SEO Scammer poses as Volunteer Teacher for At Risk Youth - Scams for Links - Scamalot

Seen a Scammer? Report Them!

Seen a scammer? Been caught out? Let the world know so they don't get burned. Add information if you see one that's already been logged - scammers move quickly and change details often to avoid detection. Details you log here will be in major search engines within an hour or two.

Please Like, Share, Tweet etc. to spread the word.
Scam Report Type: at  
Scam ReporterScam Tips Received
Anonymous
Phoenix, AZ, United States
2013-04-23 19:40:16
Charity scam
SEO Scammer poses as Volunteer Teacher for At Risk Youth - Scams for LinksEmail Attached
 Scammer
  Information
Name:
   Adriana Michaels
Email Address:
   Adrianam@pathwaytoempowerment.com
Scammer pretends to be a volunteer teacher for an organization helping \"at risk\" youth. They target sites running good old \"links\" pages. Tells a story asking for a link to a payload site on behalf of an enthusiastic child named \"Christian\" who will get a pizza or ice cream party if you include a link. The area of interest the class is \"researching\" is changed to suit the site they are trying to get links from.

The fake P2E \"Pathways to Empowerment\" scam site at http://www.pathwaytoempowerment.com has no contact information listed, which should be your first clue. Domain owner his hidden through privacy blocks but their ISP resides in the UK (see below for domain info).

The person, likely a disreputable Search Engine Optimization company or individual, carried the scam far enough to volley emails back and forth in order to win confidence of the target victim, and get links to their \"money\" sites. At least two of the sites the scammer is trying to promote are here:

http://www.psprint.com/resources/historic-printing/

Registrant:
Deluxe Enterprise Operations Inc.
Jim Glockner
3660 Victoria St North
Shoreview, MN 55126
US
Phone: +1.6517871832
Email: hostmaster@deluxe.com


Domain Name: psprint.com

Administrative Contact:
Deluxe Enterprise Operations Inc.
Jim Glockner
3660 Victoria St North
Shoreview, MN 55126
US
Phone: +1.6517871832
Email: hostmaster@deluxe.com


Technical Contact:
Deluxe Enterprise Operations Inc.
Akmal Zeb
3660 Victoria St North
Shoreview, MN 55126
US
Phone: +1.6514908081
Email: hostmaster@deluxe.com


Registrar of Record:
Hostopia.com Inc. d/b/a Aplus.net, www.aplus.net
Record last updated on 2012-04-26
Record expires on 2014-03-01
Record created on 1997-02-28

Domain servers in listed order:
ns1.fastmetrics.com
ns5.fastmetrics.com
ns2.fastmetrics.com

http://www.onlineloancalculator.org/resources/home-and-garden-calculators.php

The owner of the domain www.onlineloancalculator.org is hidden through private registration.


The owners of these domains should be aware their SEO company is deceiving others to get links, which is NOT how quality, reputable Search Engine ranking is attained. Quite the opposite. The site owners will likely see a drastic drop in traffic before too long thanks to the scammer they\'ve hired to \"help\" them succeed.

Owner of the IP block used by the scammer:

> dig pathwaytoempowerment.com

; <<>> DiG 9.6.-ESV-R3 <<>> pathwaytoempowerment.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52897
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 5, ADDITIONAL: 5

;; QUESTION SECTION:
;pathwaytoempowerment.com. IN A

;; ANSWER SECTION:
pathwaytoempowerment.com. 1381 IN A 46.20.235.51

;; AUTHORITY SECTION:
pathwaytoempowerment.com. 746 IN NS dns1.name-services.com.
pathwaytoempowerment.com. 746 IN NS dns5.name-services.com.
pathwaytoempowerment.com. 746 IN NS dns3.name-services.com.
pathwaytoempowerment.com. 746 IN NS dns2.name-services.com.
pathwaytoempowerment.com. 746 IN NS dns4.name-services.com.

;; ADDITIONAL SECTION:
dns1.name-services.com. 107 IN A 98.124.192.1
dns2.name-services.com. 108 IN A 98.124.197.1
dns3.name-services.com. 108 IN A 98.124.193.1
dns4.name-services.com. 107 IN A 98.124.194.1
dns5.name-services.com. 107 IN A 98.124.196.1


> whois 46.20.235.51
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=46.20.235.51?showDetails=true&showARIN=false&ext=netref2
#

NetRange: 46.0.0.0 - 46.255.255.255
CIDR: 46.0.0.0/8
OriginAS:
NetName: 46-RIPE
NetHandle: NET-46-0-0-0-0
Parent:
NetType: Allocated to RIPE NCC
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate: 2009-09-29
Updated: 2009-09-30
Ref: http://whois.arin.net/rest/net/NET-46-0-0-0-0

OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/RIPE

ReferralServer: whois://whois.ripe.net:43

OrgAbuseHandle: RNO29-ARIN
OrgAbuseName: RIPE NCC Operations
OrgAbusePhone: +31 20 535 4444
OrgAbuseEmail: hostmaster@ripe.net
OrgAbuseRef: http://whois.arin.net/rest/poc/RNO29-ARIN

OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: hostmaster@ripe.net
OrgTechRef: http://whois.arin.net/rest/poc/RNO29-ARIN

% Information related to \'46.20.235.0 - 46.20.235.63\'

inetnum: 46.20.235.0 - 46.20.235.63
netname: MELBOURNE-CUST-XAVV
descr: See AS39451 for contact details
country: GB
admin-c: DF1782-RIPE
tech-c: DF1782-RIPE
status: ASSIGNED PA
mnt-by: MNT-MELBOURNE
source: RIPE # Filtered

person: Daniel Foster
address: Melbourne Server Hosting Ltd
address: Turing House
address: Archway
address: Manchester, UK
mnt-by: MNT-MELBOURNE
phone: +44 161 232 0001
nic-hdl: DF1782-RIPE
source: RIPE # Filtered

% Abuse contact for \'46.20.235.0 - 46.20.235.63\' is \'abuse@melbourne.co.uk\'
 Got more information on this Scam? Add to Report