Phising email @blizzard.com

#0 - Aug. 20, 2010, 6:41 p.m.
Blizzard Post
I keep getting phising emails that end in @blizzard.com? They ask for passwords and have horrible grammar, I thought @blizzard was safe?
#8 - Aug. 20, 2010, 7:22 p.m.
Blizzard Post
Heya Rakumine,

Here is some information on how you can verify each mail you receive from us, below:

    http://us.blizzard.com/support/article/25133

    What should I look for in the header?

    Email headers contain information about the sender (who sent the email message), the path the email took to reach your inbox, and things that may have happened to the email before arriving. This information is very important and can be used to determine whether or not an email is malicious.
    Once you've accessed an email's header information, you'll want to attempt to verify the sending address. To do this, look at the "Return-Path" or the "originating address" for the email. For most phishing emails, the email address displayed in this location will differ from the address displayed in the "From" field.

      A legitimate header from Blizzard Entertainment should look something like this:

      X-SID-PRA noreply@blizzard.com
      or
      Return-Path: < noreply@blizzard.com >
      Received: from smtp01.worldofwarcraft.com ([XX.XXX.XXX.XXX]) by…
      Received: from … by smtp01.worldofwarcraft.com …
      for <Your Email Address>; Tue, 29 Jan 2008 10:46:05 GMT
      From: noreply@blizzard.com
      To: You’re Email Address

    If you believe you've received a phishing email, please forward the email to hacks@blizzard.com , at your earliest convenience. When forwarding the email, copy and paste the entire email header into the message body to ensure that we are able to identify the source. This information will help us prevent future phishing emails of the same type.
For similar emails and what to look for when you receive emails from us, please visit this thread:
http://forums.worldofwarcraft.com/thread.html?topicId=965511383&sid=1