Privacy Error on plusnetrewards.com

[#1]

1) Just joined Plusnet.
2) Received an email from no-reply@plusnetrewards.com with a link to claim joining reward - email has missing images for logo
3) Go to link in email http://url8655.plusnetrewards.com/ls/click?upn=###### where ###### is a very long unique code
4) Landing on link browser says:

Attackers might be trying to steal your information from url8655.plusnetrewards.com (for example, passwords, messages, or credit cards). Learn more about this warning
net::ERR_CERT_COMMON_NAME_INVALID

Please advise. Thanks!

[#2]

Meant to to say I am using Chrome on Chromebook on Plus.net internet 😁

[#3]

Hi @PNdrone100743,

Welcome to the Plusnet Community

I can confirm that rewards cards e-mails are always sent from no-reply@plusnetrewards.com, if you examine the e-mail sender to make sure that is the one it has actually come from, then the e-mail and the link are legit.

You should be able to skip past the warning to connect to the page or try loading the link on another browser if you are not able to.

Alex

[#4]

---

@Alex_H wrote:

I can confirm that rewards cards e-mails are always sent from no-reply@plusnetrewards.com, if you examine the e-mail sender to make sure that is the one it has actually come from, then the e-mail and the link are legit.

You should be able to skip past the warning to connect to the page or try loading the link on another browser if you are not able to.

---

@Alex_H   Should a genuine e-mail from PN not have an https link, rather than an http one (?)

That type of "warning" seems usually associated with an http link (not secure).  Is there any possibility PN rewards is e-mailing http links to new customers, or does the lack of https signify that PN rewards is somehow not the sender.

Some clarification would be appreciated, thanks.

.

[#5]

@Penny I did flag this with our team for some further clarification on the formatting of the link sent out for rewards cards claim in case anything needs corrected to prevent it triggering the certificate mismatch error on browsers, so should hopefully get an update on that at a later point for clarification.

But the e-mail address that it has been sent from, as long as OP has confirmed that is the actual sender and not been spoofed, is the e-mail address we use for reward card claims so should not contain anything malicious.

Alex

[#6]

@PNdrone100743 @Penny Our team have responded to confirm that the links should be https when sent out, so the link has been incorrectly formatted in this case. 

@PNdrone100743 The team have claimed the reward on your behalf so you don't need to claim it yourself now, that should be with you within 30 days time. 

Alex