Be aware of a current  OEM download doorway pages scam that are appearing frequently on many hacked WordPress blogs and similar sites.

What is a doorway page?

It’s a link that may look legitimate and appear on search engines like Google, but once you click them, they can link you to another Web site or page that could be totally unrelated to the original link.

We’ve encountered links where you are presented with a realistic looking “Windows Security” scanner screen, where it looks like it is scanning your computer and it reports that several viruses are detected.  Clicking anywhere on the screen, including the Cancel button forces you to download and run a file.  The truth is no virus is detected, and the screen is nothing more than a animated graphic of the scanning process fooling the user that a real Windows security scan is happening.  Of course in a state of panic, the user clicks Cancel, and it asks you to run a file. This is where they get you, the trick here is if you actually do download run this file, you’re likely to be infected with malware, or worse, a virus that could potentially delete your data. Most of these doorways are a way for a scammer to take your hard earned money, but the most common are doorway pages that link to sites which try to sell you something, like illegal software downloads. A recent Google search of “WinFax OEM” resulted in some specific examples:

Symantec winfax pro 10.03 Download Cheap OEM software 8 Aug 2009 … Symantec winfax pro 10.03. Shop for cheap OEM Computer Software. Find the lowest priced Computer Software products from 100s of different …blog.student-energy.xxx/wp-includes/js/…/ymce.php?p…winfax-pro… – Similar

Symantec winfax pro 10.4 Download Cheap OEM software

5 Aug 2009 … Symantec winfax pro 10.4. Find, shop for and buy software, business software, multimedia software, and more from Discount OEM Software.com.
blog.student-energy.xxx/wp-includes/js/…/ymce.php?p…winfax-pro… – Similar

As you can see, these 2 specific links are hosted on a WordPress blog (I’ve edited the original link, to protect the owner of that domain).  The problem here is this WordPress site was compromised, the original owner is likely unaware that their site is being used as a doorway page. Once the visitor clicks on one of these links, they are re-directed to another Web site which purpose is to sell software downloads.

The spammers are using this organization’s domain as a doorway.  Not only is traffic being routed to their domain, and then re-routed to the spammer site, but they are also being used for the purpose of legitimately getting indexed quickly on search engines, like Google.  This can also damage your search ranking of your legitimate Web site once Google determines your site is being used as a doorway page.

Stuffed keywords like the following can appear on a hacked webpage:

Symantec winfax pro 10.0 Monday, August 24, 2009 Symantec winfax pro 10.0 download Buy Symantec winfax pro 10.0 Symantec winfax pro 10.0 online oem Symantec winfax pro 10.0 Symantec winfax pro 10.0 price Symantec winfax pro 10.0 crack Symantec winfax pro 10.0 software Symantec winfax pro 10.0 download download Symantec winfax pro 10.0 Symantec winfax pro 10.0 sales serial number for Symantec winfax pro 10.0 Buy Symantec winfax pro 10.0 cheap Symantec winfax pro 10.0 Symantec winfax pro 10.0 low price Symantec winfax pro 10.0 product key Buy Symantec winfax pro 10.0 Symantec winfax pro 10.0 serial number buy Symantec winfax pro 10.0 Symantec winfax pro 10.0 oem Symantec winfax pro 10.0 buy buy Symantec winfax pro 10.0 Symantec winfax pro 10.0 oem serial number for Symantec winfax pro 10.0 Symantec winfax pro 10.0 rapidshare Symantec winfax pro 10.0 download Symantec winfax pro 10.0 download Symantec winfax pro 10.0 software Symantec winfax pro 10.0 crack cheap Symantec winfax pro 10.0 Symantec winfax pro 10.0 keygen Symantec winfax pro 10.0 price Symantec winfax pro 10.0 sales download Symantec winfax pro 10.0 Symantec winfax pro 10.0 download Symantec winfax pro 10.0 serial number Symantec winfax pro 10.0 product key Symantec winfax pro 10.0 torrent oem Symantec winfax pro 10.0 Symantec winfax pro 10.0 low price

As you can see, they stuff the keywords so Google, and other search engines rank these pages above other similar type pages related to Symantec WinFax PRO. Once the page has been indexed by the search engine using the above keywords, they redirect the same indexed link to a spam site.

These Web sites should never be trusted! Why? because if they will go to lengths to hack other sites to make money, they will likely use your credit card and other personal information for their benefit. In addition, If any site is offering an immediate download of WinFax, at any price, it is illegal. We’ve come across MAJOR sites, universities, colleges and other organizations that have hosted links that redirect to these download sites, many of which included offers to download WinFax PRO and many other software titles after entering your personal information & credit card details.

If you are looking to purchase WinFax PRO, do so from a legitimate vendor, or private third-party who can provide you with an original Symantec CD-ROM media from their existing old-stock.  Please see our Where to Buy WinFax in our Guides section for more details on this.