03-06-2012, 05:35 PM

Hello, I'll get straight to it.
This is a phishing/keylogger on this site:
http://secure.runescape.com.weblogln.com/RytVedKinv/forums.ws?76,5320

When you type in the username - password it'll send it to an email address. Then it redirects you to the actually website it's impersonating.

My question is, is there anyway to check/find this email?
Such as by some of the features on safari under the development tab?

Sorry that I don't really know much about this specific subject, so if it's not a key-logger, but this type of this is called something else, please excuse me for my mistake.


Much Thanks, Nate Brady

03-07-2012, 09:01 PM

Any idea folks?

03-07-2012, 09:44 PM

I'm not sure, but I unlinked the URL, so we don't pass linkjuice to them, and so that no one goes to the site unless they know what they are doing - there could be other exploits or security concerns with visiting that URL.

Someone else should be able to chime in soon. For what I know, the email address its forwarding to is probably hidden in server side code, stuff that isn't apparent through viewing the site's source code in a browser or other browser based development tools.