On the topic of free services that Google provides (with no support or abuse contact whatsoever), has anyone else noticed an uptick in Google Groups spam lately?

I'm wondering what SpamAssassin rule to boost, but it seems like this operator has mostly covered their bases? KAM_INFOUSMEBIZ might be worth boosting.

X-Spam-Status: No, score=-0.7 required=5.0 tests=ARC_SIGNED,ARC_VALID,BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_IMAGE_ONLY_16,HTML_MESSAGE,HTML_SHORT_LINK_IMG_2,KAM_INFOUSMEBIZ,MAILING_LIST_MULTI,MPART_ALT_DIFF,SCC_BODY_SINGLE_WORD,SPF_HELO_NONE,SPF_PASS,TXREP,T_SCC_BODY_TEXT_LINE relaycountries=(US US) autolearn=no autolearn_force=no version=4.0.0

Last couple of weeks there was some combination of Microsoft and Google infrastructure involved from this operator, but today has been solely Google's infrastructure again.

Sample below:
-------------
Return-Path: <[email protected]>
Received: from mail-qv1-xf47.google.com (mail-qv1-xf47.google.com [IPv6:2607:f8b0:4864:20::f47])
        (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
        (No client certificate requested)
        by skylane.cscweb.net (Postfix) with ESMTPS id 568731041B
        for <[email protected]>; Tue, 27 Aug 2024 13:07:41 -0500 (CDT)
Received: by mail-qv1-xf47.google.com with SMTP id 6a1803df08f44-6bf7ad66ab7sf136133736d6.1
        for <[email protected]>; Tue, 27 Aug 2024 11:07:41 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1724782060; cv=pass;
        d=google.com; s=arc-20160816;

b=vOrRJVP//WZLB6SLVtvOeaxLog1PpnPFIpDQ2hmK6LaTseAlNPWIYXblEBobCExYze

7KYVZfEltC4tWm3sO1XLXLkJZ/uJIJDCwKAbXsxmGlZgkzBg8raqvCsMdS+S3fuTLPrY

ml+XPpdhHQoAOpcd9A5z2+X388g7yrUo50yBicmZjtZe/s7WnyoJQS7hapnr+aLEFL4M

ftqrsvZiF6iOGk4vlWigBC4BxszVoVac2BrlL3J2XuOplI7Or0rS5rEVMmSIf/nV3Sj2

TV0V4kz2daRKuWWN+6x49z0mVdAsiS5DvT3H2uR4Gxr+BMokaXpp31KRI9XIRrXV6oIA
         Klmg==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:to:subject:message-id:date:from
         :mime-version:dkim-signature;
        bh=rfXOdvwmKmkpY61TuGtQKkwe5FAjqMA0gYM9S31GqR8=;
        fh=BpKAS19uX14a3/ESpG5YXoofUWbtcAOjkJEALvwfAxE=;

b=Pef/hszxjmkMlZACH0Sjbq2HeQf52I+uEnvGwftlEDIplnV6klgGNVmWMMRLTLnFKf

Onh+Dkpbbzuk5yhVMOXxLnu9b7MJut7SAShHzYkqigAW46Tij5V07rq11PPiyiJ3KTtt

2KtQGKGOEaxbUTB61MYPLNYB0+y1DJpZ8Tptc7EPE+0NmfW48v5h3nMzpkuVOoNedUBW

lb5fk6h1spFDXJyBF3EcXd//QZTRlA3qMQzmXaykFHBu4vpZkeNcjpo/TQ0liRBN4dMG

0UOVRJ5HGQ5Bymlu+WziHClqn99N4r0/BN2F0Mj5nnowtK8jVx+UrungPG2UanzblhDH
         YSbQ==;
        darn=cscweb.net
ARC-Authentication-Results: i=2; mx.google.com;
dkim=pass [email protected] header.s=google header.b=Sfjf6bLs; spf=pass (google.com: domain of [email protected] designates 209.85.220.41 as permitted sender) [email protected];
       dara=pass [email protected]
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=tot.popcornflixhd.us; s=google; t=1724782060; x=1725386860; darn=cscweb.net;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from
         :to:cc:subject:date:message-id:reply-to;
        bh=rfXOdvwmKmkpY61TuGtQKkwe5FAjqMA0gYM9S31GqR8=;

b=CEFaC6LA0tEqtAooN8j+LMfaRU6B1FLQ9SYq+6TQXguhYPssDUUZNGVMV1beozyuaH

6hJ1n4/EQr6u+TVNx9z97PpvC3iSxAikWtfqrPDGJHBLDSRcMXzpzBowFOG5iEdYOQ+2
         X9dJW0pcyW5WjaZbFTKp+PCXYKZM4KSBCEDX4=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1724782060; x=1725386860;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :x-spam-checked-in-group:list-id:mailing-list:precedence
         :x-original-authentication-results:x-original-sender:to:subject
         :message-id:date:from:mime-version:x-beenthere:x-beenthere
         :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
        bh=rfXOdvwmKmkpY61TuGtQKkwe5FAjqMA0gYM9S31GqR8=;

b=Y10pIgWyR6LA2WVo9JsqYLja4aZO+QZS5v38hg0oPhjEXtNJUwatdbLtaMiZlLem8Z

TH0R6dy5c/wTy7AdmQ4CSP+aKmcMigQFNSNZUOHwM888nzrFmgNiFxrQINm6sSg7SluA

Ki3JPDHpdc5MnwUWRWBoLa7rBTsYLjL/t7tej4IVP55D2BPzJU1/dCG0WHBE1s0AYQD+

gSmuo+N6AcHwy7TTV2zmhlBy7RM4el/LvM23zJj4FznS126+S9+auQqAPJIqR6uu1MEV

wL+Br5jB9faYLPW3jRqe5Q+YraLoH9vJENIXv9ACRBJX6rC2F73PPR4wCmNqhfIq5q3q
         8QXQ==
X-Forwarded-Encrypted: i=2; AJvYcCUQjtlfrpM+TaZSNsLKPxk4QegUrDIO2FazPxZ6F65T96S2hsefVG55P66C2AjG7CSaYyfUCH4=@cscweb.net
X-Gm-Message-State: AOJu0YxoJ2tk4aXMzXJa7sljYDVtXIljMAQFbjkA5LJlD+ZK2K7z0Av9
        iGCuL6/41YDMSdeEythBy4v8rfE+PdP/ItBr+U2zdA2z4K2jZNlJlrxrEKgYOoM=
X-Google-Smtp-Source: AGHT+IF8DB37M6aVaX0PQXM8MGAzUSo20QsM7tbdT5PuhO+BxMlnTAlt0XtLiJG1aNisOnMzg/JBAw== X-Received: by 2002:a05:6902:e84:b0:e16:5174:fdaf with SMTP id 3f1490d57ef6-e1a42259aa4mr77172276.1.1724782060457;
        Tue, 27 Aug 2024 11:07:40 -0700 (PDT)
X-BeenThere: [email protected]
Received: by 2002:a05:6902:1245:b0:e03:64a5:8bb0 with SMTP id
 3f1490d57ef6-e1a3f6a8130ls187439276.1.-pod-prod-00-us; Tue, 27 Aug 2024
 11:01:33 -0700 (PDT)
X-Forwarded-Encrypted: i=2; AJvYcCUkUFeVbR4BRzAYixEIz/wwS6Q+8LqyAntra11Hanwq43O9Rf3MnaAj6s3Vw3LrXLdpZcU=@tot.popcornflixhd.us X-Received: by 2002:a05:6902:1b09:b0:e11:55ef:a7cc with SMTP id 3f1490d57ef6-e1a42276bc2mr47928276.7.1724781692294;
        Tue, 27 Aug 2024 11:01:32 -0700 (PDT)
X-BeenThere: [email protected]
Received: by 2002:a05:6902:1245:b0:e03:64a5:8bb0 with SMTP id
 3f1490d57ef6-e1a3f6a8130ls187405276.1.-pod-prod-00-us; Tue, 27 Aug 2024
 11:01:31 -0700 (PDT)
X-Received: by 2002:a05:690c:3384:b0:6ac:3043:168a with SMTP id 00721157ae682-6d1298dffb1mr402697b3.10.1724781691276;
        Tue, 27 Aug 2024 11:01:31 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1724781691; cv=none;
        d=google.com; s=arc-20160816;

b=nA1Wnnv1Q2pIuksGKluqBo60bHILElsRW6BVmbKucO3KthfHXJf2H5e5kKmaLxJHDZ

fxi8aGBeqnlkTk+CZw/ijsy9QzBxthKuZn7PXhntizNiFQwBy95sC5B8FZthtVM5flmX

bEpNY28tu1QaNbUmpOydr4cxfQcpNQ0KozAO1+iLXXY48i6lK+8Rzz1KO5umFmoHmz2l

98KMiU664SFNJ+q9RqEb/Kz1TdYFxEPoFIkEqf2JA7BwTDTSzpQH6OguWBx3zoHI9U+J

19aXcBF9n65DpOpy5lO6r/yZb4mElAFAIbmo8NyTU2PzN7wf0kfOTiNbOJKZ+uiewqNH
         Znaw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=to:subject:message-id:date:from:mime-version:dkim-signature;
        bh=rfXOdvwmKmkpY61TuGtQKkwe5FAjqMA0gYM9S31GqR8=;
        fh=orQR9Rly3L6eLJ1rWIpuoNjTknISTCMqwsUc4bE3LgY=;

b=SYdLR96uKmzp0aoKB5IXiPGoIKqWvE7C1yb6LCgmVgEJkutsnDQxs+wQDlaXBKKjcB

9/mENX7hV2L4mQKfXh1yJK0m9PFp5z/xURnLyfbuFRGr9wG/yWB3czI0GNXiC73mH2ew

OAQXFq3dTkfsTOB9R0AGbbLmos69jCrD4DQFXuGEq+9jENtln/LbdtNrvebKuuLaqblb

TkLM54EZNxOuqrugUAUNg/pb8ykX7CPh/lLpD7VCgMiX8hku0F4N6Y0WqrjYp2QRSahd

0WEDiYRqEDd4rhK3itwwrt39YffUNtgmwrU41by3xFjoDOrTL33KjdatHsjdviOVSQdG
         PvMw==;
        dara=google.com
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass [email protected] header.s=google header.b=Sfjf6bLs; spf=pass (google.com: domain of [email protected] designates 209.85.220.41 as permitted sender) [email protected];
       dara=pass [email protected]
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id 00721157ae682-6c3749c5717sor66385437b3.0.2024.08.27.11.01.31
        for <[email protected]>
        (Google Transport Security);
        Tue, 27 Aug 2024 11:01:31 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
X-Received: by 2002:a05:690c:6285:b0:6af:8f7a:28ce with SMTP id
 00721157ae682-6d12b313efamr271487b3.20.1724781690337; Tue, 27 Aug 2024
 11:01:30 -0700 (PDT)
MIME-Version: 1.0
From: Seat Cushions <[email protected]>
Date: Tue, 27 Aug 2024 18:01:19 +0000
Message-ID: <cag79ueenj9pes4yr5oh1e6hnyu6nfb84n76natsrvdowutj...@mail.gmail.com> Subject: Sit longer, be more productive, and more focused with Klaudena Seat Cushion
To: [email protected]
Content-Type: multipart/alternative; boundary="000000000000f7d5dc0620ae076a"
X-Original-Sender: [email protected]
X-Original-Authentication-Results: mx.google.com;       dkim=pass
 [email protected] header.s=google header.b=Sfjf6bLs;
       spf=pass (google.com: domain of [email protected]
designates 209.85.220.41 as permitted sender) [email protected];
       dara=pass [email protected]
Precedence: list
Mailing-list: list [email protected]; contact [email protected]
List-ID: <gbe.tot.popcornflixhd.us>
X-Spam-Checked-In-Group: [email protected]
X-Google-Group-Id: 214878891360
List-Post: <https://groups.google.com/a/tot.popcornflixhd.us/group/gbe/post>, <mailto:[email protected]> List-Help: <https://support.google.com/a/tot.popcornflixhd.us/bin/topic.py?topic=25838>,
 <mailto:[email protected]>
List-Archive: <https://groups.google.com/a/tot.popcornflixhd.us/group/gbe/>
List-Subscribe: <https://groups.google.com/a/tot.popcornflixhd.us/group/netchniquue/subscribe>,
 <mailto:[email protected]>
List-Unsubscribe: <mailto:[email protected]>,
 <https://groups.google.com/a/tot.popcornflixhd.us/group/gbe/subscribe>

----
(spam URL removed)

_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop

Reply via email to