Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


pauln

55 posts

Master Geek


#188970 11-Dec-2015 22:10
Send private message

Hi all, apologies if this is the wrong forum. Just checking my gmail account I have an email from Have I been pwned asking me to confirm my registration stating that I, or someone else, has subscribed my email address to their service and asking me to verify my email address. I certainly haven't and subscribed and suspected a phish, a quick google doesn't bring up anything obvious eg it's a known phish. At the bottom of the email it states what the email was sent from someone at a certain IP address, a quick check shows that it is my IP address. I'm checking from my mobile device over Spark using the wap.telecom.co.nz APN.

Any ideas??

Many thanks

Paul 

Create new topic
pauln

55 posts

Master Geek


  #1448934 11-Dec-2015 22:12
Send private message

Sorry the email says that it was initiated from someone at my IP address.....

sidefx
3500 posts

Uber Geek

Trusted

  #1448937 11-Dec-2015 22:23
Send private message

So you received an email from this site?

https://haveibeenpwned.com 

If so it's probably not phishing or a hack - it's a fairly well known and IMO useful service\site.  I've signed up for it.  Perhaps you left your device\PC unattended and unlocked and someone signed you up to it to make a point or as a joke?




"I was born not knowing and have had only a little time to change that here and there."         | Electric Kiwi | Sharesies
              - Richard Feynman


 
 
 
 


pauln

55 posts

Master Geek


  #1448943 11-Dec-2015 22:45
Send private message

Hi sidefx

email came from noreply@haveibeenpwned.com

I checked my history and it doesn't appear as though someone has been having fun but I guess it's a possibility....

Cheers

Paul

sidefx
3500 posts

Uber Geek

Trusted

  #1448946 11-Dec-2015 23:05
Send private message

Yup, that's where the legit signup email I got after I signed up came from. If you didn't sign up to it just ignore it. 




"I was born not knowing and have had only a little time to change that here and there."         | Electric Kiwi | Sharesies
              - Richard Feynman


freitasm
BDFL - Memuneh
68431 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  #1448976 11-Dec-2015 23:35
Send private message

Where an email comes from means nothing - this is easily spoofed. The most important thing is really to check where the link for confirmation takes you - is it the actual site or some other domain?

And yes, it's a double opt-in: you enter your email address and instead of accepting it as a registration it sends out a confirmation with a link to verify the address to subscribe. 

The beauty of this is that other people can't sign you up for unwanted mailing lists.

If you didn't do it, ignore. Move along.





 

 

These links are referral codes

 

Geekzone broadband switch | Eletricity comparison and switch | Hatch investment (NZ$ 10 bonus if NZ$100 deposited within 30 days) | Sharesies | Mighty Ape | Backblaze | Amazon | My technology disclosure


gzt

gzt
11634 posts

Uber Geek

Lifetime subscriber

  #1448978 11-Dec-2015 23:52
Send private message

[Edit: assuming it is genuine as per M's comments:]

That's kind of interesting. How many devices use that ip address? I assume it is dynamic?

sidefx
3500 posts

Uber Geek

Trusted

  #1449134 12-Dec-2015 11:46
Send private message

@gzt The fact the signup request came from the OPs IP address is a bit odd, hence why I asked if someone may have got access to one of his devices and been playing silly buggers. I don't think anything in @freitasm's post was attempting to explain how it may have come from the OPs IP, just that the whole activation through email confirmation is good and that the sender of the reply (noreply@haveibeenpwned.com) can very very very easily be spoofed - though generally decent spam filters are good at picking this up - hence why it's important to verify that any links in the email actually go to the proper\expected site. 

Of course if one is using a wifi network at home\work someone every device inside the network may (and probably will) share the one external public IP address, though OP says they were doing it from mobile device so that may be a bit different... though I *think* mobile phones are NAT'd in a similar way?




"I was born not knowing and have had only a little time to change that here and there."         | Electric Kiwi | Sharesies
              - Richard Feynman


 
 
 
 


gzt

gzt
11634 posts

Uber Geek

Lifetime subscriber

  #1449196 12-Dec-2015 14:43
Send private message

Reboot the mobile device and try again. The mobile device may likely get a new ip address. That will be interesting.

pauln

55 posts

Master Geek


  #1449280 12-Dec-2015 18:04
Send private message

Hi all

Rebooted my phone and still have the same IP, I'm pretty sure the wap APN NATs. Just a bit more info, I got the email at 8.15 last night, from around 6.50 till just after 8pm I was in a graduation and no one had access to my phone barring me

Cheers

Paul

Create new topic




News »

Logitech introduce MX Anywhere 3
Posted 21-Sep-2020 21:17


Countdown unveils contactless shopping with new Scan&Go tech
Posted 21-Sep-2020 09:48


HP unveils new innovations for businesses adapting to rapidly evolving workstyles and workforces
Posted 17-Sep-2020 15:36


GoPro launches new HERO9 Black camera
Posted 17-Sep-2020 09:45


Telecommunications industry launches new 5G Facts website
Posted 17-Sep-2020 07:56


New Zealand ranks 3rd in world in GSMA index
Posted 15-Sep-2020 10:13


Trend Micro Security Suite adds web monitoring to prevent identity theft
Posted 14-Sep-2020 15:37


NVIDIA to acquire Arm for US$ 40 billion
Posted 14-Sep-2020 12:27


Epson launches its next gen A3+ colour EcoTank multi-function printer
Posted 10-Sep-2020 16:08


Sony launches three new native 4K SXRD home cinema projectors
Posted 9-Sep-2020 18:00


Catalyst Cloud brings Kubernetes-based open-source web hosting solution to market
Posted 9-Sep-2020 17:54


Verizon Connect eyes further growth in New Zealand
Posted 8-Sep-2020 09:26


PNY launches XLR8 gaming NVIDIA GeForce RTX 30 series powered by the all-new NVIDIA Ampere architecture
Posted 3-Sep-2020 16:39


NVIDIA delivers greatest-ever generational leap with GeForce RTX 30 Series GPUs
Posted 3-Sep-2020 16:17


Weta Digital advances visual effects and animation in the cloud with AWS
Posted 2-Sep-2020 17:09



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.