More Phishing 3

And I just got another one. This ine again for WOW and again the link dont correspond to the text, but a bit more devious. The way it written might fooled somone to belive that its right. But again – why would Blizzard not use the real domain.

Here is the mail:

Greetings!

In order to make our servers more efficient, we are taking the time to remove inactive accounts. We are mass mailing all email addresses registered to World of Warcraft accounts to target those that are inactive. If you are currently active in the World of Warcraft, or plan on picking up where you left off the in the future, please continue reading. If you do not foresee yourself ever rejoining us, please disregard this message.

Please take a moment and login to your Battle.net (http://www.battle.net-wownotice.com/login/en/login.asp?ref=https%3A%2F%2Fus.battle.net%2Faccount%2Fmanagement%2Fbeta-profile.xml&app=bam) Account to verify and maintain your enjoyable gameplay experience.

Be sure to tell all of your friends and guildmates to check their email, as we want to make sure all active accounts remain playable.

Thank you for your time and attention to this matter, and your continued interest in World of Warcraft.

Sincerely,

Account Administration
Blizzard Entertainment

And the whois information shows thats its a domain registered yesturday. In china again.

Domain Name: NET-WOWNOTICE.COM
Registrar: HICHINA ZHICHENG TECHNOLOGY LTD.
Whois Server: grs.hichina.com
Referral URL: http://www.net.cn
Name Server: DNS23.HICHINA.COM
Name Server: DNS24.HICHINA.COM
Status: ok
Updated Date: 29-aug-2010
Creation Date: 29-aug-2010
Expiration Date: 29-aug-2011

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.Domain Name ………………… net-wownotice.com
Name Server ………………… dns23.hichina.com
dns24.hichina.com
Registrant ID ………………. hc198068734-cn
Registrant Name …………….. zhou hai
Registrant Organization ……… zhou hai hua
Registrant Address ………….. henansheng zhengzhoushi
Registrant City …………….. zhengzhou
Registrant Province/State ……. HA
Registrant Postal Code ………. 231564
Registrant Country Code ……… CN
Registrant Phone Number ……… +86.037165862108 –
Registrant Fax ……………… +86.037165862108 –
Registrant Email ……………. nnn12345@qq.com
Administrative ID …………… hc198068734-cn
Administrative Name …………. zhou hai
Administrative Organization ….. zhou hai hua
Administrative Address ………. henansheng zhengzhoushi
Administrative City …………. zhengzhou
Administrative Province/State … HA
Administrative Postal Code …… 231564
Administrative Country Code ….. CN
Administrative Phone Number ….. +86.037165862108 –
Administrative Fax ………….. +86.037165862108 –
Administrative Email ………… nnn12345@qq.com
Billing ID …………………. hc198068734-cn
Billing Name ……………….. zhou hai
Billing Organization ………… zhou hai hua
Billing Address …………….. henansheng zhengzhoushi
Billing City ……………….. zhengzhou
Billing Province/State ………. HA
Billing Postal Code …………. 231564
Billing Country Code ………… CN
Billing Phone Number ………… +86.037165862108 –
Billing Fax ………………… +86.037165862108 –
Billing Email ………………. nnn12345@qq.com
Technical ID ……………….. hc198068734-cn
Technical Name ……………… zhou hai
Technical Organization ………. zhou hai hua
Technical Address …………… henansheng zhengzhoushi
Technical City ……………… zhengzhou
Technical Province/State …….. HA
Technical Postal Code ……….. 231564
Technical Country Code ………. CN
Technical Phone Number ………. +86.037165862108 –
Technical Fax ………………. +86.037165862108 –
Technical Email …………….. nnn12345@qq.com
Expiration Date …………….. 2011-08-29 05:35:40

Its a bit sad to see that all this comes from china but apparently the phishing attempts has a great day over there.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.