Settings: Junk Mail: Blocked Senders: Domain Gostarmedia.com & *@gostsarmedia.com do not block incoming spam

Anonymous
2025-06-13T16:49:06+00:00

For at least two weeks, I've been inundated with spam from the domain gostarmedia.com. I've created the following "solutions" all without success.

Rules

Sender Address Includes "gostarmedia" (without quotes)

Categorize as Spam

Move to Junk Email

Junk Mail

*@gostarmedia.com

gostarmedia.com

It would be really great if Hotmail could stop letting ****clowns like these from getting through if someone enters a valid domain. That or allow more wildcards (e.g. *@*.gostarmedia.com), instead of only allowing it in place of usernames preceding the @.

Today, I searched and deleted 16 out of 18 Junk Mail emails, that had the gostarmedia.com domain in their addresses.

Thanks!

-User since 1995

Outlook | Web | Outlook.com | Email

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

167 answers

Sort by: Most helpful
  1. Anonymous
    2025-06-30T06:23:06+00:00

    I concur this. Don't need to add the function. Just the Message ID.

    Since I only have personal MS Outlook.com account, my concern now is this.

    Important Notice: Personal Microsoft Service Accounts Deprecation in Power Automate. Starting May 27, 2025, personal Microsoft service accounts will begin deprecation and will be fully retired by July 26, 2025. To avoid any disruption, ensure you complete the necessary transition process before the deadline.

    Do we have a free alternative to this?

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2025-06-29T14:47:55+00:00

    Thank you , have created such a rule, have also moved all gostarmedia from junk to new folder ,will forward this to msn as well...lol

    Was this answer helpful?

    0 comments No comments
  3. Anonymous
    2025-06-29T10:17:51+00:00

    I am experiencing the same junk mail issue!!!

    Every day I receive 20 to 30 spam emails from subdomains under gostarmedia.com. These are not ordinary spam messages — they bypass filters, abuse Exchange Online relays, and render Microsoft’s rules completely ineffective.

    I’ve attempted every possible workaround:

    • I created rules for “Body contains gostarmedia”
    • I created rules for “Sender address contains gostarmedia.com”

    Neither of these actions worked. Not one message was filtered or moved.

    After investigating the message headers and sources with the help of ChatGPT I found the following:

    Category Pattern / Detail
    Sender Display Names Random promotional names impersonating legitimate offers
    From Domains All use *.gostarmedia.com subdomains with obfuscating ' character
    Return-Path Domains Always randomized fake domains under .edu.info
    SPF / DKIM / DMARC None present in any message
    Primary Link Host 20.218.142.124.static.hostiran.name in all embedded, unsubscribe, and image URLs
    Tracking Pixels Same hostiran.name 1×1 image pixel tracker
    Message Spam Score (SCL) 9 in all cases — maximum severity spam
    Delivery Method Relayed via Microsoft Exchange Online / Office365 EOP Frontend
    HTML Email Type Yes — heavy use of HTML, inline styling, external links
    Cloud VPS Sending IPs Disposable cloud IPs — different each time but pattern of VPS/cloud-hosted source

    This isn’t a one-off incident — it’s a systematic abuse operation exploiting gaps in Microsoft’s filtering and rule enforcement.

    Microsoft needs to address this urgently.

    • Inbox rules aren’t catching these patterns.
    • The spam filter identifies these as SCL 9 yet still delivers them.
    • The sender domains and infrastructure are known and repeatable — yet no permanent block exists.

    As a long-time Hotmail/Outlook user, I expect Microsoft to seriously review this abuse vector and implement stricter control mechanisms against these kinds of campaigns.

    Please escalate this to the security and filtering product teams. We are getting hammered by the same operation daily and left defenseless.

    Thank you.

    Microsoft Rules:

    Here is one of the email's sources:

    Received: from DU0P192MB2503.EURP192.PROD.OUTLOOK.COM (::1) by DB7P192MB0425.EURP192.PROD.OUTLOOK.COM with HTTPS; Sun, 29 Jun 2025 08:53:38 +0000 Received: from PH7PR17CA0031.namprd17.prod.outlook.com (2603:10b6:510:323::14) by DU0P192MB2503.EURP192.PROD.OUTLOOK.COM (2603:10a6:10:5a6::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8901.13; Sun, 29 Jun 2025 08:53:37 +0000 Received: from CY4PEPF0000EE3C.namprd03.prod.outlook.com (2603:10b6:510:323:cafe::a4) by PH7PR17CA0031.outlook.office365.com (2603:10b6:510:323::14) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.8880.28 via Frontend Transport; Sun, 29 Jun 2025 08:53:36 +0000 Authentication-Results: spf=none (sender IP is 13.64.232.165) smtp.mailfrom=swglv.4n4n146xba.edu.info; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=; Received-SPF: None (protection.outlook.com: swglv.4n4n146xba.edu.info does not designate permitted sender hosts) Received: from autdjcch.znxviuwiudsaui.eu.com (13.64.232.165) by CY4PEPF0000EE3C.mail.protection.outlook.com (10.167.242.13) with Microsoft SMTP Server id 15.20.8901.15 via Frontend Transport; Sun, 29 Jun 2025 08:53:35 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:E5C76A06D69C8E438DAC49C794A704DE5C5CA8477FEF03DE014840D0A3A94CBE;UpperCasedChecksum:FFFD3C7BE9400DD3B1A3A2115E09B6570CC3D7E5C7F5389FA7362065EA679F2F;SizeAsReceived:309;Count:8 Date: Sat, 28 Jun 2025 03:05:38 +0000 To: Say Goodbye to Switching Glasses for Good! Tired of juggling multiple pairs of glasses to see clearly? Flex Focus Adjustable Glasses are here to simplify your life. With advanced adjustable lens technology, you can easily change your focus to suit any situation—reading, driving, or enjoying the view.

    No prescriptions. No hassle. Just perfect clarity wherever you are. Designed for ultimate convenience and comfort, these glasses are lightweight, durable, and stylish enough to wear all day.

    Get Your Flex Focus Glasses Today

    If you wish to unsubscribe from future mailings please click here or write to:
    221 W 9th St #188 Wilmington, DE 19801

    This is an advertisement.

    Was this answer helpful?

    0 comments No comments
  4. Anonymous
    2025-06-29T00:59:29+00:00

    Thank you.

    I created one rule as blow:

    Was this answer helpful?

    0 comments No comments
  5. Anonymous
    2025-06-28T15:07:06+00:00

    J B 2000 gave the steps on June 23.

    It was easy to follow, but if you need more help see my post today.

    Was this answer helpful?

    0 comments No comments