrangementbooks.com (vpsnode14.webstudio28.com [91.151.93.157]) from mail.ad-future.com (vpsnode14.webstudio28.com [91.151.93.119]) from mail.artfamilygifts.com (vpsnode14.webstudio28.com [91.151.93.159]) from mail.youth4med.com (vpsnode14.webstudio28.com [91.151.93.89]) from mail.bestinspirationphase.com (vpsnode14.webstudio28.com [91.151.93.165]) from mail.zeniapharmaceuticals.com (vpsnode14.webstudio28.com [91.151.93.95]) from mail.bestprocessofsimplifying.com (vpsnode14.webstudio28.com [91.151.93.169]) from mail.bestresponseprocess.com (vpsnode14.webstudio28.com [91.151.93.177]) from mail.earthily-enterprises.com (vpsnode14.webstudio28.com [160.238.45.142]) from mail.specificoccasions.com (vpsnode14.webstudio28.com [160.238.45.132]) from mail.certainlydeveloped.com (vpsnode14.webstudio28.com [160.238.45.136]) from mail.announcedsolution.com (vpsnode14.webstudio28.com [160.238.45.134])

For a few months now I'm plagued with a certain group of spam messages. Viewing their origins through 'properties' shows these particular spam mails are coming from sources that are in brackets. Outside the brackets is always different and adding them to Junk doesn't cull them. I have tried everything I can think of to get Thunderbirds message filtering to recognise them but my lowly skills obviously aren't good enough. They are a curse. Always from one of three variants of "webstudio.com and always the last IP address numbers are different. The problem to me seems to be that the filtering ignores anything in brackets. I have tried including the brackets and excluding them. I've tried just the vpsnodexx.webstudioxx.com. I've tried just webstudioxx.com. I've tried just webstudio. I've tried the first three number bundles of the IP address. Can anyone suggest how to combat this plague. But a small sample below: by mail.apparentlyinterested.com (vpsnode16.webstudio30.com [185.243.181.60]) from mail.newandoutstanding.com (vpsnode16.webstudio30.com [185.243.181.54]) from mail.activatethefeatures.com (vpsnode16.webstudio30.com [185.243.181.234]) from mail.totallyoutstanding.com (vpsnode16.webstudio30.com [185.243.181.52]) from mail.alternativesmeasures.com (vpsnode16.webstudio30.com [185.243.181.20]) from mail.valueandquantities.com (vpsnode16.webstudio30.com [185.243.181.10]) from mail.aboutthedesigns.com (vpsnode16.webstudio30.com [185.243.181.226]) from mail.additionalstability.com (vpsnode16.webstudio30.com [185.243.181.236]) from mail.newlyredesigned.com (vpsnode12.webstudio26.com [45.136.7.142]) from mail.dimensionsredesigned.com (vpsnode12.webstudio26.com [45.136.7.138]) from mail.impressiveresulting.com (vpsnode12.webstudio26.com [45.136.7.146]) from mail.reflectedreviews.com (vpsnode12.webstudio26.com [45.136.7.136]) from mail.similarinconcept.com (vpsnode12.webstudio26.com [45.136.7.110]) from mail.totallynewandoutstanding.com (vpsnode12.webstudio26.com [45.136.7.144]) from mail.arrangementbooks.com (vpsnode14.webstudio28.com [91.151.93.157]) from mail.ad-future.com (vpsnode14.webstudio28.com [91.151.93.119]) from mail.artfamilygifts.com (vpsnode14.webstudio28.com [91.151.93.159]) from mail.youth4med.com (vpsnode14.webstudio28.com [91.151.93.89]) from mail.bestinspirationphase.com (vpsnode14.webstudio28.com [91.151.93.165]) from mail.zeniapharmaceuticals.com (vpsnode14.webstudio28.com [91.151.93.95]) from mail.bestprocessofsimplifying.com (vpsnode14.webstudio28.com [91.151.93.169]) from mail.bestresponseprocess.com (vpsnode14.webstudio28.com [91.151.93.177]) from mail.earthily-enterprises.com (vpsnode14.webstudio28.com [160.238.45.142]) from mail.specificoccasions.com (vpsnode14.webstudio28.com [160.238.45.132]) from mail.certainlydeveloped.com (vpsnode14.webstudio28.com [160.238.45.136]) from mail.announcedsolution.com (vpsnode14.webstudio28.com [160.238.45.134])

All Replies (1)

Matt
Matt
  • Moderator
  • Top 10 Contributor
more options

you could try emailing the domain registrar about their being spammers. That is given in the domain registration as abuse@namecheap.com

https://www.namecheap.com/domains/whois/results.aspx?domain=WEBSTUDIO30.COM

https://www.namecheap.com/domains/whois/results.aspx?domain=WEBSTUDIO26.COM

The IP addresses appear to be in Turkey. But with a "sampling" I really have no idea what I am looking as as such.

What I do know is you can not filter on the From: in the message header successfully as it only works against the last entry in the header.