|
If you look at the code on the join page for the fake site, it looks more like someone is promoting them by linking directly to the biller rather then the paysite...
Both contain:
royal2.1://YTo2OntzOjEwOiJhZ2VudF9uYW1lIjtzOjk6IndlYm1hc3Rlci I7czo3OiJhY2NvdW50IjtzOjY6ImpvaW5tZSI7czo3OiJyZWZl cmVyIjthOjE6e2k6MDtzOjA6IiI7fXM6ODoiYWdlbnRfaWQiO3 M6NDoiNDExMyI7czoxMzoiYWdlbnRfYWNjb3VudCI7czo2OiI0 MTEzXzEiO3M6OToiaWRwcm9kdWN0IjtzOjI6IjE0Ijt9
|