Re: spams using rb.gy redirector

John Hardin <[email protected]> Tue, 21 Jul 2026 07:56:18 -0700 (PDT)
Newsgroups gmane.mail.spam.spamassassin.general
Message-ID <[email protected]>
On Tue, 21 Jul 2026, Matus UHLAR - fantomas wrote:

>>>> On Sun, 19 Jul 2026, Matus UHLAR - fantomas wrote:
>>>>> last few months I noticed too many spams using rb.gy shortener.
>>>>> 
>>>>> Every time I forwrd spam to their reporting address, I get automatic 
>>>>> response that it hasn't been found in their database.
>>>>> 
>>>>> Has anybody noticed spam with their links?
>>> 
>>> On 19.07.26 11:30, John Hardin wrote:
>>>> I have not. Spamples?
>
>> On Mon, 20 Jul 2026, Matus UHLAR - fantomas wrote:
>>> wanna examples of whole e-mails, pastebing bodies or the links?
>
> On 20.07.26 08:04, John Hardin wrote:
>> I suppose pastebin a whole email to keep context.
>
> looks like all spams since june are >100K (sexually explicit attachments).
>
> I sent last smaller one:
> https://pastebin.com/Z0ChLqJa
>
> I can share them on my site if you want.

Not much there to work with. FYI: rb.gy has been recognized as a URL 
shortener since May 2025.

I note there's a ton of TO addresses but that didn't trigger anything. 
I'll have to look for overlaps.

Suggestion:

         *  4.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
         *      [score: 1.0000]
         *  0.5 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
         *      [score: 1.0000]

...boost your BAYES_999 score. A lot.


-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  [email protected]                         pgpk -a [email protected]
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   What the hell is an "Aluminum Falcon"??        -- Emperor Palpatine
-----------------------------------------------------------------------
  Today: the 57th anniversary of Man's first steps on the Moon