#2 - Oct. 24, 2010, 6:35 a.m.
If you pop open the internal routing header - that won't be actually from Blizzard.
The FROM line in an email is as easy to spoof as writing a fake return address on a paper envelope.
And you are most welcome, we do our best to try to help our players protect themselves. Sadly, often by the time the warnings are read....it's already too late. Glad to hear you were appropriately suspicious!