Black Raven Dragoons

[Elade]

Hey guys, I know most of you haven't been on GW2 in a while, but when I last logged on I got this mail message. I dunno if any of you will be logging in for the latest stuff today, but be on the lookout for this or similar mail messages. Arenanet as far as I know has confirmed them as phishing scams. Lovely.

[Grimblast]

What's even worse is someone out there isn't going to read that little note at the bottom and fall for the link provided. The link in itself is very suspicious in its own right.

[Zancarius]

First time I've seen the .xyz TLD. Apparently it's owned by xyz.com. Go figure.

Also, the offenders are Chinese. Surprising? Probably not:

Code: Select all

$ whois -h whois.nic.xyz 8llw42-pw2jr.xyz
Domain Name: 8LLW42-PW2JR.XYZ
Domain ID: CNIC-DO6771200
WHOIS Server: whois.west263.com
Referral URL: http://www.west.cn
Updated Date:
Creation Date: 2015-01-09T10:12:31.0Z
Registry Expiry Date: 2016-01-09T23:59:59.0Z
Sponsoring Registrar: CHENGDU WEST DIMENSION DIGITAL TECHNOLOGY CO., LTD.
Sponsoring Registrar IANA ID: 1556
Domain Status: serverTransferProhibited
Domain Status: addPeriod
Registrant ID: 1556-967124-d-01
Registrant Name: jiang hao
Registrant Organization: jiang hao
Registrant Street: taipingqu ziyanxiaoqu
Registrant City: shenyang
Registrant State/Province: Liaoning
Registrant Postal Code: 512000
Registrant Country: CN
Registrant Phone: +86.1052416215
Registrant Phone Ext:
Registrant Fax: +86.1052416215
Registrant Fax Ext:
Registrant Email: badomain@qq.com
Admin ID: 1556-967124-a-01
Admin Name: jianghao jianghao
Admin Organization: jianghao jianghao
Admin Street: taipingqu ziyanxiaoqu
Admin City: shenyang
Admin State/Province: Liaoning
Admin Postal Code: 512000
Admin Country: CN
Admin Phone: +86.1052416215
Admin Phone Ext:
Admin Fax: +86.1052416215
Admin Fax Ext:
Admin Email: badomain@qq.com
Tech ID: 1556-967124-t-01
Tech Name: jianghao jianghao
Tech Organization: jianghao jianghao
Tech Street: taipingqu ziyanxiaoqu
Tech City: shenyang
Tech State/Province: Liaoning
Tech Postal Code: 512000
Tech Country: CN
Tech Phone: +86.1052416215
Tech Phone Ext:
Tech Fax: +86.1052416215
Tech Fax Ext:
Tech Email: badomain@qq.com
Name Server: F1G1NS1.DNSPOD.NET
Name Server: F1G1NS2.DNSPOD.NET
DNSSEC: unsigned
Billing ID: 1556-967124-b-01
Billing Name: jianghao jianghao
Billing Organization: jianghao jianghao
Billing Street: taipingqu ziyanxiaoqu
Billing City: shenyang
Billing State/Province: Liaoning
Billing Postal Code: 512000
Billing Country: CN
Billing Phone: +86.1052416215
Billing Phone Ext:
Billing Fax: +86.1052416215
Billing Fax Ext:
Billing Email: badomain@qq.com
>>> Last update of WHOIS database: 2015-01-13T18:18:56.0Z <<<


[Elade]

Both the weird address and note at the bottom tipped me off. I'm just surprised they had decent grammar.