Filter rules: Exclude TLDs (top-level domains)

tl;dr ... Halp w/ ALL emails FROM multiple *.TLDs to NOT go to inbox

_Many_ emails in the Inbox are not flagged as Spam, leaving me to take up the slack. My goal:

IF SENDER ADDRESS CONTAINS TLD (e.g., *.ru OR *.ro OR *.pl)

THEN
(... depending on limitatations of Comcast algos)

MARK AS SPAM and MOVE TO SPAM FOLDER *** ideal for training Spam rules ***

-OR-

SEND TO TRASH

-OR-
REJECT SENDER
-OR-
... anything else that routes it away from Inbox

Requirements:
> No forced use of matching to Safe Senders, e.g., support-at-comcast-dot-com.

> No forced use of matching to safe domains, e.g., comcast-dot-com.

> Keeps or toggles message as Unread.

Support:
Will learn non-noob/non-genius coding/tagging/other. 

Appeal to sympathy:

I'm setting this up for a dying sibling whose email address was co-opted for global Internet shenanigans. They are stressed and saddened by Inbox pollution Comcast won't process correctly.

Note to Comcast:
DO BETTER. Being bad at Spam is non-trivial. People are dying and can't waste time. People are disabled and can't physically or cognitively master. People aren't technical and can't outsmart indifferent engineering. There are myriad reasons this should be more of a priority. People don't always have a choice in Internet providers, and being this bad at email is at the least not very nice.