I am receiving text messages indicating that my stolen iPhone was found and asking for my credentials. The urls in the message make me think it is a physhing attack. The base urls used are: https://apple.idevice-track.com
https://apple.us.com-imap-log.in
Where can I confirm that these URLs are valid, and If not report them?
iPhone XS Max
They are phishing attacks designed to make you give them your apple ID, so they can unlock the phone. (Presumably when you set it to lost mode, you put your contact details on the display)
A few weeks ago someone had similar. I viewed the websites on a burner virtual machine, and they were definitely scams. If you like, I can do the same here, and post screenshots.
Bear in mind - if the phone is transmitting it's location, you can see it in find my phone. If you can't then nor can anyone else.
Phishing attack used to unlock stolen iPhone
