Re: spams using rb.gy redirector
Matus UHLAR - fantomas <[email protected]> Sat, 25 Jul 2026 17:43:48 +0200
| Newsgroups | gmane.mail.spam.spamassassin.general |
|---|---|
| Message-ID | <[email protected]> |
>>>>>On Sun, 19 Jul 2026, Matus UHLAR - fantomas wrote: >>>>>>last few months I noticed too many spams using rb.gy shortener. >>>>>> >>>>>>Every time I forwrd spam to their reporting address, I get >>>>>>automatic response that it hasn't been found in their >>>>>>database. >>>>>> >>>>>>Has anybody noticed spam with their links? >>>> >>>>On 19.07.26 11:30, John Hardin wrote: >>>>>I have not. Spamples? 20 Jun 2026 https://rb.gy/okqhsi 22 Jun 2026 https://rb.gy/bfike4 https://rb.gy/ckj1ab 23 Jun 2026 https://rb.gy/aictq7 26 Jun 2026 https://rb.gy/9gn5iq https://rb.gy/1env29 9 Jul 2026 https://rb.gy/xgj6za 15 Jul 2026 https://rb.gy/4rqg1x https://rb.gy/dldx7e https://rb.gy/e3jvd3 18 Jul 2026 https://rb.gy/t3lwyd https://rb.gy/kymz8c 19 Jul 2026 https://rb.gy/zhqw7y 20 Jul 2026 https://rb.gy/iuoehk 24 Jul 2026 https://rb.gy/6x9cfg 25 Jul 2026 https://rb.gy/z3impw Most of those still work (although their destionations are sometimes blocked) also, most of those seem to point few repeased sites. On 21.07.26 07:56, John Hardin wrote: >Not much there to work with. FYI: rb.gy has been recognized as a URL >shortener since May 2025. Just FYI the oldest spample I see is from 2024/09 >I note there's a ton of TO addresses but that didn't trigger anything. >I'll have to look for overlaps. > >Suggestion: > > * 4.0 BAYES_99 BODY: Bayes spam probability is 99 to 100% > * [score: 1.0000] > * 0.5 BAYES_999 BODY: Bayes spam probability is 99.9 to 100% > * [score: 1.0000] > >...boost your BAYES_999 score. A lot. I have kept scores somehow lower, so I can see what spam goes around. So i can keep to report them etc. I repeat - every time I send a complaint to address found in ToS of rebrand.ly where the "https://rb.gy/" points to, I get response that the link hasn't been found. for some time I automatically forward it to their escalation address, but it appears that they don't remove those links, although both spamming and sexual content are against their ToS. I am now thinking about explicitly banning these links, so the SMTP message says that. I was curious if anyone has the same experience with rb.gy or other rebrand.ly domains. -- Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. It's now safe to throw off your computer.