Although iforgot.apple.com is a legitimate website, cybercriminals sending out fake Apple emails with a link looks like "iforgot.apple.com", but if you click on it, it goes to a fake and phishing Apple website that steals account credentials.
An "iforgot.apple.com" Email Scam
Subject: Apple (Your account has been disabled)
Date: Wed, 18 Sep 2013 06:35:41 -0700
From: Apple noreplay @ouhpe.hostedoffice.ag
Reply-To: noreplay @ouhpe.hostedoffice.ag
Our system detected your account was disabled and we had no choice but to temporarily suspend your account to begin working normally without interruption, you must confirm your account information within 24 hours, your account was temporarily suspended in order to protect your account will continue to work normally and the limited will be alleviated after some verification process, your information will be confirmed and your account will begin to function normally again.
To proceed to confirm your account information please click on the link below and follow the instructions that will be required: https://iforgot.apple.com/
The link in the email appears as if goes to apple.com, but it actually goes to the phishing or fake web page. Visitors to the fake website will be asked to enter your Apple credentials, but if they do, their credentials will be sent to the cybercriminals. Once the cybercriminals have gottent the stolen credentials, they will use it to unauthorized access to their victims' accounts, hijack and use the fraudulently.
If you were tricked, or think you were tricked, please change your Apple's password and check your account for any descrepancies.