Now I'm very good at detecting false emails, but this has passed me
It's from "support@guildwars2.com" and contains my correct email address.
When I click the link it goes to a guildwars2.com domain.
However when I enter a new password (I used a false in case) it doesn't change the password on my account, e.g it doesn't let me log in but I can log in using my old password.
Reason I ask is I submitted a ticket saying my one day headstart wasn't active
Cheers