Suspected Bogus Email Change Notification

Suspected Bogus Email Change Notification

in Account & Technical Support

Posted by: Aceman.4032

Aceman.4032

This morning I got an email notification from “ArenaNet” saying that someone had requested a change of email on my Guildwars account.

I thought this odd, because the email was sent to my primary email account that I don’t associate with my gaming (I use a secondary email for all my online games).

The really odd thing is that the links in the email are legit. They are the actual support URLs.

Just to be sure, I’ve changed my password, but just thought that you guys should be notified.

Here’s the Email, with all header information.


Delivered-To: aceman67@gmail.com
Received: by 10.76.69.6 with SMTP id a6csp93321oau;
Mon, 12 Aug 2013 06:26:54 -0700 (PDT)
X-Received: by 10.49.116.70 with SMTP id ju6mr13771490qeb.40.1376314013815;
Mon, 12 Aug 2013 06:26:53 -0700 (PDT)
Return-Path: <bounce+d71227.35e-aceman67=gmail.com@guildwars2.com>
Received: from mail-p1.guildwars.com (mail-p1.guildwars.com. [174.37.226.90])
by mx.google.com with ESMTP id n1si11731506qej.93.2013.08.12.06.26.53
for <aceman67@gmail.com>;
Mon, 12 Aug 2013 06:26:53 -0700 (PDT)
Received-SPF: pass (google.com: domain of bounce+d71227.35e-aceman67=gmail.com@guildwars2.com designates 174.37.226.90 as permitted sender) client-ip=174.37.226.90;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of bounce+d71227.35e-aceman67=gmail.com@guildwars2.com designates 174.37.226.90 as permitted sender) smtp.mail=bounce+d71227.35e-aceman67=gmail.com@guildwars2.com;
dkim=pass header.i=guildwars2.com DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=guildwars2.com; q=dns/txt; s=pic; t=1376314013; h=From: To: Subject: Mime-Version: Content-Type: Message-Id: Date: Sender; bh=Qekw+LaF3MJQTOZqWXEYsPdlkqypxICtIfhTts91Cok=; b=kQTZXYEOfuJ4zWv67H6n4OVRpgK9sOEdA/pzkDICOiRCqVrTYBNIWV5ckbDKVeLdx/vPjQMh pVkmaZPoi9PPYjE+9gh2/k1ArbSop7+u1Wf1JSh/QznfDA5Gzlxhviggquq0cmFbR/qIW8GT XPC3J5PltTUoQ1H0vfMf4XxJaFw= DomainKey-Signature: a=rsa-sha1; c=nofws; d=guildwars2.com; s=pic; q=dns; h=From: To: Subject: Mime-Version: Content-Type: Message-Id: Date: Sender; b=EnkDlyff5l8dcUon1INJ/AFO+wq/yWx7ITk7F+NwwCiMpCIegct2BudxWl2eowPRUsFMfr +CN8gqcyuR5b7rgmpJJFRyYU6y1Vxz7rFjeIJhJDgxm6H1mXcmFyfo7MGFTDNbzzFUwj9Djh qcgIZpo/TxkYmTeLM3QiL1N4AMl+E= Received: from guildwars2.com (Unknown [64.25.40.116]) by mxa.mailgun.org with ESMTP id 5208dcb8.7feebc3d1618-in3; Mon, 12 Aug 2013 13:01:44 -0000 (UTC) From: ArenaNet &lt;noreplyguildwars2.com>
To: aceman67@gmail.com
Subject: The e-mail address for your Guild Wars account has been changed
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary=“PartBound_20130812_130144”
Message-Id: <20130812130144.15950.44299@guildwars2.com>
X-Mailgun-Sid: WyJmN2ZjZSIsICJhY2VtYW42N0BnbWFpbC5jb20iLCAiMzVlIl0=
Date: Mon, 12 Aug 2013 13:26:53 +0000
Sender: noreply@guildwars2.com

—PartBound_20130812_130144
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Someone (hopefully you!) has requested to change the e-mail address associat=
ed with your Guild Wars account.

Need help or have questions about your Guild Wars account? Visit our support=
site: http://support.guildwars2.com/.

Thanks!
-The ArenaNet Team
—PartBound_20130812_130144
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html>
<body link=3D"#800000" vlink=3D"#800080" alink=3D"#FF0000">
<font face=3D"Verdana" size=3D"2" color=3D"#000000">
<p>Someone -hopefully you!- has requested to change the email address associ=
ated with your <i>Guild Wars</i> account.</p>
<p>Need help or have questions about your <i>Guild Wars</i> account? Visit o=
ur support site: http://support.guildwars2.com/.</p>;
<p>Thanks!</p>
<p>-The ArenaNet Team</p>
</font>
</body>
</html>
—PartBound_20130812_130144—

Suspected Bogus Email Change Notification

in Account & Technical Support

Posted by: SandraSolace.7682

SandraSolace.7682

It’s a fishing email, it’s known around here. You did the right thing!

Suspected Bogus Email Change Notification

in Account & Technical Support

Posted by: Inculpatus cedo.9234

Inculpatus cedo.9234

I am not sure that is a phishing email. You might want to contact support, and ask them if someone else (pretending to be you) requested a change of email address.

You also might want to remove your email address from your post, as that just gives account thieves a head start.

Suspected Bogus Email Change Notification

in Account & Technical Support

Posted by: Smooth Penguin.5294

Smooth Penguin.5294

Start a Support Ticket ASAP mate.

In GW2, Trading Post plays you!

Suspected Bogus Email Change Notification

in Account & Technical Support

Posted by: gassy.8975

gassy.8975

Yeah that doesn’t look like a phishing email. No funky link, and the IP address is associated with an ArenaNet mail server. Looks like someone’s account was compromised.

Suspected Bogus Email Change Notification

in Account & Technical Support

Posted by: Aceman.4032

Aceman.4032

You also might want to remove your email address from your post, as that just gives account thieves a head start.

You should read my post again…

Suspected Bogus Email Change Notification

in Account & Technical Support

Posted by: Inculpatus cedo.9234

Inculpatus cedo.9234

You also might want to remove your email address from your post, as that just gives account thieves a head start.

You should read my post again…

Yes, I am aware you said that wasn’t your game account email address, but thieves steal many things. Your choice, of course. Good luck. =)

Suspected Bogus Email Change Notification

in Account & Technical Support

Posted by: Gaile Gray

Gaile Gray

ArenaNet Communications Manager

It looks as if it is authentic, but I cannot be sure. I would recommend that you change your password (which you have), remove your personal email address from the post above (which you have not, but has been suggested by others), and feel free to contact Support by filing a ticket through the “Ask a Question” tab on that linked page if you’d like further help.

Gaile Gray
Communications Manager
Guild & Fansite Relations; In-Game Events
ArenaNet