Wild guess but I'm wondering if the problem isn't domain name. *.eu.org looks like a perfect domain to send phishing campaigns from (i.e. perhaps some other sub

Wild guess but I'm wondering if the problem isn't domain name. *.eu.org looks like a perfect domain to send phishing campaigns from (i.e. perhaps some other subdomains of it were caught sending spam and his domain got a penalty as a side-effect?)