I will tell you the story: yesterday a guy added me. I was curious because I didn't have an open trade. He was from Australia apparently so I couldn't see him online much time and today, the guy talked to me and told me his friend wanted to add me on Steam but he couldn't because Steam gave him an error. He passes me the profile link of his friend and I noticed the link had : "steamcomnnunity" so it was probably a pishing link.

Is there any place I can report these kind of behaviours?

1 decade ago*

Comment has been collapsed.

Steam Support might take it, I imagine. Report him from his profile, include pictures of the chat log, etc.

1 decade ago
Permalink

Comment has been collapsed.

thx

1 decade ago
Permalink

Comment has been collapsed.

Apparently I ahevn't been the first guy who he tried to steal. One guy apparently fell on his trap.

1 decade ago
Permalink

Comment has been collapsed.

So how does this work? You click the link and you get infected? What if I have an anti-virus?

1 decade ago
Permalink

Comment has been collapsed.

no, no. The thing is he pass you the link and it appaears as you are not logged in the page. they want you to put your account details.

1 decade ago
Permalink

Comment has been collapsed.

phishing is phishing.

1 decade ago
Permalink

Comment has been collapsed.

It simulates the steamcommunity login page. If you put your name and password then you're screwed.

1 decade ago
Permalink

Comment has been collapsed.

That is one of the reason I keep myself logged in and have it save my password. Even if I somehow fall for things not having it automatically go will be more than enough to warn me.

1 decade ago
Permalink

Comment has been collapsed.

maybe he wrote "steamcomnnunity" manually and made a typo?

1 decade ago
Permalink

Comment has been collapsed.

No because I copied the link and it worked.

1 decade ago
Permalink

Comment has been collapsed.

Doubt it. I've heard of this scam before, and each time it was mentioned, the same typo would always be a dead giveaway that the site was fake.

1 decade ago
Permalink

Comment has been collapsed.

Did you unlock an achievement for avoiding phishing scam?

1 decade ago
Permalink

Comment has been collapsed.

Nope yet. They are processing this award so they cna be sure I deserve it.

1 decade ago
Permalink

Comment has been collapsed.

just happened the same to me.

I guess i shouldnt post the chatlog or his steam profile, cuz its forbidden on SG?

Anyways, i clicked the link cuz there's people adding me constantly for trades.

I changed my password as soon as i detected the phishing link.

I reported it to Steam and Google.

Should i worry about it?

1 decade ago
Permalink

Comment has been collapsed.

As long as you changed your password and you're sure they didn't change any settings (email, etc) or buy anything from your account, you should be safe. Stuff like your credit card info isn't shown in full, so they can't get enough data to use it. It is possible they used your account to try and draw in other people though. But if like you said, you changed your password immediately, they probably didn't have time to do anything.

1 decade ago
Permalink

Comment has been collapsed.

ok thanks.

Well the password change was almost immediate, plus i didnt logged into that website, just clicked on the link.

So i'm pretty sure it's all good.

1 decade ago
Permalink

Comment has been collapsed.

you can report to google?

1 decade ago
Permalink

Comment has been collapsed.

ye i basically used the link from ThirdSketch, the 2nd post in this thread.

1 decade ago
Permalink

Comment has been collapsed.

This has been around for some time. Not sure why someone doesn't shut down/revoke their URL.
http://geoip.flagfox.net/?ip=89.31.143.110&host=www.steamcomnunity.com

1 decade ago
Permalink

Comment has been collapsed.

Because another page would be created just after. Different yes but not less good.

1 decade ago
Permalink

Comment has been collapsed.

it's the url that needs to be revoked / banned

1 decade ago
Permalink

Comment has been collapsed.

You can't really "ban" urls... what should happen is that Steam tries to get the site offline and then takes ownership of it. to put up their own server there to inform you that it's the wrong url or just forward you. Like google does with gogle, gooogle, etc. Or just buy it and let it lead to nowhere which would be similar to banning i guess...

You could do something similar for yourself by messing with your hosts file but I'm not going to try to explain it here cause I'm afraid of seeming like I'm trying to scam people ;)

1 decade ago
Permalink

Comment has been collapsed.

I just got added buy a "canadian" guy, he sent me the same link, but unfortunately, I inserted my password, then steam told me there was a guy in Russia trying to access my account. Good thing is that I had steam guard up. :)

1 decade ago
Permalink

Comment has been collapsed.

You should still change your password as a matter of protection if you haven't done already.

1 decade ago
Permalink

Comment has been collapsed.

wooh that's close

1 decade ago
Permalink

Comment has been collapsed.

Oh yeah? How do we know it's you here and not the "canadian" guy speaking? OMG!!! I forgot to put my tinfoil hat today, maybe they have hacked my own brain by now!

1 decade ago
Permalink

Comment has been collapsed.

volvo needs to buy that domain name so people won't keep using it for bad stuff

1 decade ago
Permalink

Comment has been collapsed.

If people are dumb enough to fall for the trick they deserve it. It's a well known trick and yet people keep falling for it and they act all surprised when they fall for it and their account gets hacked because they have no security on it. We have these security barriers for our protection so if people don't use them they are taking a risk.

1 decade ago
Permalink

Comment has been collapsed.

What if the person who fell for it doesn't know English? I bet it wouldn't be that easy to spot the typo in the URL :) Besides, it seems a little harsh to say someone deserves to be screwed just for not paying attention.

1 decade ago
Permalink

Comment has been collapsed.

I didn't spot it right away and I'm a native everything.

1 decade ago
Permalink

Comment has been collapsed.

its a russian dude that give scam links and his login browser is named something like KESHA133

1 decade ago
Permalink

Comment has been collapsed.

Eh, if I don't have any trades up, I deny anyone who adds me without commenting the reason on my profile. Also I keep saying this everywhere, if the link you click on steam chat is a VALID steam link, it will open in your client not browser. And if you see this on a link that appears to be steam link, it's fake.

1 decade ago
Permalink

Comment has been collapsed.

2 of my friends have lost their items because of this. idiots....

1 decade ago
Permalink

Comment has been collapsed.

I literally - just like 10 seconds ago, read a post about the exact same scam method on another forum and saw this. So ironic that it's so popular but there are people still falling for this.

As for the report part, you can report him to steamrep.com with the chat screenshot and his profile link.

1 decade ago
Permalink

Comment has been collapsed.

Something I submit into Steamrep threads on phishers occasionally. Applies here as well, I think:

If you want to do something about phishing sites, go to http://domainwhitepages.com/ or another whois service to find out the domain registrar and hosting provider. Then contact both via their abuse email addresses listed there or directly on their websites.

If you post a report like this here, it's good to have a record, but nothing will happen, except someone else like me maybe informing the hosting provider. This is also addressed to you, random passer-by. Report phishing pages to the hosting companies, not just Steamrep! Hosting companies are the people who can remove them, not Steamrep!

Also report it as an unsafe site in your browser and to these:

http://toolbar.netcraft.com/report_url
https://submit.symantec.com/antifraud/phish.cgi
http://www.phishtank.com/
https://www.google.com/safebrowsing/report_phish/
http://phishing.eset.com/report

1 decade ago
Permalink

Comment has been collapsed.

Wow... such story, very tragic.

Bro,at least 5 people for day add me with the pishing site xD

Just say to him "Reported for pishing", take a screen, upload it to imgur, edit it so only the chat appear, get the link, enter the user steam page, report violation, select pishing and paste the link.

Dunno if valve do something with them, but i always report them

1 decade ago
Permalink

Comment has been collapsed.

"Bro,at least 5 people for day add me with the pishing site xD"

Of course they do pal..

1 decade ago
Permalink

Comment has been collapsed.

When you get a phishing link, put in usernames such as kissmyass and password such as trolol. Well I like to screw around with scammers.

1 decade ago
Permalink

Comment has been collapsed.

Closed 1 decade ago by Seibitsu.