phishing scam id-imessage.com

I have a user who received the following text. I'm pretty sure this is a scam but its a doozy.

Dear xxxxx,

Your Apple ID (xxx@xxxx.com) was signed in iMessage on Dan 's iPhone.
Device: iPhone 5c

IP address:xx.xxx.xxx.xx

OS: iOS 8.2

If you believe an unauthorized person accessed your account, please sign in and manage your account immediately by going to http://id-imessage.com/info/us/page?token=xxxxxx


Thanks

Apple Support


The url and link will redirect to what looks almost identical to the itunes login page but the secure cert is not available. I removed the actual token id in this message. If you go to any other portion of the url it will redirect to the legit apple site. I found nothing reported about this so its probably yet another hacked site or redirect phishing scam.


User uploaded file

iPhone 5s, iOS 8.1.2, null

Posted on Jul 17, 2015 12:33 PM

Reply
7 replies

Jul 17, 2015 12:44 PM in response to Ralph Landry1

Whois definitely a scam from the looks of it


http://reports.internic.net/cgi/whois?whois_nic=id-imessage.com&type=domain


Domain Name: ID-IMESSAGE.COM

Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN

Sponsoring Registrar IANA ID: 633

Whois Server: whois.dns.com.cn

Referral URL: http://www.dns.com.cn

Name Server: F1G1NS1.DNSPOD.NET

Name Server: F1G1NS2.DNSPOD.NET

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

phishing scam id-imessage.com

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.