I can't tell if I'm being phished

#0 - Nov. 8, 2010, 5:56 a.m.
Blizzard Post
I've received emails saying

Blizzard Entertainment recently received a request to change the e-mail address used to log in to the Battle.net account with the username (myemail)@hotmail.com. The e-mail address k***@hotmail.com

and a previous one stating


Battle.net Account - Password Reset

We have reset the password for the Battle.net account associated with this email address. To choose a new password, please click the following link and follow the instructions:

Both, with more instructions, the emails say from @blizzard, and when I reply, they go to an @blizzard email as well.

My password never reset, and has always been the same, I even recently changed it to ensure it was ok.

If this was you, Blizzard, I did not request anything, and will not want to change my email ever. If not, it's a damn good fake.
#5 - Nov. 8, 2010, 6:15 a.m.
Blizzard Post
Q u o t e:



Thanks, But the weird thing was that I checked the header code, and it said [email protected], and it never gave me a different address. And the site they wanted me to go to was a us.battle.net site. But I noticed that it had another .net after (us.battle.net.somewords.net), and I didn't even know that was allowed. Anyway I didn't click anything, just wondered how that was possible.


If it had other things in the URL then it was NOT Battle.net, it was a URL constructed to fool you into thinking it was. Just because a URL has some Blizzardish-sounding-buzzwords-strung-together-by-hyphens, does NOT mean that's the same domain.

Always check the internal routing headers on emails, and you could even do an IP lookup or whois on any suspicious domains names.