Near: Columbus, Ohio, United States
IP Lookup Details:
IP Information - 149.72.238.200
Host name: wrqvzzcv.outbound-mail.sendgrid.net
Country: United States
Country Code: US
Region: CO
City: Denver
Latitude: 39.7525
Longitude: -104.9995
Whois information
CIDR: 149.72.0.0/16
NetName: SENDGRID-149-72-0-0-16
NetHandle: NET-149-72-0-0-1
Parent: NET149 (NET-149-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS11377
Organization: SendGrid, Inc. (SENDG-12)
RegDate: 2017-09-05
Updated: 2023-04-18
Comment: -----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Ref: https://rdap.arin.net/registry/ip/149.72.0.0
OrgName: SendGrid, Inc.
OrgId: SENDG-12
Address: Twilio, Inc.
Address: 1801 California Street
Address: Suite 500
City: Denver
StateProv: CO
PostalCode: 80202
Country: US
RegDate: 2012-06-14
Updated: 2020-11-13
Comment: http://www.sendgrid.com
Comment:
Comment: (888) 985-8363
Comment: Support hours: M-F, 7a-7p Mountain Time.
Ref: https://rdap.arin.net/registry/entity/SENDG-12
OrgTechHandle: TSNO-ARIN
OrgTechName: Twilio SendGrid Network Operations
OrgTechPhone: +1-888-985-7363
OrgTechEmail: netops+arin@sendgrid.com
OrgTechRef: https://rdap.arin.net/registry/entity/TSNO-ARIN
OrgTechHandle: CTG2-ARIN
OrgTechName: Guething, Carl Thomas
OrgTechPhone: +1-888-985-7363
OrgTechEmail: t+arin@sendgrid.com
OrgTechRef: https://rdap.arin.net/registry/entity/CTG2-ARIN
OrgAbuseHandle: ABUSE3074-ARIN
OrgAbuseName: Abuse Desk
OrgAbusePhone: +1-888-985-7363
OrgAbuseEmail: abuse@sendgrid.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3074-ARIN
Received a communicatin form this IP in email in regards to an order I placed on Traveux.com which website entireless and magically disappeared once I contacted them. They did get back to me saying they didn't have an order from me. I submitted screen shots of their site with the order info and numbers. never heard again and they disappeared. Here is the top ppart of the header leading me to this IP: "Return-Path: <bounces+13898262-0f63-tekwizrd=stny.rr.com@em5772.cutetopshop.com> Received: from p-impin007.msg.pkvw.co.charter.net ([47.43.26.148]) by p-mtain011.msg.pkvw.co.charter.net (InterMail vM.9.01.00.037.1 201-2473-137-122-172) with ESMTP id <20210408081504.ZASJ30426.p-mtain011.msg.pkvw.co.charter.net@p-impin007.msg.pkvw.co.charter.net> for <tekwizrd@stny.rr.com>; Thu, 8 Apr 2021 08:15:04 +0000 Received: from wrqvzzcv.outbound-mail.sendgrid.net ([149.72.238.200]) by cmsmtp with ESMTP id UPodlnUDCPiRYUPodliVN2; Thu, 08 Apr 2021 08:15:04 +0000 X-ORIG-RCPT: tekwizrd@stny.rr.com X-Authority-Analysis: v=2.3 cv=YKvhNiOx c=1 sm=1 tr=0 b=1 cx=a_idp_d a=fnHcPiRhCuUdmAsDhhUiDg==:117 a=fnHcPiRhCuUdmAsDhhUiDg==:17 a=ayC55rCoAAAA:8 a=IkcTkHD0fZMA:10 a=5KLPUuaC_9wA:10 a=GYNJNCkMMaEA:10 a=-5u_LAPiAAAA:8 a=gU1HOJDR9xIB_p-U62sA:9 a=4YWbZ2u-ThesWIx0:21 a=QEXdDO2ut3YA:10 a=B_RyunTPg8udlmYm5Cu2:22 a=5PE20vykcA-OOIfNBcuM:22 cc=prm DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cutetopshop.com; h=content-transfer-encoding:content-type:from:mime-version:subject: reply-to:to; s=s1; bh=mLu08fIxdesCjiw9swSLHLlKLmWuJ9/XlWHIGobKwco=; b=ZQvui4nj1zIkhOvSYLlOy7YNp92me2HIxsj0KZ8gqDHUE58DlfaY8t801pBMx2P9PbJ7 1+e4DlG7kmdKW5rMSai+7SMtzvJccobvgfEPIQuu2KvyEe+t9AypANwpkhdlJcetxmtiBS 3izqN0MjdoVGFztVpSSKN3/qJ1fvnBlGo= Received: by filterdrecv-p3las1-canary-9b76658bd-9gh9m with SMTP id filterdrecv-p3las1-canary-9b76658bd-9gh9m-19-606EBB86-1F 2021-04-08 08:15:02.818583487 +0000 UTC m=+1347955.767790739 Received: from MTM4OTgyNjI (unknown) by geopod-ismtpd-canary-0 (SG) with HTTP id _JXOxMfgSdCVTkC2M91Yng Thu, 08 Apr 2021 08:15:02.528 +0000 (UTC) Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Date: Thu, 08 Apr 2021 08:15:02 +0000 (UTC) From: Customer service support <natasha@customerservicemode.com> Mime-Version: 1.0 Message-ID: <_JXOxMfgSdCVTkC2M91Yng@geopod-ismtpd-canary-0> Subject: [Customer service support] their fake site email support listed natasha@customerservicemode.com as the contact. I reached out and thats the header from their response. Complete scammers .....
