He hasn't changed his Password for more than a month , so it might be legit , some people farm accounts to sell.