Phishing email?

Hey guys. I feel really stupid posting this, as I am usually first to dive in and tell a person that they are being phished But this email has got me kind of confused..

The other day I recieved an email in my inbox, that I assumed was fake, from [email protected]. It wasn't one of the usual phishing links I get that is sent to my Spam folder, but rather it bypassed that and came straight into my inbox, like regular emails from Jagex usually do. The email states that somebody is trying to "change the email address registered to my account", and prompts me to either confirm that I want the address changed, or deny that it was me who initiated the change in the first place.

Now I checked the main Runescape forums before coming here, and they say that any "legit" email coming from Jagex themselves will have the @email.jagex.com tag, which this email does. I WOULD NORMALLY JUST IGNORE THIS EMAIL COMPLETELY, but I am wondering if maybe somebody is trying to change one of the emails registered to one of my accounts or something. How can I check and be 100% sure that this is just a clever phishing attempt, and that my account email won't be changed in a few days like it states?

When it comes down to it, I still suspect this is pure bullshit because it doesn't actually tell me which account the email change request is for. The link also leads to services.runescape.com.cm. What does that "cm" extension mean?

 

If it leads to that address, I doubt its legit.

I would steer clear of it, although the email is confusing.

 

I never click on any Jagex e-mails, if I get anything I just open up my browser and go to Runescape.com.

 

Check the link You will notice the link has a 404 Page Not Found Error.

 

Any part of the runescape page where you have to enter your Runescape username and password will have in a green box at the start of the URL
A small padlock followed by Jagex Limited [GB].

If it doesn't have that, it is fake.

 

I think the links don't work after I posted them here for some reason, but when I check it from the inbox it leads to "secure.runescape.com.cm" and it takes me to a log in page when I click.

I logged in with a fake name and password, something like "Fuck you hax0r" and it took me to the next screen where I am prompted to enter the email address and the cancellation code. I think its a bunch of bs to be honest, but I am confused here for 2 main reasons:

1 - the email bypassed my spam blocker and made it into my inbox, like the legitmate emails do

2 - jagex confirmed that any legit emails would have the @email.jagex.com tags, like this one does.

I dont think I will end up trusting it unless I can 100% confirm that its real, but I really don't want to have somebody "register a new email" for one of my accounts. Is that even possible if somebody knows just your email address?

 

Aha! You smart, sexy man

The green padlock was not there, but I checked the link and it was an IE "e" next to the link. I loaded up runescape.com next, and any page you access on the real website, including the account log-in page, has a little "sword" icon next to it. I think that is sufficient enough proof that the link is fake. Thanks man.

I should probably post this on the RS forums as it seems like a new, more sophisticated phishing email. I checked the source code of the email and it shows me the IP address from where it was sent, but the actualy e-mail that apparantly sent it DOES match the official Jagex one. Odd :huh:

 

Uhm... It's not hard to include a little sword in the URL - that's just a favicon. I wouldn't go by that !

 

The little sword is beside the URL on the LEGIT Runescape site though.... the one that links out of the email I was sent does NOT have the sword... do you get what I am saying?

That just proves that the email link DOES NOT lead to the real Runescape.com, because it has no sword. So I don't really understand what your point of posting that was.. :huh:

 

I guess a mod can close this now. The question seems to be answered. Unless somebody else has recieved this EXACT same email, then I don't really need anymore feedback.

 

Its phish since i joined sythe i get about 10 phishing emails per week exactly the same as that 1 when i click them anyway it says phish site detected lol gg.

 

if they want u something they pm u on ur accounts inbox

 

Lol thats lucky. Mine doesn't have any warnings about it, which is why I am so suspicious.

Yeah I haven't recieved an ingame message yet. I will check all my other accounts too just to make sure. Thanks for reminding me about that

I think I pretty much got all the info I need now. Mods can close this please!

 

there is one really easy way to find out if its a phiser mail. just press the link and if u see anything wrong with the adress, like its usually fucked up like "www.r0n3skape.com/example" then it isnt legit. easy enough.

 

It is fake, I got one about being banned for RWT and I wasn't even registered on that address. Not that botting is gone, illegitimate people will try to phish and pose as trusted imposters.

 

The address was "secure.runescape.com.cm" though. That is the same as the actual runescape website log-in screen. Obviously if its something really weird and having nothing to do with RS at all, then its fake.

 

Requested.