user profile

Jamie ..
Jamie ..
Member Since: 08-28-2011
347 Reviews
small-community-1
cs.money
Scammer / Spammer

Sending out spam emails from IP 34.250.170.186
(amazon.com / amazonaws.com)
Oct 25 2022.

Some game virtual items from a site called cs.money

The spammer's websites are located at

https://csmoney.esclick.me/HhJ4bPQJjtmu
IPs: 54.171.235.100, 99.80.19.121 (amazon.com / amazonaws.com)

Which redirects to

https://cs.money/csgo/trade/?utm_source=email&utm_medium=promo&utm_campaign=reactivation&utm_content=5skins_25_10
IPs: 104.20.76.156, 172.67.18.34, 104.20.77.156 (cloudflare.com)

https://csmoney.esclick.me/HhJ5MI4lgXeu
IPs: 54.171.235.100, 99.80.19.121 (amazon.com / amazonaws.com)

Received: from m85.esputnik.com (m85.esputnik.com. [34.250.170.186]) by mx.google.com with ESMTPS id h16-20020a05600c351000b003b6b3202d39si9387619wmq.90.2022.10.25.08.32.15 for <removed> (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 25 Oct 2022 08:32:15 -0700 (PDT)
Received-SPF: pass (google.com: domain of bounce+3-<removed>@mail.cs.money

Do NOT go to any of the sites above they are a scammer and spammer!

small-community-1
csmoney.esclick.me
Spammer / Scammer

Sending out spam emails from IP 34.250.170.186
(amazon.com / amazonaws.com)
Oct 25 2022.

Some game virtual items from a site called cs.money

The spammer's websites are located at

https://csmoney.esclick.me/HhJ4bPQJjtmu
IPs: 54.171.235.100, 99.80.19.121 (amazon.com / amazonaws.com)

Which redirects to

https://cs.money/csgo/trade/?utm_source=email&utm_medium=promo&utm_campaign=reactivation&utm_content=5skins_25_10
IPs: 104.20.76.156, 172.67.18.34, 104.20.77.156 (cloudflare.com)

https://csmoney.esclick.me/HhJ5MI4lgXeu
IPs: 54.171.235.100, 99.80.19.121 (amazon.com / amazonaws.com)

Received: from m85.esputnik.com (m85.esputnik.com. [34.250.170.186]) by mx.google.com with ESMTPS id h16-20020a05600c351000b003b6b3202d39si9387619wmq.90.2022.10.25.08.32.15 for <removed> (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 25 Oct 2022 08:32:15 -0700 (PDT)
Received-SPF: pass (google.com: domain of bounce+3-<removed>@mail.cs.money

Do NOT go to any of the sites above they are a scammer and spammer!

small-community-1
lxxlv.com
Fake Products do not go here!

This spam was relayed though IP 209.85.220.41 (google.com)

The spammer was using the IP address of
109.206.241.186 (serverion.com)

Another Fake Louis Vuitton scammer trying
to sell knock off Louis Vuitton bags.

The spammer's websites are located at

http://www.90offbags.com
IPs: 104.21.24.17, 172.67.216.75 (cloudflare.com)

Which redirects to
https://www.lxxlv.com/
IPs: 172.67.172.24, 104.21.71.237 (cloudflare.com)

Do not go to these sites as they are not selling
real Louis Vuitton merchandise they are fakes!

small-community-1
90offbags.com
Fake Products do not go here!

This spam was relayed though IP 209.85.220.41
(google.com)

The spammer was using the IP address of
109.206.241.186 (serverion.com)

Another Fake Louis Vuitton scammer trying
to sell knock off Louis Vuitton bags.

The spammer's websites are located at

http://www.90offbags.com
IPs: 104.21.24.17, 172.67.216.75 (cloudflare.com)

Which redirects to
https://www.lxxlv.com/
IPs: 172.67.172.24, 104.21.71.237 (cloudflare.com)

Do not go to these sites as they are not selling
real Louis Vuitton merchandise they are fakes!

small-community-1
buygoods.com
Spammer / Scammer

This spam was relayed though IP 209.85.220.41
(google.com)

The spammer was using the IP of 45.126.126.25
when sending this spam. (kamatera.com / cloudwm.com)
(AS64022)

Some hair loss prevention scam / spam email.

Subject was
"_Doctor Forced To Resign After Unveiling Hair Regrowth Hack"

The spammer's websites are located at

https://linkslife.page.link
IP: 142.251.33.65 (google.com)

Which redirects to

https://firebasestorage.googleapis.com/v0/b/alpina-6a270.appspot.com/o/revivohairloss.html?alt=media&token=565fc5e3-1afa-4b53-86d7-d5b954a7095a
IP: 172.217.14.202 (google.com)

Which redirects again to
https://revifol.com/report-qts?aff_id=119&subid2=6161_sessid20220818191526682&subid=3730
IP: 172.67.214.96, 104.21.93.205 (cloudflare.com)

The spammer's other site is located at
https://www.buygoods.com/secure/?account_id=5983&product_codename=prod7&redirect=aHR0cHM6Ly9yZXZpZm9sLmNvbS91cGdyYWRlLTE%3D
IPs: 172.66.40.141, 172.66.43.115 (cloudflare.com)

Do not go to any of the sites above as they are a scam!