Staredit Network > Forums > Null > Topic: WoW Players Beware
WoW Players Beware
Mar 29 2011, 7:08 pm
By: Aristocrat  

Mar 29 2011, 7:08 pm Aristocrat Post #1



Quote
[14:50:13] <%Remi> have you seen these newest phishan emails
[14:50:14] <%Remi> http://images.fujibayashi.jp/ss/blizzard-kawaii.png
[14:50:15] <%Remi> these
[14:50:18] <%Remi> they're kawaii
[14:50:37] <G-Beast> let seee...
[14:51:39] <%Remi> G-Beast: the funniest thing is it supposedly (not really) links to us.battle.net
[14:51:42] <%Remi> and
[14:51:46] <%Remi> I'm EU
[14:52:08] <G-Beast> lmao
[14:52:12] <Nonoriri> [14:50:13] <%Remi> have you seen these newest phishan emails
[14:52:13] <G-Beast> what a cute blizz response
[14:52:27] <Nonoriri> Doesn't it originate from the actual blizzard domain
[14:52:33] <%Remi> G-Beast: those were plaintext too
[14:52:36] <%Remi> Nonoriri, uhh
[14:52:45] <%Remi> have you ever been into systems administration
[14:52:48] <%Remi> mail server administration
[14:53:00] <%Remi> and SMTP overall?
[14:53:09] <Nonoriri> No
[14:53:13] <Nonoriri> Please explain
[14:53:42] <%Remi> here are the headers
[14:53:55] <%Remi> From: "Blizzard Entertainment" <donotreply@blizzard.com>
[14:53:55] <%Remi> To: <whatever the address is NOT even used for WoW@haruhiism.net>
[14:53:55] <%Remi> Subject: Battle.net Account Management
[14:53:55] <%Remi> Date: Sun, 27 Mar 2011 15:19:28 +0800
[14:54:02] <%Remi> now
[14:54:13] <%Remi> let's see what the other headers say
[14:54:22] <%Remi> Nonoriri,
[14:54:23] <%Remi> Received-SPF: None (no SPF record) identity=mailfrom; client-ip=98.139.212.166; helo=nm7.bullet.mail.bf1.yahoo.com; envelope-from=rossr423@yahoo.com; receiver=spambox@haruhiism.net
[14:54:39] <%Remi> Received: from nm7.bullet.mail.bf1.yahoo.com (nm7.bullet.mail.bf1.yahoo.com [98.139.212.166])
[14:54:41] <%Remi> by mail.fujibayashi.jp (Postfix) with SMTP id E68FF5DDA1
[14:54:44] <%Remi> for <spambox@haruhiism.net>; Sun, 27 Mar 2011 16:19:25 +0900 (JST)
[14:54:48] <%Remi> sure is Blizzard domain there?
[14:55:00] <%Remi> Received: from clbjzbm (rossr423@222.73.27.228 with login)
[14:55:00] <%Remi> by smtp101.mail.bf1.yahoo.com with SMTP; 27 Mar 2011 00:19:21 -0700 PDT
[14:55:03] <%Remi> X-Yahoo-SMTP: svtTtkCswBD3MaCd7RRPeZmtZ3pc
[14:55:06] <%Remi> Sender: rossr423@yahoo.com
[14:55:12] <%Remi> sure is blizzard address
[14:55:46] <%Remi> always check Sender: and Envelope-From:
[14:55:58] <%Remi> checking the mail route is nice, too
[14:56:03] <%Remi> also the link inside that message
[14:56:27] <%Remi> leads to us.battle.net.forums.support-blizzard.com/
[14:56:30] <%Remi> guess what
[14:56:41] <%Remi> it's not a Blizzard site.
[14:57:46] <G-Beast> all blizzard emails are noreplay@blizzard.com
[14:58:16] <G-Beast> reply*
[14:58:48] <%Remi> also lies
[14:58:54] <%Remi> I have letters from blizzard
[14:59:10] <%Remi> originating from <mk.(cut by me).@blizzard.com>
[14:59:25] <%Remi> and <jh(cut by me)@blizzard.com>
[14:59:33] <%Remi> because my friends work for Blizzard Europe
[14:59:38] <%Remi> :D
[14:59:58] <%Remi> and sometimes send me emails from their @blizzard.com addresses




None.

Mar 29 2011, 7:11 pm Fire_Kame Post #2

wth is starcraft

Protip: don't be a dumbass and you won't have a problem.




Mar 29 2011, 7:22 pm DevliN Post #3

OVERWATCH STATUS GO

Uh yeah, just look at the link and you're fine. You have to be an idiot to click on the fake links and get your account stolen.



\:devlin\: Currently Working On: \:devlin\:
My Overwatch addiction.

Mar 29 2011, 7:42 pm Riney Post #4

Thigh high affectionado

Ive gotten 3 of those.

I dont own a purchased WoW account.

I lul'd



Riney#6948 on Discord.
Riney on Steam (Steam)
@RineyCat on Twitter

-- Updated as of December 2021 --

Mar 29 2011, 7:47 pm Fire_Kame Post #5

wth is starcraft

You reminded me that i have an unused two month time card at home. :\ I was going to play over break but I decided - for some reason - not to.

:\

Now I have this card. What do?




Mar 29 2011, 7:56 pm DevliN Post #6

OVERWATCH STATUS GO

You can sell it online. I'd offer to buy it from you, but I got a 12-month time card from a friend for Christmas. :/



\:devlin\: Currently Working On: \:devlin\:
My Overwatch addiction.

Mar 29 2011, 7:57 pm Jack Post #7

>be faceless void >mfw I have no face

What kind of friend gives you ready access to drugs :lol:



Red classic.

"In short, their absurdities are so extreme that it is painful even to quote them."

Mar 29 2011, 8:06 pm Fire_Kame Post #8

wth is starcraft

Quote from DevliN
You can sell it online. I'd offer to buy it from you, but I got a 12-month time card from a friend for Christmas. :/

What the hell? My boyfriend only bought me a two month time card for Christmas. I feel cheated.

And then we opened the box and there was no card, but we had to wait to replace it, but I got my card. :awesome: and he bought me a sub because I had to wait daawwww

But still. Three months compared to your twelve months? I think its time for a breakup.




Mar 29 2011, 8:15 pm DevliN Post #9

OVERWATCH STATUS GO

They don't sell 12-month cards, so as far as I know 2-month is the best. So he did he best to keep you hooked. :)



\:devlin\: Currently Working On: \:devlin\:
My Overwatch addiction.

Mar 29 2011, 8:18 pm Fire_Kame Post #10

wth is starcraft

Too late. I just texted him. I mean, he has a really stressful test in forty five minutes but he should get it before then, so it shouldn't interfere too much.




Mar 29 2011, 8:47 pm MadZombie Post #11



I can really see why that would work. I have some pretty assburger friends that would fall for that. Thankfully I'm paranoid and never pay for services for things online. Impenetrable defense.



None.

Mar 29 2011, 9:07 pm DevliN Post #12

OVERWATCH STATUS GO

Quote from Fire_Kame
Too late. I just texted him. I mean, he has a really stressful test in forty five minutes but he should get it before then, so it shouldn't interfere too much.
You broke up with him in a text? Dear lord, Kame, that was the best move ever.



\:devlin\: Currently Working On: \:devlin\:
My Overwatch addiction.

Mar 29 2011, 9:12 pm Fire_Kame Post #13

wth is starcraft

Yep. A three and a half year relationship, an eighteen year friendship, silenced with a single transmission.




Mar 29 2011, 9:46 pm DevliN Post #14

OVERWATCH STATUS GO

Well its for the best. :-(



\:devlin\: Currently Working On: \:devlin\:
My Overwatch addiction.

Mar 29 2011, 9:54 pm Fire_Kame Post #15

wth is starcraft

:-( I'm going to go eat cookie dough and watch something with freddy prince jr!




Mar 29 2011, 10:25 pm Aristocrat Post #16



Quote from MadZombie
I can really see why that would work. I have some pretty assburger friends that would fall for that.

^ This.

Someone who only looks at the sender field and the email contents would probably fall for it, since the sender does look like the official Blizzard domain. Pretty surprising that you can fake that, which is why I posted this thread in the first place.



None.

Mar 29 2011, 10:29 pm Fire_Kame Post #17

wth is starcraft

What's so surprising about it? The english on the email doesn't even make sense.




Mar 29 2011, 10:35 pm IskatuMesk Post #18

Lord of the Locker Room

Eh, nothing new. I ignore all mails that supposedly come from blizzard because I know I wouldn't be getting mails unless it was a scammer.



Show them your butt, and when you do, slap it so it creates a sound akin to a chorus of screaming spider monkeys flogging a chime with cacti. Only then can you find your destiny at the tip of the shaft.

Mar 29 2011, 10:35 pm DevliN Post #19

OVERWATCH STATUS GO

Quote from DevliN
Uh yeah, just look at the link and you're fine. You have to be an idiot to click on the fake links and get your account stolen.
Seriously, this is one of the first rules of WoW. Don't click any links unless it goes to blizzard.com or battle.net.

I've seen email spoofers out there that manipulate the sender field all the time. I've received spam mail from what looks like my own email address in the past.



\:devlin\: Currently Working On: \:devlin\:
My Overwatch addiction.

Mar 30 2011, 2:41 pm Raitaki Post #20



So THAT'S where that fake email saying someone changed my battle.net password come from. Thanks Firefox x 9999999.



None.

Options
  Back to forum
Please log in to reply to this topic or to report it.
Members in this topic: None.
[06:47 am]
NudeRaider -- lil-Inferno
lil-Inferno shouted: nah
strong
[05:41 am]
Ultraviolet -- 🤔 so inf is in you?
[04:57 am]
O)FaRTy1billion[MM] -- my name is mud
[04:35 am]
Ultraviolet -- mud, meet my friend, the stick
[2024-5-16. : 10:07 pm]
lil-Inferno -- nah
[2024-5-16. : 8:36 pm]
Ultraviolet -- Inf, we've got a job for you. ASUS has been very naughty and we need our lil guy to go do their mom's to teach them if they fuck around, they gon' find out
[2024-5-16. : 5:25 pm]
NudeRaider -- there he is, right on time! Go UV! :D
[2024-5-16. : 5:24 pm]
lil-Inferno -- poopoo
[2024-5-16. : 5:14 pm]
UndeadStar -- I wonder if that's what happened to me. A returned product (screen) was "officially lost" for a while before being found and refunded. Maybe it would have remained "lost" if I didn't communicate?
[2024-5-16. : 3:36 pm]
NudeRaider -- :lol:
Please log in to shout.


Members Online: 7camilac5685fb7, 8milae5823he9, 5adrianc323tp9