Mmosale advice: How to spot real Blizzard emails
What will Blizzard ask in emails and what they will not: There are a couple of things that will instantly pop up the question if a mail is from Blizzard or not. Most of the times fake emails will ask for your password; Blizzard will
NEVER asks for these things!
DO NOT reply to these kind of emails!
Blizzard however will sometimes ask for things like:
- Your account details
- Other Character details
Etc..
Unless the email you received is a direct response to an email you have sent, never reply to such emails.
Known email addresses:
Blizzard emails will ALWAYS come from @blizzard.com! Here you can find a list of known email addresses that are valid:
Technical information about the email addresses:
If you are still not sure about the email address you can check some technical information.
Blizzard US
DNS: ob3.blizzard.com
IP: 216.148.0.68
Blizzard EU
DNS: eu-smtp02.blizzard.com
IP: 80.239.172.105
Or
DNS: eu-smtp01.blizzard.com
IP: 80.239.174.216
Blizzard insider
DNS: info.cme.vugames.net
IP: 12.129.240.41
Or
DNS: email.blizzard.com
IP: 12.129.200.219
An example:
OK here’s an example of an email scam.
https://img99.imageshack.us/img99/741/fakewlkuj9.jpg
https://img99.imageshack.us/img99/5829/fakewlk2fb6.jpg
As you can see in the images this a beta invite for WLK (or so it seems). But do note the following things:
- Typo in the email: World of Warcraft
- The URL is a spoof (check the link in the email and note the link left under)
- The header data says it is from [email protected] but the received from says another address
- The received SPF says it is not permitted nor denied. A real Blizzard email shows up as accepted.
So remember, keep your eyes out for such things!
Check the links:
The mail sometimes contains links. BEWARE that you are sure it is a valid link. For example:
- [email protected] (while it links to [email protected])
- https://www.wow-europe.com/account/ (while it links to www.imstealingyourpassword.com)
Always double check the link you are going to click! Also note the difference between a "0" (zero) and "o" (for example w0w-europe.com) or a "1" (one) and "l" (for example 1inks.wow-europe.com). Also as of lately scammers use www.vvovv-europe.com & www.vvorldofvvarcraft.com (two "V"'s next beside each other instead of a "W").
This is also known as "Phishing". For more details read this page: https://en.wikipedia.org/wiki/Phishing
To make sure a link is valid; Blizzard always used a secure connection. You can recognize this by the link provided is https://. Both Firefox and Internet Explorer display these website locations with a lock-icon.