Hoping the community can help analyze a suspicious site that clones my friend's legitimate business.<p><pre><code> Nutripea (https://nutripea.com/) → Real company, real physical location.
Norleaf Food (https://norleaffood.com/) → Clone of Nutripea’s website, no physical location, questionable intent.
</code></pre>
A few things stand out:<p><pre><code> -The source code of Norleaf Food is nearly identical to Nutripea’s, including Nutripea’s Google Analytics ID.
-In some places, they forgot to change Nutripea’s physical address, suggesting a careless copy-paste job.
-The Wayback Machine shows Norleaf Food first appeared a few years ago, then disappeared, and now it’s back.
-The contact form on Norleaf Food is slightly modified and submits data to FormCarry (a form submission service).
</code></pre>
I’ve tried emailing Norleaf, but no response. I’m wondering:<p><pre><code> What could be the purpose of cloning this site?
Does anything in the source code hint at their intent?
Has anyone seen similar scams before, and what’s the endgame?</code></pre>
Someone did the exact same thing to JavaScript Today. Their domain was jstoday.cyou. It was an exact replica, but included a different analytics service, and the emails were changed to their domain. You can still see the results in Google: <a href="https://www.google.com/search?q=site%3Ajstoday.cyou&oq=site%3Ajstoday.cyou&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIGCAEQRRg60gEIMjc3NWowajGoAgCwAgA&sourceid=chrome&ie=UTF-8&sei=cePSZ4-3FrCvwbkPkoGNsAI" rel="nofollow">https://www.google.com/search?q=site%3Ajstoday.cyou&oq=site%...</a><p>I reported the domain name to Namecheap, and in a few days, the site was down. Commenting because I'd like to know what this is about as well.