Fake software stores
often claim to offer huge discounts, not unlike the well-known site Groupon
. So it should not be a surprise that some of these fake stores look exactly like Groupon in an effort to be more familiar to the users and increase the likelihood of being trusted. One of these fake stores is axisoftware.com
Here are screenshots of Groupon and identical looking pages on axisoftware.com
|Groupon: select a city|
|axisoftware.com: home page (top)|
|Groupon: daily deal|
|axisoftware.com: home page (center)|
The fake site does not work very well. Clicking on the Buy button on the home page didn't actually do anything. I had to first click on the "deal" and then the "buy" button before reaching the shopping cart.
After entering my e-mail address, I was redirected to a payment website at lpstore.ws
. Payment by VISA card then redirects to feriensoft.com
. Mastercard is handled by screensavera.com
|Fake payment site|
Lately, there has been a lot more activity around fake stores than around Fake AV, which used to me the most dominant threat in the Blackhat SEO world. There are currently thousands of spam websites redirecting to this particular fake Groupon store appearing in search engine results.