Phish: I'm Selling My Account

Here is the e-mail:

Return-Path: lhingtgen@hotmail.com
Received: from gpprm ([198.146.64.14]) by BLU0-SMTP61.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.3959);
Sat, 20 Feb 2010 18:57:42 -0800
From: “Noreply@blizzard.com” <Noreply@blizzard.com>
To: <***@gmail.com>
Subject: World of Warcraft Account Management
Date: Sun, 21 Feb 2010 11:02:34 +0800

Greetings

An investigation of your World of Warcraft account has found strong evidence that the account in question is being sold or traded. As you may not be aware of, this conflicts with Blizzard’s EULA under section 4 Paragraph B which can be found here:
WoW -> Legal -> End User License Agreement
and Section 8 of the Terms of Use found here:
WoW -> Legal -> Terms of Use

The investigation will be continued by Blizzard administration to determine the action to be taken against your account. If your account is found violating the EULA and Terms of Use, your account can, and will be suspended/closed/or terminated.
In order to keep this from occurring, you should immediately verify that you are the original owner of the account.

To verify your identity please visit the following webpage:

http://www.worldofwarcraft-battle-warcraftcheck.com/account/support/login-support.htm

Only Account Administration will be able to assist with account retrieval issues. Thank you for your time and attention to this matter, and your continued interest in World of Warcraft.

Sincerely,

Account Administration
Blizzard Entertainment

  • It’s really from Hotmail, not Blizzard
  • Again, the greeting doesn’t have my name…
  • Besides the really bad phrasing and English here there is a couple of key points:

“As you many not be aware of”

Umm….Blizzard would never state that. If they did, the Lawyers would go NUTS.

A company would never blatantly admit that you just click on Accept when looking at the EULA and/or TOU and not read it.

Secondly, if they found strong evidence why are they still investigating?

“Hi, I’m mister Murder Detective. We found the gun you bought, we have the bullet from the body linking to the gun and we have your fingerprints on the gun. But, we’re still investigating so we’re not going to arrest you.”

But Wait!!

I can immediately clear my name! I can simply verify my identity and clear this matter up in an instant!

Pfft…

Oh ya, because verifying that I am who I am (Which you did by sending me this e-mail in the first place) will immediately remove any suspicion that I am selling my account.

Wow, no logic tree there….

So…in the fine tradition of the football referee, I’m reaching into my pocket and wiping out a penalty flag and throwing it.

The violation: BULLSHIT!

So, we’ll call this the bullshit flag.

And then, there is the domain (Which is one of my favorites):

www.worldofwarcraft-battle-warcraftcheck.com

  • World of Warcraft
  • Battle
  • Warcraft Check

So much fail.

And obviously not Blizzard.

UPDATE:

  • Received again on Tue, 23 Feb 2010 10:17:45 -0800

Linking to: www.worldofwarcraft-account-wowsecurity.com

  • Received again, still Hotmail, but different country:

Return-Path: eddierobins707@hotmail.co.uk
Received: from rsf ([216.12.92.185]) by BLU0-SMTP15.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.3959);
Mon, 1 Mar 2010 23:29:33 -0800
From: “Blizzard Entertainment” <wowaccountadmin@blizzard.com>

Linking to: www.worldofwarcraft-account-woworld.com

  • Received again:

Return-Path: edcinc@hotmail.com
Received: from hm ([72.32.6.254]) by BLU0-SMTP81.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.3959);
Tue, 2 Mar 2010 23:11:34 -0800
From: “Blizzard Entertainment” <wowaccountadmin@blizzard.com>
To: <***@gmail.com>

Linking to: www.worldofwarcraft-battle-wowwarning.com

  • Received again:

Return-Path: stigmatti@hotmail.com
Received: from uenxqa ([113.244.146.40]) by BLU0-SMTP26.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.3959);
Fri, 5 Mar 2010 18:14:55 -0800
Reply-To:
From: “noreply@blizzard.com” <noreply@blizzard.com>
To: <***@gmail.com>

Linking to: www.worldofwarcraft-validation.com

This time the formatting was no present and everything was just jumbled together.

  • Received again:

Return-Path: andr2981@hotmail.com
Received: from ssb ([60.248.224.206]) by BLU0-SMTP12.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.3959);
Sat, 20 Mar 2010 05:22:04 -0700
Reply-To:
From: “WoWAccountAdmin@blizzard.com” <WoWAccountAdmin@blizzard.com>
To: <***@gmail.com>
Subject: World of Warcraft – Account Administration

Linking to: www.worldofwarcraft-accounts-reports.com

  • Received again:

Return-Path: andreas_h_h@hotmail.com
Received: from figarh ([59.173.219.18]) by BLU0-SMTP101.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.3959);
Mon, 5 Apr 2010 07:51:57 -0700
From: “noreply@blizzard.com” <noreply@blizzard.com>
To: <***@gmail.com>
Subject: Worldofwarcraft Account Seaech

Linking to: www.audite-account-worldofwarcraft.com

WOW, this one was really bad…Subject was all fubared (Seaech??)

And the domain…Audite…I’m guessing that Audit was taken (Or…based on above maybe they just really can’t spell)

  • Received again:

Return-Path: ziic@hotmail.com
Received: from omt ([59.175.194.186]) by BLU0-SMTP78.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 20 Apr 2010 18:58:47 -0700
From: “noreply@blizzard.com” <noreply@blizzard.com>
To: <***@gmail.com>
Subject: World Of Warcraft-Account Security

Linking to: www.administration-supportblizzard.com

  • Received again:

Return-Path: steven_funny@hotmail.com
Received: from sfroigshn ([125.138.96.68]) by BLU0-SMTP91.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 21 Apr 2010 21:15:25 -0700
From: “noreply@blizzard.com” <noreply@blizzard.com>
To: <***@gmail.com>
Subject: Blizzard Support Customer Satisfaction Survey

Linking to: www.login-accounts-supportblizzard.com

Some survey eh? YOUR GETTING BANNED, how’s that for a survey PAL?

  • Received again:

Return-Path: ccersej@hotmail.com
Received: from ikoxzvrmg ([115.178.65.63]) by BLU0-SMTP96.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Fri, 23 Apr 2010 17:02:53 -0700
From: “” <noreply@blizzard.com>
To: <***@gmail.com>
Subject: Worldofwarcraft Potential Risks

Potential Risks eh? … RIGHT

  • Received again:

Return-Path: neilboyes63@hotmail.com
Received: from vf ([117.89.159.193]) by BLU0-SMTP49.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 27 Apr 2010 07:53:19 -0700
From: “wowaccountadmin@blizzard.com” <wowaccountadmin@blizzard.com>
To: <***@gmail.com>
Subject: World Of Warcraft-Account Instructions

Linking to: www.worldofwarcraft-account-authoriration.com

Account Instructions: Click here to get hacked by a misspelled domain…

  • Received again:

Return-Path: noemassias@hotmail.com
Received: from vhsidkqkj ([117.88.145.107]) by BLU0-SMTP24.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Sat, 1 May 2010 03:52:51 -0700
From: “wowaccountadmin@blizzard.com” <wowaccountadmin@blizzard.com>
To: <***@gmail.com>
Subject: World Of Warcraft-Account Instructions

Linking to: www.worldofwarcraft-account-authoriration.com

Authoriration…Japanese Accent?

  • Received again:

Return-Path: nicolaj-gangster@hotmail.com
Received: from ly ([115.140.143.253]) by BLU0-SMTP83.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 5 May 2010 04:59:56 -0700
From: “noreply@blizzard.com” <noreply@blizzard.com>
To: <***@gmail.com>
Subject: World Of Warcraft-Account Instructions

  • Received again:

Return-Path: lil_flip1013@hotmail.com
Received: from ifwj ([222.112.136.19]) by BLU0-SMTP79.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 5 May 2010 11:03:57 -0700
From: “noreply@blizzard.com” <noreply@blizzard.com>
To: <***@gmail.com>
Subject: Worldofwarcraft Account Seaech

Linking to: www.adminis-security-blizzard.com

WTF Kind of spelling is that? (And I don’t mean the subject, we already covered that one above…)

Admin is perhaps?

Admin Is Security Blizzard

ummm…ya, engrish at its finest.

  • Received again:

Return-Path: jonatan7689@hotmail.com
Received: from oskqxwgz ([221.232.180.125]) by BLU0-SMTP25.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Mon, 10 May 2010 11:09:54 -0700
From: “noreply@blizzard.com” <noreply@blizzard.com>
To: <***@gmail.com>
Subject: Worldofwarcraft Potential Risks

Linking to: www.questionnaire-worldofwarcraft.com

OH HEY!!!

There’s the domain they SHOULD have used with the subject of “Blizzard Support Customer Satisfaction Survey”

Silly Hackers, linking the wrong domain to the wrong e-mail

tsk tsk tsk…such shoddy work.

  • Received again:

Return-Path: fredric.spjut@hotmail.com
Received: from suvfmwgo ([59.175.194.186]) by BLU0-SMTP83.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 13 May 2010 06:35:22 -0700
From: “noreply@blizzard.com” <noreply@blizzard.com>
To: <***@gmail.com>
Subject: BATTLE.NET-Account Under Review

Linking to: www.questionnaire-blizzard.com

Under Review…ooooh, the shivers…

But at least it links to a questionnaire right?

Oh ya, probably no questionnaire there…unless you count “Give me your username and password” a questionnaire.

  • Received again:

Return-Path: david.rom@hotmail.fr
Received: from sh ([113.244.144.5]) by BLU0-SMTP67.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Sat, 15 May 2010 12:55:13 -0700
From: “Blizzard Entertainment” <wowaccountadmin@blizzard.com>
To: <***@gmail.com>
Subject: World of Warcraft Account!

Linking to: www.blizzard-website.com

Well well well…

Now there is a good domain. Almost makes you believe it.

“Blizzard Website”

Still ain’t Blizzard, but gotta give props to the hackers on this one. You can almost fool someone with that. (If Blizzard ever actually used the Blizzard domain for anything related to any accounts at all…)

  • Received again:

Return-Path: christofmanetsch13@hotmail.com
Received: from zpfuo ([58.212.217.81]) by BLU0-SMTP65.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Mon, 24 May 2010 15:36:46 -0700
From: “wowaccountadmin@blizzard.com” <wowaccountadmin@blizzard.com>
To: <***@gmail.com>
Subject: World Of Warcraft-Account Instructions

Linking to: www.worldofwarcraft-account-autheaticuter.com

Wow…there’s a domain for ya…

autheaticuter

Hmmm…

Auth

Eat

I

Cuter

Ya, that’s it!!

  • Received again:

Return-Path: nekosuki-chan@hotmail.fr
Received: from ythcq ([114.106.207.233]) by BLU0-SMTP26.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 25 May 2010 05:34:02 -0700
From: “wowaccountadmin@blizzard.com” <nekosuki-chan@hotmail.fr>
To: <***@gmail.com>
Subject: World Of Warcraft-Account Instructions

Linking to: www.worldofwarcraft-battle-account-authconceoron.com

WTF Is that?

authconceoron

Hmmm…

Auth Con — OK, so far its right, it is a “Con”

Ceoron

…maybe that’s Korean for “Got ya Moron!”

  • Received again:

Return-Path: galldrenn@hotmail.com
Received: from wutnr ([121.229.133.66]) by BLU0-SMTP101.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 25 May 2010 23:08:49 -0700
From: “wowaccountadmin@blizzard.com” <wowaccountadmin@blizzard.com>
To: <***@gmail.com>
Subject: World Of Warcraft-Account Instructions

Linking to: www.worldofwarcraft-account-authaticuter.com

Man, these domains are getting worse…this is like that eating domain but AT instead of EAT…

  • Received again:

Return-Path: colemanglmn@hotmail.com
Received: from jhvez ([220.249.134.163]) by BLU0-SMTP44.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 27 May 2010 01:08:30 -0700
Sender: colemanglmn@hotmail.com
From: “noreply@blizzard.com” <noreply@blizzard.com>
To: <***@gmail.com>
Subject: World Of Warcraft Account Security Risks Notice

Linking to: sorry.battlre.net

Now there’s a domain…its really close to Battle.net (Just with an extra R)

So it’s really easy to mistake it for the real thing.

Well, it would have been easy…but they put “sorry” in front of it…which just raises alarm bells for closer inspection.

Buy hey…at least they’re sorry.

  • Received again:

Return-Path: roswell7522@hotmail.com
Received: from nkfjvi ([60.248.58.160]) by BLU0-SMTP43.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 1 Jun 2010 11:05:25 -0700
Reply-To:
From: “Blizzard Entertainment” <WoWAccountAdmin@blizzard.com>
To: <***@gmail.com>
Subject: World of Warcraft Account security

Linking to: www.worldofwarcraft-accounts-report.com

HURRAY!!! A Correctly spelled Domain!!

(But…still not Blizzard)

  • Received again:

Return-Path: azeem317@hotmail.com
Received: from joxey ([211.233.15.27]) by BLU0-SMTP99.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 1 Jun 2010 19:28:18 -0700
Reply-To:
From: “wowaccountadmin” <noreply@blizzard.com>
To: <***@gmail.com>
Subject: =?utf-8?B?V29ybGQgb2YgV2FyY3JhZnQgQWM=?=
=?utf-8?B?Y291bnQgUGFzc3dvcmQgdmVyaWY=?=
=?utf-8?B?aWNhdGlvbuKAj+KAjw==?=
subject: World of Warcraft Account Password verification??

Linking to: www.wowaccountadmin-login-security.com

Well, this one put the subject in UTF-8 encoding, pretty much exploits it origins to outside the US (And outside most of Europe)

  • Received again:

Return-Path: kamel.04@hotmail.fr
Received: from subjndp ([114.106.204.114]) by BLU0-SMTP71.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Sun, 20 Jun 2010 09:25:00 -0700
From: “wowaccountadmin@blizzard.com” <kamel.04@hotmail.fr>
To: <jayras@gmail.com>
Subject: World Of Warcraft-Account Instructions

Received again…new Variant:

Return-Path: <batltlen@batltle.net>
Received: from server.anonymous-hosting-service.com (server.anonymous-hosting-service.com [85.17.90.204])
by mx.google.com with ESMTP id w79si28752609weq.156.2010.06.30.11.09.10;
Wed, 30 Jun 2010 11:09:10 -0700 (PDT)
Received-SPF: pass (google.com: domain of batltlen@batltle.net designates 85.17.90.204 as permitted sender) client-ip=85.17.90.204;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of batltlen@batltle.net designates 85.17.90.204 as permitted sender) smtp.mail=batltlen@batltle.net
Received: from apache by server.anonymous-hosting-service.com with local (Exim 4.67)
(envelope-from <batltlen@batltle.net>)
id 1OU1x8-0005OW-Ff
for jayras@gmail.com; Wed, 30 Jun 2010 20:24:06 +0200
To: jayras@gmail.com
Subject: World of Warcraft: Account Notification

Greetings,

Behind the scenes at Blizzard, our account security and customer service staff are working tirelessly to make sure that all your World of Warcraft accounts are safe and sound. During one of our investigations, we have found some evidence suggesting that your account is currently being traded or sold.

While this investigation will be continued by Blizzard Account Administration to determine what, if any, action to be taken against your account please note that if your account is found to be in violation of the EULA and Terms of Use, your account can, and will be suspended or terminated. In order to keep this from happening, we suggest you make use of our Secret Question change form in order to further protect your account.

To change the secret question associated with your account, please visit the following webpage: http://www.battle.net.

Any disputes or questions concerning the following account action can only be addressed by our Account Administration staff. To learn more about how Account Administration is able to assist you, please visit us at http://www.battle.net.

For further information, please view the World of Warcraft Policies and Terms of Use Agreement: http://us.blizzard.com/support/article.xml?articleId=20309 and http://www.worldofwarcraft.com/termsofuse.shtml. Please be aware that additional inappropriate actions may result in further disciplinary action, up to or including account closure.

We understand that these policies may seem harsh, but they are in place to ensure that every player is able to fully enjoy their travels in the World of Warcraft. Thank you in advance for respecting our position.

Regards,
Mikotokaran
Senior Game Master
Blizzard Entertainment
www.worldofwarcraft.com

Links to: batltle.net

WOW…this one is actually in “proper English”

Too bad logic is still missing.

Let’s see here…

You say I’m selling my account.

But changing my security question will remove any doubt and acquit me of all such charges?

Ya…ok…I believe it.

Just like I believe your misspelled domain name is really Battle.net

So…ya…not Blizzard.

  • Received again:

Return-Path: dev_ledington09@hotmail.com
Received: from hgf ([114.106.203.82]) by BLU0-SMTP67.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Fri, 2 Jul 2010 19:06:58 -0700
From: “wowaccountadmin@blizzard.com” <dev_ledington09@hotmail.com>
To: <jayras@gmail.com>
Subject: World Of Warcraft-Account Instructions

Links to: www.worldofwarcraft-battle-account-autheroeron.com

  • Received again:

Return-Path: fredt123@hotmail.com
Received: from ikg ([221.6.43.32]) by BLU0-SMTP17.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Sat, 3 Jul 2010 07:23:21 -0700
Sender: fredt123@hotmail.com
From: “donotreply@blizzard.com” <donotreply@blizzard.com>
To: <jayras@gmail.com>
Subject: World of Warcraft Account Security Verification

Links to: www.worldofwarcraft-account-security-verification.com

  • Received again:

Return-Path: christofmanetsch13@hotmail.com
Received: from ildbgnz ([222.94.156.214]) by BLU0-SMTP49.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 6 Jul 2010 12:29:59 -0700
Sender: christofmanetsch13@hotmail.com
From: “wowaccountadmin@blizzard.com” <wowaccountadmin@blizzard.com>
To: <jayras@gmail.com>
Subject: World 0f warcraft-Account Warning

  • Received Again:

Return-Path: jokiwaand@hotmail.com
Received: from cbbr ([114.106.198.149]) by BLU0-SMTP92.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Sat, 10 Jul 2010 04:51:24 -0700
From: “wowaccountadmin@blizzard.com” <jokiwaand@hotmail.com>
To: <jayras@gmail.com>
Subject: World Of Warcraft-Account Instructions

Links to: www.worldofwarcraft-battle-account-autheceron.com

  • Received Again:

Return-Path: ki29@hotmail.fr
Received: from qrsddqge ([114.106.207.212]) by BLU0-SMTP52.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 13 Jul 2010 00:47:51 -0700
From: “wowaccountadmin@blizzard.com” <ki29@hotmail.fr>
To: <jayras@gmail.com>
Subject: World Of Warcraft-Account Instructions

Links to: www.worldofwarcraft-battle-account-autheceron.com

  • Received again:

Return-Path: wylliam1@hotmail.com
Received: from cbk ([114.106.143.194]) by BLU0-SMTP53.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Mon, 19 Jul 2010 22:50:17 -0700
From: “wowaccountadmin@blizzard.com” <wylliam1@hotmail.com>
To: <jayras@gmail.com>
Subject: World Of Warcraft-Account Instructions

Linked to: www.worldofwarcraft-battle-account-autheccron.com

  • Received again:

Return-Path: xepoz@hotmail.com
Received: from jwa ([221.6.42.24]) by BLU0-SMTP100.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 5 Aug 2010 07:43:06 -0700
Sender: xepoz@hotmail.com
From: “WoWAccountAdmin@blizzard.com” <WoWAccountAdmin@blizzard.com>
To: <jayras@gmail.com>
Subject: World of Warcraft — Account Action Notification

Links to: www.worldofwarcraft-account-security-verification.com

  • Received again:

Return-Path: david14_38@hotmail.com
Received: from wpvotpzp ([114.106.199.241]) by BLU0-SMTP35.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Fri, 6 Aug 2010 00:25:43 -0700
From: “wowaccountadmin@blizzard.com” <david14_38@hotmail.com>
To: <jayras@gmail.com>
Subject: World Of Warcraft-Account Instructions

Links to: www.worldofwarcraft-battle-account-authecon.com

  • Received again:

Return-Path: jeremielotz@hotmail.com
Received: from qzcuzvu ([114.106.203.215]) by BLU0-SMTP92.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Sun, 8 Aug 2010 23:51:26 -0700
From: “wowaccountadmin@blizzard.com”
To:
Subject: World Of Warcraft-Account Instructions

Links to: us.batte-net.com

  • Received again:

Return-Path: rickard1984@hotmail.com
Received: from eabi ([123.147.184.25]) by BLU0-SMTP12.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Mon, 9 Aug 2010 14:21:19 -0700
Sender: rickard1984@hotmail.com
From: “noreply@blizzard.com” <noreply@blizzard.com>
To: <jayras@gmail.com>
Subject: Battle.net survey

Links to: us.battrd.net

  • Received again:

Return-Path: shaquilleoneal@hotmail.fr
Received: from pjkysvg ([210.99.208.43]) by BLU0-SMTP29.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 10 Aug 2010 09:19:18 -0700
Reply-To: <wowaccountadmin@blizzard.com>
From: “wowaccountadmin@blizzard.com” <wowaccountadmin@blizzard.com>
To: <jayras@gmail.com>
Subject: =?utf-8?B?V29ybGQgb2YgV2FyY3JhZnQgLSA=?=
=?utf-8?B?QWNjb3VudCBBZG1pbmlzdHJhdGk=?=
=?utf-8?B?b27igI/igI8=?=

Links to: www.wowbattle-automatic-detection.com

Ͼ http://www.pthkm.com/xpjylc/ http://www.pthkm.com/bgylc/ Ͼֳ http://www.pthkm.com/pjylc/ ewinֳ http://www.ybewv.com/ewinylc/ Ŷij http://www.ybewv.com/amdc/ ˰ټ http://www.eklhp.com/zrbjl/ Ŷij http://www.aojxq.com/amdcgl/ bet http://www.lpmwq.com/bet365ylc/ ȫѶ http://www.wfgpb.com/qxwgw/ 188 http://www.ywiql.com/jbb188gq/ bet http://www.nwiza.com/bet365ylc/ 365 http://www.rvodp.com/bet365tyzx/ Ͼ http://www.yjzhv.com/smxpjgw/ Ͼij http://www.utssx.com/ampjdc/ ˹˶ij http://www.bkrft.com/amwnsrdc/ Ͼij http://www.bkrft.com/pjdc/ ƶij http://www.bkrft.com/yddc/ Ŷij淨 http://www.bkrft.com/amdcwf/ ȫѶ http://www.bkrft.com/qxwzx/ ˹ά˹ij http://www.fldwd.com/lswjsdc/ ζij http://www.fldwd.com/lwdc/ ŶijЩ http://www.fldwd.com/amdcynx/ ij http://www.fldwd.com/mddc/ ˹˶ij http://www.fldwd.com/wnsrdc/ Ͼij http://www.yuwew.com/amxpjdc/ ĥij http://www.yuwew.com/mddc/ ijϷ http://www.yuwew.com/dcyx/ ĥƽij http://www.yuwew.com/mdhjdc/ ĥij http://www.hgvnk.com/lwmddc/ Űټ http://www.hgvnk.com/ambjl/ ټϷ http://www.hgvnk.com/bjlyx/ ˰ټ http://www.hgvnk.com/zrbjl/ http://www.dnczv.com/bcw/ Ŷij http://www.ybewv.com/amdc/ ˰ټ http://www.eklhp.com/zrbjl/ ټ http://www.zytygb.com/baijiale/ Ŷij http://www.luyouren.com/amdc/ ֳ http://www.yjzhv.com/ozylc/ Ŷij http://www.luyouren.com/aomenduchan/ bet http://www.lsylnj.com/bet365/ Ŷij http://www.lsylnj.com/amdc/ ټ http://www.lsylnj.com/bjl/ http://www.lsylnj.com/bcw/ ˹ http://www.lsylnj.com/wnsrylc/ Ͼ http://www.lsylnj.com/xpjylc/ ټ http://www.zytygb.com/baijiale/ Ŷij http://www.luyouren.com/aomengdushang/ ewinֳ http://www.luyouren.com/ewinyulechen/ bet http://www.luyouren.com/bet365/ ټ http://www.luyouren.com/bjl/ Ŷij http://www.luyouren.com/amdc/ Ŷij http://www.luyouren.com/amduchan/ Ŷij http://www.luyouren.com/aomendc/ Ŷij http://www.luyouren.com/aomenduchan/ Ŷij http://www.luyouren.com/aomengdushang/ ewinֳ http://www.luyouren.com/ewinylc/ ewinֳ http://www.luyouren.com/ewinylchen/ ewinֳ http://www.luyouren.com/ewinylec/ ewinֳ http://www.luyouren.com/ewinyulc/ ewinֳ http://www.luyouren.com/ewinyulechen/ http://www.dnczv.com/bcw/ ټ http://www.dnczv.com/bjl/ bet http://www.dnczv.com/bet365/ ˹ http://www.pthkm.com/wnsrylc/