directadmin exim block entire .TLD from server

nano /etc/system_filter.exim

=======================================


#For blocking all incoming and outgoing .win emails
if first_delivery
and ("$h_to:, $h_cc:" contains ".win")
or ("$h_from:" contains ".win")
then
seen finish
endif

=======================================

DONE!