This is the link to Apple Legal re: suspicious emails. First option when Googling: "apple phishing". https://www.apple.com/legal/more-resources/phishing/
It says, in part:
If you receive what you believe to be a phishing email purporting to be from Apple, please send it to reportphishing@apple.com, a monitored email inbox, which does not generate individual email replies.
Forwarding the message with complete header information provides Apple with important information. To do this in OS X Mail, select the message and choose Forward As Attachment from the Message menu. For other email applications or webmail based services, consult your provider’s support information to determine how to forward messages with complete headers.
For more information about identifying legitimate emails from the iTunes Store, see Identifying legitimate emails from the iTunes Store.
For more information about identifying “phishing” emails, see Identifying fraudulent ‘phishing’ emails.
To report spam or other suspicious emails that you have received in your iCloud.com, me.com or mac.com inbox, please send them to abuse@icloud.com.
To report spam or other suspicious messages that you have received through iMessage, please send them to imessage.spam@apple.com with the requested information.
One might want to note that reportphishing@apple.com is what Apple says is the proper PHISHING reporting address. Other issues have other addresses.
