1. SteamRep is shutting down at the end of 2024. See announcement.

Archived 76561198020257384 (Raxshi)

Discussion in 'Archived Reports' started by Ras2, Jul 15, 2013.

  1. Ras2

    Ras2 New User

    Messages:
    11
    Steam:
    STEAM_0:0:20556173
    Victim:
    | steamname: Ras2
    | steamID32: STEAM_0:0:20556173
    | steamID64: http://steamcommunity.com/profiles/76561198001378074
    | customURL: http://steamcommunity.com/id/ras2
    | steamrep: http://steamrep.com/profiles/76561198001378074

    Scammer:
    | steamname: Raxshi
    | steamID32: STEAM_0:0:29995828
    | steamID64: http://steamcommunity.com/profiles/76561198020257384
    | customURL: http://steamcommunity.com/id/Raxshi
    | steamrep: http://steamrep.com/profiles/76561198020257384

    Description:
    My account was hijacked Thursday 11 July 2013 11:25 (UTC) by phishing link on TF2Outpost.
    phishing_link.PNG
    As i can see, the link was posted from other hijacked account.

    I send a ticket to the Steam Support:
    steam_hijack_report.PNG

    Soon after Steam Support restored my account:
    steam_response_1.PNG

    3 days later (July 14) Steam Support restore stolen TF2 items (2 Unusual Hats, Keys, etc.)
    steam_response_2.PNG

    Now i can see that both my unusual hats appeared in this person (http://steamcommunity.com/profiles/76561198020257384) inventory the same time when my account was hijacked.
    Items history:
    TF2Outpost_HWNN.PNG
    TF2Outpost_TGT.PNG
    http://backpack.tf/item/1719984621
    http://backpack.tf/item/1662408961

    Raxshi backpack changes with timestamp (Saved on Thu, 11 Jul 13 07:04:57 -0500):
    http://www.tf2items.com/id/Raxshi?time=1373544297

    Now he is trying to sell them at TF2Outpost for low price:
    http://www.tf2outpost.com/trade/12683076
  2. HelenAngel

    HelenAngel Retired Staff

    Messages:
    4,572
    Steam:
    STEAM_0:1:8627755
    I need screenshots of your actual inventory history showing where the items went. Thanks! :)
  3. Ras2

    Ras2 New User

    Messages:
    11
    Steam:
    STEAM_0:0:20556173
    HelenAngel, here is mine and Raxshi backpack snapshots:

    Ras2:
    http://backpack.tf/id/76561198001378074?time=1373439600 (2013-07-10 there is no "Hat with no name" in my inventory, because I set it to Steam Communuity Market earlier, but later that day I took it back)
    http://backpack.tf/id/76561198001378074?time=1373526000 (2013-07-11 account already hijacked)
    Note how the item graph is crashing at Jule 11 - the day that my account was hijacked.

    Raxshi:
    http://backpack.tf/id/76561198020257384?time=1373439600 (2013-07-10 all clear)
    http://backpack.tf/id/76561198020257384?time=1373526000 (2013-07-11 he got my hats)

    As you can see, now these items are duplicated. Hats become duplicated when Steam Support restored my backpack - July 14. Now they exists both in my backpack and Raxshi backpack.

    Here again items history:
    http://backpack.tf/item/1719984621
    http://backpack.tf/item/1662408961

    Note that there is no other owners after me except Raxshi. So when my account was hijacked, this hats were immediately transfered into Raxshi backpack.

    Here proof that i get this hats legal way:
    Purchase_HWNN.PNG
    Purchase_TGT.PNG
  4. Sari

    Sari Helpful Member

    Messages:
    2,450
    Steam:
    STEAM_0:1:50710336
    What she meant by inventory history was to go into your inventory, click view inventory history (or click here), and take a snapshot of the trade. Make sure it's uncropped and remember to upload it directly to Steamrep. Thanks :)
    Ras2 likes this.
  5. Ras2

    Ras2 New User

    Messages:
    11
    Steam:
    STEAM_0:0:20556173
    Sari, thank you for clarification :) English is not my native language and i didn't know about that feature in Steam.
    Anyway, here is screenshot:
    inventory.PNG
    Now I can see, that he did it thru some mediator account.
  6. Raxshi

    Raxshi New User

    Messages:
    26
    Steam:
    STEAM_0:0:29995828
    Wow. How interesting. I'll make a bigger post in a moment, I'm kind of shocked to see a scam report on me. Fingers shaking. Please give me 5 minutes and refresh.
  7. Raxshi

    Raxshi New User

    Messages:
    26
    Steam:
    STEAM_0:0:29995828
    Okay so, the story is, I had a quicksell trade up. I was buying ANY unusual for 50-80% off, some Russian person contacted me and sold me your unusuals. He was NOT marked, there was not a scam report made on him. What proof do I need to provide?
  8. Ras2

    Ras2 New User

    Messages:
    11
    Steam:
    STEAM_0:0:20556173
    Ok then. Please, provide steam inventory history screenshots. I want to see that you bought my hats for something valuable, not 10 keys or something like. And post Steam id of that person here.
  9. Sjru

    Sjru User

    Messages:
    17,464
    Steam:
    STEAM_0:1:13315037
    Provide an uncropped version of your trading please.
  10. Raxshi

    Raxshi New User

    Messages:
    26
    Steam:
    STEAM_0:0:29995828
    If this is directed to me, I can do it.
  11. gencobra

    gencobra Retired Staff

    Messages:
    1,785
    SteamRep Admin:
    STEAM_0:1:31047928
    Steam:
    STEAM_0:1:31047928
    | steamname: |UKMD|Celreo
    | steamID32: STEAM_0:1:32722996
    | steamID64: http://steamcommunity.com/profiles/76561198025711721
    | customURL: http://steamcommunity.com/id/celreo
    | steamrep: http://steamrep.com/profiles/76561198025711721


    Raxshi's trade history http://i.imgur.com/qUxQcjl.png

    Checked UKMD Forums on a suspicion that Celreo was hijacked - he was
    http://www.ukmandown.co.uk/e107_plugins/forum/forum_viewtopic.php?317616.post

    | steamname: S> MY bp
    | steamID32: STEAM_0:1:56702642
    | steamID64: http://steamcommunity.com/profiles/76561198073671013
    | customURL:
    | steamrep: http://steamrep.com/profiles/76561198073671013
  12. gencobra

    gencobra Retired Staff

    Messages:
    1,785
    SteamRep Admin:
    STEAM_0:1:31047928
    Steam:
    STEAM_0:1:31047928
    Based on the evidence I was able to gather, I'm certain that Celreo was hijacked at the time. Given that Celreo wasn't tagged or reported, Raxshi did nothing wrong.