how do I check if an apple email is genuine? I have a suspicious email

Question

how do I check if an apple email is genuine? I have a suspicious email

how do I check if an apple email is genuine? I have a suspicious email:-

Delivered-To:*******.com

Received: by 10.37.88.213 with SMTP id m204csp1024228ybb; Sun, 26 Jul 2015 12:50:09 -0700 (PDT)

Received: from mx5.mnd.ukmail.iss.as9143.net (mx5.mnd.ukmail.iss.as9143.net. [212.54.59.72]) by mx.google.com with ESMTP id gm10si10125084wib.91.2015.07.26.12.50.08 for<*********.com>; Sun, 26 Jul 2015 12:50:08 -0700 (PDT)

Received: from h.sj.com ([45.79.197.243]) by mx5.mnd.ukmail.iss.as9143.net with bizsmtp id x7q71q0045FaDz9017q7KC; Sun, 26 Jul 2015 21:50:08 +0200

Received: from [162.209.103.50] (port=60816 helo=User) by h.sj.com with esmtpa (Exim 4.85) (envelope-from <no_reply@apple.ssl.com>) id 1ZJRvx-00047C-1L; Sun, 26 Jul 2015 19:50:05 +0000

X-Received: by 10.180.73.244 with SMTP id o20mr17210578wiv.31.1437940208927; Sun, 26 Jul 2015 12:50:08 -0700 (PDT)

Return-Path: <no_reply@apple.ssl.com>

Received-Spf: neutral (google.com: 45.79.197.243 is neither permitted nor denied by best guess record for domain of no_reply@apple.ssl.com) client-ip=45.79.197.243;

Authentication-Results: mx.google.com; spf=neutral (google.com: 45.79.197.243 is neither permitted nor denied by best guess record for domain of no_reply@apple.ssl.com) smtp.mail=no_reply@apple.ssl.com

Message-Id: <55b539f0.8a69b40a.7f1af.fffff3ceSMTPIN_ADDED_MISSING@mx.google.com>

X-Spam-Action: folder Spam

X-Sourceip: 45.79.197.243

Mime-Version: 1.0

Content-Type: text/html; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-Msmail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-Mimeole: Produced By Microsoft MimeOLE V6.00.2600.0000

X-Antiabuse: This header was added to track abuse, please include it with any abuse report

X-Antiabuse: Primary Hostname - h.sj.com

X-Antiabuse: Original Domain - blueyonder.co.uk

X-Antiabuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-Antiabuse: Sender Address Domain - apple.ssl.com

X-Get-Message-Sender-Via: h.sj.com: authenticated_id: roast/only user confirmed/virtual account not confirmed

Your Apple ID has been suspended [#867569]

Dear Customer,

Our system recently detected a problem with your nominated payment method associated with your Apple ID. To continue having exclusive access to our products and services we require you to validate your information, please follow the link below in order to ensure your billing and payment details are accurate and up-to date.

Your Apple ID cannot be used until we are satisfied your details are correct.

Failure to comply may result in complete termination of your Apple service.

Apple Support

My Apple ID | Support | Privacy Policy

MacBook Pro with Retina display, OS X Mavericks (10.9.5), null

Posted on Jul 29, 2015 9:42 AM

Reply

Answer 1

Niel

Level 10

741,851 points

Jul 29, 2015 9:44 AM in response to melvynfrombristol

It’s phishing. Forward it to reportphishing@apple.com and then delete it.

Apple will never email you from a ssl.com address.

(130942)

Reply

Answer 2

Jul 29, 2015 9:45 AM in response to Niel

Thanks for confirming my suspicions

Reply

Answer 3

ChitlinsCC

Level 7

21,140 points

Jul 29, 2015 10:17 AM in response to melvynfrombristol

how do I check if an apple email is genuine? I have a suspicious email:-

"clues" are the actual URLs

(as already stated) email return path to "ssl.com" domain, and
of " Click here to validate your account " link

^^ s r v w o a 1 DOT c o m ^^ ??

as mentioned - s s l DOT c o m is also not an Apple domain

dangerous & personal data edited

All in all, the email has an air of authenticity - command of the English language is usually poor in these, not here.

Google the address [ 31-33, rue Sainte Zithe, L-2763 Luxembourg ] and there are 7,000+ results going back many years - for good reason = actual published address for iTunes!!

Only TWO very wrong things and only one that really matters... the "call to action" of "click here..."

Reply