Job Scam: Global Austrian Syndicate (gas-ltd.info)

The Global Austrian Syndicate job scammers have reincarnated again: at last report, they were "gas-limited.com"; now they're "gas-ltd.info". They've also started sending their spam as plain text! What's up guys? Too many people blocking on image attachments? Whatever the case, the job remains the same: send stolen money overseas via wire transfer service until the police arrest you for it.

At the time of writing, the one nameserver for the domain which was responding (at 207.210.93.181) gave the following answer to an address query.

; <<>> DiG 9.3.1 <<>> A gas-ltd.info @207.210.93.181
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48651
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;gas-ltd.info.                  IN      A

;; ANSWER SECTION:
gas-ltd.info.           1800    IN      A       172.184.3.151
gas-ltd.info.           1800    IN      A       172.210.81.133
gas-ltd.info.           1800    IN      A       213.103.251.238
gas-ltd.info.           1800    IN      A       64.53.175.197
gas-ltd.info.           1800    IN      A       84.58.57.238

;; AUTHORITY SECTION:
gas-ltd.info.           1800    IN      NS      ns2.get-site.com.
gas-ltd.info.           1800    IN      NS      ns1.get-site.com.

;; ADDITIONAL SECTION:
ns1.get-site.com.       1800    IN      A       207.210.93.181
ns2.get-site.com.       1800    IN      A       204.21.41.81

;; Query time: 222 msec
;; SERVER: 207.210.93.181#53(207.210.93.181)
;; WHEN: Thu Jun 29 17:33:40 2006
;; MSG SIZE  rcvd: 190

Reverse DNS lookups on the addresses yield "ACB80397.ipt.aol.com", "ACD25185.ipt.aol.com", "d213-103-251-238.cust.tele2.fr", "d53-64-197-175.nap.wideopenwest.com", and "dslb-084-058-057-238.pools.arcor-ip.net", respectively. Neither of the nameservers yield reverse DNS names: do your own "whois" lookup if you care.

Spam text is copied below, because it is text this time. By the way, they are lying outright when they say, "Your email was given by 3rd party website www.jobs-in-europe.net on our request". The email address to which this was sent appeared as a contact address on a website some years back, and hasn't been used for any other purpose. It's a spamtrap address now: spammers are the only ones still sending anything to it.

Hello

My  name  is  Francois Veillon I  am  the  manager of a  Human Recourses  department of Global Austrian Syndicate (GAS).
I’d like  to  offer a perfect vacancy for  you. The vacancy  of  a  Financial  manager  working  with  private  individuals.

  Let  me give you  some facts about  our  company first:
    Global  Austrian Syndicate (GAS) was registered back  in  1993.  The primary  focus of  Global  Austrian  Syndicate is international finance services, mainly  through the  Internet  and  other  communicative channels.  The  corporation is  interested  in  working  on the markets of all  countries without  exceptions and sees promotion of  its  services  through the  network of representatives (independent investment consultants) working  as private  individuals or  resident company employees as most  effective.  We also provide  a full range of  financial  services to  companies  and  to individuals  as well.  Additionally, we grant  credits to individuals  and companies on  the  international  level,  and  this list of  our  services  and opportunities is far from being complete.

  So today,  we  are glad to  offer you  to:
  - become  a  part of  our  company
    -  join  a team of highly  qualified specialists
- get  a prestigious part  time job
  - earn a real fortune

The main  advantages  of working as  a  Financial manager  dealing with private individuals are:

    -  You  don’t need any experience  or specific  knowledge
    -  You don’t need to  make  any advance payments
  -  This job  won’t take much of your  time.

  Your  range of duties will include:
- Receiving  payments  for the ordered stocks and bonds  from  the Global  Austrian  Syndicate  clients  (private individuals) to your bank  account
-  Withdrawing the funds and  transferring  them  further to our brokers  in one of  the countries  where the  desirable stocks  and  bonds  should  be  bought

The  transfer should  be  done  by the means of Western Union  or  Money Gram services  to fasten  the  process  of the  delivery of  the  funds.
Your SALARY  is  8%  commission  out  of  every  deposit  that you receive  to  your bank  account.

If you are  interested in  this job and would like to  get more information,  you  are welcome to  visit our website:

  http://gas-ltd.info/html/index.php?sect_id=5

  Or  you can just  write an  email to us,  and our managers  will  give a prompt  and  competent  reply.

  We  are  looking forward  to  working  with  you!
Your  email was  given by 3rd party website www.jobs-in-europe.net on  our request, as  you or someone  else subscribed  to  a job opportunities newsletter.
    I apologize if this  email reached you  by  mistake.  In  that  case,  please be so  kind to  delete  it.

    Yours faithfully Francois Veillon