Accepted Subject: 76561198062305169 (bill's hat)

Victim:
steamID: VoodooFriends
steamID32: STEAM_0:0:32181936
steamID64: http://steamcommunity.com/profiles/76561198024629600
customURL: http://steamcommunity.com/id/VoodooFriends
steamrepURL: http://steamrep.com/profiles/76561198024629600

Scammer:
steamID: bill's hat
steamID32: STEAM_0:1:51019720
steamID64: http://steamcommunity.com/profiles/76561198062305169
customURL:
steamrepURL: http://steamrep.com/profiles/76561198062305169

Okay. So, I was not the person scammed here, and simply took on the job of trying to track down everything that happened. I'm not 100% sure I have enough to get both persons in question banned, but I'll show what I do have for now, and come back with something if I get anything later.

VoodooFriends, the victim, was lending his Unusual Troublemakers TossleCap with Eerie Orbiting Fire to a friend, when someone on the server imperrsonated his friend and stole the hat. Voodoo explains that http://www.tf2outpost.com/trade/1401598]here[/url]. I looked up histories, got trade histories from each individual player, etc etc, and ended up drawing the conclusion that bill's hat (the guy in the "Scammer" space) was the one who stole the Tossle, and that he sold it to a man named Don Coelit for an Eerie Orbiting Fire Hermes + a V. Bill's Hat. (Don's steamrep info is http://steamrep.com/profiles/76561198000854399]here[/url]). I checked the trade history of the Hermes on tf2items (history is http://www.tf2items.com/item/809833152]here[/url]) Only to find that bill's hat's name didn't appear anywhere on the history, but simply a gap between when Don traded it and when the current owner (Superman's Cat) acquired it. I went to tf2outpost to check the history from Don's old trades, and found this: http://imgur.com/1UxnJ.
I contacted Superman's Cat, and asked for him to get a screenshot of his trade history. All I could obtain from him was this: http://imgur.com/9xRFr
Not sure why the items didn't show up, but that's beside the point. I asked him what time zone he was in, and he replied (UTC -5:00) Eastern Standard (US & Canada). (screenshots of that chat http://i.imgur.com/oHnWc.png]here[/url]) Meaning that he traded for the Hermes at the same time as it appeared in his BP on tf2items, and is in fact, the same one, according to the item ID's on tf2items and tf2b. I also asked Don to get a screenshot of his trade history when he acquired the tosslecap, which is http://i611.photobucket.com/albums/tt197/Hinasha/Historyofthyhattes.png]here[/url]. If you'll notice, he traded the hermes to bill's hat, but Superman's Cat obtained it from Mr.Dr Professor P.H.D (SteamRep info http://steamrep.com/profiles/76561197988019001]here[/url]) but according to tf2items history, it went from Don to Cat with a 5 hour difference. I talked to Mr.Dr on tf2outpost about this, and this is the conversation http://www.tf2outpost.com/trade/1421971
It makes me suspicious that he still didn't perform the simple task of grabbing that screenshot.
So, I went to track down the V bills, which according to tf2items (history http://www.tf2items.com/item/785415369]here[/url]) It still doesn't exist. Used tf2outpost and found the current owner to be Nimzerz, outpost thread http://www.tf2outpost.com/trade/1419163]here[/url]. Added him and asked for trade history and got this screenshot: http://gyazo.com/80a9f80768df9ca57f01f555fcf2623f

So, I know that bill's hat stole the Tosslecap from VoodooFriends, and that he sold/gave it to Mr.Dr P.H.D. and have trade histories for most of the transactions to prove most of this. The only thing missing is Mr.Dr's trade history, as he won't give me the screenshot, and bill's hat, who has a private Steam Profile. I suspect that bill's hat is Mr.Dr's alt, for the reason of the trade history screenshots, and the speed that all this took place. However, I don't have the proof to say that 100% confidently, due to the above reason.

VoodooFriends has sent in a support ticket to Steam, and is waiting on a response from them. My sole purpose is to catch the thief, and to help prevent him from going on like this.

The folder I housed all my info in:
http://www.MALWARE-SUSPECTED-mediafire-.com/?n79covt2omxldhm

All my screenshots:
http://imgur.com/a/d0xHN

I'm not sure if I got everything required, as it's been over the course of 2 days, and I don't always have the greatest memory of all time, but I tried to record as much as possible.

If you have any questions, please feel free to add me at this link. I will do everything I can to get enough information to do whatever is necessary. Thanks for your time.

And sorry for the failed BB code. Not exactly a master at it myself. I would edit it, but the time limit prevents me from doing so.

Wow, this is a very comprehensive report and I do thank for you putting it all together. Normally we don't accept 3rd party reports but because this one was so thoroughly researched, I feel I should make an exception this one time. There's definitely enough information here to mark bill's hat and while I will make a note of the possible connection between him and MrDrPhd, I won't be able to mark him as an alt without more definitive evidence tying the two accounts. I will pass this to a colleague of mine to see if he can find any link between the two. Thanks for the comprehensive report & all your research- I really do appreciate it.

I'm glad I could help. If there's anything more I can do please let me know.