Phishing-Versuche / Gefälschte E-Mails

(Geschlossen)

85, Worgen, Hexenmeister
4155
Hi!

Ich habe gerade entdeckt, dass ich am 17.01.2011
eine Mail zugeschickt bekommen habe, bei der es sich wohl um eine Fälschung handel.
Den Link in der Mail habe ich nicht angeklickt!
Den Header und den Inhalt der Mail stelle ich nachfolgend mal rein und ich würde mich über ein kurzes feadback natürlich freuen.
Die Verlinkungen inerhalb der Mail habe ich hier Fett dargestellt.

Return-Path: <entfernt>
Received: from 127.0.0.1 (EHLO by.org) (81.31.157.77) by mta1059.mail.ukl.yahoo.com with SMTP; Mon, 17 Jan 2011 04:38:40 +0000
Date: Mon, 17 Jan 2011 12:38:23 +0800
From:
"noreply@blizzard.com" <noreply@blizzard.com>
Subject: Battle.net Account - Account Change Notice

"Hello,

This is an automated notification regarding your Battle.net account. Some or all of your contact information was recently modified through the Account Management website.

*** If you made recent account changes, please disregard this automatic notification.


*** If you did NOT make any changes to your account, we recommend you log in to Account Management review your account settings.

If you cannot sign into Account Management using the link above, or if unauthorized changes continue to happen, please contact Blizzard Billing & Account Services for further assistance.

Billing & Account Services can be reached at 1-800-59-BLIZZARD (1-800-592-5499 Mon-Fri, 8AM-8PM Pacific Time) or at billing@blizzard.com.

Account security is solely the responsibility of the accountholder. Please be advised that in the event of a compromised account, Blizzard representatives will typically lock the account. In these cases the Account Administration team will require faxed receipt of ID materials before releasing the account for play.

Regards,

The Battle.net Support Team
Blizzard Entertainment
www.blizzard.com/support
Online Privacy Policy"
Bearbeitet von Tyryndar am 17.06.2011 00:01 MESZ
Hallo Diekmpferin!

ich weiss nicht wie ich eine Frage einstellen kann und deswegen bin ich mal auf antworten gegangen. Ich bekommen seid einiger Zeit emails, die ich nicht verifizieren kann, die sogar als spam bzw pushing eingestellt werden in mein email fach. nun ist die Frage, was ich machen kann gegen solche emails?
Schau dich mal in den Optionen deines E-Mail-Postfachs um, evtl. kannst du bestimmte Absender/Adressen vollständig sperren. Wenn sie aber bereits korrekterweise in den Spamordner sortiert werden, sollte dies auch okay sein, zumal du sämtlichen Spam ja mit 2-3 Klicks löschen kannst. Am besten ist es, du legst dir mehrere E-Mail-Adressen an (eine nur für deinen Battle.net-Account, eine nur für Freunde und Familie, eine für Spam, usw.).


Hallo Nekrolus!

Wie man u. a. am E-Mail-Header erkennen kann, handelt es sich hierbei um eine Fälschung. Mehr dazu hier: http://eu.blizzard.com/support/article.xml?locale=de_DE&articleId=38572

Gruß, Rynundu
Bearbeitet von Rynundu am 29.01.2011 13:26 MEZ
85, Nachtelf, Jäger
9100
WARNUNG!!!!!

Vorhin ingame nen Whisper von einem Angeblichen GM namens Blizzaid bekommen. mit dem hinweis iwelche nicht genehmigte Addons zu benutzen..die ich gar net habe..

Und ich soll mich auf folgende Seite begeben und mein Battle.net acc verifizieren, da der sonst gesperrt würde( Allses in english).
Sämtliche Gildies bekamen im selben moment auch die selbe meldung.

Hier sie seite!!! <entfernt>
Klarer Fall von Phishingversuch meiner meinung nach. Also An ALLE Bitte NICHT EINLOGGEN Dort!!!!!!

Hoffentlich werden solche Leute mal richtig bestraft!!
Bearbeitet von Tesandrie am 15.02.2011 13:41 MEZ
85, Draenei, Todesritter
2100
Hi

jetzt bekomm ich seit 3 tagen immer wieder folgende Mail (hab meine mail addy geschwärzt ;) )

New Request Notification - Change the Login Address

Hello,

Blizzard Entertainment recently received a request to change the e-mail address used to log in to the Battle.net account with the username XXXXXX@XXXXX.de. The e-mail address k***@hotmail.com has been specified as the new username for this Battle.net account. An email has been sent to this new address containing a verification link to complete the change.

Once the new address has been verified, the e-mail address XXXXX@XXXX.de can no longer be used to log in to this Battle.net account or any World of Warcraft accounts merged with this Battle.net account.

If you did not initiate this request, please click here to contact the Blizzard Billing & Account Services team immediately.

Sincerely,
The Battle.net Account Team
Online Privacy Policy

MessageID 8wvinwrwkx7zxrc5bl91y8ya


da ich kein englisch kann hab ich mir den Text über die Googeleübersetzerseite übersetzen lassen.

Hallo,

Blizzard Entertainment hat kürzlich eine Anfrage an die E-Mail-Adresse verwendet, um in den Battle.net-Account mit dem Benutzernamen anmelden XXXXX@XXXXX.de ändern. Die E-Mail-Adresse k *** @ hotmail.com wurde zum neuen Benutzernamen für dieses Battle.net-Account angegeben. Eine Email wurde an diese neue Adresse mit einem Bestätigungs-Link, um die Änderung übermittelt worden.

Sobald die neue Adresse verifiziert wurde, kann die E-Mail-Adresse XXXXX@XXXXX.de nicht mehr verwendet werden, um in dieser Battle.net-Account oder World of Warcraft Accounts mit diesem Battle.net-Account zusammengeführt anzumelden.

Wenn Sie nicht initiieren diese Anfrage, klicken Sie bitte hier, um das Blizzard Billing & Account Services-Team sofort zu kontaktieren.

Mit freundlichen Grüßen,
Der Battle.net-Account-Team
Online-Datenschutz

MessageID svqeb8ose42pneh5g3bdy25o

Der Inhalt kommt mir sehr suspekt vor da ich keine adressänderung vor genomm hab. Wird hier versucht mein Account zu stehlen? als absender steht immer noreply@blizzard.com

hab nix angeklickt, aber verunsichern tut mich die mail schon. da sie immer wieder kommt.
Früher hatte man einfach nen nick frei erfunden aber mit diesen ollen addy is gleich benutzername das ist voll kappes.
Hoffe da kommt nich noch was nach.

cucu
85, Gnom, Hexenmeisterin
2395
Hallo meine lieben habe auch eine nette e-mail bekommen wo sie doch glatt wissen wollten was ich für einen autenticator benutze von dieser e-mail adresse "wowgm" <wowgm@blizzard.com> ich hoffe ich kann hiermit ein paar netten gutgläubigen seelen helfen nicht drauf reinzufallen

lg eure Nîsha die mächtigste hexe aller zeiten :-p
43, Worgen, Jägerin
190
Return-Path: <entfernt>
Delivered-To: GMX delivery to
Received: (qmail invoked by alias); 07 Feb 2011 00:22:11 -0000
Received: from nm19.bullet.mail.ne1.yahoo.com (HELO nm19.bullet.mail.ne1.yahoo.com) [98.138.90.82]
by mx0.gmx.net (mx014) with SMTP; 07 Feb 2011 01:22:11 +0100
Received: from [98.138.90.49] by nm19.bullet.mail.ne1.yahoo.com with NNFMP; 07 Feb 2011 00:22:10 -0000
Received: from [98.138.84.45] by tm2.bullet.mail.ne1.yahoo.com with NNFMP; 07 Feb 2011 00:22:10 -0000
Received: from [127.0.0.1] by smtp113.mail.ne1.yahoo.com with NNFMP; 07 Feb 2011 00:22:10 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1297038129; bh=8rFhxlTvuGCPLeBtMpjDt2omiOdWhpsTSBmHasp7akA=; h=X-Yahoo-Newman-Id:Received:X-Yahoo-SMTP:X-YMail-OSG:X-Yahoo-Newman-Property:Message-ID:From:To:Subject:Date:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE; b=L3x6x8jnx7KFGesG3Ku2b5kxLS4v99H21rh/z/sY6jrDadiLpC0WEkJRPySC/h9MkKObXesobEOp8sMXeZWO8AWX32GQV6RVfpY+qENWHFGBi/NMrcj4J/XUXT3gQvPJsfpNORWiJWfiQ0NGBgGMuDKuq2OaBFOI+lhhdFtH1Gc=
X-Yahoo-Newman-Id: 995276.78067.bm@smtp113.mail.ne1.yahoo.com
Received: from liayf (andygatrell@123.159.243.175 with login)
by smtp113.mail.ne1.yahoo.com with SMTP; 06 Feb 2011 16:22:08 -0800 PST
X-Yahoo-SMTP: dzewALqswBAv2reUL_fXIT0hzNSas45G
X-YMail-OSG: 8TYVlD8VM1kIQgCGS6MgJ.bvFAIxlrUITlKFHJJUxbAFfFb
CLGSXevkkt4pxWDg.u8doIMajYZDTnV6jltko7W3f898bbta0roGshVuVeDd
P69LYQCivbFFU4e66HfDeTxN.QTyulZM6Zl7C3lep_MT5g4QnGdpS6uk8na2
SneefSuN6bv_JUsPxrmxPCUuRig1xhMWwkrMy4VGPooiy2ZTMF0bIhsA5TVt
pVM2gMRbT4LKcG.pba6qNSRCVX95n0Y5bMBuUuMV5WZayc2FAfKgCUzNZwzC
DPtPxYIfAFggO_FLJ2q4slbFG1MUC4GC060vXnRGTySuTOdcJkqAA2NCF1Qe
DVjysvCRiE9ENusP4PBJazgRbVS_xFS0uy1ht
X-Yahoo-Newman-Property: ymail-3
Message-ID: <0F77AD1896C6ACDA1153609BF818FA30@liayf>
From: "Blizzard Entertainment" <entfernt>
To:
Subject: Battle.net Account - login validation
Date: Mon, 7 Feb 2011 08:22:03 +0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_084A_01E4DC02.159253A0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
X-GMX-Antivirus: 0 (no virus found)
X-GMX-Antispam: 0 (Sender is in whitelist: noreply@blizzard.com);
Detail=5D7Q89H36p4L00VTXC6D4q0N+AH0PUCnGxfMrHMdyAl2DRvrYIo0nhsmZvIjzKbwKhZ/A
8VBBC0M9FkDVoDTkw==V1;
X-GMX-UID: NDIyMzElSDU3NePPWTI3HCYzc2tdc8uK
X-Flags: 1401

der text dazu
Greetings

This is an automated notification regarding the recent change(s)As you may or may not be aware of, this conflicts with the EULA and Terms of Agreement.If this proves to be true, your account can and will be disabled. It will be ongoing for further investigation by Blizzard Entertainment's employees.If you wish to not get your account suspended you should immediately verify your account ownership.If the information is deemed accurate, the investigation will be dropped.
This action is taken because we at Blizzard Entertainment take these salesquite seriously. We need to confirm you are the original owner of the account.This is easiest done by confirming your personal information along with concealed information about your account.
we recommend you Login verify Information your account:

link entfernt

If you ignore this mail your account can and will be closed permanently. Once we verify your account,we will reply to your e-mail informing you that we have dropped the link enfernt . Account security is solely the responsibility of the accoun tholder. Please be advised that in the event of a compromised account, Blizzardrepresentatives typically must lock the account. In these cases the Account,Administration team will require faxed receipt of ID materials before releasing the account for play.


Regards,
Blizzard Entertainment Inc Account Administration Team
Bearbeitet von Tyryndar am 17.06.2011 00:02 MESZ
90, Orc, Todesritter
12155
Habe gerade auch eine Mail bekommen meine Adresse hab ich als xxxx@xxxx.xx geändert

Header
DomainKey-Status: no signature
X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on
h1655318.stratoserver.net
X-Spam-Level: ****
X-Spam-Status: No, score=4.2 required=6.0 tests=FORGED_MUA_OUTLOOK,
HTML_MESSAGE,UNPARSEABLE_RELAY autolearn=no version=3.2.4
Received: (qmail 30000 invoked from network); 7 Feb 2011 13:22:26 +0100
Received: from nm15-vm0.bullet.mail.ac4.yahoo.com (98.139.52.236)
by xxxx.xx with SMTP; 7 Feb 2011 13:22:25 +0100
Received: from [98.139.52.195] by nm15.bullet.mail.ac4.yahoo.com with NNFMP; 07 Feb 2011 12:22:24 -0000
Received: from [74.6.228.33] by tm8.bullet.mail.ac4.yahoo.com with NNFMP; 07 Feb 2011 12:22:24 -0000
Received: from [127.0.0.1] by smtp102.mail.ac4.yahoo.com with NNFMP; 07 Feb 2011 12:22:24 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1297081344; bh=ZGuV+N9EWh2zTOuH8Kma6nqzXl37Nj2NbezO5zTTKGE=; h=X-Yahoo-Newman-Id:Received:X-Yahoo-SMTP:X-YMail-OSG:X-Yahoo-Newman-Property:Message-ID:From:To:Subject:Date:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE; b=Xru0z5Cdayk6ZZh5AQ2YbKbE9x69AuMR93n92XYWBKR9QVS2iWuPRPzwpfTeUS5v9LbIOD5MnyxkR6P3qvTgA3DiVIF7ZwRARayap7SaspzAHGiscwEAI6QxYpYWaerHhsNOejOQ+t3caB5ytJ99fbBhM7uGWQAP9yqP5Z4MeZA=
X-Yahoo-Newman-Id: 507393.77900.bm@smtp102.mail.ac4.yahoo.com
Received: from qmurjqekf (leah_lynnexo@123.159.255.55 with login)
by smtp102.mail.ac4.yahoo.com with SMTP; 07 Feb 2011 04:22:23 -0800 PST
X-Yahoo-SMTP: VLNUereswBCkncHrlbrw5joHvZzmYk.4qA--
X-YMail-OSG: Yqhib_gVM1luJyS8yOJ.FQIg_LKTL9bHXgywFhJ6XKoOsbM
6ZyozMsa8348lu82DVf_Q64WtnFRQbuRcc9hg8mzNf3rUvPaCV3o5TCMj2vW
R32J_C7xHxY5ldgFA3r2V8nBh_kPR5X8JqJiGwsXkI.i.S4_Iw1cZAfM6604
WKXBeb1klbJlapxCIljN0DegUIUyfovwijRtFDON8jSjJxVaBThvaveOQ6LP
Xb4zefw3GzcSRUcoNpD8JHqFXzHXNLtBSjWKbaGdM2puaBO2LFW8Ub5fAbpH
i4gBJgsH7MNcN5D9q.OQs7C8ZFn4i2tCBb9CVIj5rAEwZLzEHzmjfgTH5h2B
2ZTAeTZmwk_0qtrlT_arwVdOCVvr7NbsZUg--
X-Yahoo-Newman-Property: ymail-3
Message-ID: <87749722928D85AAF7793B23F198E571@qmurjqekf>
From: "Blizzard Entertainment" <noreply@blizzard.com>
To: <xxxx@xxxx.xx>
Subject: Battle.net Account - login validation
Date: Mon, 7 Feb 2011 20:22:11 +0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0A6B_01AF7256.16A6CDA0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512


Mailtext
Greetings

This is an automated notification regarding the recent change(s)As you may or may not be aware of, this conflicts with the EULA and Terms of Agreement.If this proves to be true, your account can and will be disabled. It will be ongoing for further investigation by Blizzard Entertainment's employees.If you wish to not get your account suspended you should immediately verify your account ownership.If the information is deemed accurate, the investigation will be dropped.
This action is taken because we at Blizzard Entertainment take these salesquite seriously. We need to confirm you are the original owner of the account.This is easiest done by confirming your personal information along with concealed information about your account.
we recommend you Login verify Information your account:
<entfernt>

If you ignore this mail your account can and will be closed permanently. Once we verify your account,we will reply to your e-mail informing you that we have dropped the investigation.billing@blizzard.com. Account security is solely the responsibility of the accoun tholder. Please be advised that in the event of a compromised account, Blizzardrepresentatives typically must lock the account. In these cases the Account,Administration team will require faxed receipt of ID materials before releasing the account for play.


Regards,
Blizzard Entertainment Inc Account Administration Team
Bearbeitet von Tesandrie am 15.02.2011 13:43 MEZ
85, Goblin, Hexenmeisterin
2300
Hallo, hab hier Mail bekommen wobei ich schwer einschätzen kann ob es eine phishing mail ist oder nicht. Danke für eure Hilfe.

Greetings:

Thank you for your attention in this matter regarding the compromised World of Warcraft account you are using. Unfortunately, multiple parties have contacted Blizzard Entertainment seeking restoration of the account in question. This message contains an updated Account Retrieval process, which will enable the rightful user of the account to resume their adventures in the World of Warcraft.

The investigation will be continued by Blizzard administration to determine the action to be taken against your account. If your account is found violating the EULA and Terms of Use, your account can, and will be suspended/closed/or terminated. In order to keep this from occurring, you should immediately verify that you are the original owner of the account.

To verify your identity please visit the following webpage:
[LINK]

Only Account Administration will be able to assist with account retrieval issues.

Please help us to avoid any further delays in restoring Account access by following the instructions exactly and in their entirety. We will contact you again once all information has been received and thank you in advance for your patience and cooperation in resolving this account issue. Please be sure to provide all pertinent data as soon as possible since Blizzard Entertainment is unable to offer any type of reimbursement for the time an account is locked for verification and investigation purposes.

In the meantime, please make sure to scan the computer system you are using to remove all viruses, Trojan files, and key loggers. For more computer/Internet security tips, please visit
[LINK]

In addition, World of Warcraft account passwords should be periodically changed by visiting
[LINK]

Any inquiries concerning this account retrieval process can only be addressed by Account Administration. To learn more about how Account Administration is able to assist you, please visit us at :

[LINK]

Thank you for your patience and anticipated cooperation in this matter.

Sincerely,
Account AdministrationBlizzard
Entertainment
85, Troll, Schamane
4720
Problem: Hack-Versuche durch lästige Spam E-Mails,
ganz einfache Problemlösung:

Wär einfacher wenn du n Posteingang auf deinem Battle.net Account hättest wo mann persönlich angeschrieben wird bei Problemen etc. dann würden die billig Hacks durch solche E-Mails zurückgehen da man ja denne auf dem Account der Offiziellen Seite benachrichtigt würde...mal schauen ob sowas nochmal kommen wird.

Andernfalls:

Erstmal auf Battle.net (original Seite NICHT die aus der E-Mail!!!) versuchen sich in Account einzuloggen wenn das klappt is die E-Mail schon zu 99,9% n Fake.

Zusätzlich mal die LINK-ADRESSEN genauer unter die Lupe nehmen meistens versteckt sich da drin schon mal ein B, N, F etc. im Beispiel ein "N" wie:

//www.worldof N warcraft.com

übersieht mann wenn mann in panik gerät leicht mal:
<entfernt>

Genauer Hinsehen ist der erste Weg der Sache ausm Weg zu gehen!!!

MfG
Bearbeitet von Tesandrie am 15.03.2011 09:51 MEZ
80, Blutelfe, Paladin
1400
Ich habe heute Foldendes E-Mail bekommen.

Greetings,

It has come to our attention that you are trying to sell your personal World of Warcraft account(s). As you may not be aware of, this conflicts with the EULA and Terms of Agreement. If this proves to be true, your account can and will be disabled. It will be ongoing for further investigation by Blizzard Entertainment's employees. If you wish to not get your account suspended you should immediately verify your account ownership.

You can confirm that you are the original owner of the account to this secure website with:
https://www.battle.net/account/support/login-support.xml

Login to your account, In accordance following template to verify your account.

* Account name
* Account password
* First and Surname
* Secret Question and Answer
Show * Please enter the correct information

If you ignore this mail your account can and will be closed permanently.

Once we verify your account, we will reply to your e-mail informing you that we have dropped the investigation.

Regards,

Account Administration Team
Blizzard Entertainment
http://www.blizzard.com/support/
World of Warcraft , Blizzard Entertainment 2010

Please retain all history if you reply to this mail


Als ich auf den Linkn klickte erschien sofort eine seite die mich warnte das dies eine Phishing-Website ist.

Grüße Noro
85, Blutelfe, Todesritter
12230
Ich habe soeben dieselbe bekommen, hier noch der header dazu:


Reply-To: <noreply@blizzard.com>
Sender: <entfernt>
From: Blizzard Entertainm ent <noreply@blizzard.com>
To: <entfernt>
Subject: Blizzard Notification About World of Warcraft Account
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: base64
X-Priority: 3


Ich finde es beunruhigend, dass da wirklich blizzard.com steht, oder ist das kleine L vielleicht ein großes i?

MFG Sila
Bearbeitet von Tyryndar am 17.06.2011 00:03 MESZ
85, Gnom, Magierin
8010
Hier ein Schmankerl in Bas64 codiert

Hinweis: Die Mailadresse kann drinne bleiben dieses ist nur eine meiner "Spam Mail Adressen für solche Fälle" irgend ein Crawler wird sich drüber freuen und mir die neusten Phishing Mails dann senden die ich wiederum hier Poste.

Return-Path: <entfernt>
Received: from <entfernt> (114.207.246.35)
by lavabit.com with ESMTP id AINS4NVUVBVY
for <entfernt>; Mon, 14 Feb 2011 14:00:19 -0600
Message-ID: <692DB6607D46241FDA8E3B845AA2BF56@hwm.org>
From: "noreply@blizzard.com" <entfernt>
To: <entfernt>
Subject: New Request Notification - Change the Login Address
Date: Tue, 15 Feb 2011 04:00:31 +0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0030_01E99A5C.14943ED0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512

This is a multi-part message in MIME format.

------=_NextPart_000_0030_01E99A5C.14943ED0
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: base64
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------=_NextPart_000_0030_01E99A5C.14943ED0
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: base64
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------=_NextPart_000_0030_01E99A5C.14943ED0--



Plaintext
Hello,

Blizzard Entertainment recently received a request to change the e-mail address used to log in to the Battle.net account with the username maria_c@lavabit.com. The e-mail address p***@hotmail.com has been specified as the new username for this Battle.net account. An email has been sent to this new address containing a verification link to complete the change.

Once the new address has been verified, the e-mail address maria_c@lavabit.com can no longer be used to log in to this Battle.net account or any World of Warcraft accounts merged with this Battle.net account.

If you did not initiate this request, please click here to contact the Blizzard Billing & Account Services team immediately.

Sincerely,
The Battle.net Account Team
Online Privacy Policy


URLS
<entfernt>
Bearbeitet von Tyryndar am 17.06.2011 00:04 MESZ
85, Gnom, Magierin
8010
Hello,

Blizzard Entertainment recently received a request to change the e-mail address used to log in to the Battle.net account with the username <entfernt>. The e-mail address n***@hotmail.com has been specified as the new username for this Battle.net account. An email has been sent to this new address containing a verification link to complete the change.

Once the new address has been verified, the e-mail address <entfernt> can no longer be used to log in to this Battle.net account or any World of Warcraft accounts merged with this Battle.net account.

If you did not initiate this request, please click here to contact the Blizzard Billing & Account Services team immediately.

Sincerely,
The Battle.net Account Team
Online Privacy Policy

Url: <entfernt>
Bearbeitet von Tyryndar am 17.06.2011 00:04 MESZ
85, Gnom, Magierin
8010
Hello,

Blizzard Entertainment recently received a request to change the e-mail address used to log in to the Battle.net account with the username <entfernt>. The e-mail address j***@hotmail.com has been specified as the new username for this Battle.net account. An email has been sent to this new address containing a verification link to complete the change.

Once the new address has been verified, the e-mail address <entfernt> can no longer be used to log in to this Battle.net account or any World of Warcraft accounts merged with this Battle.net account.

If you did not initiate this request, please click here to contact the Blizzard Billing & Account Services team immediately.

Sincerely,
The Battle.net Account Team
Online Privacy Policy

MessageID vfmmth8as3aph9dugniqmct4


Url: <entfernt>

Head:
Return-Path: <noreply@blizzard.com>
Received: from blizzard.com (124.217.219.135)
by lavabit.com with ESMTP id Z1NCRQQA7FEW
for <maria_c@lavabit.com>; Tue, 08 Feb 2011 09:00:31 -0600
Received: from crv (unknown [221.180.176.90])
by blizzard.com with SMTP id kCsMy8xOxF8Uz2ze.1
for <maria_c@lavabit.com>; Tue, 08 Feb 2011 22:59:26 +0800
Message-ID: <F3174509381E62780511376495B0F1F3@crv>
From: "donotreply@blizzard.com" <noreply@blizzard.com>
To: <maria_c@lavabit.com>
Subject: SPOOFED: New Request Notification - Change the Login Address
Date: Tue, 8 Feb 2011 22:59:14 +0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_035A_0197C555.107DCFE0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
Bearbeitet von Tyryndar am 17.06.2011 00:05 MESZ
85, Gnom, Magierin
8010
Greetings

This is an automated notification regarding the recent change(s)As you may or may not be aware of, this conflicts with the EULA and Terms of Agreement.If this proves to be true, your account can and will be disabled. It will be ongoing for further investigation by Blizzard Entertainment's employees.If you wish to not get your account suspended you should immediately verify your account ownership.If the information is deemed accurate, the investigation will be dropped.
This action is taken because we at Blizzard Entertainment take these salesquite seriously. We need to confirm you are the original owner of the account.This is easiest done by confirming your personal information along with concealed information about your account.
we recommend you Login verify Information your account:

<entfernt>

If you ignore this mail your account can and will be closed permanently. Once we verify your account,we will reply to your e-mail informing you that we have dropped the investigation.billing@blizzard.com. Account security is solely the responsibility of the accoun tholder. Please be advised that in the event of a compromised account, Blizzardrepresentatives typically must lock the account. In these cases the Account,Administration team will require faxed receipt of ID materials before releasing the account for play.

Head:
Return-Path: <entfernt>
Received: from nm25.bullet.mail.ac4.yahoo.com (98.139.52.222)
by lavabit.com with SMTP id R59HD4IVL3C2
for <entfernt>; Fri, 11 Feb 2011 17:40:49 -0600
Received: from [98.139.52.188] by nm25.bullet.mail.ac4.yahoo.com with NNFMP; 11 Feb 2011 23:40:19 -0000
Received: from [74.6.228.36] by tm1.bullet.mail.ac4.yahoo.com with NNFMP; 11 Feb 2011 23:40:19 -0000
Received: from [127.0.0.1] by smtp105.mail.ac4.yahoo.com with NNFMP; 11 Feb 2011 23:40:19 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1297467618; bh=4FJuXjuxrxy2z85ExBjzWw2JzngYd7JcCYKW43bSCdM=; h=X-Yahoo-Newman-Id:Received:X-Yahoo-SMTP:X-YMail-OSG:X-Yahoo-Newman-Property:Message-ID:From:To:Subject:Date:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE; b=KKa40wh4Z4pQ1+RtEmfAi/VaDCKCMWFK689sLpUflR/9IsBwnvEenCpyFlMW9xlPkGTwHcBmeN3MQMSUZvmjKdL+LJoH7fEE0OvO+STy5pGlFrN4T0LKKQmgqX70HxIe71TX1IT9CEPYekylKVu7OKyHDgRnCy6qdfJICVFV8PU=
X-Yahoo-Newman-Id: 994846.6512.bm@smtp105.mail.ac4.yahoo.com
Received: from zusfzlnlw (noklew12@123.159.238.136 with login)
by smtp105.mail.ac4.yahoo.com with SMTP; 11 Feb 2011 15:40:18 -0800 PST
X-Yahoo-SMTP: 6SOP.dOswBB5DMErmnUa2LNwMy.s
X-YMail-OSG: UTEbJgUVM1kWMi7M7ueDt1a6mnPE7XvTs9sWr9YPr7aYSAA
QmzOuZG6nMPEUz36LId8gEu5tpx7q0MhcJo10e4JeEt9NmKwudaWQnx6Spee
JmQ0am9faUI1v9GGQ8vm2Y0lRa5HuBFXG6Y4uJG5myAcUwndSL0ILZ4Wdth2
up9y.vBsWtaUGpGWCa2ql6U8rVMpXc4cDvObqAEvLkYrCp4pUNyvOUHlnNOE
ONWKF4HnCJOcqJsjC5sj232_AP0Wf1buAoJaNKmbEd1xrF8OUV.Kp3bQ962_
M3j6A6NfsPVika5m_R_YpS0ttKUcG8Q--
X-Yahoo-Newman-Property: ymail-3
Message-ID: <321B258C4B743D43DB5467A9DF5878BD@zusfzlnlw>
From: "Blizzard Entertainment" <noreply@blizzard.com>
To: <entfernt>
Subject: Battle.net Account - login validation
Date: Sat, 12 Feb 2011 07:40:22 +0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_027A_015AAF5D.14DD5EB0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512

This is a multi-part message in MIME format.

------=_NextPart_000_027A_015AAF5D.14DD5EB0
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: base64

UrL: <entfernt>
Bearbeitet von Tyryndar am 17.06.2011 00:06 MESZ
85, Gnom, Magierin
8010
Ich habe soeben dieselbe bekommen, hier noch der header dazu:


Reply-To: <noreply@blizzard.com>
Sender: <entfernt>
From: Blizzard Entertainm ent <noreply@blizzard.com>
To: <entfernt>
Subject: Blizzard Notification About World of Warcraft Account
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: base64
X-Priority: 3


Ich finde es beunruhigend, dass da wirklich blizzard.com steht, oder ist das kleine L vielleicht ein großes i?

MFG Sila


Hallo Sila, in der tat steht oben beim Absender Blizzard, allerdings ist die wahre E-Mail Adresse von der diese Mail stammt "Sender: k9millerk9@yahoo.com".

Die obere Adresse ist ungefär wie ein Name, dort kann jeder reinschreiben was er möchte theoretisch auch barrack_obama@cia.gov.
Bearbeitet von Tyryndar am 17.06.2011 00:06 MESZ
Customer Service
Hallo Deex!

Vielen Dank für deine zahlreichen Meldungen hier. Ich würde dich allerdings bitten, die Links zu den Phishing-Seiten in Zukunft zu entfernen. Nicht dass doch noch jemand auf die Idee kommt, den Link zu testen.

Gruß
Tesandrie
Bearbeitet von Rynundu am 09.12.2012 16:28 MEZ
85, Gnom, Magierin
8010
Oh das muss ich dann wohl Missinterpretiert haben. Entschuldige bitte

ich habe gedacht dieser Thread wäre aufgrund seiner Beschreibung dafür gedacht diese Seiten auch zu Melden da man gegen diese vorgehen kann. Das ist natürlich nun Peinlich. Zuerst frage ich mich schon ob es eine gute Idee wäre dachte dann aber bei dem Titel "Gefälschte Emails Phishing Versuche", okay ergibt sinn das die URLS dann gelistet werden.

Entschuldigung

Da hätte ich dann einen Vorschlag, ich habe einmal eine Seite gehab bei der ich Fragen zu Viren beantwortet habe das ding wa so aufgebaut das es ein kleines Extra Fenster gab bei denen man einen Unsichtbaren Link anhängen konnte den nur Administratoren sehen könnte, die leute haben es sehr gut angenommen und benutzt, wie wäre denn so eine Funktion für diesen Fachbereich.

Liebe Grüße

Deex
Bearbeitet von Deex am 16.02.2011 00:50 MEZ
90, Gnom, Kriegerin
9340
Ich habe heute eine Email bekommen, und die war wirklich gut gemacht, sogar mit Rahmen und Banner und Yeti unten rechts. Sah im ersten Moment wirklich aus wie von Blizzard.

Return-Path: <wowaccountadmin@blizzard.com>
X-YahooFilteredBulk: 210.16.204.154

From: "Blizzard Entertainment" <WoWAccountAdmin@blizzard.com>

Da drin stand, natürlich in englisch: Wir haben bemerkt das Sie ihren Account verkaufen wollen, blabla.

You can confirm that you are the original owner of the account to this secure website with:
https://eu.ba**le.net/ (rest des Links entfernt)

Login to your account, In accordance following template to verify your account.

If you ignore this mail your account can and will be closed permanently.
Once we verify your account, we will reply to your e-mail informing you that we have dropped the investigation.

Blizzard Entertainment SAS
TSA 60 001
Service Administration des Comptes
78143 Velizy Villacoublay Cedex


If you wish to review our current Rules and Policies for World of Warcraft and Battle.net, they can be found at:
http://www.wow-eu*ope.***/.............
http://eu.bli**ard.com/en-gb...........

Regards,

Game Master Dunarthra
Customer Services
Blizzard Entertainment
http://eu.bli**ard.com/support/

Please retain all history if you reply to this mail

Nur das https am Anfang hat mich dann grübeln lassen, und natürlich die Tatsache das ich meinen Account nirgendwo verkaufen will.

Die offizielle Homepage von Wow läuft über eu.battle.net

Ich hatte vor 2 Wochen eine Mail bekommen, das bei mir verdächtige Aktionen beobachtet wurden, und ich meinen Rechner auf Viren prüfen und Passwort ändern soll. Diese war echt, und sah genauso aus, allerdings ohne den langen Link.


Dieser Beitrag ist geschlossen.

Bitte melde jede Verletzung der Forenrichtlinien, inklusive:

Beiträge die Gewaltandrohung beinhalten. Wir nehmen dies sehr ernst und werden die entsprechenden Behörden einschalten.

Beiträge, die persönliche Informationen zu anderen Spielern enthalten. Dies beinhaltet Adressen, E-Mail-Adressen, Telefonnummern und unangebrachte Fotos und/oder Videos.

Beleidigende oder diskriminierende Sprache. Derartige Dinge werden nicht toleriert.

Forenverhaltensregeln

Melde Beitrag #, verfasst von

Grund
Erklärung (Maximal 256 Buchstaben)
Abschicken Abbrechen

Gemeldet!

[Schließen]