1. SteamRep is shutting down at the end of 2024. See announcement.

Invalid Report: 76561199020688045 - ([CSGO] Counter-Strike: Global Offensive Items)

Discussion in 'Archived Reports' started by xargs, Apr 11, 2023.

Thread Status:
Not open for further replies.
  1. xargs

    xargs New User

    Messages:
    1
    Steam:
    STEAM_0:1:57448207
    Scam Report

    Report Type: [Money] PayPal scam or scam attempt
    Virtual item type involved: [CSGO] Counter-Strike: Global Offensive Items

    Accused profile: 76561199020688045

    Victim profile: 76561198075162143

    What happened? Description:
    On April 1, 2023, I received a message on Steam from a user called ❤, who stated that they wanted to trade with me. Being cautious about trading, I asked what they were looking to trade. The user then provided me with two links to skinwallet, a website for trading virtual items.

    I had never heard of skinwallet before (with the .sa.com extension) and noticed that the links provided were from a Saudi subdomain of .com. This made me suspicious, so I refused to trade. I also performed a whois lookup on the domain and found that it was registered only a couple of weeks ago.

    xargs@xargs-wsl:~$ whois skinwallet.sa.com
    Domain Name: SKINWALLET.SA.COM
    Registry Domain ID: D355935048-CNIC
    Registrar WHOIS Server: whois.namecheap.com
    Registrar URL: https://namecheap.com
    Updated Date: 2023-03-24T12:41:10.0Z
    Creation Date: 2023-03-24T12:41:07.0Z
    Registry Expiry Date: 2024-03-24T23:59:59.0Z
    Registrar: Namecheap
    Registrar IANA ID: 1068
    Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
    Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
    Registrant Email: https://whois.centralnic.com/contact/skinwallet.sa.com/registrant
    Admin Email: https://whois.centralnic.com/contact/skinwallet.sa.com/admin
    Tech Email: https://whois.centralnic.com/contact/skinwallet.sa.com/tech
    Name Server: CLARK.NS.CLOUDFLARE.COM
    Name Server: FAYE.NS.CLOUDFLARE.COM
    DNSSEC: unsigned
    Billing Email: https://whois.centralnic.com/contact/skinwallet.sa.com/billing
    Registrar Abuse Contact Email: [email protected]
    Registrar Abuse Contact Phone: +1.9854014545​

    Provide Evidence:

    [4/1/2023, 2:00 PM]
    ❤:
    yo , there )
    i want to trade

    [4/1/2023, 2:00 PM]
    xargs:
    yo
    I'm not an idiot with trading, but what are you looking to trade

    [4/1/2023, 2:01 PM]
    ❤:
    i posted my items on skinwallet, but i can return and trade on STEAM with you if you will choose smth
    How about trade on this https://skinwallet.sa.com/market/offer/7733016874-cbee-423d-876b-d845e8ba028 or https://skinwallet.sa.com/market/offer/4535116074-cbee-167d-1723b-d835e8ba017

    [4/1/2023, 2:03 PM]
    xargs:
    never heard of skinwallet, and .sa.com is a saudi subdomain of .com. I'm not gunna trade on a saudi site
    anything else?

    [4/1/2023, 2:08 PM]
    ❤:
    check and tell me which one do u want , ill return to my steam and send you offer

    [4/1/2023, 2:11 PM]
    xargs:
    xargs@rhel7:~$ whois http://skinwallet.sa.comDomain Name: http://SKINWALLET.SA.COMRegistry Domain ID: D355935048-CNICRegistrar WHOIS Server: http://whois.namecheap.comRegistrar URL: https://namecheap.comUpdated Date: 2023-03-24T12:41:10.0ZCreation Date: 2023-03-24T12:41:07.0ZRegistry Expiry Date: 2024-03-24T23:59:59.0ZNot clicking a link with a domain which was registered a couple of weeks ago from an egirl steam account requesting to trade.
    Actually, let me spin up a windows EC2 and check this link. You've obviously put some effort into building out a profile to look legit, so collating all the information in a report will make it more fun
    Wanna say sorry for trying?
    I dont want to f✿✿✿ up your hustle my dude, so say sorry, and I'll leave you be
    No response. Okay, I'll get the report together then

    Attached Files:

    xargs, Apr 11, 2023
    #1
  2. Horse

    Horse Administrator SteamRep Admin

    Messages:
    76,969
    SteamRep Admin:
    STEAM_0:1:34690691
    Unfortunately, SteamRep does not accept reports dealing with hijacking/phishing/hacking -Due to current Investigative Policy
    http://forums.steamrep.com/threads/investigative-policy.140101/

    This includes anything to do with API key requests, wrong or misspelled URL's and sites requesting logins of any type in attempts to steal your credentials.
    These are phishing/hijacking attempts and are not to be reported to SteamRep!
    This was clearly noted to you BEFORE You sent to submit the report - please do not ignore our policies/notifications that are there to read before submission.

    You can report the user to Valve instead
    In order to do that, you have to:
    1. Visit the accuseds profile
    2. Click MORE drop-down located at the top right of the page
    3. Choose REPORT VIOLATION
    4. Select the violation, then describe it and provide the evidence
    5. Click SUBMIT REPORT

    Click here to view an animated gif that shows how to report a violation.
    Horse, Apr 11, 2023
    #2
Thread Status:
Not open for further replies.