Site is loaded with scam AV product pages

Last week we blogged about a site that was advertised in spam email that appeared to be either selling rogue security products or else was selling AVG’s FREE antivirus product  (“AV scam: is it a rogue or is it AVG’s free edition for sale?”)

A friend at AVG investigated just a big more and responded:

“LOL look at this:
 
“http://officialversion.ru/antivirus/1/
http://officialversion.ru/antivirus/2/
http://officialversion.ru/antivirus/3/
http://officialversion.ru/antivirus/4/
http://officialversion.ru/antivirus/5/
http://officialversion.ru/antivirus/6/
http://officialversion.ru/antivirus/7/
http://officialversion.ru/antivirus/8/”

The eight professional-looking pages (three are nearly identical) on the site all have generic names with all the design elements that are associated with the advertising of real security products: Symantec’s distinctive yellow colors, the shields and use of the year in the name. They’re probably landing pages for a spam email campaign. (Click on any of the graphics to enlarge them.)