Jump to content

scammer?


hoping

Recommended Posts

I got added by a female profile pic and name (https://steamcommunity.com/profiles/76561198262112308)

"she" sent me a link to a risque site and asked me to log in.

Now, I thought this was a fake site. nearly all are. But the thing is, the site knows me. You know how once you're logged into a steam site, and the other sites want to use it as well?  Doesn't this mean this site is trustable? I'm very confused. She also spoke in proper coherent sentences and had proper punctuation. I'm scared. are the scammers getting smarter?

image.thumb.png.f28d06a173b113f757662d34191c0c22.pngimage.png.21d633a1f50990e25bcaf200639e4de5.png

(also i was toying with "her" to see how long i could waste "her' time)

Link to comment
Share on other sites

so scam?

6 minutes ago, _inu said:

Anyone can integrate Steam OpenID as an authentication method to their site. This has nothing to do with said site being legit.

 

Link to comment
Share on other sites

it's a scam, it's very common in gambling sites.

they take your login info and leave it on a server so that they never have to use the steam guard code

 

now everytime you make a trade offer it will autocancel and send you a fake offer, they cant confirm it but you can easily mistake it for your legit offer and then they get the free items, and send it through a bunch of accounts, then sell it on a vendor site

Link to comment
Share on other sites

Just now, Eajnihs said:

it's a scam, it's very common in gambling sites.

they take your login info and leave it on a server so that they never have to use the steam guard code

 

now everytime you make a trade offer it will autocancel and send you a fake offer, they cant confirm it but you can easily mistake it for your legit offer and then they get the free items, and send it through a bunch of accounts, then sell it on a vendor site

holy shit that's scary. thank you so much, man

 

Link to comment
Share on other sites

5 minutes ago, jojo reference said:

holy shit that's scary. thank you so much, man

 

yeah so common practices these scammers do are

1) ask for something you are selling, or comment on something you've done recently

2) mention a legitimate site or some fake rep they have on their profile

3) then finally ask "have you heard of scamsite.xxx"

 

and then when you login with your information, they basically can send you fake offers with their bots

usually they impersonate existing profiles and change their custom id's so you can't track them

Link to comment
Share on other sites

6 minutes ago, Eajnihs said:

it's a scam, it's very common in gambling sites.

they take your login info and leave it on a server so that they never have to use the steam guard code

 

now everytime you make a trade offer it will autocancel and send you a fake offer, they cant confirm it but you can easily mistake it for your legit offer and then they get the free items, and send it through a bunch of accounts, then sell it on a vendor site

thanks for the help.

 

Link to comment
Share on other sites

Also some red flags are:

 

1) Private inventory

2) Lackluster amount of games and playtime, (and high steam level - there are steam level services)

3) Suspicious friendlist and +rep comments from empty accounts or accounts with above

Link to comment
Share on other sites

1 minute ago, Eajnihs said:

Also some red flags are:

 

1) Private inventory

2) Lackluster amount of games and playtime, (and high steam level - there are steam level services)

3) Suspicious friendlist and +rep comments from empty accounts or accounts with above

crap "she" had all of these. thanks for the help and warnings man

Link to comment
Share on other sites

Yeah so to be safe just change your password and reset your trade offer link and things should be fine.

I've had this happen to me before and lost two unusuals, it's a pretty clever way to scam people.

Link to comment
Share on other sites

Contrary to what Eajnihs is saying, the first screenshot shows that it's a legitimate "Sign in with Steam" process. Otherwise it would ask you for your Steam account credentials.

 

Which makes this not a Phishing Website scam (at least at the moment). Which means they were about to scam you in some other way.

Link to comment
Share on other sites

6 hours ago, Daddy Alex said:

Contrary to what Eajnihs is saying, the first screenshot shows that it's a legitimate "Sign in with Steam" process. Otherwise it would ask you for your Steam account credentials.

 

Which makes this not a Phishing Website scam (at least at the moment). Which means they were about to scam you in some other way.

Yeah. She would give him coins and then he would buy stuff or play the credits on that site. then the sting would of appeared after. Oh you have to deposit an item to use or withdraw the "virtual" coins or redeem them.

 

Also the site is part of a russian network of gambling sites. The domain is also 9 days old so has been setup very very recently. Amazingly they havent opted out for privacy but that said it has been reported in developer/hosting newsletters from various tech security sites that some russian hosts dont bother with hiding information. they just use fake information instead to make it look like they have nothing to hide.

 

http://whois.domaintools.com/valleyitems.com

 

Dates 9 days old
Created on 2018-10-26
Expires on 2019-10-26
Updated on 2018-10-26


Aleksey Zvygencev
Prav LTD
Pravdu str 14,
Moscow, Moscow, 191028, RU
email.pgif?md5=3e6a2299bf14d418b61c8c6aacdc9ce0&face=arial&size=9&color=000000&bgcolor=FFFFFF&face=Lato-Regular&size=10&color=5a5a5a&bgcolor=FFFFFF&format[]=transparent&format[]=transparent
(p)phone.pgif?hash=fLtke7l%2FZkBdATEYolxqQlGI03LWgTJ7&face=Lato-Regular&size=10&color=5a5a5a&bgcolor=FFFFFF&format[]=transparent&face=Lato-Regular&size=10&color=5a5a5a&bgcolor=FFFFFF&format[]=transparent (f)phone.pgif?hash=jKpts5mhLIVYZNqOHO8FtLV7SSPKAsG%2F&face=Lato-Regular&size=10&color=5a5a5a&bgcolor=FFFFFF&format[]=transparent&face=Lato-Regular&size=10&color=5a5a5a&bgcolor=FFFFFF&format[]=transparent

 

Link to comment
Share on other sites

15 hours ago, DanielDee said:

Yeah. She would give him coins and then he would buy stuff or play the credits on that site. then the sting would of appeared after. Oh you have to deposit an item to use or withdraw the "virtual" coins or redeem them.

 

Also the site is part of a russian network of gambling sites. The domain is also 9 days old so has been setup very very recently. Amazingly they havent opted out for privacy but that said it has been reported in developer/hosting newsletters from various tech security sites that some russian hosts dont bother with hiding information. they just use fake information instead to make it look like they have nothing to hide.

 

http://whois.domaintools.com/valleyitems.com

 

Dates 9 days old
Created on 2018-10-26
Expires on 2019-10-26
Updated on 2018-10-26


Aleksey Zvygencev
Prav LTD
Pravdu str 14,
Moscow, Moscow, 191028, RU
email.pgif?md5=3e6a2299bf14d418b61c8c6aacdc9ce0&face=arial&size=9&color=000000&bgcolor=FFFFFF&face=Lato-Regular&size=10&color=5a5a5a&bgcolor=FFFFFF&format[]=transparent&format[]=transparent
(p)phone.pgif?hash=fLtke7l%2FZkBdATEYolxqQlGI03LWgTJ7&face=Lato-Regular&size=10&color=5a5a5a&bgcolor=FFFFFF&format[]=transparent&face=Lato-Regular&size=10&color=5a5a5a&bgcolor=FFFFFF&format[]=transparent (f)phone.pgif?hash=jKpts5mhLIVYZNqOHO8FtLV7SSPKAsG%2F&face=Lato-Regular&size=10&color=5a5a5a&bgcolor=FFFFFF&format[]=transparent&face=Lato-Regular&size=10&color=5a5a5a&bgcolor=FFFFFF&format[]=transparent

 

Wow thats really in-depth. Thanks for finding the domain age

 

Link to comment
Share on other sites

no problem. i didnt find anything at all. merely viewed the page and copied it. its a usefull tool if you wish to checkout websites details.


https://whois.sc/domain.tld

domain.tld being the domain you wish to research...


another example.

https://whois.sc/marketplace.tf

on another note. if you wish to register a domain from the domain search and there are no results dont click any adverts or any buttons at all after.. close page. if you have stumbled across a unique address as soon as you register interest lots of people will try and screw you over

even advert providers in theory could see the search url that you are on and it obviously be related to said subject.

you know. similar to that moment you just went on ebay then come on backpack.tf and see the same search stuff in the adverts... ermmm :Dx

oh. side note. Happy belated birtday two months ago :D



this is quite interesting...

nic-hdl:     SA17220-FRNIC
type:        PERSON
contact:     Systems Administrator
address:     Trojan House, Top Floor, 34 Arcadia Avenue
address:     N3 2JU London
country:     GB
phone:       +49 22885429451
e-mail:      email.pgif?md5=64e8d51cbe66c8e7529cf8fff319ad32&face=arial&size=9&color=000000&bgcolor=FFFFFF&face=arial&size=9&color=0000FF&bgcolor=FFFFFF&format[]=transparent&format[]=transparent

how much you pay for the trojan? or iana friend :D

further resullts are in. 1901 companies registed with that postcode :S

additional note. it said doogal. are you they? :D give us some tunes"!

Time for me to sleep.

 

 

❤️ NN

 

Test.

 

  ❤️

Be safe and look after your families.

 

 

Link to comment
Share on other sites

Nothing smart about this scamming technics, its just a handful of scams presented in different ways with the same goal of getting your greed to take over any rational thoughts you might have had.

Sad thing is rational thought have not been introduced to these minds and Jedi mind control would probably be more than enough to do the job

 

So many threads with "New Scam?" titles scares me cause most are:

basically straight Nigeria scams where the "super-rich Princess with frozen assets will share millions of gold-bars if you help"  And new version: "help me get my High tier items back from this site and youll get half"

 

I have been waiting for someone to make a post like:

"bought a Potion for my unusual that was gonna make the effect bigger and stronger ...and harder, but it didnt do anything.. was this a new scam?"

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...