Scam Tip Report #9321 - SEO Scammer poses as Volunteer Teacher for At Risk Youth - Scams for Links


Scam ReporterScam Tips Received
Anonymous
Somewhere in United States
2013-04-23 23:40:16
Charity scam
SEO Scammer poses as Volunteer Teacher for At Risk Youth - Scams for Links 
 Scammer
  Information
Name:
Adriana Michaels
Email Address:
Adrianam@pathwaytoempowerment.com
Scam Website:
Scammer pretends to be a volunteer teacher for an organization helping \"at risk\" youth. They target sites running good old \"links\" pages. Tells a story asking for a link to a payload site on behalf of an enthusiastic child named \"Christian\" who will get a pizza or ice cream party if you include a link. The area of interest the class is \"researching\" is changed to suit the site they are trying to get links from.

The fake P2E \"Pathways to Empowerment\" scam site at http://www.pathwaytoempowerment.com has no contact information listed, which should be your first clue. Domain owner his hidden through privacy blocks but their ISP resides in the UK (see below for domain info).

The person, likely a disreputable Search Engine Optimization company or individual, carried the scam far enough to volley emails back and forth in order to win confidence of the target victim, and get links to their \"money\" sites. At least two of the sites the scammer is trying to promote are here:

http://www.psprint.com/resources/historic-printing/

Registrant:
Deluxe Enterprise Operations Inc.
Jim Glockner
3660 Victoria St North
Shoreview, MN 55126
US
Phone: +1.6517871832
Email: hostmaster@deluxe.com


Domain Name: psprint.com

Administrative Contact:
Deluxe Enterprise Operations Inc.
Jim Glockner
3660 Victoria St North
Shoreview, MN 55126
US
Phone: +1.6517871832
Email: hostmaster@deluxe.com


Technical Contact:
Deluxe Enterprise Operations Inc.
Akmal Zeb
3660 Victoria St North
Shoreview, MN 55126
US
Phone: +1.6514908081
Email: hostmaster@deluxe.com


Registrar of Record:
Hostopia.com Inc. d/b/a Aplus.net, www.aplus.net
Record last updated on 2012-04-26
Record expires on 2014-03-01
Record created on 1997-02-28

Domain servers in listed order:
ns1.fastmetrics.com
ns5.fastmetrics.com
ns2.fastmetrics.com

http://www.onlineloancalculator.org/resources/home-and-garden-calculators.php

The owner of the domain www.onlineloancalculator.org is hidden through private registration.


The owners of these domains should be aware their SEO company is deceiving others to get links, which is NOT how quality, reputable Search Engine ranking is attained. Quite the opposite. The site owners will likely see a drastic drop in traffic before too long thanks to the scammer they\'ve hired to \"help\" them succeed.

Owner of the IP block used by the scammer:

> dig pathwaytoempowerment.com

; <<>> DiG 9.6.-ESV-R3 <<>> pathwaytoempowerment.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52897
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 5, ADDITIONAL: 5

;; QUESTION SECTION:
;pathwaytoempowerment.com. IN A

;; ANSWER SECTION:
pathwaytoempowerment.com. 1381 IN A 46.20.235.51

;; AUTHORITY SECTION:
pathwaytoempowerment.com. 746 IN NS dns1.name-services.com.
pathwaytoempowerment.com. 746 IN NS dns5.name-services.com.
pathwaytoempowerment.com. 746 IN NS dns3.name-services.com.
pathwaytoempowerment.com. 746 IN NS dns2.name-services.com.
pathwaytoempowerment.com. 746 IN NS dns4.name-services.com.

;; ADDITIONAL SECTION:
dns1.name-services.com. 107 IN A 98.124.192.1
dns2.name-services.com. 108 IN A 98.124.197.1
dns3.name-services.com. 108 IN A 98.124.193.1
dns4.name-services.com. 107 IN A 98.124.194.1
dns5.name-services.com. 107 IN A 98.124.196.1


> whois 46.20.235.51
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=46.20.235.51?showDetails=true&showARIN=false&ext=netref2
#

NetRange: 46.0.0.0 - 46.255.255.255
CIDR: 46.0.0.0/8
OriginAS:
NetName: 46-RIPE
NetHandle: NET-46-0-0-0-0
Parent:
NetType: Allocated to RIPE NCC
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate: 2009-09-29
Updated: 2009-09-30
Ref: http://whois.arin.net/rest/net/NET-46-0-0-0-0

OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/RIPE

ReferralServer: whois://whois.ripe.net:43

OrgAbuseHandle: RNO29-ARIN
OrgAbuseName: RIPE NCC Operations
OrgAbusePhone: +31 20 535 4444
OrgAbuseEmail: hostmaster@ripe.net
OrgAbuseRef: http://whois.arin.net/rest/poc/RNO29-ARIN

OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: hostmaster@ripe.net
OrgTechRef: http://whois.arin.net/rest/poc/RNO29-ARIN

% Information related to \'46.20.235.0 - 46.20.235.63\'

inetnum: 46.20.235.0 - 46.20.235.63
netname: MELBOURNE-CUST-XAVV
descr: See AS39451 for contact details
country: GB
admin-c: DF1782-RIPE
tech-c: DF1782-RIPE
status: ASSIGNED PA
mnt-by: MNT-MELBOURNE
source: RIPE # Filtered

person: Daniel Foster
address: Melbourne Server Hosting Ltd
address: Turing House
address: Archway
address: Manchester, UK
mnt-by: MNT-MELBOURNE
phone: +44 161 232 0001
nic-hdl: DF1782-RIPE
source: RIPE # Filtered

% Abuse contact for \'46.20.235.0 - 46.20.235.63\' is \'abuse@melbourne.co.uk\'

 Got more information on this Scam/Scammer?
 Problems with this Report? Let us know


Since you’re here …
we have a small favour to ask. More people are visting Scamdex and Scamalot than ever but advertising revenues are falling fast and we have no 'product' to sell. And unlike many informational websites, we haven’t put up a paywall or membership barrier – we want to keep our site as open as we can. So you can see why we need to ask for your help. Scamdex/Scamalot websites takes a lot of time, money and hard work to keep running. We do this because we hate to see our fellow humans getting scammed out of their hard-earned money by low-lives.
Consider switching off your AdBlocker (if you use one) or contributing directly by one of the links below. Thank you for reading!
Ad Blocker Detected
Our website is made possible by displaying online advertisements to our visitors.
Please consider supporting us by disabling your ad blocker.
Thanks!
Scamdex
PING