Ref: SBL414870
142.93.17.28/32 is listed on the Spamhaus Block List - SBL
2018-08-08 07:35:00 GMT | digitalocean.com
Spammer hosting @142.93.17.28

Spammer hosting located here:
http://salez.org/link.php?M=X
-> http://sendtrack.in/trk/link-3-1?aff_sub4=salede
--> http://tracking.got2sell.co/aff_c?offer_id=X
---> https://gotrack.static500.com/api/v1/flows/94/click?id=X
----> http://bitcoincodeapp.net/index-de.html?click=X

$ dig +short gotrack.static500.com
142.93.17.28

Spam sample
=================================================
Received: from valler.org (valler.org [66.154.110.34])
by X (Postfix) with ESMTPS id X
for <X>; Mon, 6 Aug 2018 X
DKIM-Signature: X
Received: from kii.spbconline.org ([168.235.83.105]:40284 helo=salez.org)
by web.desinstitute.com with esmtpa (Exim 4.91)
(envelope-from <contact@valler.org>)
id X
for X; Mon, 06 Aug 2018 X
To: X
Subject: X
Message-ID: <X@salez.org>
Date: Mon, 06 Aug 2018 X
From: "Buchhalter" <contact@valler.org>
Reply-To: contact@valler.org
MIME-Version: 1.0
X-Mailer-LID: X
List-Unsubscribe: <http://salez.org/unsubscribe.php?M=X&C=X&L=X&N=X>
X-Mailer-RecptId: X
X-Mailer-SID: X
X-Mailer-Sent-By: X
Content-Type: multipart/alternative; charset="UTF-8"; boundary="X"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - web.desinstitute.com
X-AntiAbuse: Original Domain - X
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - valler.org
X-Get-Message-Sender-Via: web.desinstitute.com: authenticated_id: contact@valler.org
X-Authenticated-Sender: web.desinstitute.com: contact@valler.org
X-Source:
X-Source-Args:
X-Source-Dir:

--X
Content-Type: text/plain; format=flowed; charset="UTF-8"
Content-Transfer-Encoding: 8bit

Your email client cannot read this email.
To view it online, please go here:
http://salez.org/display.php?M=X


To stop receiving these
emails:http://salez.org/unsubscribe.php?M=X

[...]
=================================================