PhishStats flags apple-mn.com as new phishing site
PhishStats flagged apple-mn.com as a new phishing URL on 108.174.155.202. Apple is not involved; do not enter an Apple ID there.
- First reported
- Reports
- 1
Source: x.com · published
What happened
On 6 November 2026 the phishing tracker PhishStats posted on X that apple-mn.com was hosting a phishing page impersonating Apple. The post listed hXXp://apple-mn[.]com/ as a new phishing URL resolving to 108.174.155.202 on Oracle's ORACLE-BMC-31898 network (AS31898) in the United States and linked to its PhishStats record. The post does not name a specific Apple page beyond the Apple-themed hostname, and the site was served over plain http. The domain is not operated by Apple, and Apple is not involved in the page.
How the scam works
Phishing pages like this are usually reached through a text message, email or search ad that claims there is a problem with an account, an order or a payment. The link opens a copy of the Apple sign-in or checkout screen on an address that has nothing to do with Apple. Anything typed into the form, such as an email address, password, card number or one-time code, goes to whoever runs the page rather than to Apple.
Criminals then use the stolen login to take over the account, place orders, change the recovery email or try the same password on other services. Card details can be used for fraudulent purchases within minutes. Because the page can look almost identical to the real one, the safest check is the address bar: apple-mn.com is not a Apple address. Public blocklists and tracker feeds such as the one that flagged this site help browsers and security tools warn visitors, but a newly created page can stay online for some time before every filter catches it.
Anyone who entered details on apple-mn.com should change the password through the official Apple app or website straight away, sign out other sessions, turn on two-step verification and contact their card issuer if payment details were entered. Apple ID phishing is aimed at the account that controls iCloud backups, photos and Find My, so a stolen password can also be used to lock or wipe devices. The indicators come from the tracker's post and have not been independently checked by scammers.com.
Source
Post by PhishStats (@PhishStats) on X, 6 November 2026, flagging apple-mn.com. Not independently verified by scammers.com.
Red flags
- A Apple login or payment page on an address that is not an official Apple domain.
- A link to apple-mn.com arriving by text, email or ad.
- A message that creates urgency about an account problem, order or payment.
- A request for your password, card number or one-time code after following a link.
- A site using the Apple name that is served over plain http rather than https.
If you were targeted
- 1Do not enter passwords, card numbers or one-time codes on a page reached from a text, email or ad.
- 2Open the company's official app or type its address yourself to check your account.
- 3If you entered details, change your password at once and contact the company through its official channels.
- 4Report the message and the link to the company and to your national phishing reporting service.
- 5Delete the message without replying or tapping any links.