Spammers in the middle east and Pakistan seem to love doing this. I finally set my google settings to “don’t add me to any google group without my requesting to join it” and that solved the issue, at least from the POV of my not receiving it. They’re running riot all over googlegroups and have been for years now.
--srs From: mailop <mailop-boun...@mailop.org> on behalf of Dan Mahoney via mailop <mailop@mailop.org> Date: Saturday, 2 July 2022 at 11:00 AM To: mailop <mailop@mailop.org> Subject: Re: [mailop] Question for Google -- how am I able to be added to google groups without opting in? One more comment on this. I got added to: Hi d...@prime.gushi.org, asaccessories...@gmail.com added you to the Insights group. Google Groups allows you to create and participate in online forums and email-based groups with a rich community experience. You can also use your Group to share documents, pictures, calendars, invitations, and other resources. Learn more. If you do not wish to be a member of this group you can send an email to insights89+unsubscr...@googlegroups.com or follow this unsubscribe link. If you believe this group may contain spam, you can also report the group for abuse. For additional information see our help center. I followed the abuse link, clicked the “Spam” button and got a black pop-up that said, simply “Failed to report group as abuse”, before disappearing a second later. I did it a second time so I could screenshot it. This is broken. -Dan > On Jun 16, 2022, at 11:57 PM, Cyril - ImprovMX via mailop <mailop@mailop.org> > wrote: > > That's a really great question and I've also experienced a ton of spam > comming from Google Groups I never opted in. > > I followed the recommendation of Brandon Long, and at my great surprise, I > was in 0 groups! (despite receiving spammy emails). > > Just yesterday I got one (attached here as EML), saying it came from Google > Group, with a link to Google group that leads to an error, and an unsubscribe > link (and email) that never works! > > Maybe they are faking the fact that they come from Google Groups: Looking at > the Received headers seems to indicate it was sent from an IPv6 address > toward Google, that then redirect to Outlook (????) to finally land in my own > GMail address. > > I don't know if this is specific to my situation but it seems closely related > to what this thread is about. Hopefully, sharing an EML will bring some light > on the issue. > > Best, > Cyril > > Le jeu. 16 juin 2022 à 17:59, Dan Mahoney via mailop <mailop@mailop.org> a > écrit : > All, > > I'm getting regular spam from google groups. (This week, it's in Arabic). > Since it's google groups, any abuse reports would just be devnulled. > > Sender: -2040---_...@googlegroups.com > List-Archive: <https://groups.google.com/group/-2040---__-- > Dkim-Filter: OpenDKIM Filter v2.10.3 prime.gushi.org 25GFIHZg049346 > X-Spam-Asn: AS15169 2607:f8b0::/32 > Dmarc-Filter: OpenDMARC Filter v1.4.1 prime.gushi.org 25GFIHZg049346 > X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on quark.gushi.org > Authentication-Results: prime.gushi.org; dmarc=pass (p=none dis=none) > header.from=gmail.com > Authentication-Results: prime.gushi.org; spf=pass > smtp.mailfrom=-2040---__--+bncbdo7v2elqijrbletvwkqmgqehrat...@googlegroups.com > Authentication-Results: prime.gushi.org; dkim=pass (2048-bit key; > unprotected) header.d=googlegroups.com header.i=@googlegroups.com > header.b=f2HCls9/; dkim=pass (2048-bit key; unprotected) header.d=gmail.com > header.i=@gmail.com header.b=LDfTQwoh > > Can someone please explain to me how/why a google group manager is able to > just add any email address and send to it? Considering all the > authentication they're requiring, this seems like a gaping hole in any kind > of security. > > Can someone also explain to me why a group name like -2040---___-- isn't > immediately flagged as hella suspicious? > > Specifically, the email address they're sending to is: freebsd *at* > gushi.org, which I only use for mailing lists and bug trackers related to > that project. That project does not use google groups. It's been harvested > by a few other spammers, and sold a couple times, and at some point I'll move > it to a year-based alias. > > -Dan > _______________________________________________ > mailop mailing list > mailop@mailop.org > https://list.mailop.org/listinfo/mailop > <_ _box Routines offertes pour l'achat d'une box_ > _.eml>_______________________________________________ > mailop mailing list > mailop@mailop.org > https://list.mailop.org/listinfo/mailop _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
_______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop