Roku scam with IP (they used a VPN :( )

Well, this is the smartest scammer I have encountered so far, using a vpn. I used grabify to yoink his ip on the live chat feature. he claimed he was from tampa, his IP said philidelphia, but he was using a vpn.

https://www.go-roku-com-technical-support.com/

Date/Time 2020-12-04 13:53:35
IP Address 207.244.71.80
VPN/Proxy Detection NEW! This IP may be a VPN or Proxy
Country
United States, Philadelphia
Browser Chrome (87.0.4280.88)
Operating System Windows 10 x64
User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36
Referring URL no referrer
Host Name 207.244.71.80
ISP LEASEWEB-USA-WDC

WHOIS INFO

Registrar Info
NameGoDaddy.com, LLC
Whois Serverwhois.godaddy.com
Referral URLhttp://www.godaddy.com
StatusclientDeleteProhibited http://www.icann.org/epp#clientDeleteProhibited
clientRenewProhibited http://www.icann.org/epp#clientRenewProhibited
clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
clientUpdateProhibited http://www.icann.org/epp#clientUpdateProhibited
Important Dates
Expires On2021-03-20
Registered On2019-03-20
Updated On2020-03-21
Name Servers
NS13.DOMAINCONTROL.COM97.74.106.7
NS14.DOMAINCONTROL.COM173.201.74.7
Similar Domains
go-ro-liv.com | go-ro.cn | go-ro.com | go-ro.de | go-ro.ru | go-road.com | go-road.info | go-roadrunner.com | go-roadsafetyaudit.com | go-roadtrip.com | go-roam.com | go-roam.net | go-roaming.com | go-roar.com | go-roast.com | go-robak.com | go-robin.com | go-robinson-de.de | go-robinson.ch | go-robinson.com |
Registrar DataWe will display stored WHOIS data for up to 30 days.

Domain Name: go-roku-com-technical-support.com
Registry Domain ID: 2371171413_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2020-03-21T12:01:01Z
Creation Date: 2019-03-20T10:19:32Z
Registrar Registration Expiration Date: 2021-03-20T10:19:32Z
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone: +1.4806242505
Domain Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited http://www.icann.org/epp#clientUpdateProhibited
Domain Status: clientRenewProhibited http://www.icann.org/epp#clientRenewProhibited
Domain Status: clientDeleteProhibited http://www.icann.org/epp#clientDeleteProhibited
Registrant Organization: Netpros
Registrant State/Province: Florida
Registrant Country: US
Registrant Email: Select Contact Domain Holder link at https://www.godaddy.com/whois/results.aspx?domain=go-roku-com-technical-support.com
Admin Email: Select Contact Domain Holder link at https://www.godaddy.com/whois/results.aspx?domain=go-roku-com-technical-support.com
Tech Email: Select Contact Domain Holder link at https://www.godaddy.com/whois/results.aspx?domain=go-roku-com-technical-support.com
Name Server: NS13.DOMAINCONTROL.COM
Name Server: NS14.DOMAINCONTROL.COM

On 11/1/20 I cam across this realted scammer (ROKU and more)

P Address 207.244.71.81

VPN/Proxy Detection NEW! This IP may be a VPN or Proxy

Country

United States, Philadelphia

Browser Chrome (86.0.4240.111)

Operating System Windows 7

User Agent Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36

Referring URL https://www.textnow.com/

Host Name 207.244.71.81

ISP LEASEWEB-USA-WD

IP Address. 14.99.89.158. Username. antivirussupport. Email. [email protected]

Benevolent FTP server (MikroTik 6.42.9) read

BENEVOLENCE TECHNOLOGIES PVT LTD

You can know their location from their timezone

@Sherlock#169359 sometimes it does not show

Amazon Prime Activation scam
888-601-0856 (657) 233-4079 855-236-1719
primeactivation.store