SCAM
Sends spam email illegally to owners of Internet domains soliciting them to move registration to their domain for the outrageous price of $75 for a year when the going rate is about $12.
Subject: Domain Notification: [your name here] This is your Final Notice of Domain Listing - [your domain here].
Subject implies your domain registration is expiring. "Final Notice" is 100% deceptive and bogus.
Notices are sent to domain owners from the company they are currently registered with, not this worthless scammer.
FEAR - "Your domain is expiring....FINAL NOTICE".
And Solution - "Quickly fax your credit card number to this number and for just $75 your dire, horrible situation will at last be over".... but act quickly!
Examine in bound spam email
and determine it originated from IP 184.95.51.250
184.95.51.250 is owned by:
SECURED SERVERS LLC
2353 W University Bldg A
Tempe, AZ, 85281
Agent for Service: MARCUS A BOHN
They rent out 184.95.51.250 and are ultimately responsible for SPAM spewing from their hardware.
Many different entities may rent and share 184.95.51.250, any one of which could be our above SCAM spammer.
Doing a ping -a 184.95.51.250 does reveal a renter's name, perhaps the primary name associated with 184.95.51.250 but is inconclusive. anxieties1.paisperu.com
Do a reverse IP search ( www.ip-adress.com/reverse_ip ) indicates only one NAME associated with 184.95.51.250
anxieties1.paisperu.com
Registered to:
Roberto Daniel Paz Molleda
Company: Mercaperu.Com
Lima - Peru
Phone: +51.199305440
Fax: +51.5115312046
[email protected]
High probability spam originated from above.
Tracing the RESPOND TO fax # 716-650-4793
(FAX your credit card info here....)
Whitepages Reverse phone.
Most likely that is not a cell number.
Much more likely its a VoIP number landing in area code 716 but transmitted from there to any internet location in the world
What might yield more info would be to place a call to that number using a VoiP softphone on your computer and having a peek at the packets using wireshark.org That would likely reveal the approximate location of the recipient (country and perhaps more.)
If its Roberto Daniel Paz Molleda, he uses GoDaddy for his own registration (anxieties1.paisperu.com), likely taking the $12 or so fee GoDaddy charges and marking it up to $75 using his email scam to promote.
Spammer's use of WhoIs information to spam is illegal.