hoping Posted November 3, 2018 Share Posted November 3, 2018 I got added by a female profile pic and name (https://steamcommunity.com/profiles/76561198262112308) "she" sent me a link to a risque site and asked me to log in. Now, I thought this was a fake site. nearly all are. But the thing is, the site knows me. You know how once you're logged into a steam site, and the other sites want to use it as well? Doesn't this mean this site is trustable? I'm very confused. She also spoke in proper coherent sentences and had proper punctuation. I'm scared. are the scammers getting smarter? (also i was toying with "her" to see how long i could waste "her' time) Link to comment Share on other sites More sharing options...
_inu Posted November 3, 2018 Share Posted November 3, 2018 Anyone can integrate Steam OpenID as an authentication method to their site. This has nothing to do with said site being legit. Link to comment Share on other sites More sharing options...
hoping Posted November 3, 2018 Author Share Posted November 3, 2018 so scam? 6 minutes ago, _inu said: Anyone can integrate Steam OpenID as an authentication method to their site. This has nothing to do with said site being legit. Link to comment Share on other sites More sharing options...
Henchman 21 Posted November 3, 2018 Share Posted November 3, 2018 it's a scam, it's very common in gambling sites. they take your login info and leave it on a server so that they never have to use the steam guard code now everytime you make a trade offer it will autocancel and send you a fake offer, they cant confirm it but you can easily mistake it for your legit offer and then they get the free items, and send it through a bunch of accounts, then sell it on a vendor site Link to comment Share on other sites More sharing options...
hoping Posted November 3, 2018 Author Share Posted November 3, 2018 Just now, Eajnihs said: it's a scam, it's very common in gambling sites. they take your login info and leave it on a server so that they never have to use the steam guard code now everytime you make a trade offer it will autocancel and send you a fake offer, they cant confirm it but you can easily mistake it for your legit offer and then they get the free items, and send it through a bunch of accounts, then sell it on a vendor site holy shit that's scary. thank you so much, man Link to comment Share on other sites More sharing options...
Henchman 21 Posted November 3, 2018 Share Posted November 3, 2018 5 minutes ago, jojo reference said: holy shit that's scary. thank you so much, man yeah so common practices these scammers do are 1) ask for something you are selling, or comment on something you've done recently 2) mention a legitimate site or some fake rep they have on their profile 3) then finally ask "have you heard of scamsite.xxx" and then when you login with your information, they basically can send you fake offers with their bots usually they impersonate existing profiles and change their custom id's so you can't track them Link to comment Share on other sites More sharing options...
hoping Posted November 3, 2018 Author Share Posted November 3, 2018 6 minutes ago, Eajnihs said: it's a scam, it's very common in gambling sites. they take your login info and leave it on a server so that they never have to use the steam guard code now everytime you make a trade offer it will autocancel and send you a fake offer, they cant confirm it but you can easily mistake it for your legit offer and then they get the free items, and send it through a bunch of accounts, then sell it on a vendor site thanks for the help. Link to comment Share on other sites More sharing options...
Henchman 21 Posted November 3, 2018 Share Posted November 3, 2018 Also some red flags are: 1) Private inventory 2) Lackluster amount of games and playtime, (and high steam level - there are steam level services) 3) Suspicious friendlist and +rep comments from empty accounts or accounts with above Link to comment Share on other sites More sharing options...
hoping Posted November 3, 2018 Author Share Posted November 3, 2018 1 minute ago, Eajnihs said: Also some red flags are: 1) Private inventory 2) Lackluster amount of games and playtime, (and high steam level - there are steam level services) 3) Suspicious friendlist and +rep comments from empty accounts or accounts with above crap "she" had all of these. thanks for the help and warnings man Link to comment Share on other sites More sharing options...
Henchman 21 Posted November 3, 2018 Share Posted November 3, 2018 Yeah so to be safe just change your password and reset your trade offer link and things should be fine. I've had this happen to me before and lost two unusuals, it's a pretty clever way to scam people. Link to comment Share on other sites More sharing options...
D.Alex Posted November 4, 2018 Share Posted November 4, 2018 Contrary to what Eajnihs is saying, the first screenshot shows that it's a legitimate "Sign in with Steam" process. Otherwise it would ask you for your Steam account credentials. Which makes this not a Phishing Website scam (at least at the moment). Which means they were about to scam you in some other way. Link to comment Share on other sites More sharing options...
DanielDee Posted November 4, 2018 Share Posted November 4, 2018 6 hours ago, Daddy Alex said: Contrary to what Eajnihs is saying, the first screenshot shows that it's a legitimate "Sign in with Steam" process. Otherwise it would ask you for your Steam account credentials. Which makes this not a Phishing Website scam (at least at the moment). Which means they were about to scam you in some other way. Yeah. She would give him coins and then he would buy stuff or play the credits on that site. then the sting would of appeared after. Oh you have to deposit an item to use or withdraw the "virtual" coins or redeem them. Also the site is part of a russian network of gambling sites. The domain is also 9 days old so has been setup very very recently. Amazingly they havent opted out for privacy but that said it has been reported in developer/hosting newsletters from various tech security sites that some russian hosts dont bother with hiding information. they just use fake information instead to make it look like they have nothing to hide. http://whois.domaintools.com/valleyitems.com Dates 9 days oldCreated on 2018-10-26Expires on 2019-10-26Updated on 2018-10-26 Aleksey ZvygencevPrav LTDPravdu str 14,Moscow, Moscow, 191028, RU(p) (f) Link to comment Share on other sites More sharing options...
hoping Posted November 5, 2018 Author Share Posted November 5, 2018 15 hours ago, DanielDee said: Yeah. She would give him coins and then he would buy stuff or play the credits on that site. then the sting would of appeared after. Oh you have to deposit an item to use or withdraw the "virtual" coins or redeem them. Also the site is part of a russian network of gambling sites. The domain is also 9 days old so has been setup very very recently. Amazingly they havent opted out for privacy but that said it has been reported in developer/hosting newsletters from various tech security sites that some russian hosts dont bother with hiding information. they just use fake information instead to make it look like they have nothing to hide. http://whois.domaintools.com/valleyitems.com Dates 9 days oldCreated on 2018-10-26Expires on 2019-10-26Updated on 2018-10-26 Aleksey ZvygencevPrav LTDPravdu str 14,Moscow, Moscow, 191028, RU(p) (f) Wow thats really in-depth. Thanks for finding the domain age Link to comment Share on other sites More sharing options...
DanielDee Posted November 5, 2018 Share Posted November 5, 2018 no problem. i didnt find anything at all. merely viewed the page and copied it. its a usefull tool if you wish to checkout websites details. https://whois.sc/domain.tld domain.tld being the domain you wish to research... another example.https://whois.sc/marketplace.tf on another note. if you wish to register a domain from the domain search and there are no results dont click any adverts or any buttons at all after.. close page. if you have stumbled across a unique address as soon as you register interest lots of people will try and screw you over even advert providers in theory could see the search url that you are on and it obviously be related to said subject. you know. similar to that moment you just went on ebay then come on backpack.tf and see the same search stuff in the adverts... ermmm :Dx oh. side note. Happy belated birtday two months ago this is quite interesting... nic-hdl: SA17220-FRNIC type: PERSON contact: Systems Administrator address: Trojan House, Top Floor, 34 Arcadia Avenue address: N3 2JU London country: GB phone: +49 22885429451 e-mail: how much you pay for the trojan? or iana friend further resullts are in. 1901 companies registed with that postcode :S additional note. it said doogal. are you they? give us some tunes"! Time for me to sleep. NN Test. Be safe and look after your families. Link to comment Share on other sites More sharing options...
LeROY Posted November 7, 2018 Share Posted November 7, 2018 Nothing smart about this scamming technics, its just a handful of scams presented in different ways with the same goal of getting your greed to take over any rational thoughts you might have had. Sad thing is rational thought have not been introduced to these minds and Jedi mind control would probably be more than enough to do the job So many threads with "New Scam?" titles scares me cause most are: basically straight Nigeria scams where the "super-rich Princess with frozen assets will share millions of gold-bars if you help" And new version: "help me get my High tier items back from this site and youll get half" I have been waiting for someone to make a post like: "bought a Potion for my unusual that was gonna make the effect bigger and stronger ...and harder, but it didnt do anything.. was this a new scam?" Link to comment Share on other sites More sharing options...
SmokE Posted November 14, 2018 Share Posted November 14, 2018 Hello, That there is a scam attempt as already said above. Please report the user on the main site Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.