#0 - Nov. 6, 2010, 5:47 p.m.
Anyway, that aside, the issue I DID have with this "irregular activity" was that it said they'd send me an email for verification. It never arrived. I was spam refreshing my inbox, and checked my spam folder too. nothing.
I've checked my forwarding options on yahoo, and there are no forwarding rules (I thought my email may have been compromised, and nothing there either)
What I DID get though worryingly, was this, 7 hours later in my spam folder (I've edited my email references out of the following quote):
Q u o t e:
******************; Sat, 06 Nov 2010 15:07:39 +0000
Return-Path: <[email protected]>
X-YahooFilteredBulk: 218.85.138.171
Received-SPF: none (mta1085.mail.ird.yahoo.com: domain of [email protected] does not designate permitted sender hosts)
X-YMailISG: G4xdR_UcZApVz4x5Q6ftFodsjAqZzSRvYZ1DBRMKHOG8_kpP PxAgdsZAsvY6SK1WNsi9LCdkUEgU4DjA0lepOpczJT.8XGongbeKPMl7r7xJ fGIK1FlrXAfrAdtxdEZm8YMdFdIDPArmZQXtrnU_62974k4R2d9PEW2K.e4c tFOTgQJFbG5gYoPc7.UdeTIfe5QbylQIrz7cpxbRM_ir90kSeN5x8OOdA1pT JRtys_PJGqu3js4hF7uPycCj1g.JTxSnBiyRqz.zxSWVFJz94TUQfsQTK7r2 SKCbYTgD1KGZuQnJ9CZgDdW_BDEEwGZgJ.WXX3pZtVFt7cNa_OxSQM8HWwyN C8247f1hohLpj20y05zf9Qb8Y8BaVpw_IBGrtrquLn6OL1_VQfXnHZh9uJJx ln6WE9lQs8ReQJlSbf7mNJM3.T0FWNh6.7u5l2uroyhV56lBFs4J2oOkXeQc MI1wpJ8XiUhMnx53Hbf5BpqYy0jGdXQnmVOu8ja3xCqTWLmyURKm5p8WMPfC QcTC0yTSGZ2QoVoNcWYSi7P0SMeVlpXlNvlM4zk1LkyPghO.BRIf7vXp3f.8 hkUOcvo3angz8qG4B3OEFKLUsGSDOJssWPIBPzy75QGxsmpNx8IYbNdKowad Ao90LDG4j1CY.ki2Dgn2o4PiBh_IQCpb75X.jYvOIChkF9zxunGf8AhKuuXj hwWZdr2bXhC4CBlc81fhNiJFy6f2O8wu6PLu56Y0okBMSktZa9kkV6LOU8.H gl4w17c1CWyi8DWjb63GVk5uyLanxrRnhWPSZu4RSMdYDOI8uVo.VFbETHQ6 ANDXkR6hTGQcZJa8b.cvGEkAWLOF5VF48P17Qh8SnZfCnbOTDFsdicEH6YkS uruWT.8roYq2ghLGR7miZvtgkxpcAEtKgSMLl8iwxeGR8FshubcxjtoSSqGf hxUQMcVdt48t6NxNA28WWG0GXwtKD03JCAHRuxWJLEUFmczcQbeXCrpBojU6 8Y2HjftOWbuvb1v6z6wlAawHb0nN8q56loFV2EzW.E2gt2zxc8QGUz.zTT2A ayTofUudpoPkrgOkIjxDC9rUj9a7GFB_4Dl9aQua.ozIqtF0VsvX2AsgMERV 0XBNmS2B4Nco1O43dIJfhS3nM557eNGYe3swP_ITd9__rzg7w2UaGrLzcbO8 rwCLpA5S2yf9ltfPkmOJ5zPvf5PFqkOJ15kkdLGIH5VvojSvBRYTrBHa4t_Y mli0Wo8Aw9xnVH4Ny8khSyQ-
X-Originating-IP: [218.85.138.171]
Authentication-Results: mta1085.mail.ird.yahoo.com from=; domainkeys=neutral (no sig); from=blizzard.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.mail1@%!@#@%###!@*@@@@#!@*@@%##4e.com) (218.85.138.171) by mta1085.mail.ird.yahoo.com with SMTP; Sat, 06 Nov 2010 15:07:39 +0000
Received: from qq?blizzardwowacarmo.com (unknown [222.47.221.131]) by mail.mail1@%!@#@%###!@*@@@@#!@*@@%##4e.com (Postfix) with SMTP id 2C9CFBC02C6 for <**************>; Sat, 6 Nov 2010 23:07:36 +0800 (CST)
From:
Blizzard Entertainment <[email protected]>
Add sender to Contacts
To: <***************>
X-Mailer: QQMail 2.x
Subject: Battle.net Account - Password verification
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_8ipuKxF9PqJYxR6ktgo3GT4K"
Message-Id: <[email protected]@%!@#@%###!@*@@@@#!@*@@%##4e.com>
Date: Sat, 6 Nov 2010 23:07:36 +0800 (CST)
Content-Length: 1849
Compact Headers
We have verification the password for the World of Warcraft account associated with this email address. verification password, please click the following link and follow the instructions:
<malicious link removed>
If you notice issues with the World of Warcraft account or associated games after logging in with your account, please contact the appropriate support department for assistance immediately: http://us.blizzard.com/support/index.xml?gameId=11
Please remember that it is your responsibility to keep your login information confidential. You may not share access to the account with anyone who is no t expressly permitted in the World of Warcraft Terms of Use and the Terms of Use for the games you play. You are also responsible for every use of your login information, whether you have authorized it or not.
Billing and Account Services can be reached directly at 1-800-592-5499. Players in Australia and Singapore should call 1-800-041-378 and 800-2549927 respectively if unable to connect via the first number. Our representatives are available Monday through Friday, between 8:00AM and 8:00PM Pacific Time.
Thank you,
Blizzard Entertainment
Now, I'm not questioning the authenticity of this email above, its DEFINATELY fake, that much I do know by the obvious embedding of the genuine address into a fake site thereby hijacking my details. (No, I didnt click it before you ask)
What I would like a blue to please answer, is to verify which ISP's they have seen connectivity from, and I can then vouch if they are genuine login attempts, or not.
(Basically, what I'm looking for, is an answer as to if a china IP has tried logging onto my account)
If the answer to the bracketed question above is Yes, I'll go ahead and format my drives and start from scratch. I would also like to know why I didnt get that email from Blizzard, or if that is a technical fault on your end.
I went and changed my password, just to be sure, and I DID get that email from blizzard. Not filtered, and was in my inbox, and not my spam folder.
I'm a bit worried, to say the least, and would like an investigation on Blizzard's side please to verify/deny the login attempts.
