Fake "Gift 50$" steam link links to real steamcommunity.com

[root@Nero:~#]

Hi all,

A friend got a message from another friend about "Gift 50$" with next to it, the *real* steamcommunity.com link, then a bunch of numbers. I know - we know - and I hope everyone knows it's a scam. But this one has me perplexed. What's the point of this one if it leads to the real steam, and since it's a "bad" url, redirects to the frontpage of Steam?

I've been trying to find anything, hoping to see a "smart" IDN homograph attack or something, but nothing. Trying to google it up got me no answer aswell.

Thanks for your time :)

edit: just for clarification, when I talk about the link, it's literally just "steamcommunity.com/" and then a bunch of numbers. no "/gift/" or "/profile/" or anything like that. Why bother hacking into a Discord account just to post a real steamcommunity link?

[FILTHY PIG]

Well, I didn't know about this, it came up in a trusted Discord channel... So My account got stolen. Fortunately, I was on it and immediately locked the account/raised steam support ticket. A few hours later, I have My account back as if nothing had happened.
I should have known, My fault. However, I wish it was possible to contact someone at Valve to thank them. They had My back. It's not very often this cantankerous, argumentative, miserable old cynic is positive about any company but this and the work Valve have done with making Linux gaming work has earned Them considerable brownie points with Me. This post is the first iteration of My thanks, I hope someone at Valve sees it.

[Dr.Shadowds 🐉]

Publicado originalmente por CANCELCULTURE:

@Dr.Shadows did you ever notice that there is no pop up window warning users when urls are clicked from within Steam's own official game hub chats or Steam User Group chat rooms? Maybe not. They don't even seem to keep up with updating the block list of suspicious url red warnings in chat rooms. I'm not about to believe that those urls, accounts and groups are not being reported.

I know about chats, and issue like I said scammers will change their links within seconds, and yes you're right they don't do constant update for scam links, nor does any site for that matter such as discord, twitter, and so on, as for some reason they only react if it's a major spam, otherwise they wouldn't know about it right away, and yeah there likely people reporting these as well, but depends if they're seeing them, or not since these phishing links are via DMs really.

Believe it, or not even broswers have anti phishing site listing, the problem is they're just as slow as well.

[Iron Knights]

There is such a thing as Passive transfer of ID & PWD to phishing sites via Scripting.
But you do you OP.

[Iron Knights]

Publicado originalmente por lycanroc in a dog costume:

Publicado originalmente por potato:

it doesn't lead to the real steam, they use a link with the word "community" mispelled

Okay, here's the thing, it does

The "steamcommunity.com" I posted, I copy-pasted it from his message. I'm confident, 100% sure this is the right url.

This is your link I clicked and message from STEAM, FYI.
"Link Blocked!
This link has been flagged as potentially malicious."

[Ben Lubar]

Publicado originalmente por Iron Knights:

Publicado originalmente por lycanroc in a dog costume:

Okay, here's the thing, it does

The "steamcommunity.com" I posted, I copy-pasted it from his message. I'm confident, 100% sure this is the right url.

This is your link I clicked and message from STEAM, FYI.
"Link Blocked!
This link has been flagged as potentially malicious."

It turns out quotation marks in a domain name aren't something Steam's URL filter likes. That has nothing to do with the actual malicious link we're talking about in this thread.

[SLG]

You do know what you seen as a link could be just texts for another link. You can see this on forums, sites, blogs, etc.

[Jcmoney_Playz]

I just the exact same message not even a couple of minutes ago they sent it twice while i was playing undertale ♥♥♥♥♥

[root@Nero:~#]

Publicado originalmente por Jcmoney_Playz:

I just the exact same message not even a couple of minutes ago they sent it twice while i was playing undertale ♥♥♥♥♥

We have to thank Discord for making this scam so easy lmao

[[LOS] Jemand civilnetworks.net]

i also got one, if you hover your mouse over it it says at the bottom sc.link, whats that?

[Zarineth]

Publicado originalmente por LOS Jemand civilnetworks.net:

i also got one, if you hover your mouse over it it says at the bottom sc.link, whats that?

That's a scam, just like the site you are advertising.

[root@Nero:~#]

Publicado originalmente por LOS Jemand civilnetworks.net:

i also got one, if you hover your mouse over it it says at the bottom sc.link, whats that?

It's a link shortener.

Publicado originalmente por Zarineth:

Publicado originalmente por LOS Jemand civilnetworks.net:

i also got one, if you hover your mouse over it it says at the bottom sc.link, whats that?

That's a scam, just like the site you are advertising.

How so, though? Yeah, it's a terrible financial decision to pay VIP for gmod servers IMHO, but to call it a scam? Nah, man.

[Yzal]

It's either indeed a pishing link, or you just found a particulary dumb scammer. Either way, don't click it and report it.

[Pscht]

"Don't click on THIS HERE link" he says. "Oh, you didn't get it? THIS ONE".

[STARDREAM Vids]

i just got this dm is this the the same scam im a little worried because it show i sent it when my pc was off
https://steamuserimages-a.akamaihd.net/ugc/2390934591985322335/FCD80FD1459EC518325DEA41E57B0E165C2D992F/

[Dr.Shadowds 🐉]

Publicado originalmente por STARDREAM Vids:

i just got this dm is this the the same scam im a little worried because it show i sent it when my pc was off
https://steamuserimages-a.akamaihd.net/ugc/2390934591985322335/FCD80FD1459EC518325DEA41E57B0E165C2D992F/

It's a scam...