gerade bekommen:
Blizzard Account Monitoring Notification(no reply)
Dear customer, in our system recent monitoring accounts of all Blizzard . Your Account Login Successful tonight at 9:30pm form the 125.2.102 .* IP range
, but our system shows the 125.2.102 .* IP range exists in a large number of hackers, as too many customer complaints, the
125.2.102 .* IP range has been blacklisted. We are concerned about whether your account has been stolen, so, for the purpose of ensure your legal interests,
We will be 24 hours after, suspended your account. If you have any questions please visit
*Link herauseditiert*
Blizzard account monitoring system
2010 Blizzard Entertainment. All rights reserved.
Und der erweiterte Header sagt das:
Received: from [65.55.116.88] (helo=blu0-omc3-s13.blu0.hotmail.com)
by mx34.web.de with esmtp (WEB.DE 4.110 #4)
id 1NzpCH-0003WX-00
for ************; Thu, 08 Apr 2010 12:42:54 +0200
Received: from BLU0-SMTP42 ([65.55.116.72]) by blu0-omc3-s13.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 8 Apr 2010 03:42:50 -0700
X-Originating-IP: [123.189.50.36]
X-Originating-Email: [lockhoe@hotmail.com]
Message-ID: <BLU0-SMTP4272F353253623D3CEDD1FA6160@phx.gbl>
Received: from dodldrmtp ([123.189.50.36]) by BLU0-SMTP42.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 8 Apr 2010 03:42:49 -0700
From: "wowaccountadmin@blizzard.com" <wowaccountadmin@blizzard.com>
To: <***********>
Subject: World of Warcraft Account lockout notice
Date: Thu, 8 Apr 2010 18:42:34 +0800
MIME-Version: 1.0
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: base64
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
X-OriginalArrivalTime: 08 Apr 2010 10:42:49.0732 (UTC) FILETIME=[3BD9CC40:01CAD708]
Return-Path: lockhoe@hotmail.com
Hab meine Mail-Addi mal rausgenommen.
Nach eurer Anleitung also sofort als FAKE zu identifizieren, da:
1. Englisch
2. nach Accounteingabe gefragt wird (Link von mir editiert)
3. der Absender einen Hotmail-Account hat
Also ein dickes Danke von mir an den Thread!