Vitaliyorcsp, a Russian individual responsible for new Steam phishing scams

Popup - https://steam.workshopcosmetics.com/sharedfiles/filedetails/Bounty_Brim

Registered by Vitaliyorcsp in Russia via PublicDomainRegistry on September 25, 2024 - Whois workshopcosmetics.com

Associated Steam Account - Steam Community :: MonaSucks

I did attempt to send a Grabify link, but they refused to click.

2 Likes

NEW POPUP - Steam Workshop::AK-47 | Unbreakable Bond

Registered by Vitaliyorcsp in Russia via Onamae.com on October 13, 2024 - Whois workshopslisting.com

Associated Steam Account - Steam Community :: GaRDeX

The Vitaliyorcsp guy is also responsible for hosting:

The aforementioned domains appear to be hosted by the Moscow-based DarkHost

Associated Phone Number - +7 9818456992

Associated Email Address - [email protected]

1 Like