"I am leaving CS:GO and giving away my skins" SCAM

Popup - http://steamcomrninuty.ru/trade/offer/?partner=1042162733&token=Bfr71mF

A WhoIs lookup reveals the domain was registered in the Russian Federation via Fe-Ru on July 28, 2021 - Whois steamcomrninuty.ru

Popup will open a fake Steam login window with “about://blank” as the header.

1 Like

here is a full whois

Data for steamcomrninuty.ru
ip: 95.181.157.84
type: ipv4
continent code: AS
continent name: Asia
country code: RU
country name: Russia
region code: MOW
region name: Moscow
city: Moscow
zip: 101001
latitude: 55.764408111572266
longitude: 37.636600494384766
location: geoname id: 524901
capital: Moscow
languages: code: ru
name: Russian
native: Русский
country flag: http://assets.ipstack.com/flags/ru.svg
country flag emoji: :flag_ru:
country flag emoji unicode: U+1F1F7 U+1F1FA
calling code: 7
is eu: False
Some other stuff
result: domain name: STEAMCOMRNINUTY.RU
registrar: FE-RU
creation date: 2021-07-28 17:38:02
expiration date: 2022-07-28 17:38:02
name servers: [ns1.beget.com.
ns2.beget.com.]
status: REGISTERED
DELEGATED
UNVERIFIED
emails: None
org: None

1 Like

domain is down :+1:

New link:
https://steamcomrninuty.link/trapyofzr/nop/?paoder=5570311141&toypen=t5N7a4dT