It had valid DKIM and SPF because it was using GitHub issues to mass mention people.

screenshot of an issue from before the account was terminated https://s3.amazonaws.com/jasonrm/2025/ycombinatoor-spam-issu...