Spammers are back

Have you tried under email protection > SMTP> antispam > sender blacklist and use *@*.us . That should block the entire .us TLD

This does not work.

Just received another one from Bathroom_Remodeling@beggar.duounne.us.

Sorry about that, I missed the documentation about TLDs. This used to work a few years back and then broke. I remember patching it myself once when I was having issues similar to yours. Don't know how much of it is relevant now but here is what I did previously https://community.sophos.com/products/unified-threat-management/f/mail-protection-smtp-pop3-antispam-and-antivirus/49880/block-entire-top-level-domains-in-email-protection-anti-spam/183046#183046 

Sorry about that, I missed the documentation about TLDs. This used to work a few years back and then broke. I remember patching it myself once when I was having issues similar to yours. Don't know how much of it is relevant now but here is what I did previously https://community.sophos.com/products/unified-threat-management/f/mail-protection-smtp-pop3-antispam-and-antivirus/49880/block-entire-top-level-domains-in-email-protection-anti-spam/183046#183046 

I just modified my filters like you suggested and IT'S ALREADY blocking the bastards.

Thanks - good work.

I'm adding this to my notebook.

But first, I'm going to block every other spam domain I can think of.