#0 - Jan. 14, 2010, 2:12 p.m.
while searching information about the new armory, I found the following site:
<removed>
It was the first link in google (commercial link) when I searched with the following key words: "wow new armory". The domain name is similar to the what Blizzard uses, however, you should notice that it ends with warcart instead of warcraft... Also, the whois query shows it was purchased on January 7th 2010 and owned by a chinese organisation:
WHOIS information for <removed> :
Domain ID:
Domain Name: <removed>
Created On: 07-Jan-2010 00:00:00
Expiration Date: 07-Jan-2011 00:00:00
Sponsoring Registrar: 'Check Whois' (XIN NET TECHNOLOGY CORPORATION) (XIN NET TECHNOLOGY CORPORATION)
Status: ok
Name Server: ns.xinn%!#!#@#*%**#!***@*#**!####
Name Server: ns.xinnetdns.com
Registrant ID: Unknown
Registrant Name: Unknown
Registrant Organization: Unknown
Registrant Street1: Unknown
Registrant Street2: Unknown
Registrant Street3: Unknown
Registrant City: Unknown
Registrant State/Province: Unknown
Registrant Postal Code: Unknown
Registrant Country: Unknown
Registrant Phone: Unknown
Registrant Fax: Unknown
Registrant Email: Unknown
Admin ID: Unknown
Admin Name: Unknown
Admin Organization: Unknown
Admin Street1: Unknown
Admin Street2: Unknown
Admin Street3: Unknown
Admin City: Unknown
Admin State: Unknown
Admin Postal Code: Unknown
Admin Country: Unknown
Admin Phone: Unknown
Admin Fax: Unknown
Admin Email: Unknown
I suspect this is a new scam to harvest usernames/passwords since when you enter a character name, it forwards you to a replica of the login page used by battle.Net.
