buygoods.com
42 days ago
small-community-1

Spammer / Scammer

This spam was relayed though IP 209.85.220.41
(google.com)

The spammer was using the IP of 45.126.126.25
when sending this spam. (kamatera.com / cloudwm.com)
(AS64022)

Some hair loss prevention scam / spam email.

Subject was
"_Doctor Forced To Resign After Unveiling Hair Regrowth Hack"

The spammer's websites are located at

https://linkslife.page.link
IP: 142.251.33.65 (google.com)

Which redirects to

https://firebasestorage.googleapis.com/v0/b/alpina-6a270.appspot.com/o/revivohairloss.html?alt=media&token=565fc5e3-1afa-4b53-86d7-d5b954a7095a
IP: 172.217.14.202 (google.com)

Which redirects again to
https://revifol.com/report-qts?aff_id=119&subid2=6161_sessid20220818191526682&subid=3730
IP: 172.67.214.96, 104.21.93.205 (cloudflare.com)

The spammer's other site is located at
https://www.buygoods.com/secure/?account_id=5983&product_codename=prod7&redirect=aHR0cHM6Ly9yZXZpZm9sLmNvbS91cGdyYWRlLTE%3D
IPs: 172.66.40.141, 172.66.43.115 (cloudflare.com)

Do not go to any of the sites above as they are a scam!