I know where you phishers live and got ur IP!

by Sheel | 29/04/2010 22:55:03

Sheel

You wanna help blizzard out to stop these annoying phishing emails, and stop these goldsellers in their tracks? I just found one of the phisher's IP address, and I know where he lives. Blizzard, I have found all of the information, and will provide them upon request.
[b]
What you need?

[/b]

    The most RECENT phishing email email you got. (If the sender's email is "(email@hotmail.com) instead of account@blizzard.com, then that's a big 10 points to you! Skip to step six and Go to http:/www./whatismyipaddress.com and click on trace email.)

    Notepad

    Paint Program

    blizzard's real email.

    A pure hatred of spammers/account hackers/goldsellers and a desire to get rid of them.



  • Step one: Go to your email account, preferably where you registered for blizzard.

    Step 2: Open the email and look for the link. Put your mouse over that link. [WARNING: DO NOT CLICK THE LINK. JUST PUT YOUR MOUSE CURSOR OVER IT TO SEE THE REAL LINK ON THE BOTTOM OF YOUR BROWSER.]

    Step 3: Right Click the link and go to Properties. Copy the link. (Highlight the link and press Ctrl Z). If you have Gmail, they will give you the url of the phishing site.

    Step 4: Go here. http://www.selfseo.com/find_ip_address_of_a_website.php

    Step 5: Paste the URL (CTRL + V) in the form below and press enter. Note: If you are having trouble getting an IP, try shortening the URL. ( example: try http://www.worldofwarcraft.com instead of http://www.worldofwarcraft.com/accountmanagement) Also keep in mind that NOT ALL the URLs you find will be traced. You may have to wait for the next phishing email, or find a better site to trace the IP.

    Step 6: If you successfully found the IP address and location(which in itself not enough to report to Blizzard), highlight the IP and copy it. Once you have copied the IP address, go here.
    http://www.ipaddresslocation.org/ip-address-locator.php

    Scroll down and paste the IP into the box and click on IP Locator.

    Step 7: If you have pasted the correct IP, you should be able to receive the results page. You should be able to find out what his ISP is, where he lives(Unfortunately, it won't give you his address). If you manage to find his ISP, it is highly encouraged that you Google it, find the site, read the ToS(Many ISPs prohibit spam, and illegal activity. Spamming is a federal crime!) Find out their contact information, contact them with the IP address in hand.

    Step 8:Congratulations, you have found all the information you need to report to Blizzard. Have notepad ready and jot down all the information you found. Also, go back to the page where you found out the phisher's location, and press PRINT SCREEN. Open up Microsoft Paint(Start Menu -> All programs -> Accessories -> Paint) and paste the webpage there. Save the image, and upload it to imageshack or photobucket and get the direct image link. (Do the same to screenshot the original phishing email.)

    Step 9: Place the IP, location, URL, and email message, imageshack links all in your Notepad file and save it.

    Step 10: Send an email to Blizzard with what you found. Attach the notepad file to your email.



  • And that's how you do it.


    NOTE: DO NOT POST ANY INFORMATION ON THIS THREAD. AS IT IS AGAINST BLIZZARD FORUM'S CODE OF CONDUCT.

    [ Post edited by Sheel ]

    by Syndri | 29/04/2010 23:45:31

    Syndri

    No harm, no foul, Sheel! I'm glad you took the time to share with us. :)

    For reference, here's a step-by-step article on how to identify phishing emails:


    There's information regarding how to access email headers for different clients, too!

    BY FIRE BE SECURED!

    It’s never “too soon” to protect your account. Learn more about account security and the Battle.net Authenticator today (http://us.battle.net/security/)!

    by Syndri | 30/04/2010 00:01:10

    Syndri


    Q u o t e:
    You've done your part by sending it to hacks@blizzard.com


    Pips is correct. If you can just send the email our way with full headers, we'll be able to extrapolate any information we need. :)

    BY FIRE BE SECURED!

    It’s never “too soon” to protect your account. Learn more about account security and the Battle.net Authenticator today (http://us.battle.net/security/)!

    Blizzard Announcement Recent Blizzard Announcements

     



    Loaded in 0.11566 seconds