Accepted Report: 76561198052739515 - ([TF2] Team Fortress 2 Items)

Scam Report

Report Type: [Gambling] Fake gambling website
Virtual item type involved: [TF2] Team Fortress 2 Items

Accused profile: 76561198052739515

Victim profile: 76561198014840600

What happened? Description:

This user randomly added me and messaged me asking me to promote their website. I immediately thought it seemed shady, and upon investing a bit on the website, I found out it is for sure a scam website. Most likely just trying to steal items from people and asking other people to spread the scam unknowingly.​

Provide Evidence:

It should be noted that another report for the same user for the same thing was already posted in August 2018 (https://forums.steamrep.com/threads/report-76561198052739515-tf2-team-fortress-2-items.184764/). Note how the method is pretty similar and the website name as well (tf2+keyword.com).

The website is pretty well made for a scam honestly, but there are a few weird things about it:

• The bots for trade offers are already marked as scammers. At least the one I got when I clicked on the "deposit items" that sometimes appear, didn't want to risk login in, don't want to give any kind of information to them. (https://steamcommunity.com/profiles/76561198851060446)
• The links to profile pictures and the "Powered by Steam" link don't have actual addresses they're pointing to.
• Opening the console on my browser triggers a function called debug322 that brings the browser debugger.

View attachment 694619

Now, let's really get to the core of this...
Digging a bit into the page, I found out most of the ressources are loaded from a website called https://webmaster322.ru . The website seems pretty inconspicuous. It just displays "It works!" on an empty page. But let's go further... https://webmaster322.ru/services/ Now there's something! It gives a text field to login. The most interesting stuff is on the help page though (all other links bring to an empty page with "It works!" as well).
The very first screenshot especially seems to show how to register a name for a fake roulette website (I don't know Russian).
View attachment 694621

The 4th screenshot of the second section also shows what looks like DNS rules for addresses for staemcommunety.com .
View attachment 694620

So what I gathered from all that is that apparently someone put out an easy template to make fake roulette sites with, most likely, not much effort needed to setup except buy a cheap domain name.
I would advise to look out for the similarities in other reports of fake gambling websites, as it is likely there are several out there sprouting from this same template. Simply checking the source for anything from webmaster322 being included in the page should be enough to consider the website a scam, in my opinion.

Thanks!
(And hopefully you didn't already know about all this and I didn't bother with it for nothing XD)​

[10:36 PM]
MightyFellow:
hi

[10:37 PM]
Sk8ing Unicorn [PhallusPsychik]:
Hiya

[10:38 PM]
MightyFellow:
do you play tf2 or rust?

[10:40 PM]
Sk8ing Unicorn [PhallusPsychik]:
Hmmm not really, used to play TF2 quite a lot, but I don't really play anymore

[10:42 PM]
MightyFellow:
i search for people that play this game and can help me advertise the website , i can pay you weekly for help

[10:42 PM]
Sk8ing Unicorn [PhallusPsychik]:
Advertise what website?

[10:43 PM]
MightyFellow:
website is https://tf2pull.com
you just put name of the website near your steam nickname or in bio
can you ?
are you here?

[10:52 PM]
Sk8ing Unicorn [PhallusPsychik]:
Ah no sorry, I won't promote a gambling site
That looks super shady too

[11:07 PM]
Sk8ing Unicorn [PhallusPsychik]:
Ok this is a scam, I'll report you if you don't have anything to say about it.

Ah, I'm sorry, I forgot chat screenshots shouldn't be cropped, and I already blocked the user.
I also provided the Steam profile URL for the bot, the SteamRep one would have been better: https://steamrep.com/profiles/76561198851060446