Solved.
Kudos0

Fake email?

Posted: 11-Apr-2020 | 12:24PM · 6 Replies ·

Received suspicious email from N-Security Renewal Zone <megadeal@norton-renewals.com> saying

Your Norton Subscription Expires Soon.

Dear Robert Jackson,

You are receiving this notice because you are enrolled in Nortonâ„¢ Automatic Renewal Service and your subscription is set to renew automatically each year. However, there appears to be a problem with your credit card or billing information. As such, Symantec will not automatically charge your credit card. This puts you at risk of losing your Nortonâ„¢ Security protection. At expiration your devices may be vulnerable to dangerous online threats unless you renew your subscription. Hence you are requested to renew your subscription with Norton Renewal Offer.

 

With this Renewal offer you'll receive these benefits:

  • Renew Norton for 3 Years & get 15 Months
  • Renew Norton for 2 Years & get 12 Months

But I have over 300 days left on my subscription. 

Labels: Tech Support Scams
Accepted Solution
Kudos0

Re: Fake email?

Posted: 11-Apr-2020 | 2:22PM · Permalink

These emails offering extended subscription periods have been reported in the past and have been confirmed by Norton as scams. Definitely not genuine Norton.

View Accepted Solution in Context

Replies

Kudos0

Re: Fake email?

Posted: 11-Apr-2020 | 2:05PM · Permalink

That does not appear to be a legitimate Norton address.

Verify that an email you receive from Norton is legitimate

Accepted Solution
Kudos0

Re: Fake email?

Posted: 11-Apr-2020 | 2:22PM · Permalink

These emails offering extended subscription periods have been reported in the past and have been confirmed by Norton as scams. Definitely not genuine Norton.

Kudos0

Re: Fake email?

Posted: 22-Apr-2020 | 1:16PM · Permalink

I got the same phishing email from bigoffer@norton-renewals.com. Hovering over the links indicates they go to https://lc.chat/now/11803107.

Is anyone passing the information about these phishing emails posted on this forum to Norton developers?

At the very least, they should be blocking these source addresses as they are reported, and blocking access to the sites to which the links in the phishing emails lead. 

I don't see how it helps to post on a community forum about phishing emails that are quite well-crafted and will fool many people who are not tech saavy. The people who will fall for this scam aren't the people who check community forums.

I tried to report the email I received directly to Norton Support, but they told me they were not able to pass information to developers, and that this forum is the only reporting mechanism. That seems VERY inadequate.

Could an actual Norton employee please respond and assure me that these email addresses and the sites to which they lead are being blocked as they are reported? Thanks!

Kudos1 Stats

Re: Fake email?

Posted: 22-Apr-2020 | 1:46PM · Edited: 22-Apr-2020 | 1:51PM · Permalink

Is anyone passing the information about these phishing emails posted on this forum to Norton developers?  

https://symsubmit.symantec.com/

Please fill out WebPulse Site Review Request to have website reviewed -

https://sitereview.symantec.com/sitereview.jsp?referrer=nortonsw

Kudos1 Stats

Re: Fake email?

Posted: 22-Apr-2020 | 3:10PM · Edited: 22-Apr-2020 | 3:18PM · Permalink

https://safeweb.norton.com/report/show?url=http://norton-renewals.com/index.html = WARNING

Kudos2 Stats

Re: Fake email?

Posted: 22-Apr-2020 | 5:25PM · Edited: 22-Apr-2020 | 5:27PM · Permalink

Looks like they've been busy little beavers with their phishing emails of late.

megadea l@ norton-renewals . com
deal2020 @ norton-renewals . com
bigoffer @ norton-renewals . com
subscriptions @ norton-renewal . com
renewaloffers @ norton-renewal . com
nortonsubscription @ norton-renewal . com

norton-renewals . com (35.213.167.241)
241.167.213.35.bc.googleusercontent . com (35.213.167.241)
Google Asia Pacific Pte. Ltd. (GAPPL) GOOGLE-CLOUD

Subdomains
payments . norton-renewals . com
35.213.167.241
www . norton-renewals . com
35.213.167.241
184.168.131.241

2019-08-27
Domain name: norton-renewals . com
Domain registrar id: 146
Domain registrar url: http : //registrar.godaddy . com
Expiry date: 2020-08-27
Name server 1: ns59.domaincontrol . com
Name server 2: ns60.domaincontrol . com
Query time: 2019-08-28 17:27:28
Registrant address: 3267309318f7846c
Registrant city: 3267309318f7846c
Registrant company: 3267309318f7846c
Registrant country: India
Registrant email: 3267309318f7846cs@
Registrant fax: 3267309318f7846c
Registrant name: 3267309318f7846c
Registrant phone: 3267309318f7846c
Registrant state: 69931639104963e9
Registrant zip: 3267309318f7846c
Update date: 2019-08-27

This thread is closed from further comment. Please visit the forum to start a new thread.