Got account back and now pending suspension?

#0 - Aug. 9, 2010, 12:06 p.m.
Blizzard Post
Greetings,

I recently just got my account back from a compromise early yestrday, and I now have an email in my account saying that I am pending a propationary suspension of 3 hours if the investigation team finds my account in violation of section 8 of the EULA. 3 hours isn't a long time, nor an issue for me, but I do not wish to have negative action taken on my account for something I didn't do, eventhough account security is my personal responsibility. Here is the email, and I did check and it is form blizzard;

Greetings World of Warcraft -> Legal -> End User License Agreementand Section 8 of the Terms of Use:Blizzard Entertainment -> Legal -> Terms of UseA 3-hour probationary suspension is pending on this account, awaiting confirmation from a specialist. A final warning has been issued. The investigation will be continued by the Account Administration team to determine the any further suspensions. If the account in question is found in violation of the EULA and Terms of Use, further action will be taken. Be aware that any additional inappropriate actions may result in the permanent closure of the account.Thank you for respecting our position on this matter.

Section 8 of the EULA states;
Account Suspension/Deletion.
BLIZZARD MAY SUSPEND, TERMINATE, MODIFY, OR DELETE ACCOUNTS AT ANY TIME FOR ANY REASON OR FOR NO REASON, WITH OR WITHOUT NOTICE TO YOU. For purposes of explanation and not limitation, most account suspensions, terminations and/or deletions are the result of violations of this Terms of Use or the EULA.


Export Controls.
The Game may not be re-exported, downloaded or otherwise exported into (or to a national or resident of) any country to which the U.S. has embargoed goods, or to anyone on the U.S. Treasury Department's list of Specially Designated Nationals or the U.S. Commerce Department's Table of Denial Orders. You represent and warrant that you are not located in, under the control of, or a national or resident of any such country or on any such list.


Help?
#1 - Aug. 9, 2010, 12:10 p.m.
Blizzard Post
Could you pop open the header of that email and tell me who sent it, Pilf.

I suspect you've been phished, likely by the same folks that compromised you before.

Just copy and paste the internal routing header here (take out YOUR email address from the information)
#4 - Aug. 9, 2010, 12:15 p.m.
Blizzard Post
Q u o t e:
I have already made a new email, this is to the one that was associated before the compromise, which would make no sense that it goes there, but here is the header for you Or:

World of Warcraft - Account Action Notification World of Warcraft - Account Action [email protected]

Send e-mail
Find e-mail Add to contactsTo <removed>
From: World of Warcraft - Account Action Notification ([email protected])
Sent: Mon 8/09/10 9:09 AM
To: <removed>



That's not the internal routing header. You need to find out how to open that in your email program.

Will have a LOT of numbers in it.
#6 - Aug. 9, 2010, 12:18 p.m.
Blizzard Post
Q u o t e:
This email does also appear to have all proper grammar and spelling in it as well. Another indicator why I was stressing over it, but clicked on no link.


I need to see the INTERNAL routing header. That's normally hidden in most emails unless you specifically look for it.
#9 - Aug. 9, 2010, 12:26 p.m.
Blizzard Post
Q u o t e:
Unfortunately, my computer is not working with me. I tried to click on the link to open it up and my computer is saying that the requested site is either unavailable or cannot be found. Due to this, I cannot get this information to you as of right now. Should I just report this to [email protected] and just leave the matter alone and let it run its course?


I strongly suspect this is a phish as we don't do 'probationary' anything, that's the first red flag.

Looking at the internal routing headers would give you the true path that took to your inbox and is a way to check ANY email for legitimacy. They aren't the easiest things to read, but you'll soon learn what points to pick out, they will quickly jump off the page once you've looked at just a few of them.