Fake Blizzard Email

#0 - Sept. 14, 2010, 6:28 p.m.
Blizzard Post
I have gotten two emails, both of which look like this

*
Worldofwarcraft Account login‏
Blizzard Entertainm​ent

To:
Hello,

This is an automated notification regarding your World of Warcraft account. Your account options was recently modified through the Account Management website.

*** If you did NOT make any changes to your account or subscription, we recommend you login to Account Management at the following link to review your account settings:
http://www.worldofwarcraft.com/account/billing/

If you cannot sign into Account Management using the link above, or if unauthorized changes continue to happen, please contact Blizzard Billing & Account Services for advanced assistance.

Account security is solely the responsibility of the accountholder. Please be advised that in the event of a compromised account, Blizzard representatives will typically lock the account. In these cases the Account Administration team will require faxed receipt of ID materials before releasing the account for play.

Regards,

The World of Warcraft Support Team
Blizzard Entertainment
http://www.blizzard.com/support/wowindex/

now while that first link looks right, i never click links from emails I did not ask for, and having an authenticator i assumed it was fake right away, altho I did manually go to my account page and double check anyhow. Everything was normal so I double checked the email and found the email senders were actually gmail accounts not @blizzard.com and right click copied the first link to search it and it ended up being

[link removed]
a very fake site. Did not go to the site myself so can't verify how real it looks beyond the email or if it puts keyloggers or anything, just a heads up that the hackers are getting better at faking
#3 - Sept. 14, 2010, 6:36 p.m.
Blizzard Post
Heya Arithol,

Thank you for the heads up! It’s best to send these types of emails right over to [email protected], remember to copy and paste the entire header into the message body, so we can identify the source. I did edit the web address on your post, please try not to add the links or addresses included in the emails when posting. Thank you!