McAfee Renewal Scam
Two days running I received this e-mail. I don't use McAfee but this isn't a genuine e-mail sent in error by McAfee but an e-mail sent by scammers.
E-Mails received:
Date: 21/03/2025, 04:14
From: Membership Service info@agilitime.com
To: [Name and E-Mail address redacted]
Subject: Invoice #881997 From MCF Support Team!
Notes
Senders e-mail: info@agilitime.com nothing to do with the genuine McAfee website which is https://www.mcafee.com/
Link address again goes nowhere near McAfee the link will take you to http://gummies.kyleconstance.com/4Vplkr163uCoB17ktekoxczyi432OLJXDMUJNUJMORP2901693
DWMI226T4, a website address not connected in any way with the real McAfee website. They are out to scam you and that's whether you use McAfee or not.
Recommendation:
Just delete the e-mail.
A few days later I received another e-mail from someone else trying to scam me.
Date: 26/03/2025, 12:39
From: Membership Service info@agilitime.com
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** Update: You will lose your device within 48 hours!
Notes
Again the sender e-mail address was info@agilitime.com
Link address again goes nowhere near McAfee the link will take you to http://graf.1109121.ru/4acXzh199ITIV17rspudcucgb432HUTXZRIHA
OOOTCA2901693IBPU226I4, a Russian website address not connected in any way with the real McAfee website. They are out to scam you and that's whether you use McAfee or not.
There is also an unsubscribe link which will take you to http://graf.1109121.ru/1xVmgG199RQab17xnldstqwkx432RCYXOLLOTFPAEHG2901693NHTB226V4. again the same Russian website. McAfee do not operate out of Russia. Do not click on any links.
This time they are telling me that my subscription has ended and dire consequences will occur. I will live with that.
Recommendation:
Just delete the e-mail.
And another e-mail.
Date: 10/04/2025, 06:48
From: Warning info@kwszaad.com
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** Your membership has been suspended
Notes
The sender e-mail address is unlikely to be one belonging to McAfee info@kwszaad.com
Link address again goes nowhere near McAfee the link will take you to http://plan.ignorelist.com/4smZqh509xnSt17acnbnqnmpd432JLKIOCGEDPNWGBX2901693NIML286n5, a website address not likely to be connected in any way with the real McAfee website. They are out to scam you and that's whether you use McAfee or not.
The unsubscribe link takes you to the same website address. Do not click on any links.
Recommendation:
Just delete the e-mail.
And another e-mail.
Date: 13/04/2025, 23:15
From: SECURITY DISABLED info@miegwen.com
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** Your device is currently vulnerable to attacks
Notes
This e-mail looks very official, the wording Security Alert, Critical, Security Disabled and Final Warning all to encourage you to click on the Activate button before you have checked out the authenticity of the e-mail.
Sender E-mail address: info@miegwen.com, nothing to do with McAfee. Miegwen.com is a French language website concerned with perfumes, nothing to do with internet security.
The Activate button link would take you to... http://plan.ignorelist.com/4wKCSk650ZpPm17ebrtegdxfc432LUPWPXREEBBWHSO2901693LWEE286m5 clearly nothing to do with the official McAfee website.
Recommendation:
Just delete the e-mail.
And another e-mail.
Date: 02/05/2025, 14:20
From: MCF Support Team sales-McAfee@vanestransport.com
Reply to: reply@inbox.dournaux.com
To: [Name and E-Mail address redacted]
Subject: Re: Your membership is over!
Notes: From and Reply to addresses bear no resemblance to a genuine McAfee e-mail address. The click button links to http://btre.rohl.nom.za/4hrfzZ1200hlpD17ffcdmszjxu432JDDVBCIEJVXODDY2901693TAFQ416X4 which appears to be a South African E-Mail Marketing Agency. Whether they know they are connected with a scam or not.
Recommendation:
Just delete the e-mail.
And yet another e-mail.
Date: 02/05/2025, 21:58
From: Safety first! mcafee@miegwen.com
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** Your antivirus subscription has expired!
Notes: We have received scam e-mails from this address before. "Renew Now" link goes to
http://myclick.ignorelist.com/4XSzyj1206HhIQ17dcjuwmnzkg432DMHVFMUQHM
XJBQJ2901693GXSZ285z5 nothing to do with McAfee.
Recommendation:
Just delete the e-mail.
And another email...
Date: 09/05/2025, 14:06
From: MĀ¢Afee notification@wipro-unza.co.id
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** Critical [S]ecurity AIert: Protect Your Devices lmmediately 141
Notes: A different email address than before, this time from Indonesia. "Renew Now" link goes to http://mail.moosaid.com/o3SlrAkwTY/offer/
0029n/631/d8mgu/2fhw/41/77/?signature=k1mKlTwliO2iNWGZghuJ6FqGdn3lNdEX5QyhAUsIzlRd8n2fvn nothing to do with McAfee.
Recommendation:
Just delete the e-mail.
And there's more (Jimmy Cricket)...
Date: 11/05/2025, 17:34
From: Account deleted mcafee@miegwen.com
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** All files will be deleted today
Notes: We have received scam e-mails from this address before. "Renew Subscription" link goes to
http://myclick.ignorelist.com/4ZgYyB1317NjlW17sgtzfyxttp432CDKYNSXKBVBGHPT2901693JABY285V5 nothing to do with McAfee.
Recommendation:
Just delete the e-mail.
And another...
Date: 11/05/2025, 17:34
From: Account deleted sales-McAfee@vanestransport.com
Reply to: reply@inbox.dournaux.com
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** Bill #435370 From MCF Support Team!!
Notes: We have received scam e-mails from this address before. "Enable Automatic Renewal" link goes to
http://btre.rohl.nom.za/4crdJd1324hKle64ktesivvvwd432PMEFLVOFUAQWPNP2901693HKGC416q4 nothing to do with McAfee.
Recommendation:
Just delete the e-mail.
Michael Fowler
Other articles by Michael Fowler:
SEO Services Spam - Michael Fowler
If you have a website be prepared to be inundated with emails from SEO companies offering to get you Google page 1 listings, for a price...
more >>
FBI Compensation of US$15 Million - Michael Fowler
Is it my lucky day when the Director of the FBI (Federal Bureau of Investigation) contacts me to tell me I am due compensation of US$15 Million?
more >>
Beluga Bible Translations - A Bit Fishy? - Michael Fowler
Alright we know a Beluga Whale is a mammal and not a fish. But what I am questioning is whether Beluga Bible Translations is a legitimate Christian Mission or whether it is fishy?
China Domain name Scam - Michael Fowler
The China Domain name Scam and what to do when you receive an e-mail from the Chinese Registrars.
Amory Dixon - Persistant Spammer - Michael Fowler
What happens when you reply to a persistant spammer.
Scamminder.com - Legit or Scam - Michael Fowler
Scamminder is it a legitimate Scam Detection website or a scam itself?
