Phishing Link.....is it possible to get an ip check on my logins

[andre_9]

I was sent a suspicious link via PM that looked like

Code:

https://bitcointalk.org/index.php?topic=.....

but when hovering over or clicking on it went to

Code:

http://saberplan.com/l/index.php?action=[forum_username_goes_here]

looking at chrome dev tools this looks like a simple redirect to

Code:

https://bitcointalk.org/index.php?topic=1822011.0

However the redirect that happens now might be different that the initial one as it might be username/referral database specific because not long after I got an email from coinbase "Please Verify Your Email Address".
The email is in fact from coinbase:
DKIM:   PASS with domain coinbase.com
DMARC:   PASS

Therefore, they create a coinbase account with my email, why...I don't know... thoughts?

The email address linked to this bitcointalk account is unique (only used for this forum).
Is it possible to check IP logins for my account?  If they logged in then I was phished, if they didn't login there is some kind of injection that they can get your email address.

I googled and was about to find this discussion about similar links being sent out.  I reported the PM to mods.
https://bitcointalk.org/index.php?topic=1823854.0

[unamis76]

I guess we have something new to watch for in our hands... Very strange that "coinbase signup", maybe they use it for referral signups? Not sure if they win anything with that...

You can't check IP activity. Let's see what mods have to say about this, they're probably well aware and trying to fight the issue...

[andre_9]

The coinbase verification email says click to confirm or "If you did not sign up for this account you can ignore this email and the account will be deleted."

Curious that I am, after making sure the link went to coinbase and verifying the headers of the email, I clicked to verify the link in an incognito window.  Then immediately proceeded to reset the password on the account and poke around the account. I did find a session login from an Ipad and unknown IP in the security section, obv the creator of the account. 

I'm surprised coinbase does NOT  kill all sessions after verification for security.  Nothing else of interest in the account so I deleted/closed the account. But not sure what they were expecting....to keep his session open endlessly while I magically buy some bitcoin on an coinbase account I didn't intend to create, even then doesn't coinbase send confirmation links to email to withdraw...

 I know I can't check IP login on the forum I was hoping a mod can.