elamparo
Level 1 (4 points)

Q: Is this email fake?

image.png

i got this after I pre ordered the iPhone 7. Thing is: I placed 2 separate orders. Shouldn't I have gotten 2 of these? The link take you to this address: https://buyiphone2.apple.com/WebObjects/IPACustomer.woa/wa/IPAPreAuthAction/edit Order

i looks legit, but it's very sketch. Never mentions my name. Order number. It wants me to log in with either my Apple ID & password.... Or the reservation number in the email and my phone number.

I Tried the reservation and a fake phone number and it says it cant find my reservatio. It then props me to login with Apple ID and password again.

I Tried to go thro the I forgot my password link and it brings you here:

https://iforgot.apple.com/password/verify/appleid?&language=US-EN&app_id=2083&pr s_account_nm=sab333%40cornell.edu&newWin…

ANother funny thing is that the Apple ID email box was already filled out... And I don't recognize it:

****

i don't know if I'm just being paranoid or being smart. Please help me out.

 

 

<Personal Information Edited by Host>

Posted on Sep 9, 2016 8:51 AM

Close
elamparo

Q: Is this email fake?

  • All replies
  • Helpful answers

Page 1 Next

  • by Kurt Lang,

    Kurt Lang Kurt Lang Sep 9, 2016 8:07 AM in response to elamparo
    Level 8 (37,716 points)
    Sep 9, 2016 8:07 AM in response to elamparo

    Fake. Just the fact it's going back to some loser at a campus dorm tells you that.

  • by Demo,

    Demo Demo Sep 9, 2016 8:12 AM in response to elamparo
    Level 10 (94,971 points)
    iPad
    Sep 9, 2016 8:12 AM in response to elamparo

    Every time I place an order with Apple, any confirmation that I get mentions me by my name in it. It is indeed fake.

  • by Kurt Lang,

    Kurt Lang Kurt Lang Sep 9, 2016 8:21 AM in response to Kurt Lang
    Level 8 (37,716 points)
    Sep 9, 2016 8:21 AM in response to Kurt Lang

    Extra info if you want to help get this jerk arrested for running a scam. The address does indeed resolve to Cornell University.

     

    Domain Name: CORNELL.EDU

     

    Registrant:

       Cornell University

       Cornell Information Technologies

       Network Operations Center 729 Rhodes Hall

       Ithaca, NY 14853

       UNITED STATES

     

    Administrative Contact:

     

       Cornell Information Technologies

       Cornell Information Technologies

       Cornell University

       729 Rhodes Hall

       Ithaca, NY 14853

       UNITED STATES

       +1-607-255-5500

       noc@cornell.edu

     

    Technical Contact:

       Daniel Eckstrom

       Cornell Information Technologies

       Cornell University

       731 Rhodes Hall

       Ithaca, NY 14853

       UNITED STATES

       +1-607-255-5902

       de10@cornell.edu

     

    They don't offer a toll free number, but you can ask for the admin staff and let them know you received an email from someone through their email server running an illegal scam operation. May have come from inside the campus, or from the user's home if they live close enough to commute and accessed their assigned email account from there.

     

    Either way, the university will know who sab333 is assigned to and can take action from there. Save the email in case they ask you to forward it to them for confirmation of such illegal activity.

  • by elamparo,

    elamparo elamparo Sep 9, 2016 8:37 AM in response to elamparo
    Level 1 (4 points)
    Sep 9, 2016 8:37 AM in response to elamparo

    it is very fishy. But even the Header at the top of the link has the green secure lock symbol and APPLE INC.  Never once gives me any of my info that it shud already know. Name, address, order number, nothing. What's scary is the urgency of the email too. If I do not confirm by 4:00pm pdt, then i wont have my order processed. might as well threaten to start cutting off my kids fingers as you count down the minutes!

  • by Kurt Lang,

    Kurt Lang Kurt Lang Sep 9, 2016 8:49 AM in response to elamparo
    Level 8 (37,716 points)
    Sep 9, 2016 8:49 AM in response to elamparo

    Apple will never, ever, send out an email with a generic "Dear Apple Customer" salutation. You will always be addressed by name.

     

    You can call Apple's Customer Service and give them that supposed reservation number. I can almost 100% guarantee you they will not have such a number on record.

     

    iforgot.apple.com and buyiphone2.apple.com are indeed both owned by Apple. They also resolves to Apple in a DNS search. However, that only proves the person who sent the email stuck in legitimate links.

  • by etresoft,

    etresoft etresoft Sep 9, 2016 8:53 AM in response to elamparo
    Level 7 (29,101 points)
    Sep 9, 2016 8:53 AM in response to elamparo

    Hello elamparo,

    I'm very skeptical that a student at Cornell university would be running a scam like this, and under his own e-mail no less. One would think that a Cornell student could afford to buy his own phones and would be smart enough not to hack under his own name. I think it is far more likely that Apple did not hire Cornell students to run its pre-ordering system. It got overloaded and started recycling web sessions. You accidentally wound up with some one else's HTTP connection. This certainly wouldn't be the first time a bug like this happened on an Apple server.

     

    You should be able to check the status of your order here: http://www.apple.com/shop/help/viewing_changing_orders

     

    If not, you can call Apple directly.

  • by elamparo,

    elamparo elamparo Sep 9, 2016 3:23 PM in response to elamparo
    Level 1 (4 points)
    Sep 9, 2016 3:23 PM in response to elamparo

    well I called apple And they said it was legit. I gave her the address and she verified it. I wonder how many people did not respond to this emai.

  • by ChitlinsCC,

    ChitlinsCC ChitlinsCC Sep 9, 2016 3:33 PM in response to elamparo
    Level 5 (7,635 points)
    Notebooks
    Sep 9, 2016 3:33 PM in response to elamparo

    What phone number did you call? From the email? From somewhere here on apple.com domain?

  • by BobTheFisherman,

    BobTheFisherman BobTheFisherman Sep 9, 2016 3:39 PM in response to ChitlinsCC
    Level 6 (15,279 points)
    Sep 9, 2016 3:39 PM in response to ChitlinsCC

    The number in the email, 1 800 MY-APPLE appears to be valid: http://www.apple.com/contact/

  • by ChitlinsCC,

    ChitlinsCC ChitlinsCC Sep 9, 2016 3:45 PM in response to BobTheFisherman
    Level 5 (7,635 points)
    Notebooks
    Sep 9, 2016 3:45 PM in response to BobTheFisherman

    Yes.

    Kurt posted a couple from his detective work too. (? Cornell.edu ?)

    Is it not unusual for Apple NOT to address one by NAME?

    More than enough funkiness for my skeptical side

  • by BobTheFisherman,

    BobTheFisherman BobTheFisherman Sep 9, 2016 3:51 PM in response to Kurt Lang
    Level 6 (15,279 points)
    Sep 9, 2016 3:51 PM in response to Kurt Lang

    What address resolves to Cornell? The domain in the link, https://iforgot.apple.com/password/verify/appleid?&language=US-EN&app_id=2083&pr s_account_nm=sab333%40cornell.edu&newWin… is apple.com. The link provided by the OP goes to Apple's web site. The login box is pre-populated with an email address at Cornell. I suspect this email address is the OP's since the link was originated by him to retrieve a forgotten password.

  • by Kurt Lang,

    Kurt Lang Kurt Lang Sep 9, 2016 4:00 PM in response to BobTheFisherman
    Level 8 (37,716 points)
    Sep 9, 2016 4:00 PM in response to BobTheFisherman

    Hi Bob,

     

    A bit of a misinterpretation on my part. The second link in the initial post takes you to Apple's legitimate "I forgot" site. But it automatically fills in sab333@cornell.edu as the email address you want to recover an ID for. It doesn't belong to the OP. So it's a, "Why is it there?" kind of thing.

  • by BobTheFisherman,

    BobTheFisherman BobTheFisherman Sep 9, 2016 4:11 PM in response to Kurt Lang
    Level 6 (15,279 points)
    Sep 9, 2016 4:11 PM in response to Kurt Lang

    How do you know it is not an email address belonging to the OP or someone else's account that the OP used to place the reservation? Did I miss something? Sorry, I did miss something. The OP says he does not recognize the ID email address. Maybe he reserved from someone elses computer which was logged in with the unknown ID.

  • by elamparo,

    elamparo elamparo Sep 9, 2016 5:19 PM in response to elamparo
    Level 1 (4 points)
    Sep 9, 2016 5:19 PM in response to elamparo

    i do not know this email address at all. I used my iPhone to go through these steps and it automatically fills this in when I follow the "I forgot" my password links. Yes very fishy! and I called the number by hand (punched in the numbers my self) from the official apple website. Over an hour wait this morning bc the launch of the 7's and gen 2 watches

Page 1 Next