Computer Hope

Other => Other => Topic started by: Soviet_Genius on September 12, 2008, 08:02:44 PM

Title: I'M SCARED
Post by: Soviet_Genius on September 12, 2008, 08:02:44 PM
I bought a game on steam yesterday and I got an email from "[email protected]" that said

Quote
I am sorry to inform you that we have caught your credit card number online...Yo have 3 days to cncel it before we empty it..nothing personal...

 :o :o

Has anyone got an email like this before? I hope it's just spam, the date is wednesday but I bought the game yesterday (thursday). Could the date be messed up because of time zones or something? I use gmail....
Title: Re: I'M SCARED
Post by: Zylstra on September 12, 2008, 08:05:49 PM
It most likely wouldent be caused by the game.

What is the EXACT message?

Title: Re: I'M SCARED
Post by: Soviet_Genius on September 12, 2008, 08:07:24 PM
That's the exact message, I copy/pasted it. It's from "Max Turno". Google didn't turn anything up, I was thinking maybe if it was a common spam thing I would be able to find something about it...
Title: Re: I'M SCARED
Post by: !~*:.Pink Floyd.:*~! on September 12, 2008, 08:10:20 PM
oh my

do you have your credit card on your Pc?
Title: Re: I'M SCARED
Post by: Soviet_Genius on September 12, 2008, 08:11:01 PM
What do you mean "on my pc"?
Title: Re: I'M SCARED
Post by: !~*:.Pink Floyd.:*~! on September 12, 2008, 08:12:25 PM
What do you mean "on my pc"?
like is your information on your PC?
Title: Re: I'M SCARED
Post by: Soviet_Genius on September 12, 2008, 08:12:50 PM
Like in a text file? Nothing like that...
Title: Re: I'M SCARED
Post by: Zylstra on September 12, 2008, 08:20:20 PM
Like in a text file? Nothing like that...
Being as you dont, I dont see any way which they could do that.

Not to mention, if someone wanted your money, the bank account would be empty by now... why would they allow a mercy period?
Title: Re: I'M SCARED
Post by: typhoeus on September 12, 2008, 08:44:00 PM
First of all, the message said "We have caught your credit card number online."  If you have made any on-line purchases with your credit card, they could've gotten it.  Did no-one else catch that?  Or am I wrong?

But having said that, it sounds like some jerk-wad spamming.  [email protected]?  Mercy period?  Is this a real-life gentleman thief out of the movies?  Come on.
Title: Re: I'M SCARED
Post by: Soviet_Genius on September 12, 2008, 08:45:38 PM
Ok I have confirmed this to be fake because of the date, and also because of this:

Quote
Delivered-To: *@gmail.com
Received: by 10.140.166.13 with SMTP id o13cs44959rve;
        Wed, 10 Sep 2008 15:04:57 -0700 (PDT)
Received: by 10.150.181.11 with SMTP id d11mr1290131ybf.246.1221084296429;
        Wed, 10 Sep 2008 15:04:56 -0700 (PDT)
Return-Path: <[email protected]>
Received: from cossacks.x10hosting.com ([74.86.116.190])
        by mx.google.com with ESMTP id 9si10357784yws.5.2008.09.10.15.04.55;
        Wed, 10 Sep 2008 15:04:56 -0700 (PDT)
Received-SPF: neutral (google.com: 74.86.116.190 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=74.86.116.190;
Authentication-Results: mx.google.com; spf=neutral (google.com: 74.86.116.190 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from shobhitm by cossacks.x10hosting.com with local (Exim 4.69)
   (envelope-from <[email protected]>)
   id 1KdXnz-0001AK-Hg
   for *@gmail.com; Wed, 10 Sep 2008 18:04:32 -0400
To: *@gmail.com
Subject: Im sorry...
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
X-Priority: 1
X-MSmail-Priority: High
From: Max Turno <[email protected]>
Message-Id: <[email protected]>
Date: Wed, 10 Sep 2008 18:04:32 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cossacks.x10hosting.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [35225 32002] / [47 12]
X-AntiAbuse: Sender Address Domain - cossacks.x10hosting.com
X-Source: /usr/local/cpanel/cgi-sys/php-cgiv2
X-Source-Args: php-cgiv2
X-Source-Dir: hg.elementfx.com:/public_html/fake


I am sorry to inform you that we have caught your credit card number online...Yo have 3 days to cncel it before we empty it..nothing personal...

The line "X-Source-Dir: hg.elementfx.com:/public_html/fake" leads to http://hg.elementfx.com/fake/. Panic has subsided  :)

First of all, the message said "We have caught your credit card number online."  If you have made any on-line purchases with your credit card, they could've gotten it.  Did no-one else catch that?  Or am I wrong?

I was freaking out because I bought a game on steam yesterday...
Title: Re: I'M SCARED
Post by: Zylstra on September 12, 2008, 08:49:00 PM
I highly recommend reporting the fake email site...

Return-Path: <[email protected]>
Received: from cossacks.x10hosting.com ([74.86.116.190])


Heres their whois information:
http://whois.org/whois_new.cgi?d=x10hosting.com&tld=com

Administrative Contact:
   ClockworkComputers
   Corey Arbogast (support<@>clockworkcomputers<.>com) (Remove < and > from address)
   (603)-729-3659
   Fax: none
   3WethersfieldDr
   Northfield, NH 03276
   US

Send a full report of what happened.
Sites like that shouldent exist.
Title: Re: I'M SCARED
Post by: !~*:.Pink Floyd.:*~! on September 12, 2008, 08:55:06 PM
I highly recommend reporting the fake email site...

Return-Path: <[email protected]>
Received: from cossacks.x10hosting.com ([74.86.116.190])


Heres their whois information:
http://whois.org/whois_new.cgi?d=x10hosting.com&tld=com

Administrative Contact:
   ClockworkComputers
   Corey Arbogast (support<@>clockworkcomputers<.>com) (Remove < and > from address)
   (603)-729-3659
   Fax: none
   3WethersfieldDr
   Northfield, NH 03276
   US

Send a full report of what happened.
Sites like that shouldent exist.

zylstra wheres that site that shouldnt exist?

Whats wrong with it?
Title: Re: I'M SCARED
Post by: Zylstra on September 12, 2008, 08:58:20 PM
zylstra wheres that site that shouldnt exist?

Whats wrong with it?
http://hg.elementfx.com/fake/
THAT site shouldent exist.
Title: Re: I'M SCARED
Post by: Saviour on September 12, 2008, 09:01:26 PM
Also make sure whenever you're submitting any personal information online that you're on an SSL page:  noted by https://

Also make sure the site you're visiting has a valid security certificate, as well.

You can never be too safe.
Title: Re: I'M SCARED
Post by: Soviet_Genius on September 12, 2008, 09:02:46 PM
Who do I report them to?
Title: Re: I'M SCARED
Post by: !~*:.Pink Floyd.:*~! on September 12, 2008, 09:06:53 PM
zylstra wheres that site that shouldnt exist?

Whats wrong with it?
http://hg.elementfx.com/fake/
THAT site shouldent exist.

I see why.
Title: Re: I'M SCARED
Post by: Zylstra on September 12, 2008, 09:09:03 PM
Who do I report them to?
Theres an email in the contact details:


Administrative Contact:
   ClockworkComputers
   Corey Arbogast (support<@>clockworkcomputers<.>com) (Remove < and > from address)
   (603)-729-3659
   Fax: none
   3WethersfieldDr
   Northfield, NH 03276
   US

Title: Re: I'M SCARED
Post by: Soviet_Genius on September 12, 2008, 09:12:03 PM
So I email the guy that owns the site? Won't that just result in more spam because they know that my email is actually real?
Title: Re: I'M SCARED
Post by: Zylstra on September 12, 2008, 09:17:33 PM
So I email the guy that owns the site? Won't that just result in more spam because they know that my email is actually real?
You email the administrator of the server that the site is hosted on, reporting that you have been spammed thru their service.
Title: Re: I'M SCARED
Post by: !~*:.Pink Floyd.:*~! on September 12, 2008, 09:19:01 PM
So I email the guy that owns the site? Won't that just result in more spam because they know that my email is actually real?
You email the administrator of the server that the site is hosted on, reporting that you have been spammed thru their service.

is it possible for soviet to get lawyers involved?
Title: Re: I'M SCARED
Post by: evilfantasy on September 12, 2008, 09:19:21 PM
Quote
You email the administrator of the server that the site is hosted on, reporting that you have been spammed thru their service.

Name: Shobhit Modi
Alias: H@cKInG_GoD
Age: 17 Yrs
Birthdate: 02/15/91
Phone: 989-102-6457

http://www.shobhit.co.in/


Title: Re: I'M SCARED
Post by: Zylstra on September 12, 2008, 09:21:03 PM
So I email the guy that owns the site? Won't that just result in more spam because they know that my email is actually real?
You email the administrator of the server that the site is hosted on, reporting that you have been spammed thru their service.

is it possible for soviet to get lawyers involved?
Yes, but not necessary.

I'm saying contact the host of the site and report them... allowing users to easily scan through an exploitable script is a bad idea.
Title: Re: I'M SCARED
Post by: evilfantasy on September 12, 2008, 09:22:34 PM
They even have a web site discussing how to hack anything. Credit Cards,  PayPal accounts etc.

Hackerz Pedia : Your DOOR to the world of HACKING. - <Link Removed>  Too much questionable/illegal content.
Title: Re: I'M SCARED
Post by: Soviet_Genius on September 12, 2008, 09:27:22 PM
I'll contact the admin tomorrow...