Yet another LocusSoftware connection with ipsCA

Here is yet another example of LocusSoftware foisting their bogus products upon the public with the help of "ipsCA" ...

If you click the "Try free" button ... my AV (NOD32 v3) jumps up with the following: (and kills the connection)

However I am still able via Microsoft Fiddler to capture the traffic connections, including when you attempt to purchase via the "Buy now" button above ... you can see the redirection to their "payment" site and the certificate issued by "ipsCA"

Just so there is no confusion of the connection between LocusSoftware and the payment site ... all you have to do is Google and there it is ...

Another interesting connection is "antimalwareguard" is registered to "Serg Moon" who Sandi Hardmeier has identified several times as being behind the rash of malicious advertisements on legit websites ... it really makes you wonder if these "Certificate Issuers" even bother to investigate who they are dealing with ... apparently ipsCA doesn't!

I also found the same payment site being used by "IEAntiVirus" and several others ...

Published Wed, Apr 30 2008 4:32 by winhelp2002
Filed under: