Fake Beta Invite?

#0 - Oct. 27, 2010, 5:59 p.m.
Blizzard Post
So I know some pretty fancy fake beta invites have been going out, but this one I received looks legit, and matches a lot of the information I got when I got into the Lich King beta a few years back. Heres the info:

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9NA==

X-Message-Status: n

X-SID-PRA: WoW Expansion Beta <[email protected]>

X-DKIM-Result: None

X-AUTH-Result: NONE

X-Message-Info: 36VzpOhYwiF4WB+8j8KT04bWT62YRVrhlV43apC8erRxfyItT8Jt5h4zrVZeFd10TqHbyxnKjKST+lBozfhRA6tTRcFsVgkPdVpx9uOXXVkViXO1nGO3zQ==

Received: from blizzard.com ([165.132.41.8]) by COl0-MC4-F19.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);

Tue, 26 Oct 2010 11:48:11 -0700

Received: from zl ([192.168.1.116])

(envelope-sender <[email protected]>)

by 192.168.1.112 with ESMTP

for <[email protected]>; Tue, 26 Oct 2010 13:48:12 -0500

Reply-To: <[email protected]>

Message-ID: <E29D60839109EA68404910AEA303EB95@zl>

From: "WoW Expansion Beta" <[email protected]>

To: <[email protected]>

Subject: =?utf-8?B?V29ybGQgb2YgV2FyY3JhZnQocik=?=

=?utf-8?B?OiBDYXRhY2x5c20odG0pIEJldGE=?=

=?utf-8?B?IFRlc3QgSW52aXRhdGlvbuKAjw==?=

Date: Wed, 27 Oct 2010 07:25:08 -0500

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: base64

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.5512

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512

Return-Path: [email protected]

X-OriginalArrivalTime: 26 Oct 2010 18:48:11.0659 (UTC) FILETIME=[56E6F5B0:01CB753E]


I know its only just about the 24 hour mark for waiting, but I just want to make sure I'm not sitting around for something if I am just getting scammed here. Thanks ya'll.
#2 - Oct. 27, 2010, 6:09 p.m.
Blizzard Post
Thanks for posting the email headers, Dengare.

This email is indeed a phishing email, which I was able to determine from the following line:

Received: from blizzard.com ([165.132.41.8]) by COl0-MC4-F19.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);

While it appears to be coming from blizzard.com the IP is actually in Korea and the email address it is coming from is actually a Hotmail address.

Also, to clarify, the account you are posting from has not been flagged for the Cataclysm beta at this time. :(