Problem with steam website and scam try

[vvecky]

Hello,

ive accidently clicked on link to steamEcommunity.com a from that time i have problem with my website steam (changed from czech to francais).
Didnt logged, just clicked the link and it didnt even appeared while window poped up i closed it as soo as possible.
Also i as fast as possible traded all my items to my primary acc to be sure and all worked all my items are safe. Only thing that remained here is 1.42 E on steam wallet.

The question is.
Is it safe to use this account? I never typed login or aprroved the steam ID login type on the scammer site, i didnt even know how the site looks like.

Can anybody give me tips what to do with it?

[Azza ☠]

That site was a phishing webpage of the steam community, however already taken down.

Server host has removed it, due to it's activities and non-payment.

Google Safe Browsing has labeled it as phishing / suspicious.
However, not hosting malicious software over the past 90 days.

URLVoid hasn't detected any malicous scripts, except for the phish warning as well. Since the site is already taken offline, I can't actually personally scan for you.

Your Steam Account is most likely safe if you never used that phishing site's login, etc. The script of the phish is actually just hidden under that recording those details and pasting them through another server for the leech. This would of allowed the phisher to then later access your account and probably steal your items or snoop, etc. It's not an actual virus/trojan as such.

It's a good idea to careful check the URLs of sites for those typos. You should however be fine in this case and can continue on with gaming.

[Vvacky]

So its not working? I even didnt open it not looking what is it i was just clicking another trade it appeared and i accidently clicked. Closed it as soon as possible.

But strange thing is, that my steam on the website changed to francais and i didnt change it.

Thats why im so scared about it.

Well i know when i traded all items back here, its only 2 dota keys and 1.42 E but still :-D My reputation get hurt.

[Azza ☠]

Phishing sites normally use to real steam store website, etc, embedded into them. This is the quickest way to make them look larger and natural, looking just like the real site does.

Probably iFramed, but the link might of had language on the link, such as:
http://store.steampowered.com/?l=french

This would change your Steam Store to the french language. It's steam's own cookie on your web browser which then remembers that language selected.

So going to just (will still be in french):
http://store.steampowered.com/

You can clear your browsers cookies/cache or simply change the language back via URL or the dropdown language list.

[Vvacky]

Rechecked the site. Its steamecommnity.com. Its sayin "under construction".

E added and U taken out

So it can be malware site.

Checked it on the computer were was my seccond account so if its bad it wont be worse.:-D

[Vvacky]

Azza thank you very much. I'm it guy, but i cannot think clearly right now and wit your help i realize, that it wont be so bad.

Im just gonna try last think the adress the guy give me exactly to aprrove your words an calm myself.

[Vvacky]

Its just like you said. Its embbedd copy of steam site with only one change.
"Login" button is only one that do not href to the steam normal site, but to their login script (didin't clicked it just mouseover for asure).

[Vvacky]

and in that case Steam Guard can cache that anyway, cos you wont approve another PC.

[Vvacky]

Add friend, report, games and more also changed for their login script.

Now i typing all the informations i have for whom will look for it.

[Azza ☠]

That other URL you mention - yet another phishing site, also taken down. I can see there use to be faked profiles/inventory pages hidden underneath it.

Google Safe Browsing has labeled it as phishing / suspicious.
Malware hasn't been detected in the last 90 days.

SURBL has however blacklisted it. Aka the same domain/server has been detected as been used in spamming emails, etc. I'm guessing you didn't offer it any email address, therefore again should to alright.

[Vvacky]

Also think, but again thanks for assurance.;-)