Yup. Seems phished.
Did you activate the security lock (I don't think so; if it was activated nobody can change anything without security code)???
And it's futile to use a password like:
$3Jf*4%s$0sE46yU2ond
if you enter your login details on a rs phishing site:
Examples:
Monkey D. Ruffy