Hi WAMUG folks.

While the email links might APPEAR to be legit, remember that the URL that you see in your email message body (e.g. https:// iforgot.apple.com ) is JUST the text that is displayed in the body of the email; it's just text for 'display' purposes.

If you actually click on such a link, you are not necessarily taken to the "visible" link in the message body. Instead, you will most likely be taken to a third party's site, that isn't listed in the visible message body.

To check where it's really going, view the 'Message Source' of the original suspect message. E.g. View -> Message -> Raw source, if you're using the Mail app. There are similar options for other mail programs.

That should reveal the first actual URL you would really be taken to, if you click on the link provided in the email. And from there, the first site might take you to a second site etc.

So, if something looks suspicious, such as this, it most likely is.

Cheers,
Derek

https://iforgot.apple.com/cgi-bin/resetPassword.cgi?
key=xxxxxxxxxxxxxxxxxxxxx

Please note that this link will expire 3 hours from the time it was
sent.

If you require further assistance in resetting your password, please
visit:

http://survey.info.apple.com/feedback/appleid.html

Thank you for contacting Apple.

Date: Tue, 17 Jan 2006 00:31:11 +0800
From: Mark Secker <[EMAIL PROTECTED]>
Subject: Re: Apple ID passwords

the link is kosher (or at least matches password resets that I've
done) so without knowing what your apple ID is and if it's close to
some one else's it's most probably a result of some one with a very
similar apple ID mistaking your ID as their's  and having failed to
login with their password have requested a password reset.... which
of course has gone to you at your designated e-mail address.

as you didn't ate