Strange as it has been listed in SURBL for ever since the site was cracked. scm-70.com.wild.surbl.org has address 127.0.0.68
On Sep 24, 2015, at 8:55 AM, Gunther Stammwitz <gstammw@gmx.net> wrote:
This is unbelievable: We have seen these kinds of spam-messages over the last weeks on different mail accounts and still Spamassassin & others don't recognize them. Isn't a topic of "Fw: important" compared with the greeting "Hey friend" something that must be spam? Now Nanog was hit which is really annoying.
Yes, this message might originate from an authenticated sender and the (faked) sender's domain might light spf and so on - but where is artificial intelligence when one needs it?
Time to charge for emails so that this channel will become too expensive for spammers, isn't it?
-----Ursprüngliche Nachricht----- Von: NANOG [mailto:nanog-bounces@nanog.org] Im Auftrag von Pomposello Sarah BDF HPN Gesendet: Donnerstag, 24. September 2015 11:24 An: Brielle Bruns; nanog group; William Herrin Betreff: Fw: important
Hey friend!
Important message, please visit <http://scm-70.com/came.php?93>
Pomposello Sarah BDF HPN