According to www.virustotal.com, lists.debian.org are hosting attachment .DOC virus

[Georgi Guninski]

On Thu, Mar 03, 2016 at 01:07:39PM +0200, Georgi Guninski wrote:
> 
> Try scanning the .doc urls in virustotal from archive.org:
> 
> https://web.archive.org/web/20160303105351/https://lists.debian.org/debian-s390/2015/10/msg00002.html
> https://web.archive.org/web/20160303105748/https://lists.debian.org/debian-hurd/2015/10/msg00029.html
> 
>

These are still alive even on debian, though I told
this to two debian developers in private mail.

One of them suggested to clean their site by clicking
"report as spam":
https://lists.debian.org/debian-legal/2016/03/msg00005.html