Scam E-mail?

#0 - Sept. 30, 2010, 1:13 a.m.
Blizzard Post
I've received probably hundreds of e-mails from "blizzard" over the years, so I'm fairly use to just deleting them and ignoring them (I'm assuming they got my email from some old blizzard fansite, but considering said e-mail is now my battle.net account theres not much I can do.) but this one specifically caught my attention.

Now, I'm 100% sure this is just a load of hoo-haa, but when checking the source and the link, it seemed to have come out clean so I just wanted to give a heads up to other people. Playing it safe, theres still no way I would EVER click on a link e-mailed to me when I can just take 10 seconds to manually type in battle.net or blizzard.com and get into my account management via that way.

Message:

Q u o t e:
Greetings!

It has come to our attention that you are trying to sell your personal World of Warcraft account(s).
As you may not be aware of, this conflicts with the EULA and Terms of Agreement.
If this proves to be true, your account can and will be disabled.
It will be ongoing for further investigation by Blizzard Entertainment's employees.
If you wish to not get your account suspended you should immediately verify your account ownership.

You can confirm that you are the original owner of the account to this secure website with:
[removed]

Login to your account, In accordance following template to verify your account.

* First Name
* Last Name
* Secret Answer
Show * Please enter the correct information

Thank you for your time and attention to this matter, and your continued interest in World of Warcraft.

Regards,

Account Administration Team
Blizzard Entertainment
http://www.blizzard.com/support/
World of Warcraft , Blizzard Entertainment 2010


When hovering over the link, it actually links to:
[removed]

And when checking the source I find...
Q u o t e:

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9OA==

X-Message-Status: n

X-SID-PRA: Blizzard Entertainment <WOWAccountadmin@blizzard.com>

X-AUTH-Result: NONE

X-Message-Info: 36VzpOhYwiGQ+krNMMsbLrs9hjMok6x/Lzj352m3b4Km1toa6s8y8jJgepRs3K/AXlOQ7QeXVOiq9YEU2Aq6E4HX7/jY6GGrYkrqzC7Z3SU=

Received: from blizzard.com ([58.22.166.132]) by col0-mc4-f8.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);

X-Mailer: Microsoft Outlook Express 6.00.2800.1106

Return-Path: WOWAccountadmin@blizzard.com

Message-ID: <COL0-MC4-F8oxnz44Ns001056ae@col0-mc4-f8.Col0.hotmail.com>



So be forewarned this one looked pretty convincing!
#2 - Sept. 30, 2010, 1:30 a.m.
Blizzard Post
Heya Mingers,

Thank you for the heads up! It’s best to send these types of emails right over to hacks@blizzard.com, remember to copy and paste the entire header into the message body, so we can identify the source. I did edit the web address on your post to be safe, please try not to add the links or addresses included in the emails when posting. Thank you!