|
Help needed researching a spoofer.
http://zonicenter.com.paragorn.biz/index.htm?Norma
http://yours.com.paragorn.biz/index.htm?Hunter Can anyone get to any of the links? We need the landing, full html and source, sponsor links, screenshots, exit's, etc. and the url does not load here for us. Why? Because we have 1000's of bounces from the mailer who is utilizing that link and the random subdomains and extensions he appends to it as well. Sources of info who wish to remain anonymous please email or anon-post whatever you have. legal @ xpays .com will work for emailed info. Thanks in advance! |
http://yours.com.paragorn.biz/index.htm?Hunter is
[html] <HTML><HEAD><TITLE>Ladies Tricks - "Boys being trapped and fucked up!"</TITLE> <LINK href="main.files/style.css" type=text/css rel=stylesheet> <META http-equiv=Content-Type content="text/html; charset=windows-1251"> <META content="MSHTML 6.00.2800.1400" name=GENERATOR></HEAD> <BODY leftMargin=0 background=main.files/bg_01.gif topMargin=0 marginheight="0" marginwidth="0"> <TABLE height="100%" cellSpacing=0 cellPadding=0 width=900 align=center border=0> <TBODY> <TR> <TD vAlign=top width=900 background=main.files/bg_06.jpg height="100%"><!--<table width="900" height="100%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td width="900" height="100%" valign="top" background="images/bg_06.jpg">--> <TABLE cellSpacing=0 cellPadding=0 width=900 border=0> <TBODY> <TR> <TD width=438 height=93><IMG height=93 src="main.files/ind_01.jpg" width=438></TD> <TD vAlign=top> <OBJECT codeBase=http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,29,0 height=93 width=462 classid=clsid:D27CDB6E-AE6D-11cf-96B8-444553540000><PARAM NAME="movie" VALUE="index_flash.swf"><PARAM NAME="QUALITY" VALUE="high"> <embed src="index_flash.swf" width="462" height="93" quality="high" pluginspage="http://www.macromedia.com/go/getflashplayer" type="application/x-shockwave-flash"></embed> </OBJECT></TD></TR></TBODY></TABLE> <TABLE cellSpacing=0 cellPadding=0 width=900 border=0> <TBODY> <TR> <TD vAlign=top><IMG height=175 src="main.files/ind_03.jpg" width=301><BR><IMG height=189 src="main.files/ind_05.jpg" width=301></TD> <TD width=599 height=364><IMG height=364 src="main.files/ind_04.jpg" width=599></TD></TR></TBODY></TABLE><IMG height=35 src="main.files/ind_06.jpg" width=226><A onclick=exit=false href="http://lt-s.royal-clubs.com/members"><IMG height=35 alt=members src="main.files/ind_07.jpg" width=129 border=0></A><IMG height=35 src="main.files/ind_08.jpg" width=40><A onclick=exit=false href="join_ps.html"><IMG height=35 alt="instant access" src="main.files/ind_butt.gif" width=224 border=0></A><IMG height=35 src="main.files/ind_10.jpg" width=38><A onclick=exit=false href="tour1_ps.html"><IMG height=35 alt="next trick" src="main.files/ind_11.jpg" width=157 border=0></A><IMG height=35 src="main.files/ind_12.jpg" width=86><BR><IMG height=168 src="main.files/ind_13.jpg" width=206><IMG height=168 src="main.files/ind_14.jpg" width=451><IMG height=168 src="main.files/ind_15.jpg" width=243><BR> <TABLE cellSpacing=0 cellPadding=0 width=900 border=0> <TBODY> <TR> <TD vAlign=top width=511><IMG height=162 src="main.files/ind_16.gif" width=64><IMG height=162 src="main.files/ind_17.gif" width=277> <OBJECT codeBase=http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,29,0 height=162 width=170 classid=clsid:D27CDB6E-AE6D-11cf-96B8-444553540000><PARAM NAME="movie" VALUE="swf/index_v1.swf"><PARAM NAME="quality" VALUE="high"> <embed src="swf/index_v1.swf" quality=high pluginspage="http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash" type="application/x-shockwave-flash" width="170" height="162"></embed></OBJECT></TD> <TD vAlign=top><IMG height=116 src="main.files/ind_19.jpg" width=367><BR><A onclick=exit=false href="tour1_ps.html"><IMG height=46 alt="continue tour" src="main.files/ind_21.jpg" width=248 border=0></A><IMG height=46 src="main.files/ind_22.jpg" width=114></TD></TR></TBODY></TABLE><IMG height=114 src="main.files/ind_24.jpg" width=265><IMG height=114 src="main.files/ind_25.jpg" width=426><IMG height=114 src="main.files/ind_26.jpg" width=182><BR><IMG height=83 src="main.files/ind_27.jpg" width=873><BR> <TABLE cellSpacing=0 cellPadding=0 width=860 border=0> <TBODY> <TR> <TD vAlign=top width=402><IMG height=112 src="main.files/ind_28.jpg" width=402><BR><IMG height=40 src="main.files/ind_32.jpg" width=149><A onclick=exit=false href="tour1_ps.html"><IMG height=40 alt="continue tour" src="main.files/ind_33.jpg" width=253 border=0></A></TD> <TD height=152> <OBJECT codeBase=http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,29,0 height=152 width=171 classid=clsid:D27CDB6E-AE6D-11cf-96B8-444553540000><PARAM NAME="movie" VALUE="swf/index_v2.swf"><PARAM NAME="quality" VALUE="high"> <embed src="swf/index_v2.swf" quality=high pluginspage="http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash" type="application/x-shockwave-flash" width="171" height="152"></embed></OBJECT><IMG height=152 src="main.files/ind_30.gif" width=287></TD></TR></TBODY></TABLE><IMG height=67 src="main.files/ind_34.gif" width=527><A onclick=exit=false href="tour1_ps.html"><IMG height=67 alt="continue free tour" src="main.files/ind_35.gif" width=333 border=0></A> <!-- <div align="center" class="copycolor"><br> <br><br><br> <a href="http://lt-s.royal-clubs.com/members" id="links" onClick='exit=false' >MEMBERS ZONE</a> | <a onClick=exit=false href="http://royal-clubs.com/cancel_rebill.php" id="links">CANCEL REBILLING</a> | <a onClick=exit=false href="http://royal-clubs.com/cancel_rebill.php" id="links">CUSTOMER SERVICE</a> | <a onClick=exit=false href="terms.html" id="links">TERMS OF SERVICE</a> | <a href="privacy.html" id="links" onClick="exit=false">PRIVACY POLICY<br> </a><br> <b>Warning:</b> This site contains hardcore XXX material. If you are under 18 years of age or if it is illegal to view adult material in your community, <a href="http://google.com" id="links" onClick="exit=false">please leave now</a>.<br><br><br> All models were at least 18 years old when they were photographed. The site is in full compliance with 18 USC Section 2257. Actual production dates for images & videos are contained in the records maintained pursuant to 18 USC Section 2257.</span> <a onClick=exit=false href="c_records.html" id="links">Custodian of Records.</a><br><br><br> </tr> </table> --> <DIV class=copycolor align=center><BR><BR><BR><A id=links onclick=exit=false href="http://lt-s.royal-clubs.com/members">MEMBERS ZONE</A> | <A id=links onclick=exit=false href="http://royal-clubs.com/cancel_rebill.php">CANCEL REBILLING</A> | <A id=links onclick=exit=false href="http://royal-clubs.com/cancel_rebill.php">CUSTOMER SERVICE</A> | <A id=links onclick=exit=false href="terms.html">TERMS OF SERVICE</A> | <A id=links onclick=exit=false href="privacy.html">PRIVACY POLICY<BR></A><BR><B>Warning:</B> This site contains hardcore XXX material. If you are under 18 years of age or if it is illegal to view adult material in your community, <A id=links onclick=exit=false href="http://google.com/">please leave now</A>.<BR><BR><BR>All models were at least 18 years old when they were photographed. The site is in full compliance with 18 USC Section 2257. Actual production dates for images & videos are contained in the records maintained pursuant to 18 USC Section 2257.</SPAN> <A id=links onclick=exit=false href="c_records.html">Custodian of Records.</A><BR> </DIV></TD></TR></TBODY></TABLE></BODY></HTML> [/html] |
royal-club.com both pages
|
Quote:
Who is royal-clubs? besides: Registrant: RoyalCash AG (MXPIVHKFFD) Jhorgens 15, Galaxy Ctr, 513G Amsterdam, XX 3266 NL Domain Name: ROYAL-CLUBS.COM Administrative Contact: Delvoye, Serge (35754661P) [email protected] S&S Royal Limited Suit 606, 1220 N. Market st. Wilmington, DE 19801 US +448701335116 fax: +448701335116 Technical Contact: Network Solutions, LLC. (HOST-ORG) [email protected] 13200 Woodland Park Drive Herndon, VA 20171-3025 US 1-888-642-9675 fax: 571-434-4620 Record expires on 26-Aug-2005. Record created on 26-Aug-2003. Database last updated on 15-Mar-2005 22:03:56 EST. Domain servers in listed order: NS1.ROYAL-CASH.COM 209.66.123.12 NS2.ROYAL-CASH.COM 207.44.248.50 |
stiffycash, makefuckingmoney and several others all have this same gang sending simultaneously btw.
no remove, no wrapper, spoofing my domains and others. |
|
» You are not logged in. Login or Register Adult Webmasters Forum » Profile for RC Support
View Recent Posts | Send New Private Message Profile for RC Support Member Status: Junior Member Member Number: 370 Registered: 16 June 2004 Posts: 4 Email Address: [email protected] ICQ ID: 68503138 Contact Us | Links to sites of our members |
They just made a program announcement via greenguys
http://www.greenguyandjim.com/announ...royalcash.html |
the ther persons name is angel
|
|
the spoofer has multiple setups.
one setup is for fucking people and sending super filthy mail for little financial benefit. one setup is for filthy mail the spoofer can collect money more easily on. we have confirmed a connection between his royal-scam and some less spoofy mail to a north american sponsor with separate accounts and payables btw. the trail is hot. |
besides the bounces we get- we have a lot seeds on their lists. spread out over a lot of domains no less. plenty of data..
smokey- can i email you some stuff? |
smokey_the_bearz
at lycos.com |
http://www.gofuckyourself.com/showthread.php?t=444472
royal cash asking about dollars.com today |
I'm a little confused, what is this guy doing? The urls posted all timed out for me so I can't really see what he's doing.
WG |
Quote:
thanks in advance |
Quote:
see sample: |------------------------- Failed addresses follow: ---------------------| <[email protected]> unknown user / Teilnehmer existiert nicht |------------------------- Message text follows: ------------------------| Received: from 61-218-248-90.HINET-IP.hinet.net ([211.20.183.166]) by mailin17.sul.t-online.de with smtp id 1DBOpt-1Woqae0; Wed, 16 Mar 2005 04:04:41 +0100 Received: from ([61.218.248.90]) by higp6.gatelock.com.tw with ISVW_SMTP 3.51.1031(7.000-1011,2.496.00) id 31779F9BAC338058C3C6E26C7F91E5C72A0DF08614E5459782 705262773; Wed, 16 Mar 2005 10:57:56 +0800 Received: from [192.147.180.126] (port=1474 helo=[Brandie]) by 61-218-248-90.HINET-IP.hinet.net with esmtp id 5682864062Vincent42513 for [email protected]; Wed, 16 Mar 2005 11:05:16 +0800 Date: Wed, 16 Mar 2005 11:05:15 +0800 From: Reina <[email protected]> X-Mailer: SecureBat! Lite (v2.12.4) X-Priority: 3 (Normal) Message-ID: <[email protected]> To: [email protected] Subject: What's up, then? MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit Hey! Long-legged Jasmin and Royce met at the bar, soon found themselves in the bed. after a hot and outrageous fuck, tim young man was very surprised to find hudge dildo stick into his ass! Wanna see it? http://zonicenter.com.paragorn.biz/index.htm?Norma P.S.: The most dififcult chracater in cmeody is that of the fool, and he must be no smipetlon that palys that part. |
that spam i posted is his dirty setup for fucking people
he has another setup for making money a little more straightforwardly where he spoofs everyone but us. |
:1orglaugh
the "reina" in the sender field is kind of funny. that is the last name of our attorney at paul cambria's firm. this helps to shed some light. btw, only 1 company/guy has heard from our "reina" recently- very recently. anyway - the trail is hot |
it is a gang effort though- whistle blowers email legal @ xpays
cash rewards for inside info regarding the gang members information starting at $1000.00. i am talking firsthand knowledge of not necessarily publicly available information that is usable for us. but would be delighted to send that wire.. |
Good luck Columbo.
:pimp |
If I ever need to find someone, I'm getting Smokey on the case :)
|
Quote:
|
This is one of those moments where I really love SMokey.
Your bad ass! |
Didn't you say in another thread you had a lawyer who'd dig up this info for you REAL CHEAP ?
|
Quote:
|
and i doubt in this outbreak it will help
|
well good luck, fuck 'em up good. email spoofers deserve anything you throw at 'em
|
Quote:
|
| All times are GMT -7. The time now is 11:30 AM. |
Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
©2000-, AI Media Network Inc123