Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Need to filter ALL email

Discussion in 'E-mail Discussion' started by jols, May 27, 2013.

  1. StoneyCreeker

    StoneyCreeker Well-Known Member

    Joined:
    Oct 17, 2006
    Messages:
    53
    Likes Received:
    3
    Trophy Points:
    158
    Location:
    Upper-East TN
    cPanel Access Level:
    Root Administrator
    I think I found a better regex syntax.
    After the TLD we are trying to block we are using [^a-zA-Z0-9_] which says:

    [^a-zA-Z0-9_] match a single character not present in the list below
    a-z a single character in the range between a and z (case sensitive)
    A-Z a single character in the range between A and Z (case sensitive)
    0-9 a single character in the range between 0 and 9
    _ the literal character _

    I added a period after the caret ^ and it changed it to mean:

    [^.a-zA-Z0-9_] match a single character not present in the list below
    . the literal character .
    a-z a single character in the range between a and z (case sensitive)
    A-Z a single character in the range between A and Z (case sensitive)
    0-9 a single character in the range between 0 and 9
    _ the literal character _

    So now the string "name@lawyer.com" is not a valid match but "name@.lawyer" is caught.

    I will test this on a few of the more popular "false positive domains" and let you know what happens.

    I tested it at regex101.com using the javascript tester. All I used in the Regular Expression was ".+@.+\.lawyer[^.a-zA-Z0-9_]" (no quotes) against the test string "mail@e-mail.lawyer" and "mail@e-mail.lawyer.com" (no quotes)

    Hope this helps :)
     
  2. StoneyCreeker

    StoneyCreeker Well-Known Member

    Joined:
    Oct 17, 2006
    Messages:
    53
    Likes Received:
    3
    Trophy Points:
    158
    Location:
    Upper-East TN
    cPanel Access Level:
    Root Administrator
    I have been watching my spam mail account for false positives after including the huge list of new TLD's and have hashed out a few of the blocked TLD's in your list because they are in use by reputable sources as well as spammers.

    .cc is being used by many legitimate entities such as my local sheriff's dept, sheriff.cc. I live in Carter County so they thought it was appropriate. Also I found .name and .museum legitimate emails being blocked. And one of my clients is receiving mail from a .pro account. .us is also seeing many legitimate uses.


    So to conclude:
    That huge list of new TLD's is blocking many spams on my server but so far I have had to allow some as they are being used for legitimate uses.

    I have allowed .cc, .name, .museum, .pro, and .us.
    I believe in the future more people will start legitimately using these new TLD's and this rule set may need constant monitoring.

    Hope this helps! :)

    Maybe someone should start a new thread on this so we can help each other with this "new TLD" spam filtering method.
     
  3. ebizindia

    ebizindia Well-Known Member

    Joined:
    Oct 13, 2005
    Messages:
    95
    Likes Received:
    3
    Trophy Points:
    158
    Location:
    Kolkata, India
    cPanel Access Level:
    Root Administrator
    Can someone guide me why do we include '_'? I think this character cannot be a part of the email address. Please correct me if I am wrong.

    Also, we need to add '-' as we may have @lawyer-dallas.com as a valid address.
     
  4. patchwork

    patchwork Well-Known Member

    Joined:
    Nov 2, 2001
    Messages:
    93
    Likes Received:
    0
    Trophy Points:
    316
    Could the filter be modified to only delete emails marked as "Spam" and from those TLD's, or does the spam assassin scoring come after this filter.

    Most of my bad TLD email is marked as spam, but I don't want to delete everything marked as spam as some genuine emails are sometimes marked incorrectly.
     
  5. crazyaboutlinux

    crazyaboutlinux Well-Known Member

    Joined:
    Nov 3, 2007
    Messages:
    939
    Likes Received:
    0
    Trophy Points:
    66
    HI

    I want to block some top level domain to avoid getting emails from them, cPanelMichael has provided below code at Need to filter ALL email, i think its best for my requirement but have one query can we modify this code want to replace "contains" to "ends with" is it good ??

    and more thing can we add multiple .TLDs by adding commas eg. ".pw",".pk",".ru" is it good ??

    Code:
    if first_delivery
    and ("$h_to:, $h_cc:" contains ".pw")
    or ("$h_from:" contains ".pw")
    then
    seen finish
    endif
    modified code

    Code:
    if first_delivery
    and ("$h_to:, $h_cc:" ends with".pw",".pk",".ru")
    or ("$h_from:" ends with ".pw",".pk",".ru")
    then
    seen finish
    endif
     
  6. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    47,299
    Likes Received:
    2,155
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    You should use a regular expression instead of a comma if you want to block multiple TLDs on the same line. It looks like users are reporting more success with "contains" instead of "ends with". There are several examples on this thread that users have reported success with. You may want to try those out and tweak the rules as needed.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. malkinstrecker

    malkinstrecker Registered

    Joined:
    Jul 12, 2016
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    USA
    cPanel Access Level:
    Website Owner
    ooking for help blocking spam coming from the lesser TLDs
    BUt I want to be able to let customers CHOOSE To implement the block from within Cpanel
     
    #47 malkinstrecker, Jul 12, 2016
    Last edited by a moderator: Jul 12, 2016
  8. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    47,299
    Likes Received:
    2,155
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    This would require a custom plugin or a new feature developed by cPanel. You can open a feature request via:

    Submit A Feature Request

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  9. asmithjr

    asmithjr Well-Known Member

    Joined:
    Jun 13, 2003
    Messages:
    510
    Likes Received:
    5
    Trophy Points:
    168
    error in exim_mainlog after implementing custom filter. I placed this in cpanel_exim_system_filter_custom
    Code:
    if first_delivery
    and ("$h_to:, $h_cc:" ends with ".club")
    or ("$h_from:" ends with ".club")
    then
    logwrite "$tod_log $h_from $h_to $h_subject (it ends with)"
    seen finish
    endif
    
    per the examples in many threads. In my exim_mainlog I see this error
    Code:
    2016-08-16 09:46:35 1bZehA-0005sC-1j Error in system filter: "and" or "or"
    or ")" expected near line 266 of filter file, but found "".club")"
    
    I cannot find anything to help me solve this. Anyone have the solution.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  10. asmithjr

    asmithjr Well-Known Member

    Joined:
    Jun 13, 2003
    Messages:
    510
    Likes Received:
    5
    Trophy Points:
    168
    ok I see I had ends with in this example and it needs to be ends without the with. I modified and still have the error.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  11. StoneyCreeker

    StoneyCreeker Well-Known Member

    Joined:
    Oct 17, 2006
    Messages:
    53
    Likes Received:
    3
    Trophy Points:
    158
    Location:
    Upper-East TN
    cPanel Access Level:
    Root Administrator
    To block ".club" I use:

    Code:
    if first_delivery
      and ("$h_from:" matches ".+@.+\\\\.club[^.a-zA-Z0-9_]")
      or ("$h_to:" matches ".+@.+\\\\.club[^a-zA-Z0-9_]")
      or ("$h_cc:" matches ".+@.+\\\\.club[^a-zA-Z0-9_]")
    then
    
     
  12. syphic

    syphic Registered

    Joined:
    Jun 1, 2008
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    51
    Just use ends instead of contains. Its in the exim filter documentation.

    Code:
    if first_delivery
    and ("$h_to:, $h_cc:" ends ".tld")
    or ("$h_from:" ends ".tld")
    then
    seen finish
    endif
    ~
     
  13. cybervision

    cybervision Registered

    Joined:
    Mar 21, 2005
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    151

    Hi Stoney,

    I'm new at posting to this forum. I've used your Exim Filter for Newfangled Domains for the last couple years and it works great!

    I'm now noticed that a lot of spammers are now getting around this great filter by using alias domains like...

    blabla@blabla.blabla.work
    or
    blabla@blabla.blabla.blabla.date

    I've tried experimenting with the regex but I can't get it to work for the above examples. Would you be able to share a new set of regex for the above examples?

    Thanks again as you've saved our clients with untold amount of spam.
     
  14. StoneyCreeker

    StoneyCreeker Well-Known Member

    Joined:
    Oct 17, 2006
    Messages:
    53
    Likes Received:
    3
    Trophy Points:
    158
    Location:
    Upper-East TN
    cPanel Access Level:
    Root Administrator
     
  15. StoneyCreeker

    StoneyCreeker Well-Known Member

    Joined:
    Oct 17, 2006
    Messages:
    53
    Likes Received:
    3
    Trophy Points:
    158
    Location:
    Upper-East TN
    cPanel Access Level:
    Root Administrator
    Sorry I have not visited this thread in a while.
    Here is my current list of blocked newfangled domains in a better syntax.
    So far I am not getting any spam in your new style. (blabla@blabla.blabla.blabla.date)
    This is a very big list. PLEASE GO THROUGH IT TO SUIT YOUR NEEDS.
    Use at your own risk. This code WILL PREVENT EMAIL DELIVERY FROM THESE DOMAINS!
    Lines beginning with # are not read by EXIM.
    You can see I have had to modify this list to suit my clients needs. Please do the same.
    I recommend sending these to a frequently checked email address as in the last lines of this code to prevent false positives.
    ============================

    # Block Newfangled Domain Spam
    # THESE BLOCK MORE SPAM THAN ALL THE OTHER RULES COMBINED!

    if first_delivery
    and (
    ("$h_from:" matches ".+@.+\\\\.bid[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.click[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ch[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cricket[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.asia[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ec[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.exercise[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.co.in[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gen.in[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.it[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.net.in[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.link[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ninja[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.review[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.rocks[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.science[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.space[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.top[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sa[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sk[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.uno[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.website[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.win[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.work[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.xyz[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.za[^.a-zA-Z0-9_]")

    ####or ("$h_from:" matches ".+@.+\\\\.aaa[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.abb[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.abbott[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.abogado[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ac[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.academy[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.accenture[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.accountant[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.accountants[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.aco[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.active[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.actor[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ad[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ads[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.adult[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ae[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.aeg[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.aero[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.af[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.afl[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ag[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.agency[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ai[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.aig[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.airforce[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.airtel[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.al[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.allfinanz[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.alsace[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.am[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.amica[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.amsterdam[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.an[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.android[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ao[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.apartments[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.app[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.aq[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.aquarelle[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ar[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.archi[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.army[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.arpa[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.as[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.asia[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.associates[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.at[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.attorney[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.au[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.auction[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.audio[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.auto[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.autos[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.aw[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ax[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.axa[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.az[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.azure[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ba[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.band[^.a-zA-Z0-9_]")
    ### or ("$h_from:" matches ".+@.+\\\\.bank[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bar[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.barcelona[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.barclaycard[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.barclays[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bargains[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bauhaus[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bayern[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bb[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bbc[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bbva[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bcn[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bd[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.be[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.beer[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bentley[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.berlin[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.best[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bet[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bf[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bg[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bh[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bharti[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bi[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bible[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bid[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bike[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bing[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bingo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bio[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bj[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bl[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.black[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.blackfriday[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bloomberg[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.blue[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bm[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bmw[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bn[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bnl[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bnpparibas[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.boats[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bond[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.boo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.boots[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.boutique[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bq[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.br[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bradesco[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bridgestone[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.broker[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.brother[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.brussels[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bs[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bt[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.budapest[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.build[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.builders[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.business[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.buzz[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bv[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bw[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.by[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bz[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.bzh[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cab[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cafe[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cal[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.camera[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.camp[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cancerresearch[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.canon[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.capetown[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.capital[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.caravan[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cards[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.care[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.career[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.careers[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cars[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cartier[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.casa[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cash[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.casino[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cat[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.catering[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cba[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cbn[^.a-zA-Z0-9_]")
    #### or ("$h_from:" matches ".+@.+\\\\.cc[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cd[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ceb[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.center[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ceo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cern[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cf[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cfa[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cfd[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cg[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ch[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.chanel[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.channel[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.chat[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cheap[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.chloe[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.christmas[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.chrome[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.church[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ci[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cisco[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.citic[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.city[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ck[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cl[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.claims[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cleaning[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.click[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.clinic[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.clothing[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cloud[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.club[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cm[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cn[^.a-zA-Z0-9_]")
    #### or ("$h_from:" matches ".+@.+\\\\.co[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.coach[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.codes[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.coffee[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.college[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cologne[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.commbank[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.community[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.company[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.computer[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.condos[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.construction[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.consulting[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.contractors[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cooking[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cool[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.coop[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.corsica[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.country[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.coupons[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.courses[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cr[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.credit[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.creditcard[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cricket[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.crown[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.crs[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cruises[^.a-zA-Z0-9_]")
    #### or ("$h_from:" matches ".+@.+\\\\.cu[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cuisinella[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cv[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cw[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cx[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cy[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cymru[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cyou[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.cz[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.dabur[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.dad[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.dance[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.date[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.dating[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.datsun[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.day[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.dclk[^.a-zA-Z0-9_]")
    #### or ("$h_from:" matches ".+@.+\\\\.de[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.deals[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.degree[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.delivery[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.delta[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.democrat[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.dental[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.dentist[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.desi[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.design[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.dev[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.diamonds[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.diet[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.digital[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.direct[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.directory[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.discount[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.dj[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.dk[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.dm[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.dnp[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.do[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.docs[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.dog[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.doha[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.domains[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.doosan[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.download[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.drive[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.durban[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.dvag[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.dz[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.earth[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.eat[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ec[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.education[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ee[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.eg[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.eh[^.a-zA-Z0-9_]")
    #### or ("$h_from:" matches ".+@.+\\\\.email[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.emerck[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.energy[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.engineer[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.engineering[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.enterprises[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.epson[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.equipment[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.er[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.erni[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.es[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.esq[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.estate[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.et[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.eu[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.eurovision[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.eus[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.events[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.everbank[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.exchange[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.expert[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.exposed[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.express[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.fage[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.fail[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.faith[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.family[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.fan[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.fans[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.farm[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.fashion[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.feedback[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.fi[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.film[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.finance[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.financial[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.firmdale[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.fish[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.fishing[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.fit[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.fitness[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.fj[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.fk[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.flights[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.florist[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.flowers[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.flsmidth[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.fly[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.fm[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.fo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.foo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.football[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.forex[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.forsale[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.forum[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.foundation[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.fr[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.frl[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.frogans[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.fund[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.furniture[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.futbol[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.fyi[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ga[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gal[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gallery[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.game[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.garden[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gb[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gbiz[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gd[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gdn[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ge[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gea[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gent[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.genting[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gf[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gg[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ggee[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gh[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gi[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gift[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gifts[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gives[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.giving[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gl[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.glass[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gle[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.global[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.globo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gm[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gmail[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gmo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gmx[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gn[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gold[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.goldpoint[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.golf[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.goo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.goog[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.google[^.a-zA-Z0-9_]")
    #### or ("$h_from:" matches ".+@.+\\\\.gop[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gp[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gq[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gr[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.graphics[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gratis[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.green[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gripe[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.group[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gs[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gt[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gu[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.guge[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.guide[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.guitars[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.guru[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gw[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.gy[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.hamburg[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.hangout[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.haus[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.healthcare[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.help[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.here[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.hermes[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.hiphop[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.hitachi[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.hiv[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.hk[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.hm[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.hn[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.hockey[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.holdings[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.holiday[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.homedepot[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.homes[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.honda[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.horse[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.host[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.hosting[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.hoteles[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.hotmail[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.house[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.how[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.hr[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.hsbc[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ht[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.hu[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ibm[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.icbc[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ice[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.icu[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.id[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ie[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ifm[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.iinet[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.il[^.a-zA-Z0-9_]")
    ##### or ("$h_from:" matches ".+@.+\\\\.im[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.immo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.immobilien[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.in[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.in.net[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.industries[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.infiniti[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ing[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ink[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.institute[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.insure[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.int[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.international[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.investments[^.a-zA-Z0-9_]")
    ##### or ("$h_from:" matches ".+@.+\\\\.io[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ipiranga[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.iq[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ir[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.irish[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ist[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.istanbul[^.a-zA-Z0-9_]")
    #### or ("$h_from:" matches ".+@.+\\\\.it[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.itau[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.iwc[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.java[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.jcb[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.je[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.jetzt[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.jewelry[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.jlc[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.jll[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.jm[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.jo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.jobs[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.joburg[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.jprs[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.juegos[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.kaufen[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.kddi[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ke[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.kg[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.kh[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ki[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.kim[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.kitchen[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.kiwi[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.km[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.kn[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.koeln[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.komatsu[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.kp[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.kr[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.krd[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.kred[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.kw[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ky[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.kyoto[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.kz[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.la[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lacaixa[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lancaster[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.land[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lasalle[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lat[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.latrobe[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.law[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lb[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lc[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lds[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lease[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.leclerc[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.legal[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lexus[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lgbt[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.li[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.liaison[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lidl[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.life[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lighting[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.limited[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.limo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.link[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.live[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lixil[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lk[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.loan[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.loans[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lol[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.london[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lotte[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lotto[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.love[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lr[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ls[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lt[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ltda[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lu[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lupin[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.luxe[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.luxury[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.lv[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ly[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ma[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.madrid[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.maif[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.maison[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.man[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.management[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mango[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.market[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.marketing[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.markets[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.marriott[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mba[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mc[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.md[^.a-zA-Z0-9_]")
    #### or ("$h_from:" matches ".+@.+\\\\.me[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.media[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.meet[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.melbourne[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.meme[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.memorial[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.men[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.menu[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mf[^.a-zA-Z0-9_]")
    #### or ("$h_from:" matches ".+@.+\\\\.mg[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mh[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.miami[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.microsoft[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mini[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mk[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ml[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mm[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mma[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mn[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mobi[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.moda[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.moe[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mom[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.monash[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.money[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.montblanc[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mormon[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mortgage[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.moscow[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.motorcycles[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mov[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.movie[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.movistar[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mp[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mq[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mr[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ms[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mt[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mtn[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mtpc[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mu[^.a-zA-Z0-9_]")
    ####or ("$h_from:" matches ".+@.+\\\\.museum[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mv[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mw[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mx[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.my[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.mz[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.na[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.nadex[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.nagoya[^.a-zA-Z0-9_]")
    ####or ("$h_from:" matches ".+@.+\\\\.name[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.navy[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.nc[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ne[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.nec[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.netbank[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.network[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.neustar[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.new[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.news[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.nexus[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.nf[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ng[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ngo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.nhk[^.a-zA-Z0-9_]")
    #####or ("$h_from:" matches ".+@.+\\\\.ni[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.nico[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ninja[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.nissan[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.nl[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.no[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.nokia[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.np[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.nr[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.nra[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.nrw[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ntt[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.nu[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.nyc[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.nz[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.office[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.okinawa[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.om[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.omega[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.one[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ong[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.onl[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.online[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ooo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.oracle[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.orange[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.organic[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.osaka[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.otsuka[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ovh[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pa[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.page[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.panerai[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.paris[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.partners[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.parts[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.party[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pe[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pet[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pf[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pg[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ph[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pharmacy[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.philips[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.photo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.photography[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.photos[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.physio[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.piaget[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pics[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pictet[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pictures[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pink[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pizza[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pk[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pl[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.place[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.play[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.plumbing[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.plus[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pm[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pn[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pohl[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.poker[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.porn[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.post[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pr[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.praxi[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.press[^.a-zA-Z0-9_]")
    #####or ("$h_from:" matches ".+@.+\\\\.pro[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.prod[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.productions[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.prof[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.properties[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.property[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ps[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pt[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pub[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.pw[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.py[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.qa[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.qpon[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.quebec[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.racing[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.re[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.realtor[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.realty[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.recipes[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.red[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.redstone[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.rehab[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.reise[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.reisen[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.reit[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ren[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.rent[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.rentals[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.repair[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.report[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.republican[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.rest[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.restaurant[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.review[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.reviews[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.rich[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ricoh[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.rio[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.rip[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ro[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.rocks[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.rodeo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.rs[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.rsvp[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ru[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ruhr[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.run[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.rw[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ryukyu[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sa[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.saarland[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sakura[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sale[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.samsung[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sandvik[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sandvikcoromant[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sanofi[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sap[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sarl[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.saxo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sb[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sc[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sca[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.scb[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.schmidt[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.scholarships[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.school[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.schule[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.schwarz[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.science[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.scor[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.scot[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sd[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.se[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.seat[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.seek[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sener[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.services[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sew[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sex[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sexy[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sg[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sh[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.shiksha[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.shoes[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.show[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.shriram[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.si[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.singles[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.site[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sj[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sk[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ski[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sky[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.skype[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sl[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sm[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sn[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sncf[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.so[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.soccer[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.social[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.software[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sohu[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.solar[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.solutions[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sony[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.soy[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.space[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.spiegel[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.spreadbetting[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sr[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.srl[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ss[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.st[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.starhub[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.statoil[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.stc[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.stcgroup[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.studio[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.study[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.style[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.su[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sucks[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.supplies[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.supply[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.support[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.surf[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.surgery[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.suzuki[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sv[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.swatch[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.swiss[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sx[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sy[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sydney[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.systems[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.sz[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.taipei[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tatamotors[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tatar[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tattoo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tax[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.taxi[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tc[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.td[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.team[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tech[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.technology[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tel[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.telefonica[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.temasek[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tennis[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tf[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tg[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.th[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.thd[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.theater[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tickets[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tienda[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tips[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tires[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tirol[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tj[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tk[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tl[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tm[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tn[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.to[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.today[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tokyo[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tools[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.top[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.toray[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.toshiba[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tours[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.town[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.toyota[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.toys[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tp[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tr[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.trade[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.trading[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.training[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.travel[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.trust[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tt[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tui[^.a-zA-Z0-9_]")
    ####or ("$h_from:" matches ".+@.+\\\\.tv[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tw[^.a-zA-Z0-9_]")
    or ("$h_received:" matches ".+@.+\\\\.tw[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.tz[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ua[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ubs[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ug[^.a-zA-Z0-9_]")
    ##### or ("$h_from:" matches ".+@.+\\\\.uk[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.um[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.university[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.uno[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.uol[^.a-zA-Z0-9_]")
    ####or ("$h_from:" matches ".+@.+\\\\.us[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.uy[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.uz[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.va[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.vacations[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.vc[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ve[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.vegas[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ventures[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.versicherung[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.vet[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.vg[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.vi[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.viajes[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.video[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.villas[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.vin[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.vision[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.vista[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.vistaprint[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.viva[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.vlaanderen[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.vn[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.vodka[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.vote[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.voting[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.voto[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.voyage[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.vu[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.wales[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.walter[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.wang[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.watch[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.webcam[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.website[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.wed[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.wedding[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.weir[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.wf[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.whoswho[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.wien[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.wiki[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.williamhill[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.win[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.windows[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.wine[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.wme[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.work[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.works[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.world[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ws[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.wtc[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.wtf[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.xbox[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.xerox[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.xin[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.рус[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.xperia[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.xxx[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.xyz[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.yachts[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.yandex[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.ye[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.yodobashi[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.yoga[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.yokohama[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.youtube[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.yt[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.za[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.zip[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.zm[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.zone[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.zuerich[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.zw[^.a-zA-Z0-9_]")
    or ("$h_from:" matches ".+@.+\\\\.uyh[^.a-zA-Z0-9_]")
    )
    then
    headers add "SpamRule: EXIM FILTER Block Newfangled Domains (was: $h_subject:)"
    deliver "Newfangled <newfangled@mydomain.com>"
    seen finish
    endif
     
    DigitalEssence likes this.
  16. StoneyCreeker

    StoneyCreeker Well-Known Member

    Joined:
    Oct 17, 2006
    Messages:
    53
    Likes Received:
    3
    Trophy Points:
    158
    Location:
    Upper-East TN
    cPanel Access Level:
    Root Administrator
    I had to # the line for .coop today. One of my clients got an email from a co-op farming company.
    This is why I monitor the filtered emails every day. Blocking all these domains can cause problems if you don't maintain the list.
     
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice