One more comment on this. I got added to:
Hi d...@prime.gushi.org, asaccessories...@gmail.com added you to the Insights group. Google Groups allows you to create and participate in online forums and email-based groups with a rich community experience. You can also use your Group to share documents, pictures, calendars, invitations, and other resources. Learn more. If you do not wish to be a member of this group you can send an email to insights89+unsubscr...@googlegroups.com or follow this unsubscribe link. If you believe this group may contain spam, you can also report the group for abuse. For additional information see our help center. I followed the abuse link, clicked the “Spam” button and got a black pop-up that said, simply “Failed to report group as abuse”, before disappearing a second later. I did it a second time so I could screenshot it. This is broken. -Dan > On Jun 16, 2022, at 11:57 PM, Cyril - ImprovMX via mailop <mailop@mailop.org> > wrote: > > That's a really great question and I've also experienced a ton of spam > comming from Google Groups I never opted in. > > I followed the recommendation of Brandon Long, and at my great surprise, I > was in 0 groups! (despite receiving spammy emails). > > Just yesterday I got one (attached here as EML), saying it came from Google > Group, with a link to Google group that leads to an error, and an unsubscribe > link (and email) that never works! > > Maybe they are faking the fact that they come from Google Groups: Looking at > the Received headers seems to indicate it was sent from an IPv6 address > toward Google, that then redirect to Outlook (????) to finally land in my own > GMail address. > > I don't know if this is specific to my situation but it seems closely related > to what this thread is about. Hopefully, sharing an EML will bring some light > on the issue. > > Best, > Cyril > > Le jeu. 16 juin 2022 à 17:59, Dan Mahoney via mailop <mailop@mailop.org> a > écrit : > All, > > I'm getting regular spam from google groups. (This week, it's in Arabic). > Since it's google groups, any abuse reports would just be devnulled. > > Sender: -2040---_...@googlegroups.com > List-Archive: <https://groups.google.com/group/-2040---__-- > Dkim-Filter: OpenDKIM Filter v2.10.3 prime.gushi.org 25GFIHZg049346 > X-Spam-Asn: AS15169 2607:f8b0::/32 > Dmarc-Filter: OpenDMARC Filter v1.4.1 prime.gushi.org 25GFIHZg049346 > X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on quark.gushi.org > Authentication-Results: prime.gushi.org; dmarc=pass (p=none dis=none) > header.from=gmail.com > Authentication-Results: prime.gushi.org; spf=pass > smtp.mailfrom=-2040---__--+bncbdo7v2elqijrbletvwkqmgqehrat...@googlegroups.com > Authentication-Results: prime.gushi.org; dkim=pass (2048-bit key; > unprotected) header.d=googlegroups.com header.i=@googlegroups.com > header.b=f2HCls9/; dkim=pass (2048-bit key; unprotected) header.d=gmail.com > header.i=@gmail.com header.b=LDfTQwoh > > Can someone please explain to me how/why a google group manager is able to > just add any email address and send to it? Considering all the > authentication they're requiring, this seems like a gaping hole in any kind > of security. > > Can someone also explain to me why a group name like -2040---___-- isn't > immediately flagged as hella suspicious? > > Specifically, the email address they're sending to is: freebsd *at* > gushi.org, which I only use for mailing lists and bug trackers related to > that project. That project does not use google groups. It's been harvested > by a few other spammers, and sold a couple times, and at some point I'll move > it to a year-based alias. > > -Dan > _______________________________________________ > mailop mailing list > mailop@mailop.org > https://list.mailop.org/listinfo/mailop > <_ _box Routines offertes pour l'achat d'une box_ > _.eml>_______________________________________________ > mailop mailing list > mailop@mailop.org > https://list.mailop.org/listinfo/mailop _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
