Evolution of RBLs: From IP Reputation to Next-Gen Email Abuse Detection

Posted on Wed 22 April 2026 in Events

How Real-time Blacklists (RBLs) have evolved well beyond simple IP reputation: domain-based RBLs flagging malicious links, email address RBLs tracking rotating scam senders, cryptocurrency wallet lists identifying ransomware payment addresses, ESP account monitoring catching abuse of mail-sending platforms, and phone number blocklists flagging disposable numbers used in fraud. The talk also covers Fuzzy Hash RBLs, a newer technique that detects template-based spam through similarity matching - producing a compact signature usable in ordinary DNS queries, with a false positive rate around 9 × 10-10 at a 100% similarity threshold. Much of this work is what powers BTC Black.

Presented at the Deliverability Summit 2026, Casa Milà – La Pedrera, Barcelona.

Download the slides (PDF)