Phishing or not?

#0 - Nov. 16, 2010, 1:04 p.m.
Blizzard Post
I'm usually pretty good with recognizing phishers, but this one is throwing me for a loop:

Delivered-To:
Received: by 10.204.175.7 with SMTP id v7cs10150bkz;
Tue, 16 Nov 2010 01:04:44 -0800 (PST)
Received: by 10.231.153.69 with SMTP id j5mr5411333ibw.7.1289898282902;
Tue, 16 Nov 2010 01:04:42 -0800 (PST)
Return-Path: <support@blizzard.com>
Received: from blizzard.com ([211.171.245.147])
by mx.google.com with SMTP id fu11si498706vbb.33.2010.11.16.01.04.38;
Tue, 16 Nov 2010 01:04:42 -0800 (PST)
Received-SPF: fail (google.com: domain of support@blizzard.com does not designate 211.171.245.147 as permitted sender) client-ip=211.171.245.147;
Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of support@blizzard.com does not designate 211.171.245.147 as permitted sender) smtp.mail=support@blizzard.com
Received: from blizzard.com ([192.168.160.1])
(envelope-sender <support@blizzard.com>)
by 192.168.160.161 with ESMTP
for ; Tue, 16 Nov 2010 01:04:04 +0800
Message-ID: <961685F4CD51937472E533CA05C9F215@blizzard.com>
From: "noreply@blizzard.com" <support@blizzard.com>
To:

This particular message was telling me that my login email was changed. (I WAS able to log into here/battle.net with my current email)

Are there any signs in this header that show it's a phisher, or do I need to start running around like a chicken with no head?

Thanks!
#2 - Nov. 16, 2010, 1:13 p.m.
Blizzard Post
211.171.245.147 is Seoul....Korea :)

Nope, not us.