Norton Renewal Scam

Scams
1

Badly created emails & even worse idiots on the phone. Mail claims to be from nortonpay.com/redirects to nortonbilling.com

1 800 975 5977 Is the phone number to reach them. Both domains seem to be registered in Canada, falsely would be my best guess. Body of the email is “ Please don’t let your membership lapse or renew automatically! This year renewal is $149.99.

The good news is, there’s 2 years $149.99 instead! Please call 1 800 975 5977

  • - The Norton Pay Team”

    • Ya, umm, even on Nortons webpage renewals are only 54.99/year. These clowns are obvious ripoff buffoons preying on those who do not check into the source

    2

    Oh noes, they say that they can find the IP address of my phone! Good luck with that. :slight_smile:

    3

    Whois record:

    Domain Name: NORTONBILLING.COM
    Registry Domain ID: 2449522934_DOMAIN_COM-VRSN
    Registrar WHOIS Server: whois.tucows.com
    Registrar URL: http://tucowsdomains.com
    Updated Date: 2019-10-30T04:17:07
    Creation Date: 2019-10-30T04:06:27
    Registrar Registration Expiration Date: 2020-10-30T04:06:27
    Registrar: TUCOWS, INC.
    Registrar IANA ID: 69
    Reseller: Yola, Inc
    Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
    Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
    Registry Registrant ID:
    Registrant Name: Contact Privacy Inc. Customer 0156079479
    Registrant Organization: Contact Privacy Inc. Customer 0156079479
    Registrant Street: 96 Mowat Ave
    Registrant City: Toronto
    Registrant State/Province: ON
    Registrant Postal Code: M6K 3M1
    Registrant Country: CA
    Registrant Phone: +1.4165385457
    Registrant Phone Ext:
    Registrant Fax:
    Registrant Fax Ext:
    Registrant Email:
    Registry Admin ID:
    Admin Name: Contact Privacy Inc. Customer 0156079479
    Admin Organization: Contact Privacy Inc. Customer 0156079479
    Admin Street: 96 Mowat Ave
    Admin City: Toronto
    Admin State/Province: ON
    Admin Postal Code: M6K 3M1
    Admin Country: CA
    Admin Phone: +1.4165385457
    Admin Phone Ext:
    Admin Fax:
    Admin Fax Ext:
    Admin Email:
    Registry Tech ID:
    Tech Name: Contact Privacy Inc. Customer 0156079479
    Tech Organization: Contact Privacy Inc. Customer 0156079479
    Tech Street: 96 Mowat Ave
    Tech City: Toronto
    Tech State/Province: ON
    Tech Postal Code: M6K 3M1
    Tech Country: CA
    Tech Phone: +1.4165385457
    Tech Phone Ext:
    Tech Fax:
    Tech Fax Ext:
    Tech Email:
    Name Server: ali.ns.cloudflare.com
    Name Server: alan.ns.cloudflare.com
    DNSSEC: unsigned
    Registrar Abuse Contact Email:
    Registrar Abuse Contact Phone: +1.4165350123
    URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

    4

    Business head: Dipesh Tiwari

    his company: Netprophets Cyberworks Pvt. Ltd

    company website:NetProphets Portfolio - Case Study Of Impressive Work

    his linkedin: https://gt.linkedin.com/in/mail2dipesh/de

    he speaks English and Hindi (surprise surprise)

    his email: [email protected]

    his personal phone number: +919810207876

    He lives in India, Uttar Pradesh, Noida 6th Floor, Gopal Das Bhawan 28 Barakhamba Road

    Image of him: https://cdn.discordapp.com/attachments/642717424856334348/719239711373131826/9k.png

    https://pkimgcdn.peekyou.com/9467da8d75059d340a7d041712b0904b.jpeg

    https://pkimgcdn.peekyou.com/20bff2f4a1090ffd0eaa426ca68d4fbc.jpeg

    his Pinterest:https://www.pinterest.com/dipeshtiwari/

    He also owns the domain nortonactivate.com (no content yet)
    Another one of his domains:https://www.toshiba-india.com/

    CEO of the company: amitabh vira
    His image http://www.netprophetsglobal.com/images/team/amitabh-vira.jpg

    Other email addresses of his company: [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]

    address of the company: 6th Floor, C-56 A/12, Sector 62, Noida Uttar Pradesh 201301 IN

    5

    ![image ofpng.png](https://tlscommunity.com/assets/2020-06-07/18:10:350-ofpng.png)

    6

    @Foreign_Hacker#142370 Yep, they said the same BS to me…

    7

    @Botvernichtung1#142434 The scammer provides incorrect addreess:

    Uttar Pradesh, Noida 6th Floor, Gopal Das Bhawan 28 Barakhamba Road
    "28 Barakhamba Road " is very well know road in New Delhi (not Noida)

    Correct address (office/commercial building) : 6th Floor, Gopal Das Bhawan 28 Barakhamba Road , New Delhi, India

    Cyberworks Private Limited netprophetsglobal.com https://www.linkedin.com/in/mail2dipesh/?originalSubdomain=in

    npglobal.in (Company Website)
    varunadjani.com Amitabh Vira (Netprophets Cyberworks Pvt. Ltd.) Toshiba-india.com
    Dipesh Tiwari
    Admin Organization: Toshiba India Pvt. Ltd.

    Admin Phone: +91.1204261051
    Admin Postal Code: 110001
    Admin State/Province: Delhi
    Admin Street: 6th Floor, Gopal Das Bhawan 28 Barakhamba Road , New Delhi, India

    8

    This scammer Dipesh Tiwari runs another shady business within India

    +919810207876 atyacheck.com Satya Check

    (In Hindi it means truth finder)
    They secretly check the background info in matrimonial proposals within India

    https://www.facebook.com/satyacheck/about/ https://www.satyacheck.com/
    +91 98102 07876 NetProphets Cyberworks Pvt. Ltd.
    Registrant State/Province: UP
    Registrant Country: IN

    9

    Efforts, etc seem to be working. Can’t reach nortonpay.com at this time. Nortonbilling.com is still active for now. Seems I didn’t get called all night as they said they were going to add my burner number to a speed dial list. Hehe

    10

    correction

    +919810207876 atyacheck.com [INCORRECT] Satya Check

    +919810207876 satyacheck.com [CORRECT] Satya Check

    11

    @Botvernichtung1#142434 Bihari brother, so u have started sharing personal phone numbers also of people ?

    12

    @umeshyadav#142526 Im sharing personal numbers of scammers, yes

    do u have sth against it?

    13

    Just found out his full name is DIPESH KUMAR TIWARI

    14

    Nortonbilling.com seems to be down now. No answers on the phone number. Nortonpayment.com also appears dead. Nice work folks!