Steamspecial credential stealing scam

https://steamspecial.org/

lets all make links, share them, then enter fake credentials at the 8 mark. if someone can figure out an xss or sql injection, that’d be great too. I’m still learning, and there’s probably no potential for that stuff, but you never know.

to be clear, only share them within this post.

https://steamspecial.org/?id=eZe812Xf

it has directories /website_files/ and /images/ . currently getting forbidden errors. The server is running on ubuntu.

oof, my bad. not a credential stealing scam. This is a “complete the survey” scam. Finally completed the 8. all the login things redirect to legitimate steam. Even so, I’ve reported the domain to tucows and if anyone wants to hack them in the meantime, they can give it their best shot.