1. There is no such thing as a "pending" ban or Steam admin. Anyone threatening your account is a scammer trying to scare you. Read more.

Accepted Report: 76561198052739515 - ([TF2] Team Fortress 2 Items)

Discussion in 'Archived Reports' started by Sk8er Of Bodom, Jan 7, 2019.

Thread Status:
Not open for further replies.
  1. Sk8er Of Bodom

    Sk8er Of Bodom New User

    Messages:
    3
    Steam:
    STEAM_0:0:27287436
    Scam Report

    Report Type: [Gambling] Fake gambling website
    Virtual item type involved: [TF2] Team Fortress 2 Items

    Accused profile: 76561198052739515

    Victim profile: 76561198014840600

    What happened? Description:
    This user randomly added me and messaged me asking me to promote their website. I immediately thought it seemed shady, and upon investing a bit on the website, I found out it is for sure a scam website. Most likely just trying to steal items from people and asking other people to spread the scam unknowingly.​

    Provide Evidence:
    It should be noted that another report for the same user for the same thing was already posted in August 2018 (https://forums.steamrep.com/threads/report-76561198052739515-tf2-team-fortress-2-items.184764/). Note how the method is pretty similar and the website name as well (tf2+keyword.com).

    The website is pretty well made for a scam honestly, but there are a few weird things about it:
    • The bots for trade offers are already marked as scammers. At least the one I got when I clicked on the "deposit items" that sometimes appear, didn't want to risk login in, don't want to give any kind of information to them. (https://steamcommunity.com/profiles/76561198851060446)
    • The links to profile pictures and the "Powered by Steam" link don't have actual addresses they're pointing to.
    • Opening the console on my browser triggers a function called debug322 that brings the browser debugger.
    View attachment 694619

    Now, let's really get to the core of this...
    Digging a bit into the page, I found out most of the ressources are loaded from a website called https://webmaster322.ru . The website seems pretty inconspicuous. It just displays "It works!" on an empty page. But let's go further... https://webmaster322.ru/services/ Now there's something! It gives a text field to login. The most interesting stuff is on the help page though (all other links bring to an empty page with "It works!" as well).
    The very first screenshot especially seems to show how to register a name for a fake roulette website (I don't know Russian).
    View attachment 694621

    The 4th screenshot of the second section also shows what looks like DNS rules for addresses for staemcommunety.com .
    View attachment 694620

    So what I gathered from all that is that apparently someone put out an easy template to make fake roulette sites with, most likely, not much effort needed to setup except buy a cheap domain name.
    I would advise to look out for the similarities in other reports of fake gambling websites, as it is likely there are several out there sprouting from this same template. Simply checking the source for anything from webmaster322 being included in the page should be enough to consider the website a scam, in my opinion.

    Thanks!
    (And hopefully you didn't already know about all this and I didn't bother with it for nothing XD)​

    [10:36 PM]
    MightyFellow:
    hi

    [10:37 PM]
    Sk8ing Unicorn [PhallusPsychik]:
    Hiya

    [10:38 PM]
    MightyFellow:
    do you play tf2 or rust?

    [10:40 PM]
    Sk8ing Unicorn [PhallusPsychik]:
    Hmmm not really, used to play TF2 quite a lot, but I don't really play anymore

    [10:42 PM]
    MightyFellow:
    i search for people that play this game and can help me advertise the website , i can pay you weekly for help

    [10:42 PM]
    Sk8ing Unicorn [PhallusPsychik]:
    Advertise what website?

    [10:43 PM]
    MightyFellow:
    website is https://tf2pull.com
    you just put name of the website near your steam nickname or in bio
    can you ?
    are you here?

    [10:52 PM]
    Sk8ing Unicorn [PhallusPsychik]:
    Ah no sorry, I won't promote a gambling site
    That looks super shady too

    [11:07 PM]
    Sk8ing Unicorn [PhallusPsychik]:
    Ok this is a scam, I'll report you if you don't have anything to say about it.

    Attached Files:

  2. Sk8er Of Bodom

    Sk8er Of Bodom New User

    Messages:
    3
    Steam:
    STEAM_0:0:27287436
    Ah, I'm sorry, I forgot chat screenshots shouldn't be cropped, and I already blocked the user.
    I also provided the Steam profile URL for the bot, the SteamRep one would have been better: https://steamrep.com/profiles/76561198851060446
  3. ЩĄ | Horse

    ЩĄ | Horse Administrator SteamRep Admin Partner Community

    Messages:
    60,666
    SteamRep Admin:
    STEAM_0:1:34690691
    Thanks, will review again soon - nothing else needed at this time and there is no need to post anything more.
    Feel free to review what you have provided and take the time to see what things you can do to prevent running into users like this in the future.

    Also make it known that other reports are irrelevant vs this one or the next one. Each report is its own and is treated as such.

    Attached Files:

  4. ЩĄ | Horse

    ЩĄ | Horse Administrator SteamRep Admin Partner Community

    Messages:
    60,666
    SteamRep Admin:
    STEAM_0:1:34690691
    Your report was accepted and the accused was banned. Feel free to report a violation via their Steam profile.

    In order to do that, you have to:
    1. Visit the accuseds profile
    2. Click MORE drop-down located at the top right of the page
    3. Choose REPORT VIOLATION
    4. Select the violation, then describe it and provide the evidence
    5. Click SUBMIT REPORT

    Click here to view an animated gif that shows how to report a violation.
Thread Status:
Not open for further replies.