MangoMan wrote: ↑Thu Dec 20, 2018 7:23 pm
I always wonder if putting my email address into these sites to 'check' is just giving my email info to potential scammers. Are you sure that site is legit?
It's not like you're entering any credentials along with your email, but:
Well, the site was in the article. When I typed in some of my email addresses, they were fine, clean. One was listed with half a dozen sites breached long ago, including dropbox, disqus, linkedin, and ______ (a forum). I left ______ years ago, but the hacked password that the phishing scammer sent me was in fact from that forum site, so yes, it's legit, and helpful.
"Maybe the haveibeenpwnded site was also run by the phishing scammer?"
I think not.
More info here:
https://en.wikipedia.org/wiki/Have_I_Been_Pwned%3F