Over the past month or so I've had a number of password reset requests. These aren't spam and have the official Sony email and the link is correct for a password reset. Is there any way to find out - Sony or anyone else - where they are being generated from?
