Wow armory scam

#0 - Jan. 14, 2010, 2:12 p.m.
Blizzard Post
Hi,

while searching information about the new armory, I found the following site:

<removed>

It was the first link in google (commercial link) when I searched with the following key words: "wow new armory". The domain name is similar to the what Blizzard uses, however, you should notice that it ends with warcart instead of warcraft... Also, the whois query shows it was purchased on January 7th 2010 and owned by a chinese organisation:

WHOIS information for <removed> :

Domain ID:
Domain Name: <removed>
Created On: 07-Jan-2010 00:00:00
Expiration Date: 07-Jan-2011 00:00:00
Sponsoring Registrar: 'Check Whois' (XIN NET TECHNOLOGY CORPORATION) (XIN NET TECHNOLOGY CORPORATION)
Status: ok
Name Server: ns.xinn%!#!#@#*%**#!***@*#**!####
Name Server: ns.xinnetdns.com
Registrant ID: Unknown
Registrant Name: Unknown
Registrant Organization: Unknown
Registrant Street1: Unknown
Registrant Street2: Unknown
Registrant Street3: Unknown
Registrant City: Unknown
Registrant State/Province: Unknown
Registrant Postal Code: Unknown
Registrant Country: Unknown
Registrant Phone: Unknown
Registrant Fax: Unknown
Registrant Email: Unknown
Admin ID: Unknown
Admin Name: Unknown
Admin Organization: Unknown
Admin Street1: Unknown
Admin Street2: Unknown
Admin Street3: Unknown
Admin City: Unknown
Admin State: Unknown
Admin Postal Code: Unknown
Admin Country: Unknown
Admin Phone: Unknown
Admin Fax: Unknown
Admin Email: Unknown

I suspect this is a new scam to harvest usernames/passwords since when you enter a character name, it forwards you to a replica of the login page used by battle.Net.

#3 - Jan. 14, 2010, 2:42 p.m.
Blizzard Post
The following response was written by one of our new teammates. Because they are still in training and do not yet possess a forum account of their own, they shall be posting via proxy through me.

Good job spotting the phony site Anubia! Thanks for following Keriam’s advice and removing the malicious link from your post. If you would, please forward this information to [email protected] so they can look into the situation further.