Battle.Net / WOW Phish domains

I don't play World of Warcraft of Starcraft..but lots of people do and Blizzard accounts (used for playing the game online) are often a target for phishers. Why? Well, these accounts can be resold and are worth real money.

This post at the Sunbelt software blog caught my eye.. but knowing that fake WOW / Blizzard sites don't tend to travel alone I did some digging and came up with a whole batch of them on neighbouring IPs.

58.64.158.233
Ba11ile.net
Baititle.net
Eu-batile.net
Eu-battlie.net

58.64.158.238
Barittle.net
Bartiile.net
Bartlie.net
Bartllie.net
Barttirle.net
Barttle.net
Blizzte.net
Eu-de-battle.net
Bliizte.net
Blrttle.net
Battrlie.net
Bartzle.net
Battiale.net
Barttlie.net

58.64.158.240
Usbatt1ee.net

58.64.158.244
De-bartle.net

Registrant details are:

  Name           : Ji XiaoWei
  Organization   : Ji XiaoWei
  Address        : LiShui Dengtalu 25
  City           : LiShui
  Province/State : Zhejiang
  Country        : CN
  Postal Code    : 323700
  Phone Number   : 86-0578-7245132
  Fax            : 86-0578-7245132
  Email          : qnpv@163.com

These are all fake, so avoid

CurrencyVendor.com: can you trust it?

Another doubtful World of Warcraft site is currencyvendor.com hosted on the same server as these other WoW scam sites.

Does it look trustworthy? Well, no. It's hosted by YoHost.org on the same server as a load of WoW scams sites, phishing sites, fake internet companies, bogus pharmacies and all sorts of other things. The domain was set up a few days ago, and is hosted on an anonymous server with anonymous contact details. Given the very high number of scam sites on this server, the lack of history and the anonymous contact details we would strongly recommend that extreme caution be taken if dealing with this site.


Update: the people behind CurrencyVendor.com deny that it is a scam, but acknowledge that their web host does host scam sites. They also decline to identify themselves. Draw your own conclusions, but as a general rule doing business with someone who refuses to identity themselves is a bad idea.

Some "World of Warcraft" Scam sites

I don't play WoW myself, but there are a whole bunch of bad guys out there trying to rip off player accounts for money. Here are some recent domains hosted at scam-friendly YoHost.org that you should avoid.. if you HAVE entered your password into one of these sites, then change it NOW.

• Blizzard-battle.net
• Blizzard-promotion.com
• Promotions-battle.net
• Promotions-worldofwarcraft.com
• Worldotwarcaft.net
• Wowmovieteaser.com
• Wowtcgpromotion.com