The way you mentioned is one of well-known scam tricks where they do it to delude newbies that they get alt of coins *by updating site database* and then exploit them greed by asking for sending a little to earn a lot.
You need more evidence to prove your accusation.
To make your claim much acceptable please make all these website links clickable first. Maybe by mistake you put an extra gap on each link between TLDs (.com, .io, .uk, .ltd ) and domain name.
I think he did this intentionally to prevent people from clicking on those links because scam sites may contain a lot of viruses and other things.