lol, my bad, server is hosted in Russia.

195.69.144.125   191.692   AMS-PE-1.megafonvolga.ru

also seems to be some kind of layering in the reverse dns to hide location

Even if he is legit, that's a good way to fail.

My apologies.