Phishing email?

[Zerkerfist]

Hey guys. I feel really stupid posting this, as I am usually first to dive in and tell a person that they are being phished But this email has got me kind of confused..

The other day I recieved an email in my inbox, that I assumed was fake, from [email protected]. It wasn't one of the usual phishing links I get that is sent to my Spam folder, but rather it bypassed that and came straight into my inbox, like regular emails from Jagex usually do. The email states that somebody is trying to "change the email address registered to my account", and prompts me to either confirm that I want the address changed, or deny that it was me who initiated the change in the first place.

Dear Player
This is an automated email from Jagex Ltd., makers of RuneScape and FunOrb, and publishers of War of Legends, in response to a request to change the registered address for your Jagex account.
To confirm you want to change your address, we require you to follow this link: http://secure.runescape.com/m=weblo...=AAAAAAAJyUODPvuoTPxSSg&ssl=0&id=761509104543 and fill in the email address this message was sent to and the verification code shown below.
Your verification code: s196GRv9qV4uC02sacx6Xj4o2kcl0z
Your verification code will expire at 9-November-2011 21:32. To complete the address change, you will need to enter the validation code from a message that will be sent to your new email address.

IF YOU DID NOT REQUEST ANY CHANGES:

You can enter your abort code at the code entry page: http://secure.runescape.com/m=weblo...=AAAAAAAJyUODPvuoTPxSSg&ssl=0&id=761509104543
If you do not abort this change, your registered address WILL change at 18-November-2011 21:32 if the validation code is submitted by the owner of the new address.
Your abort code: g5a24vueDIrGFANKuFzk0tXzeWisWE
You should also make sure your account is secure by setting a new password and recovery questions. We also recommend you make sure your computer is secure by installing up-to-date antivirus software.
We store no information about you other than your email address, and we will never pass this on to other companies without your consent.

Many thanks,
Jagex Games Studio
St. John\'s Innovation Centre
Cowley Road
Cambridge
CB4 0WS
United Kingdom


Copyright © 1999 - 2011 Jagex Ltd. Jagex, RuneScape, FunOrb, War of Legends and Stellar Dawn are registered trademarks of Jagex Ltd in the United Kingdom and trademarks used in other countries of the world.

By using our service you are agreeing to our Terms and Conditions and Privacy Policy.

Now I checked the main Runescape forums before coming here, and they say that any "legit" email coming from Jagex themselves will have the @email.jagex.com tag, which this email does. I WOULD NORMALLY JUST IGNORE THIS EMAIL COMPLETELY, but I am wondering if maybe somebody is trying to change one of the emails registered to one of my accounts or something. How can I check and be 100% sure that this is just a clever phishing attempt, and that my account email won't be changed in a few days like it states?

When it comes down to it, I still suspect this is pure bullshit because it doesn't actually tell me which account the email change request is for. The link also leads to services.runescape.com.cm. What does that "cm" extension mean?

 

[Me0w]

If it leads to that address, I doubt its legit.

I would steer clear of it, although the email is confusing.

 

[Laptop65]

I never click on any Jagex e-mails, if I get anything I just open up my browser and go to Runescape.com.

 

[Paralysisâ„¢]

Check the link You will notice the link has a 404 Page Not Found Error.

 

[BEYOND REASON]

Any part of the runescape page where you have to enter your Runescape username and password will have in a green box at the start of the URL
A small padlock followed by Jagex Limited [GB].

If it doesn't have that, it is fake.

 

[Zerkerfist]

Check the link You will notice the link has a 404 Page Not Found Error.

I think the links don't work after I posted them here for some reason, but when I check it from the inbox it leads to "secure.runescape.com.cm" and it takes me to a log in page when I click.

I logged in with a fake name and password, something like "Fuck you hax0r" and it took me to the next screen where I am prompted to enter the email address and the cancellation code. I think its a bunch of bs to be honest, but I am confused here for 2 main reasons:

1 - the email bypassed my spam blocker and made it into my inbox, like the legitmate emails do

2 - jagex confirmed that any legit emails would have the @email.jagex.com tags, like this one does.

I dont think I will end up trusting it unless I can 100% confirm that its real, but I really don't want to have somebody "register a new email" for one of my accounts. Is that even possible if somebody knows just your email address?

 

[Zerkerfist]

Any part of the runescape page where you have to enter your Runescape username and password will have in a green box at the start of the URL
A small padlock followed by Jagex Limited [GB].

If it doesn't have that, it is fake.

Aha! You smart, sexy man

The green padlock was not there, but I checked the link and it was an IE "e" next to the link. I loaded up runescape.com next, and any page you access on the real website, including the account log-in page, has a little "sword" icon next to it. I think that is sufficient enough proof that the link is fake. Thanks man.

I should probably post this on the RS forums as it seems like a new, more sophisticated phishing email. I checked the source code of the email and it shows me the IP address from where it was sent, but the actualy e-mail that apparantly sent it DOES match the official Jagex one. Odd :huh:

 

[Dave.RS]

Aha! You smart, sexy man

The green padlock was not there, but I checked the link and it was an IE "e" next to the link. I loaded up runescape.com next, and any page you access on the real website, including the account log-in page, has a little "sword" icon next to it. I think that is sufficient enough proof that the link is fake. Thanks man.

I should probably post this on the RS forums as it seems like a new, more sophisticated phishing email. I checked the source code of the email and it shows me the IP address from where it was sent, but the actualy e-mail that apparantly sent it DOES match the official Jagex one. Odd :huh:

Uhm... It's not hard to include a little sword in the URL - that's just a favicon. I wouldn't go by that !

 

[Zerkerfist]

Uhm... It's not hard to include a little sword in the URL - that's just a favicon. I wouldn't go by that !

The little sword is beside the URL on the LEGIT Runescape site though.... the one that links out of the email I was sent does NOT have the sword... do you get what I am saying?

That just proves that the email link DOES NOT lead to the real Runescape.com, because it has no sword. So I don't really understand what your point of posting that was.. :huh:

 

[Zerkerfist]

I guess a mod can close this now. The question seems to be answered. Unless somebody else has recieved this EXACT same email, then I don't really need anymore feedback.

 

[rathinator]

Its phish since i joined sythe i get about 10 phishing emails per week exactly the same as that 1 when i click them anyway it says phish site detected lol gg.

 

[dragonbotter1338]

if they want u something they pm u on ur accounts inbox

 

[Zerkerfist]

Its phish since i joined sythe i get about 10 phishing emails per week exactly the same as that 1 when i click them anyway it says phish site detected lol gg.

Lol thats lucky. Mine doesn't have any warnings about it, which is why I am so suspicious.

if they want u something they pm u on ur accounts inbox

Yeah I haven't recieved an ingame message yet. I will check all my other accounts too just to make sure. Thanks for reminding me about that

I think I pretty much got all the info I need now. Mods can close this please!

 

[ImBengt]

there is one really easy way to find out if its a phiser mail. just press the link and if u see anything wrong with the adress, like its usually fucked up like "www.r0n3skape.com/example" then it isnt legit. easy enough.

 

[hotcakes10000]

It is fake, I got one about being banned for RWT and I wasn't even registered on that address. Not that botting is gone, illegitimate people will try to phish and pose as trusted imposters.

 

[Zerkerfist]

there is one really easy way to find out if its a phiser mail. just press the link and if u see anything wrong with the adress, like its usually fucked up like "www.r0n3skape.com/example" then it isnt legit. easy enough.

The address was "secure.runescape.com.cm" though. That is the same as the actual runescape website log-in screen. Obviously if its something really weird and having nothing to do with RS at all, then its fake.

 

[Determinate]

Requested.