For a few months now I'm plagued with a certain group of spam messages. Viewing their origins through 'properties' shows these particular spam mails are coming from sources that are in brackets. Outside the brackets is always different and adding them to Junk doesn't cull them. I have tried everything I can think of to get Thunderbirds message filtering to recognise them but my lowly skills obviously aren't good enough. They are a curse. Always from one of three variants of "webstudio.com and always the last IP address numbers are different. The problem to me seems to be that the filtering ignores anything in brackets. I have tried including the brackets and excluding them. I've tried just the vpsnodexx.webstudioxx.com. I've tried just webstudioxx.com. I've tried just webstudio. I've tried the first three number bundles of the IP address. Can anyone suggest how to combat this plague. But a small sample below: by mail.apparentlyinterested.com (vpsnode16.webstudio30.com [185.243.181.60]) from mail.newandoutstanding.com (vpsnode16.webstudio30.com [185.243.181.54]) from mail.activatethefeatures.com (vpsnode16.webstudio30.com [185.243.181.234]) from mail.totallyoutstanding.com (vpsnode16.webstudio30.com [185.243.181.52]) from mail.alternativesmeasures.com (vpsnode16.webstudio30.com [185.243.181.20]) from mail.valueandquantities.com (vpsnode16.webstudio30.com [185.243.181.10]) from mail.aboutthedesigns.com (vpsnode16.webstudio30.com [185.243.181.226]) from mail.additionalstability.com (vpsnode16.webstudio30.com [185.243.181.236]) from mail.newlyredesigned.com (vpsnode12.webstudio26.com [45.136.7.142]) from mail.dimensionsredesigned.com (vpsnode12.webstudio26.com [45.136.7.138]) from mail.impressiveresulting.com (vpsnode12.webstudio26.com [45.136.7.146]) from mail.reflectedreviews.com (vpsnode12.webstudio26.com [45.136.7.136]) from mail.similarinconcept.com (vpsnode12.webstudio26.com [45.136.7.110]) from mail.totallynewandoutstanding.com (vpsnode12.webstudio26.com [45.136.7.144]) from mail.arrangementbooks.com (vpsnode14.webstudio28.com [91.151.93.157]) from mail.ad-future.com (vpsnode14.webstudio28.com [91.151.93.119]) from mail.artfamilygifts.com (vpsnode14.webstudio28.com [91.151.93.159]) from mail.youth4med.com (vpsnode14.webstudio28.com [91.151.93.89]) from mail.bestinspirationphase.com (vpsnode14.webstudio28.com [91.151.93.165]) from mail.zeniapharmaceuticals.com (vpsnode14.webstudio28.com [91.151.93.95]) from mail.bestprocessofsimplifying.com (vpsnode14.webstudio28.com [91.151.93.169]) from mail.bestresponseprocess.com (vpsnode14.webstudio28.com [91.151.93.177]) from mail.earthily-enterprises.com (vpsnode14.webstudio28.com [160.238.45.142]) from mail.specificoccasions.com (vpsnode14.webstudio28.com [160.238.45.132]) from mail.certainlydeveloped.com (vpsnode14.webstudio28.com [160.238.45.136]) from mail.announcedsolution.com (vpsnode14.webstudio28.com [160.238.45.134])