How to report phishing websites?

All Discussions > Steam Forums > Help and Tips > Topic Details

Crashed Apr 7, 2019 @ 8:13am

I came across a website that has a fake Steam login; how do I report it? The site is behind Cloudflare so contacting hosting abuse is not a reasonable solution.

< >

Showing 1-5 of 5 comments

ObiSpud Apr 7, 2019 @ 8:45am

Phishing is a common issue which has been ongoing for years, creating dummy sites to look like the real thing, to steal credentials. Many of these site do hide behind Cloudflare as getting the actual IP or hoster details are more difficult due to Cloudflare's policy on divulging that data to pretty much anyone who asks for it (other than law enforcement/courts).

Your best option is to report fake sites to the legitimate company they are impersonating as they will have a legal team to do a takedown request or court order if warranted. It's also advisable to register the URL of the fake site on https://www.phishtank.com/ as many security companies check Phishtank to add confirmed fake sites to their web protection blocks lists. Computer security company's also have more clout in getting fake sites taken off the internet.

Last edited by ObiSpud; Apr 7, 2019 @ 8:47am

Crashed Apr 7, 2019 @ 9:10am

Originally posted by Slice'N'Dice:
Phishing is a common issue which has been ongoing for years, creating dummy sites to look like the real thing, to steal credentials. Many of these site do hide behind Cloudflare as getting the actual IP or hoster details are more difficult due to Cloudflare's policy on divulging that data to pretty much anyone who asks for it (other than law enforcement/courts).

Your best option is to report fake sites to the legitimate company they are impersonating as they will have a legal team to do a takedown request or court order if warranted. It's also advisable to register the URL of the fake site on https://www.phishtank.com/ as many security companies check Phishtank to add confirmed fake sites to their web protection blocks lists. Computer security company's[sic] also have more clout in getting fake sites taken off the internet.

How to I report websites to Valve? I have already posted to phishtank, and just got done posting to the Malwarebytes "Newest IP or URL Threats" forum.

Last edited by Crashed; Apr 7, 2019 @ 9:11am

ObiSpud Apr 7, 2019 @ 9:25am

There seems to be no real way to report phishing URL's to Valve/Steam when it involves 3rd party sites. They obviously have their own reasons for not having a reporting address. If the URL is being spammed by a Steam user then you could open a support ticket flagging the user and in the case of a community forum thread, flag the thread/post for moderator review.

You have done the next best thing by posting details to Phishtank etc. :) That is about all you can do really.