mickers1
Level 1 (0 points)

Q: Is this spam?

I've never received this before.

Though Apple normally notifies me of things via email, someone instead emailed my phone number saying this:

 

Dear (my full name)，

Your Apple ID (my email) was signed in iMessage on Dan 's iPhone.

 

Device: iPhone 5c

IP address：17.172.224.47

OS: iOS 8.2

 

If you believe an unauthorized person accessed your account, please sign in and manage your account immediately by going to http : // icloud - imessage .com/ info/ us/ page? token = e60dc18f -1

 

Thanks

Apple Support

 

I searched and didn't find anyone else with this exact email. I changed my password anyway via iTunes, but is this legit?

 

Thanks!

 

<Link Edited by Host>

Posted on Jun 18, 2015 1:13 PM

Close
mickers1

Q: Is this spam?

  • All replies
  • Helpful answers

Previous Page 2

  • by Ethan7988,

    Ethan7988 Ethan7988 Jun 18, 2015 4:09 PM in response to mickers1
    Level 4 (1,665 points)
    iPad
    Jun 18, 2015 4:09 PM in response to mickers1

    Identifying fraudulent "phishing" email - Apple Support

     

    You can use this page next time you receive one of these.

  • by JJSS09,

    JJSS09 JJSS09 Jul 7, 2015 10:31 AM in response to Ubiquit0us
    Level 1 (0 points)
    Jul 7, 2015 10:31 AM in response to Ubiquit0us

    That is irrelevant, and part of the scam. Run a Whois lookup and you'll find the domain account-imessage.com is NOT owned by Apple. Going to that domain in a browser redirects to https://appleid.apple.com which makes it seem like it could be owned by Apple... however it's just a redirect. This message, with the exact same body (including the name "Dan 's iPhone", along with the same IP and OS), is being sent to lots of people. This is a pretty sophisticated phishing scam.

  • by kikihosie5,

    kikihosie5 kikihosie5 Aug 5, 2015 1:27 PM in response to moll132
    Level 1 (0 points)
    Aug 5, 2015 1:27 PM in response to moll132

    I just got the same message as well...

  • by Lawrence Finch,

    Lawrence Finch Lawrence Finch Aug 5, 2015 1:39 PM in response to kikihosie5
    Level 8 (38,305 points)
    Mac OS X
    Aug 5, 2015 1:39 PM in response to kikihosie5

    It may or may not be legitimate, but to be safe open a browser and enter https://appleid.apple.com. Log in there and check.

  • by AKRBTN,

    AKRBTN AKRBTN Aug 5, 2015 2:50 PM in response to kikihosie5
    Level 4 (1,627 points)
    iPhone
    Aug 5, 2015 2:50 PM in response to kikihosie5

    If I get an email from "Apple" inviting me to log in from a link provided in the email, I always take that to be a phishing scam.  Go to the actual website and log in there.

  • by AJ397,

    AJ397 AJ397 Aug 5, 2015 3:00 PM in response to Ubiquit0us
    Level 5 (6,443 points)
    Accessibility
    Aug 5, 2015 3:00 PM in response to Ubiquit0us

    IPs can be spoofed. Don't judge the authenticity of a site based on IP alone.

  • by Lawrence Finch,

    Lawrence Finch Lawrence Finch Aug 5, 2015 3:32 PM in response to AJ397
    Level 8 (38,305 points)
    Mac OS X
    Aug 5, 2015 3:32 PM in response to AJ397

    questionasker3 wrote:

     

    IPs can be spoofed. Don't judge the authenticity of a site based on IP alone.

    Time for a sanity check. No, IP addresses cannot be spoofed. Your router may have malware that will redirect an IP address, but that isn't spoofing, and is about as likely as you winning the lottery.

     

    URLs cannot be spoofed either; however what you see in blue in a link is a LABEL, not where the link actually goes. For example, the blue text may say appleid.apple.com, but if you click it you can be sent to MalwareRUs.ru. Fortunately, with all modern browsers if you hover your mouse over the blue label it will display the actual target URL, and if it doesn't match what was in blue don't click on it. But even if you click on it by mistake you will know immediately, because the address bar at the top of your browser will display MalwareRUs.ru.

     

    Regarding URLs, the key element is the end of it, or the last part before the first single slash. So appleid.apple.com is a legitimate Apple URL. As is apple.com/store, because the last thing before the first slash is apple.com.

  • by Taz1961,

    Taz1961 Taz1961 Dec 3, 2015 7:20 PM in response to mickers1
    Level 1 (0 points)
    Dec 3, 2015 7:20 PM in response to mickers1

    According to Apple support the following message received 11.15.2015 on iMessage iPhone 6 is NOT from Apple:

     

     

    Your Apple ID [REDACTED]  was signed in iMessage on Dan 's iPhone.

     

    Device: iPhone 5c

    IP address：17.172.224.47

    OS: iOS 8.2

     

    If you believe an unauthorized person accessed your account, please sign in and manage your account immediately by going to [REDACTED URL]

    Thanks

    Apple Support

Previous Page 2