Re: [mailop] Uptick in Google Groups spam?

Michael Peddemors via mailop Tue, 27 Aug 2024 12:58:45 -0700

Uptick no.. It's been crazy levels for over a year now...

The team has a whole slew of custom filters for this type of spam, itwould be easier of course if Google took care of them but..

And there has been several discussions on this and other lists aboutthis type of spam.. You might want to browse the archives..

At least it is easy, as some people on the list say they have done..just mark all Google Groups as spam.... (Still, I would advisedelivering it to your customers 'Spam' folders)

I have the funny feeling that's why you don't hear much about thisproblem anymore, everyone has done that.. and noone is hearing complaints ;)

But the sheer volume of phishing and malware links, and all the oldNigerian Prince spam.. The cost of this to the world at large.. allthose poor old people getting scammed out of their money..


Millions on Millions.. Gmail should hang their head in shame..

But Hard to see how this is going to change, even if you have apolitician in your pocket.. Until someone sues Gmail for negligence..

Be nice if Gmail was more transparent on the originating sources, atleast we could put more accurate filters in place..


On 2024-08-27 11:37, Robert Giles via mailop wrote:

On the topic of free services that Google provides (with no support orabuse contact whatsoever), has anyone else noticed an uptick in GoogleGroups spam lately?
I'm wondering what SpamAssassin rule to boost, but it seems like thisoperator has mostly covered their bases? KAM_INFOUSMEBIZ might be worthboosting.
X-Spam-Status: No, score=-0.7 required=5.0tests=ARC_SIGNED,ARC_VALID,BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_IMAGE_ONLY_16,HTML_MESSAGE,HTML_SHORT_LINK_IMG_2,KAM_INFOUSMEBIZ,MAILING_LIST_MULTI,MPART_ALT_DIFF,SCC_BODY_SINGLE_WORD,SPF_HELO_NONE,SPF_PASS,TXREP,T_SCC_BODY_TEXT_LINE relaycountries=(US US) autolearn=no autolearn_force=no version=4.0.0
Last couple of weeks there was some combination of Microsoft and Googleinfrastructure involved from this operator, but today has been solelyGoogle's infrastructure again.
Sample below:
-------------
Return-Path: <gbe+bncbdrzn4vzxmibb7vixc3amgqet6t4...@tot.popcornflixhd.us>
Received: from mail-qv1-xf47.google.com (mail-qv1-xf47.google.com[IPv6:2607:f8b0:4864:20::f47])
     (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits)server-digest SHA256)
     (No client certificate requested)
     by skylane.cscweb.net (Postfix) with ESMTPS id 568731041B
     for <redac...@cscweb.net>; Tue, 27 Aug 2024 13:07:41 -0500 (CDT)
Received: by mail-qv1-xf47.google.com with SMTP id6a1803df08f44-6bf7ad66ab7sf136133736d6.1
         for <redac...@cscweb.net>; Tue, 27 Aug 2024 11:07:41 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1724782060; cv=pass;
         d=google.com; s=arc-20160816;

b=vOrRJVP//WZLB6SLVtvOeaxLog1PpnPFIpDQ2hmK6LaTseAlNPWIYXblEBobCExYze

7KYVZfEltC4tWm3sO1XLXLkJZ/uJIJDCwKAbXsxmGlZgkzBg8raqvCsMdS+S3fuTLPrY

ml+XPpdhHQoAOpcd9A5z2+X388g7yrUo50yBicmZjtZe/s7WnyoJQS7hapnr+aLEFL4M

ftqrsvZiF6iOGk4vlWigBC4BxszVoVac2BrlL3J2XuOplI7Or0rS5rEVMmSIf/nV3Sj2

TV0V4kz2daRKuWWN+6x49z0mVdAsiS5DvT3H2uR4Gxr+BMokaXpp31KRI9XIRrXV6oIA
          Klmg==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed;d=google.com; s=arc-20160816;
         h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
          :list-id:mailing-list:precedence:to:subject:message-id:date:from
          :mime-version:dkim-signature;
         bh=rfXOdvwmKmkpY61TuGtQKkwe5FAjqMA0gYM9S31GqR8=;
         fh=BpKAS19uX14a3/ESpG5YXoofUWbtcAOjkJEALvwfAxE=;

b=Pef/hszxjmkMlZACH0Sjbq2HeQf52I+uEnvGwftlEDIplnV6klgGNVmWMMRLTLnFKf

Onh+Dkpbbzuk5yhVMOXxLnu9b7MJut7SAShHzYkqigAW46Tij5V07rq11PPiyiJ3KTtt

2KtQGKGOEaxbUTB61MYPLNYB0+y1DJpZ8Tptc7EPE+0NmfW48v5h3nMzpkuVOoNedUBW

lb5fk6h1spFDXJyBF3EcXd//QZTRlA3qMQzmXaykFHBu4vpZkeNcjpo/TQ0liRBN4dMG

0UOVRJ5HGQ5Bymlu+WziHClqn99N4r0/BN2F0Mj5nnowtK8jVx+UrungPG2UanzblhDH
          YSbQ==;
         darn=cscweb.net
ARC-Authentication-Results: i=2; mx.google.com;
dkim=pass header.i=@tot.popcornflixhd.us header.s=googleheader.b=Sfjf6bLs; spf=pass (google.com: domain of bserav...@tot.popcornflixhd.usdesignates 209.85.220.41 as permitted sender)smtp.mailfrom=bserav...@tot.popcornflixhd.us;
        dara=pass header.i=@tot.popcornflixhd.us
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=tot.popcornflixhd.us; s=google; t=1724782060; x=1725386860;darn=cscweb.net;
         h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:x-original-authentication-results
:x-original-sender:to:subject:message-id:date:from:mime-version:from
          :to:cc:subject:date:message-id:reply-to;
         bh=rfXOdvwmKmkpY61TuGtQKkwe5FAjqMA0gYM9S31GqR8=;

b=CEFaC6LA0tEqtAooN8j+LMfaRU6B1FLQ9SYq+6TQXguhYPssDUUZNGVMV1beozyuaH

6hJ1n4/EQr6u+TVNx9z97PpvC3iSxAikWtfqrPDGJHBLDSRcMXzpzBowFOG5iEdYOQ+2
          X9dJW0pcyW5WjaZbFTKp+PCXYKZM4KSBCEDX4=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
         d=1e100.net; s=20230601; t=1724782060; x=1725386860;
         h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
          :x-spam-checked-in-group:list-id:mailing-list:precedence
          :x-original-authentication-results:x-original-sender:to:subject
          :message-id:date:from:mime-version:x-beenthere:x-beenthere
          :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
         bh=rfXOdvwmKmkpY61TuGtQKkwe5FAjqMA0gYM9S31GqR8=;

b=Y10pIgWyR6LA2WVo9JsqYLja4aZO+QZS5v38hg0oPhjEXtNJUwatdbLtaMiZlLem8Z

TH0R6dy5c/wTy7AdmQ4CSP+aKmcMigQFNSNZUOHwM888nzrFmgNiFxrQINm6sSg7SluA

Ki3JPDHpdc5MnwUWRWBoLa7rBTsYLjL/t7tej4IVP55D2BPzJU1/dCG0WHBE1s0AYQD+

gSmuo+N6AcHwy7TTV2zmhlBy7RM4el/LvM23zJj4FznS126+S9+auQqAPJIqR6uu1MEV

wL+Br5jB9faYLPW3jRqe5Q+YraLoH9vJENIXv9ACRBJX6rC2F73PPR4wCmNqhfIq5q3q
          8QXQ==
X-Forwarded-Encrypted: i=2;AJvYcCUQjtlfrpM+TaZSNsLKPxk4QegUrDIO2FazPxZ6F65T96S2hsefVG55P66C2AjG7CSaYyfUCH4=@cscweb.netX-Gm-Message-State:AOJu0YxoJ2tk4aXMzXJa7sljYDVtXIljMAQFbjkA5LJlD+ZK2K7z0Av9
     iGCuL6/41YDMSdeEythBy4v8rfE+PdP/ItBr+U2zdA2z4K2jZNlJlrxrEKgYOoM=
X-Google-Smtp-Source:AGHT+IF8DB37M6aVaX0PQXM8MGAzUSo20QsM7tbdT5PuhO+BxMlnTAlt0XtLiJG1aNisOnMzg/JBAw==X-Received: by 2002:a05:6902:e84:b0:e16:5174:fdaf with SMTP id3f1490d57ef6-e1a42259aa4mr77172276.1.1724782060457;
         Tue, 27 Aug 2024 11:07:40 -0700 (PDT)
X-BeenThere: g...@tot.popcornflixhd.us
Received: by 2002:a05:6902:1245:b0:e03:64a5:8bb0 with SMTP id
  3f1490d57ef6-e1a3f6a8130ls187439276.1.-pod-prod-00-us; Tue, 27 Aug 2024
  11:01:33 -0700 (PDT)
X-Forwarded-Encrypted: i=2;AJvYcCUkUFeVbR4BRzAYixEIz/wwS6Q+8LqyAntra11Hanwq43O9Rf3MnaAj6s3Vw3LrXLdpZcU=@tot.popcornflixhd.usX-Received: by 2002:a05:6902:1b09:b0:e11:55ef:a7cc with SMTP id3f1490d57ef6-e1a42276bc2mr47928276.7.1724781692294;
         Tue, 27 Aug 2024 11:01:32 -0700 (PDT)
X-BeenThere: netchniq...@tot.popcornflixhd.us
Received: by 2002:a05:6902:1245:b0:e03:64a5:8bb0 with SMTP id
  3f1490d57ef6-e1a3f6a8130ls187405276.1.-pod-prod-00-us; Tue, 27 Aug 2024
  11:01:31 -0700 (PDT)
X-Received: by 2002:a05:690c:3384:b0:6ac:3043:168a with SMTP id00721157ae682-6d1298dffb1mr402697b3.10.1724781691276;
         Tue, 27 Aug 2024 11:01:31 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1724781691; cv=none;
         d=google.com; s=arc-20160816;

b=nA1Wnnv1Q2pIuksGKluqBo60bHILElsRW6BVmbKucO3KthfHXJf2H5e5kKmaLxJHDZ

fxi8aGBeqnlkTk+CZw/ijsy9QzBxthKuZn7PXhntizNiFQwBy95sC5B8FZthtVM5flmX

bEpNY28tu1QaNbUmpOydr4cxfQcpNQ0KozAO1+iLXXY48i6lK+8Rzz1KO5umFmoHmz2l

98KMiU664SFNJ+q9RqEb/Kz1TdYFxEPoFIkEqf2JA7BwTDTSzpQH6OguWBx3zoHI9U+J

19aXcBF9n65DpOpy5lO6r/yZb4mElAFAIbmo8NyTU2PzN7wf0kfOTiNbOJKZ+uiewqNH
          Znaw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;d=google.com; s=arc-20160816;
         h=to:subject:message-id:date:from:mime-version:dkim-signature;
         bh=rfXOdvwmKmkpY61TuGtQKkwe5FAjqMA0gYM9S31GqR8=;
         fh=orQR9Rly3L6eLJ1rWIpuoNjTknISTCMqwsUc4bE3LgY=;

b=SYdLR96uKmzp0aoKB5IXiPGoIKqWvE7C1yb6LCgmVgEJkutsnDQxs+wQDlaXBKKjcB

9/mENX7hV2L4mQKfXh1yJK0m9PFp5z/xURnLyfbuFRGr9wG/yWB3czI0GNXiC73mH2ew

OAQXFq3dTkfsTOB9R0AGbbLmos69jCrD4DQFXuGEq+9jENtln/LbdtNrvebKuuLaqblb

TkLM54EZNxOuqrugUAUNg/pb8ykX7CPh/lLpD7VCgMiX8hku0F4N6Y0WqrjYp2QRSahd

0WEDiYRqEDd4rhK3itwwrt39YffUNtgmwrU41by3xFjoDOrTL33KjdatHsjdviOVSQdG
          PvMw==;
         dara=google.com
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@tot.popcornflixhd.us header.s=googleheader.b=Sfjf6bLs; spf=pass (google.com: domain of bserav...@tot.popcornflixhd.usdesignates 209.85.220.41 as permitted sender)smtp.mailfrom=bserav...@tot.popcornflixhd.us;
        dara=pass header.i=@tot.popcornflixhd.us
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com.[209.85.220.41]) by mx.google.com with SMTPS id00721157ae682-6c3749c5717sor66385437b3.0.2024.08.27.11.01.31
         for <netchniq...@tot.popcornflixhd.us>
         (Google Transport Security);
         Tue, 27 Aug 2024 11:01:31 -0700 (PDT)
Received-SPF: pass (google.com: domain of bserav...@tot.popcornflixhd.usdesignates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
X-Received: by 2002:a05:690c:6285:b0:6af:8f7a:28ce with SMTP id
  00721157ae682-6d12b313efamr271487b3.20.1724781690337; Tue, 27 Aug 2024
  11:01:30 -0700 (PDT)
MIME-Version: 1.0
From: Seat Cushions <bserav...@tot.popcornflixhd.us>
Date: Tue, 27 Aug 2024 18:01:19 +0000
Message-ID:<cag79ueenj9pes4yr5oh1e6hnyu6nfb84n76natsrvdowutj...@mail.gmail.com>Subject: Sit longer, be more productive, and more focused with KlaudenaSeat Cushion
To: netchniq...@tot.popcornflixhd.us
Content-Type: multipart/alternative;boundary="000000000000f7d5dc0620ae076a"
X-Original-Sender: bserav...@tot.popcornflixhd.us
X-Original-Authentication-Results: mx.google.com;       dkim=pass
  header.i=@tot.popcornflixhd.us header.s=google header.b=Sfjf6bLs;
        spf=pass (google.com: domain of bserav...@tot.popcornflixhd.us
designates 209.85.220.41 as permitted sender)smtp.mailfrom=bserav...@tot.popcornflixhd.us;
        dara=pass header.i=@tot.popcornflixhd.us
Precedence: list
Mailing-list: list g...@tot.popcornflixhd.us; contactgbe+own...@tot.popcornflixhd.us
List-ID: <gbe.tot.popcornflixhd.us>
X-Spam-Checked-In-Group: netchniq...@tot.popcornflixhd.us
X-Google-Group-Id: 214878891360
List-Post:<https://groups.google.com/a/tot.popcornflixhd.us/group/gbe/post>,<mailto:g...@tot.popcornflixhd.us>List-Help:<https://support.google.com/a/tot.popcornflixhd.us/bin/topic.py?topic=25838>,
  <mailto:gbe+h...@tot.popcornflixhd.us>
List-Archive: <https://groups.google.com/a/tot.popcornflixhd.us/group/gbe/>
List-Subscribe:<https://groups.google.com/a/tot.popcornflixhd.us/group/netchniquue/subscribe>,
  <mailto:netchniquue+subscr...@tot.popcornflixhd.us>
List-Unsubscribe:<mailto:googlegroups-manage+214878891360+unsubscr...@googlegroups.com>,
  <https://groups.google.com/a/tot.popcornflixhd.us/group/gbe/subscribe>

----
(spam URL removed)

_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop



--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Reg. TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada

_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Uptick in Google Groups spam?

Reply via email to