It is a SCAM!
No need to check with credit card provider.
Nobody stayed “For days ago....”
Wants to open the attachments containing malware, virus, whatever... file ending with ....pdf.html
Lately, I've been seeing quite a few attachments coming in with names like "message.pdf________.exe". Of course, I open those right away since they must be important (NOT).