Ghost sign up and spam?

[twelvetables]

I’ll dig into it more shortly, but I did just check my ghost version and I’m on 5.110.4

[John]

If you’re seeing this happening actively in a version after 5.110.3 I’d love to hear more about it!

[block]

Hi John, thanks for all your work. I never had any spam problems, my website is really tiny.

However, just an heads up. I received this morning a signup that looks kinda suspicious, from an email with a “samintro.com” domain. I looked online and seems like a spam domain, but not really sure. I recently updated to 5.111.0.

[agam]

Here is a full list for anyone looking for it:

edny.net
email.uscc.net
fido.ca
mailmymobile.net
messaging.sprintpcs.com
mms.att.net
mms.cricketwireless.net
mms.uscc.net
msg.telus.com
myboostmobile.com
mymetropcs.com
pcs.rogers.com
pm.sprint.com
samintro.com
sms.cricketwireless.net
sms.myboostmobile.com
sms.sasktel.com
tmomail.net
txt.att.net
txt.bell.ca
txt.freedommobile.ca
vtext.com
vzwpix.com

[bastien]

a more complete list is published here @agam

adwordsrobot.com-spam-list.txt

[evanw]

+1 to adding mymetropcs.com to spam filters - I’m seeing this come in with recent spam accounts.

[bastien]

Is this feature depreciated on ghost 6 ?

[jannis]

Nope. Still working from both the configuration as well as Settings > Spam Filter for me.

[Jinso_Raj]

The new spam filter option also cannot fix this issue. I have added all the listed domains in my spam filter list, But 2 of my ghost websites are still affected. They are not using any of these spam domains anymore they use actual existing domains and bypassing the ghost confirmation account email somehow, I feel like there is some security issue in the magic link provided by ghost.

i am getting these replies to my auto emails also.

[Jinso_Raj]

I am deleting more than 40 members per day. All signup sources are either the homepage or from a page of the same site. But the locations is a different country, I am 100% sure that this is spam signps according to the signup trend/audience i had in past 2 year. And these email replies (kindly check the above comment)to the automated emails confirms this. This needs to be prevented by better algorithm

[muratcorlu]

Do you self host?

Please check Observations about spam signups

[Jinso_Raj]

Yes We self-host ghost sites, Thanks for these links. Waiting for ghost team to fix this in core.

[Morgz]

Safe-listed Email Domains is a far superior approach, save mail api quota for legitimate users.
Please @Sag adopt this for release.