How can I report a scamming site that is made to steal Steam accounts?

[Mr. September]

A past friend of mine tried pulling a sneaky on me by sending me a suspicious link. Since I'm observant, I didn't fall for it. However, after confronting the guy, he blocked me (kinda wish I was silent so I could warn his other "friends"). I reported his profile in hopes it would be suspended before the original owner gets hold of it again.

Anyway, how can I put an end to this? The site is still up, but if possible, I'd rather not have other people potentially fall for it.

The site in question is: https:// tacticalclash (dot) com

If you decide to check it out, do NOT log in that site (in fact, just open it in incognito with VPN if possible). The "login window" is fake, which means it's not a secure login in any shape or form.

Spread awareness if you got close friends you care about. This crap can get anyone.

[Unn4m3d (♥AUT♥)]

Your friend probably got his account hijacked himself by using the site he sent you at some point.
Meaning whoever sent you this wasn't actually him, it was whoever took over.

There is no way to really "report" a website. Best thing you can do is report your former friends account for being hijacked, which might help him retrieve the account at some point.

[Unn4m3d (♥AUT♥)]

SaengSom původně napsal:

Hello fellow gamers,

Today I also got almost scammed.
I got a messaage via the Steam chat network telling me that a friend gave me a 50$ voucher, which he dind't.

The link brought me to
snip DON'T USE THIS LINK!
which is a SCAM!

Watch it carefully, I almost to ripped, even I trained people in this matter years before.

The link says
steamcommunritly
steam commun ritly

See the difference!

Tell others!
Don't let them catch you or you friends!

Thank you for your attention!

Take that Link OUT OF YOUR POST.
There's a reason it's censored, circumventing censored words is against forum rules. You are advertising their site.

[Mr. September]

Unn4m3d (♥AUT♥) původně napsal:

Your friend probably got his account hijacked himself by using the site he sent you at some point.
Meaning whoever sent you this wasn't actually him, it was whoever took over.

There is no way to really "report" a website. Best thing you can do is report your former friends account for being hijacked, which might help him retrieve the account at some point.

I did report his profile in hopes it gets suspended, so the original owner can get hold of it sooner (and the damage is mitigated). Oh well, I guess I can't do much apart from spreading awareness.

SaengSom původně napsal:

-snip-

Damn, that's even more convincing than the stuff I was sent. The only way I could figure out that it's a scam is because no links lead to anywhere (all lead to the same site).

[Bee🐝]

OP, remove any reference to the link you posted. Don't try and circumvent the filter - it's there for a reason.

[ReBoot]

To answer the question, report to your browser vendor.

[Phénomènes Mystiques]

How tf is this site getting around VirusTotal? It shows up as a "secure" website.

[Crazy Tiger]

You don't want people to fall for it, yet you post the url. You are aware that people who fall for such sites don't actually read all info, right? So you just helped the scammers get extra victims. I know your intention was good, but the execution is not.

Who do you want to report it to? Valve? They're not the internet police, not much they can do. Plus kill one of those sites and 2 new ones pop up, they're hydras.

[Phénomènes Mystiques]

Crazy Tiger původně napsal:

Who do you want to report it to?

Report to Alphabet.

I know that the US government takes phishing emails, but not so sure about URL's, but Alphabet takes both.

[JinxLudakNeki]

As i know steam not give ban to scammers and hackers,they will just say its your fault you open some link and log in somewhere.

[NowThenGoodBad]

Thank you for this post. Just got this one from a friend: steamcommunitcy dot com from a friend. Super bummer if they got hacked, even moreso if they legit sent that.

FYI people, carefully read urls before going to them and logging in. It's too easy to spoof an entire site.

[Brekkjern]

NowThenGoodBad původně napsal:

Thank you for this post. Just got this one from a friend: steamcommunitcy dot com from a friend. Super bummer if they got hacked, even moreso if they legit sent that.

FYI people, carefully read urls before going to them and logging in. It's too easy to spoof an entire site.

I got this one too two days ago. That steamcommunitcy-domain seems to contain only one valid url which is a fake steam page where you're supposed to be given 10$.
Got the message from a friend (family member) which said:
"take 50$ bro :) -æ http://.............."

It will then ask you to log on to your steamaccount by opening av popup window with the real steam logon site in the URL. In fact if you try to write the wrong credentials it will take you nowhere.
But if you do you'll get a 2-factor notification on the registered email which says the request comes from "Russian Federation".
I learned this the hard way on my sons PC unfortunately, but I was really quick logging in a again and changed the password. Nothing happened to the account in this short time.
God knows what they're up to.
I'm guessing stealing things like gift cards, creditcard amount or whatever.... or just hijacking the account.

[Supafly]

Wynters původně napsal:

How tf is this site getting around VirusTotal? It shows up as a "secure" website.

https the s stand for secure and relates to communication between you and the server being encrypted. Dodgy sites tend to use https nowadays as people ignore other warnings signs and believe the https = site is safe.

And AV can miss new sites. They need to be known and reported before AV can warn against them

[NowThenGoodBad]

Supafly původně napsal:

Wynters původně napsal:

How tf is this site getting around VirusTotal? It shows up as a "secure" website.

https the s stand for secure and relates to communication between you and the server being encrypted. Dodgy sites tend to use https nowadays as people ignore other warnings signs and believe the https = site is safe.

And AV can miss new sites. They need to be known and reported before AV can warn against them

Spot on.

People, the current easy scam is to do things like sneak in an extra letter or replace one with a similar looking character:
- steamcommunitcy
- googiereviews (I registered that to mess with friends. My hosting provider got grumpy with me)
- a dot com replaced by dot org or io or otherwise
- etc

Read the url first, even retype it, but especially know that hyperlinks can say one thing and link to something else. Lots of ways to get spoofed and scammed.

You are the best Anti Virus.

[.EteRnal.]

You can report websites like this to Google Safe Browsing and Microsoft Security Intelligence.

Google Safe Browsing: Report a Phishing Page[safebrowsing.google.com]
Microsoft Security Intelligence: Report an unsafe site[www.microsoft.com]

Edit: It also might be worth checking WHOIS and reporting the domain to the registrar.

[cSg|mc-Hotsauce]

When Valve let the Global mods go, they stopped caring about the blacklist for the fake Steam links.