is 'the.vodafone.co.nz' real or phishing?

Forums › Vodafone New Zealand, TelstraClear and ihug › is 'the.vodafone.co.nz' real or phishing?

IlDuce

769 posts

Ultimate Geek

Topic # 89529 4-Sep-2011 15:33
is "the.vodafone.co.nz" real or phishing? On my computer, when I log in it goes to Vodafone.co.nz On dad's PC he got an email saying his internet quota was used up (although the PC has physically been used a minimal amount), it was from vodafone.co.nz when clicking the link to go to my account it goes to vodafone.co.nz, then once login details are entered it goes to a page to say the certificate is untrustworthy or something, and if one clicks continue it becomes "the.vodafone.co.nz" At this point it shows all the details and looks legit, but this could be phishing site actually logging in itself to obtain that info to look legit, and then sucking c/c details out of us.

mike

270 posts

Ultimate Geek

Trusted

Reply # 516491 4-Sep-2011 16:30
it's real and your dad shouldn't get a certificate error. www.vodafone.co.nz for mobile accounts and the.vodafone.co.nz for home phone/broadband accounts. (the is a hangover from when Vodafone bought ihug - the internet home users group - the.ihug.co.nz)

SteveON

1670 posts

Uber Geek

Reply # 516496 4-Sep-2011 16:55
Look at the root domain, 'the' is clearly a sub of vodafone.co.nz

freitasm

BDFL
44226 posts

Uber Geek

Administrator

Trusted

Geekzone

Subscriber

Reply # 516497 4-Sep-2011 17:01
I wonder if this is only accessible from within Vodafone's own network - I get a 404 here. As noted, this is a sub domain of vodafone.co.nz, so pretty safe to assume is an ok site - of course domain hijacking could happen, but it's not a common thing. Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) Geekzone Price comparison \| Amazon Kindle order page \| How to get the best out of Geekzone \| New Zealand IT Jobs \| Geekzone News \| Jinglebugs

IlDuce

769 posts

Ultimate Geek

Reply # 516502 4-Sep-2011 17:06
mike: it's real and your dad shouldn't get a certificate error. www.vodafone.co.nz for mobile accounts and the.vodafone.co.nz for home phone/broadband accounts. (the is a hangover from when Vodafone bought ihug - the internet home users group - the.ihug.co.nz) Thanks for your help. I'd never struck this before. Since I could do it and get no certificate error, and when he did it, it would, and then I saw the difference in address I wondered what was going on. We were gonna hand over C/C details and $200 so thought it wise to check. Especially since essentially the computer has been hardly used, yet we got an email saying the entire month's quota had been gobbled up, but it is now clear outlook is to blame for that.

mrtoken

344 posts

Ultimate Geek

Trusted

Reply # 516677 5-Sep-2011 09:12
Its real, (got that takes me back) it use to be the.ihug.co.nz which was the gateway to theaccountsII and thehelpdeskIV (if my brain is working right this morning). It is/was ihugs accounting / helpdesk system, it also had a lot of other things off it like reporting etc. So i would say that vodafone is using ihugs system for there home internet etc It was one of the better system i had used. P.s. it had great error messages like "it looks like the <enter in bad word here starting with f" up fairy has returned" even had one about the old domains guy who use to misspell a lot of domain names.

xpd

Minecraft n00b
5344 posts

Uber Geek

Moderator

Trusted

Subscriber

Reply # 516691 5-Sep-2011 09:36
mrtoken: Its real, (got that takes me back) it use to be the.ihug.co.nz which was the gateway to theaccountsII and thehelpdeskIV (if my brain is working right this morning). It is/was ihugs accounting / helpdesk system, it also had a lot of other things off it like reporting etc. Was "the.pl" during my time there :) But yup, defintely leftovers from the 'hug days. XPD / @DemiseNZ / Gavin Website CPU : Intel E5300 GFX: Geforce 9800GTX/+ RAM: 3GB DDR2 A+ - MCDST - MCTS CCNA Arriving soon.

mrtoken

344 posts

Ultimate Geek

Trusted

Reply # 516825 5-Sep-2011 13:53
xpd: mrtoken: Its real, (got that takes me back) it use to be the.ihug.co.nz which was the gateway to theaccountsII and thehelpdeskIV (if my brain is working right this morning). It is/was ihugs accounting / helpdesk system, it also had a lot of other things off it like reporting etc. Was "the.pl" during my time there :) But yup, defintely leftovers from the 'hug days. yep the site was the.ihug.co.nz/the.pl I was there when it first went live, down time was longer than up time for the first couple of months lol

freitasm

BDFL
44226 posts

Uber Geek

Administrator

Trusted

Geekzone

Subscriber

Reply # 517034 5-Sep-2011 18:03
Just because I said a DNS hijacking would be unlikely: Vodafone.com is amongst other high profile domains hijacked by a Turkish group... Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) Geekzone Price comparison \| Amazon Kindle order page \| How to get the best out of Geekzone \| New Zealand IT Jobs \| Geekzone News \| Jinglebugs

Peppery

274 posts

Ultimate Geek

Reply # 522209 17-Sep-2011 00:41
freitasm: I wonder if this is only accessible from within Vodafone's own network - I get a 404 here. As noted, this is a sub domain of vodafone.co.nz, so pretty safe to assume is an ok site - of course domain hijacking could happen, but it's not a common thing. It doesn't seem to be, there's just not a root page on https://the.ihug.co.nz. https://the.vodafone.co.nz/acnts/myaccounts.pl/login works fine from my Telecom connection, for instance. World famous Twitter hacker.

gareth41

411 posts

Ultimate Geek

Reply # 524217 21-Sep-2011 17:36
IlDuce: is "the.vodafone.co.nz" real or phishing? On my computer, when I log in it goes to Vodafone.co.nz On dad's PC he got an email saying his internet quota was used up (although the PC has physically been used a minimal amount), it was from vodafone.co.nz when clicking the link to go to my account it goes to vodafone.co.nz, then once login details are entered it goes to a page to say the certificate is untrustworthy or something, and if one clicks continue it becomes "the.vodafone.co.nz" At this point it shows all the details and looks legit, but this could be phishing site actually logging in itself to obtain that info to look legit, and then sucking c/c details out of us. maybe check the clock on your computer, its easy to receive cert errors on any secure site if your clock is incorrect.