Is sbb.rs Safe?

Involved in the spreading of an huge quantity of UCE/UBE messages. This domain is infected (or NATting for a computer that is infected) with the gamut spambot. In other words, it's participating in a botnet. It was last detected at ***** 22:00 GMT (+/- 30 minutes)

Spam, scam, phishing. Return-Path: <Reese.Andy@sbb.rs> X-YahooFilteredBulk: ***** Received-SPF: neutral ***** is neither permitted nor denied by domain of sbb.rs) X-YMailISG: 7fBQnYEWLDvCCvYtuHl6ZDQNlF3EpqDxJtQTRVGj5M1gBAph lHH1qKq7_0BwRBFPUi1AbY0jMNiLr4_Mph7ZyiBbIwjc6wG9pWg01p0PtJoW 0Pd3UAVtCnN5tbU92mDor4fPNcgs3F9zUxYOhBGYc3gmiT6a7K_nAhJzJm8n IwAnzcVeKAX.GFTHU6OGNicLiFqJMLntA167yzdd3PqHZgE4r6zsk_n9G5aH zcnmOWGec.RTdfhxzt_zr2XqrtUR.AWv.9vMTYuTBkyo5TQHA7VX_AJsuUQR s5hpg0fKrT36z7M39eEom3Sz.nZjU_E6Jm_ca1rOQMoltgc4K1gEQfIa5BQV dt9.NMRxJiqcxhqCROKQlQ0FovD6skDy7stx_a6q3ZY_oDTIQxrxjCSDp8Ck XK0mSM0cJ.59Ow8QjT4rw2WYP0O5kFYY1MumC_LzrK16Wab89QTky0UgLO3. V1XDPVLATUo7Cf2imCWCot3qMLywfr5VAcHuM5iytoVi9l92VxFkpxCaHPI. Mksrip87Qh_oyR0aTlwACFH5_9JZJOUhvxqxxD6eP6i0JJuzs6mPa.cqhKDU cb3VfQEPyW1U6JX9lVVYD2m4EDtvJ2d._c1OeA224tnjCDqzackudfWJAOJa oXouDN3H5Krf_uOTvQ2ACtehJrzS.CL70fT6iPF62sioRDBe.mcPV5lo1yoM TMsZIamzHnexRPWfzhLyaoNjdBAxZeK0svw9VXfZ1ECyc0oTPttoNFEfQl.d 7sLY5l_mFsG5IwlD1MMeCibr9VISm4yP_OzINmMiwYr4fKPs1lCXaK_CDk9N kwxmbsADczeYzO1lJk4hgEJPe7bqkA3B6GYbWenrom1OCGybP5UJxYL4_MUL etbw.x1oaxwG9OYI_loc8wxNVdS8cXS0uYKGNptDr.A89uYYJ_Uh8nLPeklB amhuZsHflKlOMx._5mFTgkupB.G65YbsP17.q2rws82UjKgkNYQaadNlNadG 1o3SNgglnz9tgS4DdPmTIGp83O_LSYHRKaIn8rlpwHn2dSrzCf1tJLu4XUsv n3ZkbiLrqglUH_cKnYDeRvmz6WCg9pk2oZ04Lf7QeedalUlaA8GRuv0jvML4 5aoXvxz9ErrDZDkMlD14zw.JcR1V6y3xqqyQRkapDISmWDx6GeGkrDwuqinx SN9lHQuFIMAM5QlByM0QM4QfJY9gGU9YwDteFSQggh2mfiCQ7lBorpGYAdKM hZJ_an__b7QsDMmVluwii2tNUuNuzZVdUmOBjZ8pv3zaQZ5w1SB5A5mwDk4. s5OXf6sEiPmtFl7j_9tnKFAxDhGu2PEH3.cFSa3TVX3U86yyrZHwbQRPAjrV wUHjiJYPQxVsbL6N.zgBfpU55.xF9W.16pVTAQPf3sD67N8BbDZ1HtR31LfW TmMa3qYMqimrimhnQzopcBIhliK29yMnsrfr739Bjd41sT76jPNAdja4YYPw XP_K X-Originating-IP: [209.126.220.134] Authentication-Results: ***** from=sbb.rs; domainkeys=neutral (no sig); from=sbb.rs; dkim=neutral (no sig) Received: (nullmailer pid 90021 invoked by uid 586); Tue, 08 Nov 2016 14:58:48 +0200 Subject: Suspicious movements X-PHP-Originating-Script: 586:ExtendedMail.class.php From: "Andy Reese" <Reese.Andy@sbb.rs> Date: Tue, 08 Nov 2016 14:58:48 +0200 MIME-Version: 1.0 Content-Type: multipart/related; boundary="769b4f56b7d15e4aa76659a3ceac3c7f" Message-Id: <9410442197.833065.79489.nullmailer@sbb.rs> Content-Length: 2191

Serbia BroadBand-Srpske Kablovske / sbb.rs Bluehost / ***** sustains IP addresses rated up to "critical" for the amounts of spam sent during a 30 day period. Maintains CBL-listed, botnet-infected IP addresses during a 30 day period. ***** (bottom of pages)

Facebook /Yahoo Messenger Scam – Identity Theft Unsolicited Spam Originating From: Serbia (82.117.197.206) Originating Network(s): sbb.rs Date Received: ***** Authentication-Results: ***** from=lqllfsbicb.com; Return-Path: ***** Contents of Spam: From: "Facebook" <toqqlnjgm@lqllfsbicb.com> Reply-To: <scbguruyiivmj@kkpuboqpxbwwgiet.com> Subject: hey baby i saw your facebook profile (youre cute!) id love to chat with you on yahoo messenger my screename there s ***** addme to chat i'm online now :) Adriana