Decoy email
I received an email which I suspect is a decoy, pretending to be from Apple. It was stated that someone in Spain used my Apple ID to make a purchase. I am a Singaporean residing in Malaysia. When I clicked on the link "iforgot.apple.com", it brought me to a browser with the URL "nycculturist.com".
Am I right that it is a decoy email?
How do I confirm that my credit card that is linked to my Apple ID has not been used?
Thank you.