[nsp-sec] Working from home by hosting from home?

[David Freedman]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


I received the following amusing piece of scam in my inbox this morning.

What I did find interesting is that the recruitment company they
have ripped off (http://www.nesco-online.eu , ripping off
http://www.nescodirect.com) with the advert
enticing you to "work from home" actually seems to be hosted
from home!

Non-authoritative answer:
Name:   www.nesco-online.eu
Address: 71.226.201.209
Name:   www.nesco-online.eu
Address: 24.34.17.210
Name:   www.nesco-online.eu
Address: 98.26.58.210

33287   | 71.226.201.209   | DNEO-OSP4 - Comcast Cable Communications, Inc.
7015    | 24.34.17.210     | CCCH-AS2 - Comcast Cable Communications
Holdings, Inc
11426   | 98.26.58.210     | SCRR-11426 - Road Runner HoldCo LLC


CC'd to nsp-leo-security on the oft-chance that there are indeed
perpetrators directly behind these access lines as opposed to simply
compromised PCs

Google: note the use of the GMail drop-box

Have found some additional comments on this here:

http://www.matchent.com/wpress/?q=node/392

- --
David Freedman
Group Network Engineering
Claranet Limited
http://www.clara.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFI3Qi8tFWeqpgEZrIRAkzVAKCx5qGT6uvoLd1hfL+/kMmBEDCU4wCfZl/J
hNOpvHhckS7E2I0Qqf7GH2g=
=YC+W
-----END PGP SIGNATURE-----
-------------- next part --------------
An embedded message was scrubbed...
From: "Tim Duncan" <hburst at gph.com>
Subject: [Networks] Vacancy for you.
Date: Fri, 26 Sep 2008 15:48:54 +0300
Size: 5284
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20080926/277d4d32/attachment-0001.eml>