I'M SCARED

[Soviet_Genius]

I bought a game on steam yesterday and I got an email from "[email protected]" that said

I am sorry to inform you that we have caught your credit card number online...Yo have 3 days to cncel it before we empty it..nothing personal...

 

Has anyone got an email like this before? I hope it's just spam, the date is wednesday but I bought the game yesterday (thursday). Could the date be messed up because of time zones or something? I use gmail....

[Zylstra]

It most likely wouldent be caused by the game.

What is the EXACT message?

[Soviet_Genius]

That's the exact message, I copy/pasted it. It's from "Max Turno". Google didn't turn anything up, I was thinking maybe if it was a common spam thing I would be able to find something about it...

[!~*:.Pink Floyd.:*~!]

oh my

do you have your credit card on your Pc?

[Soviet_Genius]

What do you mean "on my pc"?

[!~*:.Pink Floyd.:*~!]

What do you mean "on my pc"?

like is your information on your PC?

[Soviet_Genius]

Like in a text file? Nothing like that...

[Zylstra]

Like in a text file? Nothing like that...

Being as you dont, I dont see any way which they could do that.

Not to mention, if someone wanted your money, the bank account would be empty by now... why would they allow a mercy period?

[typhoeus]

First of all, the message said "We have caught your credit card number online."  If you have made any on-line purchases with your credit card, they could've gotten it.  Did no-one else catch that?  Or am I wrong?

But having said that, it sounds like some jerk-wad spamming.  [email protected]?  Mercy period?  Is this a real-life gentleman thief out of the movies?  Come on.

[Soviet_Genius]

Ok I have confirmed this to be fake because of the date, and also because of this:

Delivered-To: *@gmail.com
Received: by 10.140.166.13 with SMTP id o13cs44959rve;
        Wed, 10 Sep 2008 15:04:57 -0700 (PDT)
Received: by 10.150.181.11 with SMTP id d11mr1290131ybf.246.1221084296429;
        Wed, 10 Sep 2008 15:04:56 -0700 (PDT)
Return-Path: <[email protected]>
Received: from cossacks.x10hosting.com ([74.86.116.190])
        by mx.google.com with ESMTP id 9si10357784yws.5.2008.09.10.15.04.55;
        Wed, 10 Sep 2008 15:04:56 -0700 (PDT)
Received-SPF: neutral (google.com: 74.86.116.190 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=74.86.116.190;
Authentication-Results: mx.google.com; spf=neutral (google.com: 74.86.116.190 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from shobhitm by cossacks.x10hosting.com with local (Exim 4.69)
   (envelope-from <[email protected]>)
   id 1KdXnz-0001AK-Hg
   for *@gmail.com; Wed, 10 Sep 2008 18:04:32 -0400
To: *@gmail.com
Subject: Im sorry...
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
X-Priority: 1
X-MSmail-Priority: High
From: Max Turno <[email protected]>
Message-Id: <[email protected]>
Date: Wed, 10 Sep 2008 18:04:32 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cossacks.x10hosting.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [35225 32002] / [47 12]
X-AntiAbuse: Sender Address Domain - cossacks.x10hosting.com
X-Source: /usr/local/cpanel/cgi-sys/php-cgiv2
X-Source-Args: php-cgiv2
X-Source-Dir: hg.elementfx.com:/public_html/fake


I am sorry to inform you that we have caught your credit card number online...Yo have 3 days to cncel it before we empty it..nothing personal...

The line "X-Source-Dir: hg.elementfx.com:/public_html/fake" leads to http://hg.elementfx.com/fake/. Panic has subsided  

First of all, the message said "We have caught your credit card number online."  If you have made any on-line purchases with your credit card, they could've gotten it.  Did no-one else catch that?  Or am I wrong?

I was freaking out because I bought a game on steam yesterday...

[Zylstra]

I highly recommend reporting the fake email site...

Return-Path: <[email protected]>
Received: from cossacks.x10hosting.com ([74.86.116.190])


Heres their whois information:
http://whois.org/whois_new.cgi?d=x10hosting.com&tld=com

Administrative Contact:
   ClockworkComputers
   Corey Arbogast (support<@>clockworkcomputers<.>com) (Remove < and > from address)
   (603)-729-3659
   Fax: none
   3WethersfieldDr
   Northfield, NH 03276
   US

Send a full report of what happened.
Sites like that shouldent exist.

[!~*:.Pink Floyd.:*~!]

I highly recommend reporting the fake email site...

Return-Path: <[email protected]>
Received: from cossacks.x10hosting.com ([74.86.116.190])


Heres their whois information:
http://whois.org/whois_new.cgi?d=x10hosting.com&tld=com

Administrative Contact:
   ClockworkComputers
   Corey Arbogast (support<@>clockworkcomputers<.>com) (Remove < and > from address)
   (603)-729-3659
   Fax: none
   3WethersfieldDr
   Northfield, NH 03276
   US

Send a full report of what happened.
Sites like that shouldent exist.

zylstra wheres that site that shouldnt exist?

Whats wrong with it?

[Zylstra]

zylstra wheres that site that shouldnt exist?

Whats wrong with it?

http://hg.elementfx.com/fake/
THAT site shouldent exist.

[Saviour]

Also make sure whenever you're submitting any personal information online that you're on an SSL page:  noted by https://

Also make sure the site you're visiting has a valid security certificate, as well.

You can never be too safe.

[Soviet_Genius]

Who do I report them to?