steamID: crycode steamID32: STEAM_0:1:42311179 steamID64: http://steamcommunity.com/profiles/76561198044888087 customURL: steamrepURL: http://steamrep.com/profiles/76561198044888087 Proof/screenshots: http://pastebin.com/wLSY7Hb4 http://imgur.com/HV6Ys Description:This guy added me to offer on my unusual, a bubbling Kabuto if that really matters (Link to the trade here http://www.tf2outpost.com/trade/4662789). His inventory only had 20 or so items in it, so I assumed it was an alt. Then he gave me a link to "offer" on my unusual, when he couldn't just simply word out the offer like I asked him to. The link he gave me looks extremely sketchy and I don't know why he would even give a link to offer unless it would give you some kind of virus/trojan whatever you would call it. After he deleted me he set his profile to private. And this is my first time posting here, so if I posted this in the wrong place just say so and I'll move it?
I don't think clicking links can affect your computer, but there's surely been reports of people clicking links and forcefully giving someone their high-valued items. He might be a scammer alt because he has his unusuals and stuff on another account.
The link said imagecloud[BREAK]net19[BREAK]net. The "net19" in between "imagecloud" and "net" means it's a fake site. I believe Edy is right, there's no reason that you'd need an image to send an offer. An obvious attempt at hijacking in my opinion.
I was at a library CPU looking at the site you were sent edy, I believe the site isn't the harmful thing, but it requires a "java" (Iv'e seen phishing/virus sites like this before) update, even though the CPU clearly had the most up to date software. So I think the virus is camouflaged as the update. Plus the whole Idea of the image offering is preposterous. P.S I might be wrong
