Re: spams using rb.gy redirector
John Hardin <[email protected]> Tue, 21 Jul 2026 07:56:18 -0700 (PDT)
| Newsgroups | gmane.mail.spam.spamassassin.general |
|---|---|
| Message-ID | <[email protected]> |
On Tue, 21 Jul 2026, Matus UHLAR - fantomas wrote:
>>>> On Sun, 19 Jul 2026, Matus UHLAR - fantomas wrote:
>>>>> last few months I noticed too many spams using rb.gy shortener.
>>>>>
>>>>> Every time I forwrd spam to their reporting address, I get automatic
>>>>> response that it hasn't been found in their database.
>>>>>
>>>>> Has anybody noticed spam with their links?
>>>
>>> On 19.07.26 11:30, John Hardin wrote:
>>>> I have not. Spamples?
>
>> On Mon, 20 Jul 2026, Matus UHLAR - fantomas wrote:
>>> wanna examples of whole e-mails, pastebing bodies or the links?
>
> On 20.07.26 08:04, John Hardin wrote:
>> I suppose pastebin a whole email to keep context.
>
> looks like all spams since june are >100K (sexually explicit attachments).
>
> I sent last smaller one:
> https://pastebin.com/Z0ChLqJa
>
> I can share them on my site if you want.
Not much there to work with. FYI: rb.gy has been recognized as a URL
shortener since May 2025.
I note there's a ton of TO addresses but that didn't trigger anything.
I'll have to look for overlaps.
Suggestion:
* 4.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
* [score: 1.0000]
* 0.5 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
* [score: 1.0000]
...boost your BAYES_999 score. A lot.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
[email protected] pgpk -a [email protected]
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
What the hell is an "Aluminum Falcon"?? -- Emperor Palpatine
-----------------------------------------------------------------------
Today: the 57th anniversary of Man's first steps on the Moon