Invalid 76561198068270865 (Kudonikov) - Phishing attempt

Victim:
| steamname: Zombie
| steamID32: STEAM_0:1:16854444
| steamID64: http://steamcommunity.com/profiles/76561197993974617
| customURL: http://steamcommunity.com/id/eibmoz_
| steamrep: http://steamrep.com/profiles/76561197993974617

Scammer:
| steamname: Kudonikov
| steamID32: STEAM_0:1:54002568
| steamID64: http://steamcommunity.com/profiles/76561198068270865
| customURL:
| steamrep: http://steamrep.com/profiles/76561198068270865

Screenshots:
http://i.imgur.com/ZhNbr5u.png
Also attached:

Note: This is the screenshot I sent with my report to Steam support a few hours ago, which is why the last line differs from the chatlog pasted below.

Description:
This person added me yesterday morning to buy some crates, and sent me this phishing link a few hours later, which I fell for after I got home from work, slept and woke up. I realized immediately after trying to log in there, so I reset my SteamGuard authorizations, changed my password, reported them to Steam, etc.
As of posting this, they still have their semi-valuable items (Stranges, Genuines, keys, etc.) in their inventory, so I doubt their account was hijacked.

Chat transcript:

Code:

Never tell your password to anyone.
08:24 - Zombie: hey
08:24 - Kudonikov: hi
08:24 - Kudonikov: i want crate 21 and 38
08:24 - Zombie: alright
08:24 - Kudonikov: for 2.66 ?
08:24 - Zombie: yep
08:25 - Kudonikov: oh error
08:25 - Zombie: I'll try
08:26 - Zombie: thank you
08:26 - Kudonikov: thank you too :)
12:07 - Kudonikov: hey, add my new account please http://steamcomnunlity.com/id/HeraJecobeb
12:54 - Kudonikov is now Offline.
19:26 - Your state is set to Offline.
19:26 - Lost connection to Steam, will rejoin chat automatically when connection regained.
19:29 - Connected again and rejoined chat.
07:47 - Kudonikov is now Offline.

This user has also played as:
Kudonikov
kinkumahamster
Lollipop
TatamiGAESH!
Twintail
Mr.Clay
IWI
Boomer
Matsuyamac11

Bumping with some updates. No reply or ban on them from Steam support. I reported the phony login page (which you can see by hovering over links on the fake user page I was linked to above) to Google's phishing site list (which will alert users browsing with e.g. Firefox or Chrome), but every time one URL is blacklisted, the login link changes. I filed another report to Google and suggested they blacklist the whole domain name if possible, but we'll see what happens.

Hello!!!
Thank you for your report! An SR admin will review yours in a while!

Okay, I didn't have any luck getting Google to add the whole domain name to their phishing list, but I don't think that matters now. I filed an abuse report to the phishing site's Russian hosting service (named UniHost), and they were very understanding and got the whole site shut down this morning! :]