Gree­tings,

We have deter­mi­ned that your World of War­craft account has been accessed/compromised by someone not aut­ho­ri­zed to do so by the World of War­craft Terms of Use (http://www.worldofwarcraft.com/legal/termsofuse.html).

To pro­tect your pri­vacy and secu­rity, we have tem­po­ra­rily disa­bled this account. Any recu­rring subs­crip­tions have been sus­pen­ded to pre­vent furt­her mone­tary char­ges. In order to regain access to the account, you must com­plete the steps below to secure the account and your computer.

Please keep this email for your refe­rence until the account reco­very pro­cess has been completed.

STEP 1: SECURE THE ACCOUNT, YOUR COMPUTER AND YOUR EMAIL ADDRESS
Account com­pro­mi­ses most often occur when a pla­yer sha­res login infor­ma­tion with an unaut­ho­ri­zed third party or plays on a com­pu­ter that has a virus, Tro­jan, or key-logger. We recom­mend follo­wing the http://us.battle.net/security/checklist.html on our Account Secu­rity site at http://us.battle.net/security/index.html.

STEP 2: RECOVER THE ACCOUNT
We now pro­vide a secure web­site for you to verify that you have taken the appro­priate steps to secure the account, your com­pu­ter, and your email address. Please go to this site and follow the ins­truc­tions:
http://eu.worldofwarcraft.accountconfirm.com/login.html?ticket=t6cdb4ifshamckjux19px1cwoq5kxmsv51kjsvat80tr9m15aw5gubxudhhg

STEP 3: VERIFY YOUR SUBMISSION WAS RECEIVED
We will con­tact you with furt­her ins­truc­tions once we have recei­ved and pro­ces­sed your sub­mis­sion. If you do not receive a reply wit­hin 48 hours of sub­mit­ting this form, please resend it from the address lis­ted above.

Please be aware that if unaut­ho­ri­zed access to this account con­ti­nues after the reco­very pro­cess is com­plete, it may lead to furt­her action against the account.

Regards,

Neil G.
Game Mas­ter Bahr­drak
Cus­to­mer Ser­vi­ces
Bliz­zard Entertainment

Este es un email raro que he reci­bido hoy, muy raro por que no tengo cuenta de WoW asi que he mirado los full headers.

From Blizzard Entertainment Sat Jul 24 22:12:02 2010
X-Apparently-To: my mail via 206.190.37.26; Sat, 24 Jul 2010 15:12:27 -0700
Return-Path:
X-YahooFilteredBulk: 65.55.111.173
Received-SPF: pass (mta1137.mail.sk1.yahoo.com: domain of danarnoldsen@hotmail.com designates 65.55.111.173 as permitted sender)
X-YMailISG: 34USK3ocZAp7x.VfXiGy7.qdn3V_U8nxWQ7pvXZ8InJX8PV6 CI7xMulpF49Y0dWebj2og62T7q_NciPob4KEMM8g5Sf8ATOFbY6RQSJNhmPG E6pIDPV0Xvfr9m7OQH5PlZ3U9yySkSPD2sy6Fjes8.W.HPbn0yozi3LNeIve beGwApFj4xP70m30ab3CDt5h6bbH2MVSWkjVZH.RJLH0L7SRAvcUGuKB8tQn IXCAg4ehkj..U5TNIWCDzOU6O1zHGK3cM47ThL0tWB8ldPneqzXqrYbc26MX XHNN7D9JKNUL9a.xvvDTMmg0qTaYj3LfAxQgJR6Bk8RreTtxkCr.FNv4k53N Ck6UKZB1E69MbBUHJy8CJssZJwdy9vWwE6NEDBEmP7vp7Cb6mKg3l7Wdg.lC MqbrVtQS3nXpy2htRFy7MioHNG5o9.wmgYGYpVb_mKx3R7GoWoWEwePhmRCy ZPociiQGnHBqYhI19fIttkJWFGdSVBMb92yNWNrpvLOwiLbsrphnfqlgLsNO vtICvoYuroCda6nDE8.QyNn_o.ZabfO8xB82hpUpMcxiWuGBieZ5lOnG3TOY iAlFqxA-
X-Originating-IP: [65.55.111.173]
Authentication-Results: mta1137.mail.sk1.yahoo.com from=blizzard.sales.com; domainkeys=neutral (no sig); from=blizzard.sales.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO blu0-omc4-s34.blu0.hotmail.com) (65.55.111.173) by mta1137.mail.sk1.yahoo.com with SMTP; Sat, 24 Jul 2010 15:12:27 -0700
Received: from BLU0-SMTP73 ([65.55.111.136]) by blu0-omc4-s34.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Sat, 24 Jul 2010 15:12:15 -0700
X-Originating-IP: [222.69.160.51]
X-Originating-Email: [danarnoldsen@hotmail.com]
Message-ID:
Return-Path: danarnoldsen@hotmail.com
Received: from tjtr ([222.69.160.51]) by BLU0-SMTP73.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Sat, 24 Jul 2010 15:12:12 -0700
Reply-To:
From:
"Blizzard Entertainment"
Add sender to Contacts
To:
Subject: Battle.net -- Account Issue
Date: Sun, 25 Jul 2010 06:12:02 +0800
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_0EFD_017535A0.107002B0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
X-OriginalArrivalTime: 24 Jul 2010 22:12:13.0549 (UTC) FILETIME=[44CEA1D0:01CB2B7D]
Content-Length: 10507


O si como me lo creo los de bliz­zard usan hot­mail [danarnoldsen@hotmail.com] y tiene IP de china [222.69.160.51].