McAfee
Certificate findings for McAfee
DomainSpoof matched these hostnames, from public certificate logs, to McAfee's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.
Published now · 6 findings, grouped by hostname
- mcafeeservice.com US · AS46475 · Limestone Networks, Inc.2 addressesPhishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 19 y ago
DetailsHide details for mcafeeservice.com
- Hostname
- mcafeeservice.com
- First seen
- 2026-11-05 09:04 UTC
- DNS
- Resolves · checked 2026-11-05 09:04 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 69.162.80.58.
- Phishing-host list fetched with the address
- Resolved to 69.162.80.58
- Brand
- McAfee
- Addresses
- 69.162.80.58 · United States · AS46475 LIMESTONENETWORKS - Limestone Networks, Inc.212.7.194.53 · Netherlands · AS60781 LEASEWEB-NL-AMS-01 LeaseWeb Netherlands B.V.
- Domain
- mcafeeservice.com
- Registered
- 2008-02-27 · Media Elite Holdings Limited, S.A.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:41 UTC
- mcafeeinc-mkt-prod2-tadobe-campaign.com NL · AS43350 · NFORCE NForce Entertainment…2 addressesPhishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 6 y ago
DetailsHide details for mcafeeinc-mkt-prod2-tadobe-campaign.com
- Hostname
- mcafeeinc-mkt-prod2-tadobe-campaign.com
- First seen
- 2026-11-05 09:01 UTC
- DNS
- Resolves · checked 2026-11-05 09:01 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 77.247.182.244.
- Phishing-host list fetched with the address
- Resolved to 77.247.182.244
- Brand
- McAfee
- Addresses
- 77.247.182.244 · Netherlands · AS43350 NFORCE NForce Entertainment B.V.216.245.213.77 · United States · AS46475 LIMESTONENETWORKS - Limestone Networks, Inc.
- Domain
- mcafeeinc-mkt-prod2-tadobe-campaign.com
- Registered
- 2021-02-01 · Media Elite Holdings Limited, S.A.
- MX
- Receives mail at mail.h-email.net
- SPF
- SPF record with -all: other senders fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:27 UTC
- us-mcafee.com US · AS46475 · Limestone Networks, Inc.2 addressesPhishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 18 y ago
DetailsHide details for us-mcafee.com
- Hostname
- us-mcafee.com
- First seen
- 2026-11-05 08:59 UTC
- DNS
- Resolves · checked 2026-11-05 08:59 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 69.162.80.53.
- Phishing-host list fetched with the address
- Resolved to 69.162.80.53
- Brand
- McAfee
- Addresses
- 69.162.80.53 · United States · AS46475 LIMESTONENETWORKS - Limestone Networks, Inc.212.7.194.68 · Netherlands · AS60781 LEASEWEB-NL-AMS-01 LeaseWeb Netherlands B.V.
- Domain
- us-mcafee.com
- Registered
- 2009-02-11 · Media Elite Holdings Limited, S.A.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:41 UTC
- www.support-mcafee.com SG · AS63949 · Akamai Connected Cloud3 addressesPhishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 3 d ago
DetailsHide details for www.support-mcafee.com
- Hostname
- www.support-mcafee.com
- First seen
- 2026-11-02 07:32 UTC
- First published
- 2026-11-02 08:00 UTC
- DNS
- Not resolving since 2026-11-03 · checked 2026-11-05 08:04 UTC
- Checks
- Overdue since 2026-11-03 08:04 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 172.232.24.161
- Certificate
- Issued by YE1Valid 2026-11-02 06:28 UTC to 2027-01-31 06:27 UTCLogged 2026-11-02 07:26 UTC in Google ParcelYard2027h1, entry 567,831,107SHA-256 808cfab151f587995dc1bf11a1367b4423cfd5c10bacf68e2858651f450c7398Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
- Brand
- McAfee
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Domain
- support-mcafee.com
- Registered
- 2026-11-02 · NameSilo, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:54 UTC
- support-mcafee.com SG · AS63949 · Akamai Connected Cloud3 addressesPhishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 3 d ago
DetailsHide details for support-mcafee.com
- Hostname
- support-mcafee.com
- First seen
- 2026-11-02 07:21 UTC
- First published
- 2026-11-02 08:00 UTC
- DNS
- Not resolving since 2026-11-03 · checked 2026-11-05 08:04 UTC
- Checks
- Overdue since 2026-11-03 08:04 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 172.232.24.161
- Certificate
- Issued by YE1 · precertificateValid 2026-11-02 06:19 UTC to 2027-01-31 06:19 UTCLogged 2026-11-02 07:17 UTC in IPng Networks Gouda2027h1, entry 291,587,744SHA-256 564be1dc92a7fd8f55d3e2e3905564afbf1b03a009b9c8b985d0f3e9c2fbb4c1Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
- Brand
- McAfee
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Domain
- support-mcafee.com
- Registered
- 2026-11-02 · NameSilo, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:54 UTC
- mcafeesecurity.ru RU · AS48282 · VDSINA-AS Hosting technolog…Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for mcafeesecurity.ru
- Hostname
- mcafeesecurity.ru
- First seen
- 2026-10-26 16:16 UTC
- DNS
- Resolves · checked 2026-11-05 09:02 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 178.20.43.83.
- Phishing-host list fetched with the address
- Resolved to 178.20.43.83
- Latest DNS check
- Certificate
- Logged in Geomys Tuscolo2027h1, entry 360,623,575SHA-256 8132e69ab60ad3f26fbf7bde69c3019306c1a6897435a21e01721b7e2d28b7cc
- Brand
- McAfee
- Addresses
- 178.20.43.83 · Russia · AS48282 VDSINA-AS Hosting technology LTD
- Domain
- mcafeesecurity.ru
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:22 UTC
How certificate findings are selected
Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.
DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches McAfee when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

