A fraudster using NameCheap? Who'd a' thunk it!

Just been watching a documentary on Sophie Lancaster, and figured I'd do a quick lookup. We all know that spammers and frausters couldn't give a rats right testicle about where or what they spam, but this got my goat.

Offending site: netcash32.com (162.255.119.250, AS22612 162.255.119.0/24 Namecheap, Inc)

Spammed to;

hxxp://www.radiotimes.com/news/2015-10-11/julie-hesmondhalgh-reveals-what-it-was-like-to-play-the-mother-of-a-murdered-girl-in-black-roses-the-killing-of-sophie-lancaster

Which leads to a bogus news site:

The offending redirectors:

hxxp://webemploments.com/jump.php?bo0522
-> hxxp://click.mvc19.com/home/jump?1=bo0522
--> hxxp://trackinguk2.com
---> hxxp://metricology.com/?a=440&c=1517&s1=UK
----> hxxps://cntrck.com/?a=440&c=1517&s1=UK&ckmguid=4427cedc-004b-4e08-9c59-33846e2be99e
-----> hxxp://jbrotrk.com/?a=24&c=23&s1=440&s2=9993117
------> hxxps://jbrotrk.com/?a=24&c=23&s1=440&s2=9993117&ckmguid=8353ce1d-7b2f-4114-ab41-60bf02d65c54

And the offending final site the above leads to;

-------> hxxp://myinternetsuccesscoach.com/responsive
--------> hxxp://myinternetsuccesscoach.com/responsive/
---------> hxxp://myinternetsuccesscoach.com/exit/exit-new.php


The offending (work from home) fraudsters are not surprisingly, myinternetsuccesscoach.com, and the template, nothing we've not seen before. Only difference is the actual content.

Not surprisingly, I recommend blackholing the entire bleedin lot of them.

As an aside, a quick FYI for the likes of the Radio Times - if you're going to allow comments (especially via the Facebook cesspit), at the very least MODERATE THEM! (other media sites have exactly the same issue).

References:

The Sophie Lancaster Foundation
http://www.sophielancasterfoundation.com/

BBC: Black Rose - The Killing of Sophie Lancaster
http://www.bbc.co.uk/programmes/b00z62b1

BBC: Boys sentenced over Goth murder
http://news.bbc.co.uk/1/hi/7370637.stm