1. SteamRep is shutting down at the end of 2024. See announcement.

Declined 76561198039183046 (d33) -- Already Marked, New Case + His Remote IP

Discussion in 'Archived Reports' started by MacroPower, Aug 30, 2012.

Thread Status:
Not open for further replies.
  1. MacroPower

    MacroPower New User

    Messages:
    26
    Steam:
    STEAM_0:1:40378628
    Victim:
    steamID: [FkN]cosmonty
    steamID32: STEAM_0:0:44923494
    steamID64: http://steamcommunity.com/profiles/76561198050112716
    customURL: http://steamcommunity.com/id/viperomar
    steamrepURL: http://steamrep.com/profiles/76561198050112716

    Scammer:

    steamID: d33
    steamID at time of scam: amnolgupta
    steamID32: STEAM_0:0:39458659
    steamID64: http://steamcommunity.com/profiles/76561198039183046
    customURL: http://steamcommunity.com/id/13234215312431234
    steamrepURL: http://steamrep.com/profiles/76561198039183046


    Screenshots:
    - Pictures of chat: http://imgur.com/a/gP0Km
    - Screen shot of profile page: http://i.imgur.com/XnuBk.png

    Description: A guy adds [FkN]cosmonty and promises PayPal for his unusual, then runs away with the unusual.

    I don't have a transcript of entire the scam, but this is really all you need:
    amnolgupta: cya haha noob

    Later: I added the guy, and called him - tracing his IP address. I lost the screenshot of this:


    10:51 AM - d33: hello?
    10:51 AM - d33: u added me
    10:52 AM - d33: ok by
    10:52 AM - +MacroPower [TRADᴱ]: Oh hey!
    10:52 AM - +MacroPower [TRADᴱ]: Just a moment
    10:52 AM - d33: hey how can i help u
    10:52 AM - +MacroPower [TRADᴱ]: I'm in the middle of something
    10:52 AM - d33: kk
    (Here I call him and start the capture)
    10:53 AM - +MacroPower [TRADᴱ]: Oops
    10:53 AM - d33: i dont have mike
    10:53 AM - +MacroPower [TRADᴱ]: wrong button
    10:53 AM - +MacroPower [TRADᴱ]: xD
    10:53 AM - d33: who is this
    10:53 AM - +MacroPower [TRADᴱ]: I want to trade, just a sec
    10:53 AM - d33: i dont have anything to trade
    10:54 AM - +MacroPower [TRADᴱ]: Don't you buy items for cash?
    10:54 AM - d33: nope
    10:54 AM - +MacroPower [TRADᴱ]: I heard you did...
    10:54 AM - d33: no sorry
    10:54 AM - d33: u have me mistaken
    10:54 AM - +MacroPower [TRADᴱ]: hmm
    10:54 AM - d33: what were u selling
    10:54 AM - d33: and how much
    (I think he realizes what is happening here)
    10:55 AM - d33: ok by
    d33 is now Offline.


    I captured his IP, and got his approximate location:

    Remote IP: 70.177.176.125
    Herndon, Virginia 20171 - United States
    Longitude: -77.3936
    Latitude: 38.9266

    ISP: Cox Communications

    I then gave the IP address to [FkN]cosmonty - who then confronts the scammer:

    http://imgur.com/a/SzHiC

    He ended up getting a some stuff back. I guess the scammer is trying to get the hat back now.
  2. Bacon

    Bacon Retired Staff Partner Community

    Messages:
    749
    Steam:
    STEAM_0:0:28694608
    Thank you for your report. A steamrep admin will look at this shortly. Also, a screenshot of the inventory history would also help.
  3. MacroPower

    MacroPower New User

    Messages:
    26
    Steam:
    STEAM_0:1:40378628
    It's been 16 days. Are you guys really backed up that far?
  4. CanadianInvasion

    CanadianInvasion Retired Staff

    Messages:
    2,378
    Steam:
    STEAM_0:1:11860924
    Can you provide screenshots of your trade history and paypal to verify non-payment?
  5. MacroPower

    MacroPower New User

    Messages:
    26
    Steam:
    STEAM_0:1:40378628
    It wasn't me, as I have said in the description. He also very deliberately runs away (and he's marked, so I'm not sure why you can't just add the extra case). I'll still see if cosmonty can get screenshots.
  6. Xenophobia

    Xenophobia Retired Staff

    Messages:
    4,323
    Steam:
    STEAM_0:1:20973413
    No additional evidence has been supplied, report will be archived.
    Please open a new report if you have more information.

    Sorry for the inconvenience.
Thread Status:
Not open for further replies.