Mcafee refund scam 888-977-4594

Scam Number: 888-977-4594
Scammer’s Website or Email: -
Additional information about this scam:

They use ntcare.us

Delhi IP: 103.195.201.205

1 Like

Silent Push uncovers a large trojan operation featuring Amazon, Microsoft, Geek Squad, McAfee, Norton, and Paypal domains.

1 Like

A passive DNS replication check shows that the server is linked to to another IP - 198.23.212[.]167 - which is connected to phishing sites that are actively impersonating brands such as Norton and GeekSupport:
firsto[.]top
firsto[.]cc
mslxt[.]xyz
ncareback[.]xyz
backup02[.]xyz
gkscare[.]com
geeksupportcare[.]com
xpchelps[.]us
support2norton[.]us
xpchelp[.]us

1 Like

Still active 888-977-4594