Fix this bug: Different results of same e-mail
When I check my e-mail using the website https://haveibeenpwned.com/ it shows "Good news — no pwnage found!".
Then I clicked on "Notify me when I get pwned". I received an e-mail with an URL to confirm and, when I click this url, it opens the same site showing "Already verified" but right below "Oh no — pwned!" with one specific site that makes sense.
Edgar
shared this idea
You’re seeing a result when you click the verify link that’s been flagged as “sensitive”. It’s likely an adult website – these are not shown for public searches of an address.
-
It's classified as sensitive because being on a dating site is a very personal thing that is more likely to cause an adverse impact on members than, say, being on a gaming site. I can't show a warning publicly because this could be a disclosure vector; someone isn't pwned, then I load a dating site now there's a warning. That would defeat the purpose.
-
Edgar
commented
I don't know why it was classified as sensitive (a social media site) but would be better if the site shows a warning instead of "good news", just not listing the site's name.
Thanks