New Phishing Email

#0 - Sept. 20, 2010, 5:58 p.m.
Blizzard Post
At least I think it is. Didn't see it in the long list in the sticky. Funny thing here is this email hasn't been used for WoW since a trial in Dec.05. The first link I hover over shows it going to a very strange address.
I have placed that phishing address at the bottom of this post as well as header information. Sorry if this is too much/not enough information. The sticky wasn't clear on what was needed other than just post it as a new topic in Customer Service.

Q u o t e:
Hello,

This is an automated notification regarding your World of Warcraft account. Your account options was recently modified through the Account Management website.

*** If you did NOT make any changes to your account or subscription, we recommend you login to Account Management at the following link to review your account settings:
http://www.worldofwarcraft.com/account/billing/

If you cannot sign into Account Management using the link above, or if unauthorized changes continue to happen, please contact Blizzard Billing & Account Services for advanced assistance.

Account security is solely the responsibility of the accountholder. Please be advised that in the event of a compromised account, Blizzard representatives will typically lock the account. In these cases the Account Administration team will require faxed receipt of ID materials before releasing the account for play.

Regards,

The World of Warcraft Support Team
Blizzard Entertainment
http://www.blizzard.com/support/wowindex/


Removed the link, email forwarded to proper address :)

Header of email with my email removed : Return-Path: <amrhein.sascha@googlemail.com>
Received: from mtain-di09.r1000.mx.aol.com (mtain-di09.r1000.mx.aol.com [172.29.64.13]) by air-mf01.mail.aol.com (v129.4) with ESMTP id MAILINMF011-8bc94c947a4b321; Sat, 18 Sep 2010 04:37:32 -0400
Received: from mail-yw0-f49.google.com (mail-yw0-f49.google.com [209.85.213.49])
by mtain-di09.r1000.mx.aol.com (Internet Inbound) with ESMTP id 891D638001146
for <o>; Sat, 18 Sep 2010 04:34:53 -0400 (EDT)
Received: by ywi4 with SMTP id 4so1196857ywi.22
for <>; Sat, 18 Sep 2010 01:34:14 -0700 (PDT)
X-BitDefenderWKS-SpamStamp: v1, build 2.9.6.107522, bayes score:
500(0), pbayes score: 241(241), apm score: 500, neunet score: 500(0),
total: 241(775)
X-BitDefenderWKS-Spam: No - 241
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=googlemail.com; s=gamma;
h=domainkey-signature:received:received:message-id:from:to:subject
:date:mime-version:content-type:x-priority:x-msmail-priority
:x-mailer:x-mimeole;
bh=pqJLfNExcyAegXxXjuzD7t/JXwcHJPvj3eDlKJ7DBco=;
b=hn8N4BL08/zvh7zOF3CHUfY0FhNv++la51/165LFbMsB5Nl7icPFpzorKLqsRCI0UH
NHq+t811FJ4z5PI5mrVNA1e57obcI+HxjluTIyxHNbwa3x6fu59hTbJs8AeUAdbOBAoN
aKkbC/5D6HqOKJLJFLDPxZgk4vgWCs+r64kIY=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=googlemail.com; s=gamma;
h=message-id:from:to:subject:date:mime-version:content-type
:x-priority:x-msmail-priority:x-mailer:x-mimeole;
b=u6PyFK5Zq6IIwp6P/XXtHUTiKnGTm9LyAmo4wito1aFzCXXaFKYFjBqoga2VPhctsu
k8vbT7SVctf/B0C1ZEiKsj5CfgjNZrrAnPyfBLm59JD/ouo38WRxLRZzwfQrqB1iijnU
0/GV1LqKVtl0pzLSJM3J162783+8QnuknegLo=
Received: by 10.151.82.14 with SMTP id j14mr6864425ybl.307.1284798854316;
Sat, 18 Sep 2010 01:34:14 -0700 (PDT)
Received: from nm ([121.254.235.212])
by mx.google.com with ESMTPS id e7sm666562ybe.16.2010.09.18.01.34.12
(version=SSLv3 cipher=RC4-MD5);
Sat, 18 Sep 2010 01:34:13 -0700 (PDT)
Message-ID: <DB1EF931DE369F9CDCB1099C58F0063E@nm>
From: Blizzard Entertainment <amrhein.sascha@googlemail.com>
To: <>
Subject: Worldofwarcraft Account login
Date: Sat, 18 Sep 2010 16:33:53 +0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0FF2_01E94C8E.13206A30"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
x-aol-global-disposition: G
X-AOL-SCOLL-AUTHENTICATION: mail_rly_antispam_dkim-m212.1 ; domain : googlemail.com DKIM : pass
x-aol-sid: 3039ac1d400d4c9479ad25c9
X-AOL-IP: 209.85.213.49
X-AOL-SPF: domain : googlemail.com SPF : pass
Status: O
#3 - Sept. 20, 2010, 7:25 p.m.
Blizzard Post
Heya Ämentius,

Thank you for the heads up! It’s best to send these types of emails right over to hacks@blizzard.com, remember to copy and paste the entire header into the message body, so we can identify the source. Thank you!