Yes, it probably is. Right, they use many email addresses (and variations with extensions like, right now, vip852+e9v01a@gmail.com). But they use one email address for hundreds of instances in parallel. And for instances that use our shared mail infrastructure, mxout.saasweb.net (sorry, not yours), we see these confirmation emails all coming in in parallel. The first three get through, but thereafter, we just drop the rest. This should leave the registrations in their unconfirmed state (and auto-deleted after 7 days) for most of the instances, at least.
So no silver bullet to solve this spam wave…
We do that primarily to keep email reputation high and our out queue small. Hundreds of these confirmation emails sit in our out queue right now because Gmail rate-limits their incoming emails. ("The user you are trying to contact is receiving mail at a rate that prevents additional messages from being delivered.")
toot.io
npub1dq…enfp9
2026-09-17 13:01:08 UTC
in reply to nevent1q…wuxw
Author Public Key
npub1dqgzhdn2v743mkxlxskurcqgj8jxrpzjr93rf8lxnaczn0znxuyshenfp9Seen on
wss://relay.momostr.pinkPublished at
2026-09-17 13:01:08 UTCEvent JSON
{
"id": "556d16743813ff733aeed8ff1998f2a7f670f1941cfa5fdfb950f8b2579aa72c",
"pubkey": "68102bb66a67ab1dd8df342dc1e00891e46184521962349fe69f7029bc533709",
"created_at": 1789650068,
"kind": 1,
"tags": [
[
"proxy",
"https://toot.io/@hosting/117286506916155840",
"web"
],
[
"e",
"c0670e7c1da5fc61d82cda49445881ba9d71f6fe62dde22a4257070a10f46326",
"",
"reply",
"cc161a2b2d82822bb8bed35a697cdf5be91e224fead3c12741197261e3efca28"
],
[
"p",
"68102bb66a67ab1dd8df342dc1e00891e46184521962349fe69f7029bc533709"
],
[
"e",
"b2531ad82a9d8d66d7abef0f1cdaac5be0b907582ce12430ecdb9e7e7673d4ac",
"",
"root",
"68102bb66a67ab1dd8df342dc1e00891e46184521962349fe69f7029bc533709"
],
[
"p",
"cc161a2b2d82822bb8bed35a697cdf5be91e224fead3c12741197261e3efca28"
],
[
"proxy",
"https://toot.io/users/hosting/statuses/117286506916155840",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://toot.io/users/hosting/statuses/117286506916155840",
"pink.momostr"
],
[
"-"
]
],
"content": "Yes, it probably is. Right, they use many email addresses (and variations with extensions like, right now, vip852+e9v01a@gmail.com). But they use one email address for hundreds of instances in parallel. And for instances that use our shared mail infrastructure, mxout.saasweb.net (sorry, not yours), we see these confirmation emails all coming in in parallel. The first three get through, but thereafter, we just drop the rest. This should leave the registrations in their unconfirmed state (and auto-deleted after 7 days) for most of the instances, at least.\n\nSo no silver bullet to solve this spam wave… \n\nWe do that primarily to keep email reputation high and our out queue small. Hundreds of these confirmation emails sit in our out queue right now because Gmail rate-limits their incoming emails. (\"The user you are trying to contact is receiving mail at a rate that prevents additional messages from being delivered.\")",
"sig": "90f1561ab1c67e20f80437e8fca0447793e67eb0da88b15d1cb314f4af0856fb59658e0a59ae89fbee02bc96c7b655e451e299a6e1784a67e8fa38f7c02b5038"
}