Guild Wars 2

I got this email today. Thought you all might what a look at it. I removed some of the url but take a look at this.

Greetings!

It has come to our attention that you are trying to sell your personal Guild Wars account(s). As you may not be aware of, this conflicts with the EULA and Terms of Agreement. If this proves to be true, your account can and will be disabled. It will be ongoing for further investigation by ArenaNet Entertainment’s employees. If you wish to not get your account suspended you should immediately verify your account ownership.

You can confirm that you are the original owner of the account to this secure website with:

{REDACTED}

If you ignore this mail your account can and will be closed permanently. Once we verify your account, we will reply to your e-mail informing you that we have dropped the investigation.

Regards,

Account Administration Team
Thanks! —The ArenaNet Team
--———————————

It came from,
IP Address: 218.71.140.187
ISP: Beilun Education Net
Region: Ningbo (CN)

(sender IP is 218.71.140.187) smtp.mailfrom=zrnb@vascfdi.org; dkim=none header.d=guildwars2.com; x-hmca=none
X-SID-PRA: noreply@guildwars2.com

They set it up to make it look like its coming from noreply@guildwars2.com. If you look at the url you will see something that should be obvious.

Words:
allow-login?token, request, ip=62.150.38.163
First is is saying it wants to allow a login. Second is a request, third what ip address is requesting it.

IP Address: 62.150.38.163
ISP: QualityNet
Organization: Qualitynet Co.
Region: Kuwait (KW)

Yep, completely wrong. A total scam and a lie. They are trying to hard too. Your email will read it as if it really come from noreply@guildwars2.com and unless you look at the message source code you don’t even know it wasn’t sent from noreply@guildwars2.com. But the url was a good giveaway that some one wants you to say its ok to log into my account and steal your stuff.