I'M SCARED

[Soviet_Genius]

I bought a game on steam yesterday and I got an email from "[email protected]" that said

I am sorry to inform you that we have caught your credit card number online...Yo have 3 days to cncel it before we empty it..nothing personal...

 

Has anyone got an email like this before? I hope it's just spam, the date is wednesday but I bought the game yesterday (thursday). Could the date be messed up because of time zones or something? I use gmail....

[Zylstra]

It most likely wouldent be caused by the game.

What is the EXACT message?

[Soviet_Genius]

That's the exact message, I copy/pasted it. It's from "Max Turno". Google didn't turn anything up, I was thinking maybe if it was a common spam thing I would be able to find something about it...

[!~*:.Pink Floyd.:*~!]

oh my

do you have your credit card on your Pc?

[Soviet_Genius]

What do you mean "on my pc"?

[!~*:.Pink Floyd.:*~!]

What do you mean "on my pc"?

like is your information on your PC?

[Soviet_Genius]

Like in a text file? Nothing like that...

[Zylstra]

Like in a text file? Nothing like that...

Being as you dont, I dont see any way which they could do that.

Not to mention, if someone wanted your money, the bank account would be empty by now... why would they allow a mercy period?

[typhoeus]

First of all, the message said "We have caught your credit card number online."  If you have made any on-line purchases with your credit card, they could've gotten it.  Did no-one else catch that?  Or am I wrong?

But having said that, it sounds like some jerk-wad spamming.  [email protected]?  Mercy period?  Is this a real-life gentleman thief out of the movies?  Come on.

[Soviet_Genius]

Ok I have confirmed this to be fake because of the date, and also because of this:

Delivered-To: *@gmail.com
Received: by 10.140.166.13 with SMTP id o13cs44959rve;
        Wed, 10 Sep 2008 15:04:57 -0700 (PDT)
Received: by 10.150.181.11 with SMTP id d11mr1290131ybf.246.1221084296429;
        Wed, 10 Sep 2008 15:04:56 -0700 (PDT)
Return-Path: <[email protected]>
Received: from cossacks.x10hosting.com ([74.86.116.190])
        by mx.google.com with ESMTP id 9si10357784yws.5.2008.09.10.15.04.55;
        Wed, 10 Sep 2008 15:04:56 -0700 (PDT)
Received-SPF: neutral (google.com: 74.86.116.190 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=74.86.116.190;
Authentication-Results: mx.google.com; spf=neutral (google.com: 74.86.116.190 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from shobhitm by cossacks.x10hosting.com with local (Exim 4.69)
   (envelope-from <[email protected]>)
   id 1KdXnz-0001AK-Hg
   for *@gmail.com; Wed, 10 Sep 2008 18:04:32 -0400
To: *@gmail.com
Subject: Im sorry...
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
X-Priority: 1
X-MSmail-Priority: High
From: Max Turno <[email protected]>
Message-Id: <[email protected]>
Date: Wed, 10 Sep 2008 18:04:32 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cossacks.x10hosting.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [35225 32002] / [47 12]
X-AntiAbuse: Sender Address Domain - cossacks.x10hosting.com
X-Source: /usr/local/cpanel/cgi-sys/php-cgiv2
X-Source-Args: php-cgiv2
X-Source-Dir: hg.elementfx.com:/public_html/fake


I am sorry to inform you that we have caught your credit card number online...Yo have 3 days to cncel it before we empty it..nothing personal...

The line "X-Source-Dir: hg.elementfx.com:/public_html/fake" leads to http://hg.elementfx.com/fake/. Panic has subsided  

First of all, the message said "We have caught your credit card number online."  If you have made any on-line purchases with your credit card, they could've gotten it.  Did no-one else catch that?  Or am I wrong?

I was freaking out because I bought a game on steam yesterday...

[Zylstra]

I highly recommend reporting the fake email site...

Return-Path: <[email protected]>
Received: from cossacks.x10hosting.com ([74.86.116.190])


Heres their whois information:
http://whois.org/whois_new.cgi?d=x10hosting.com&tld=com

Administrative Contact:
   ClockworkComputers
   Corey Arbogast (support<@>clockworkcomputers<.>com) (Remove < and > from address)
   (603)-729-3659
   Fax: none
   3WethersfieldDr
   Northfield, NH 03276
   US

Send a full report of what happened.
Sites like that shouldent exist.

[!~*:.Pink Floyd.:*~!]

I highly recommend reporting the fake email site...

Return-Path: <[email protected]>
Received: from cossacks.x10hosting.com ([74.86.116.190])


Heres their whois information:
http://whois.org/whois_new.cgi?d=x10hosting.com&tld=com

Administrative Contact:
   ClockworkComputers
   Corey Arbogast (support<@>clockworkcomputers<.>com) (Remove < and > from address)
   (603)-729-3659
   Fax: none
   3WethersfieldDr
   Northfield, NH 03276
   US

Send a full report of what happened.
Sites like that shouldent exist.

zylstra wheres that site that shouldnt exist?

Whats wrong with it?

[Zylstra]

zylstra wheres that site that shouldnt exist?

Whats wrong with it?

http://hg.elementfx.com/fake/
THAT site shouldent exist.

[Saviour]

Also make sure whenever you're submitting any personal information online that you're on an SSL page:  noted by https://

Also make sure the site you're visiting has a valid security certificate, as well.

You can never be too safe.

[Soviet_Genius]

Who do I report them to?

[!~*:.Pink Floyd.:*~!]

zylstra wheres that site that shouldnt exist?

Whats wrong with it?

http://hg.elementfx.com/fake/
THAT site shouldent exist.

I see why.

[Zylstra]

Who do I report them to?

Theres an email in the contact details:

Administrative Contact:
   ClockworkComputers
   Corey Arbogast (support<@>clockworkcomputers<.>com) (Remove < and > from address)
   (603)-729-3659
   Fax: none
   3WethersfieldDr
   Northfield, NH 03276
   US

[Soviet_Genius]

So I email the guy that owns the site? Won't that just result in more spam because they know that my email is actually real?

[Zylstra]

So I email the guy that owns the site? Won't that just result in more spam because they know that my email is actually real?

You email the administrator of the server that the site is hosted on, reporting that you have been spammed thru their service.

[!~*:.Pink Floyd.:*~!]

So I email the guy that owns the site? Won't that just result in more spam because they know that my email is actually real?

You email the administrator of the server that the site is hosted on, reporting that you have been spammed thru their service.

is it possible for soviet to get lawyers involved?

[evilfantasy]

You email the administrator of the server that the site is hosted on, reporting that you have been spammed thru their service.

Name: Shobhit Modi
Alias: H@cKInG_GoD
Age: 17 Yrs
Birthdate: 02/15/91
Phone: 989-102-6457

http://www.shobhit.co.in/

[Zylstra]

So I email the guy that owns the site? Won't that just result in more spam because they know that my email is actually real?

You email the administrator of the server that the site is hosted on, reporting that you have been spammed thru their service.

is it possible for soviet to get lawyers involved?

Yes, but not necessary.

I'm saying contact the host of the site and report them... allowing users to easily scan through an exploitable script is a bad idea.

[evilfantasy]

They even have a web site discussing how to hack anything. Credit Cards,  PayPal accounts etc.

Hackerz Pedia : Your DOOR to the world of HACKING. - <Link Removed>  Too much questionable/illegal content.

[Soviet_Genius]

I'll contact the admin tomorrow...