Yet another LocusSoftware connection with ipsCA

Here is yet another example of LocusSoftware foisting their bogus products upon the public with the help of “ipsCA” …



If you click the “Try free” button … my AV (NOD32 v3) jumps up with the following: (and kills the connection)



However I am still able via Microsoft Fiddler to capture the traffic connections, including when you attempt to purchase via the “Buy now” button above … you can see the redirection to their “payment” site and the certificate issued by “ipsCA”



Just so there is no confusion of the connection between LocusSoftware and the payment site … all you have to do is Google and there it is …



Another interesting connection is “antimalwareguard” is registered to “Serg Moon” who Sandi Hardmeier has identified several times as being behind the rash of malicious advertisements on legit websites … it really makes you wonder if these “Certificate Issuers” even bother to investigate who they are dealing with … apparently ipsCA doesn’t!


I also found the same payment site being used by “IEAntiVirus” and several others …



Comments are closed.