Re: spams using rb.gy redirector

Matus UHLAR - fantomas <[email protected]> Sat, 25 Jul 2026 17:43:48 +0200
Newsgroups gmane.mail.spam.spamassassin.general
Message-ID <[email protected]>
>>>>>On Sun, 19 Jul 2026, Matus UHLAR - fantomas wrote:
>>>>>>last few months I noticed too many spams using rb.gy shortener.
>>>>>>
>>>>>>Every time I forwrd spam to their reporting address, I get 
>>>>>>automatic response that it hasn't been found in their 
>>>>>>database.
>>>>>>
>>>>>>Has anybody noticed spam with their links?
>>>>
>>>>On 19.07.26 11:30, John Hardin wrote:
>>>>>I have not. Spamples?


20 Jun 2026 https://rb.gy/okqhsi
22 Jun 2026 https://rb.gy/bfike4 https://rb.gy/ckj1ab
23 Jun 2026 https://rb.gy/aictq7
26 Jun 2026 https://rb.gy/9gn5iq https://rb.gy/1env29
  9 Jul 2026 https://rb.gy/xgj6za
15 Jul 2026 https://rb.gy/4rqg1x https://rb.gy/dldx7e https://rb.gy/e3jvd3
18 Jul 2026 https://rb.gy/t3lwyd https://rb.gy/kymz8c
19 Jul 2026 https://rb.gy/zhqw7y
20 Jul 2026 https://rb.gy/iuoehk
24 Jul 2026 https://rb.gy/6x9cfg
25 Jul 2026 https://rb.gy/z3impw

Most of those still work (although their destionations are sometimes blocked)
also, most of those seem to point few repeased sites.

On 21.07.26 07:56, John Hardin wrote:
>Not much there to work with. FYI: rb.gy has been recognized as a URL 
>shortener since May 2025.

Just FYI the oldest spample I see is from 2024/09 

>I note there's a ton of TO addresses but that didn't trigger anything. 
>I'll have to look for overlaps.
>
>Suggestion:
>
>        *  4.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
>        *      [score: 1.0000]
>        *  0.5 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
>        *      [score: 1.0000]
>
>...boost your BAYES_999 score. A lot.

I have kept scores somehow lower, so I can see what spam goes around.
So i can keep to report them etc.


I repeat - every time I send a complaint to address found in ToS of 
rebrand.ly where the "https://rb.gy/" points to, I get response that the 
link hasn't been found.

for some time I automatically forward it to their 
escalation address, but it appears that they don't remove those links, 
although both spamming and sexual content are against their ToS.

I am now thinking about explicitly banning these links, so the SMTP message 
says that.

I was curious if anyone has the same experience with rb.gy or other 
rebrand.ly domains.


-- 
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
It's now safe to throw off your computer.