Message Scam?

Joined
Nov 24, 2014
Messages
1
Reaction score
0
Points
1
Today I received a message on my iPhone 6 claiming that I'd missed a message from Apple and to: CLICK HERE: removed.

Needless to say I'm deeply suspicious and have no intention of clicking on the link. My research via DuckDuckGo so far tells me absolutely nothing. However, the search box shows the address http://94.242.210.199/iphone6/p/au/1/index.php?city={city}&model={model}&brand={brand}&browser={browser}&device={device}&browserversion={browserversion}&os={os}&osversion={osversion}&useragent={useragent}&ip={ip}&referrerdomain={referrerdomain}&trackingdomain={trackingdomain}&language={language}&connectiontype={connection.type}&carrier={carrier}&isp={sip}.

Further, the message states that to unsubscribe I should click on the following link (yeah, right!): http://unsubscribe.mobi. This brings a server not responding message.

Forwarded to you in case it's a known scam.
 
Last edited by a moderator:
Joined
Jul 24, 2013
Messages
5,073
Reaction score
758
Points
113
Location
Ohio (USA)
Your Mac's Specs
2023-14" M3max MBPro, 64GB/1TB, iPhone 15 Pro, Watch Ultra
I would go with it being a scam. The IP address shows it originated in Steinsel, Luxembourg. So it is not from Apple Also mobi is a company that offers mobile apps plus other things but I question if this has anything to do with them.

Lisa
 
C

chas_m

Guest
Apple doesn't text people, of course its a scam.

The "mobi" in the message isn't from a company named mobi, it's the web extension of the mobile version of a site.
 
Joined
Jan 1, 2014
Messages
629
Reaction score
52
Points
28
Your Mac's Specs
MacBookPro 13 v11.1, i5 2.4 GHz, 256 GBs SSD, 8 GBs DDRs
Actually, the "mobi" extension is a Top Level Domain or TLD. Go Daddy is the registrar for unsubscribe.mobi domain, the registrant is private via Domains by Proxy.

There are no MX records or email server addresses for this domain, which is not normal. ICANN require admin, registrant and tech support email addresses; all three of them are the same, unsubscribe.mobi_at_domainsbyproxy.com.

Lisa is right, this is spam that would redirect to the unsubscribe.mobi domain, where the malware is awaiting for download. Sort of odd since hacker prefer to host their malware at legitimate websites....
 

Shop Amazon


Shop for your Apple, Mac, iPhone and other computer products on Amazon.
We are a participant in the Amazon Services LLC Associates Program, an affiliate program designed to provide a means for us to earn fees by linking to Amazon and affiliated sites.
Top