#TF2 Scam - What is their deal?

1 messages · Page 1 of 1 (latest)

hollow flame
#

A random guy sent this link to upvote their workshop item. I know it's a scam; the thing is that I would like to know what they are supposed to achieve. I entered the link through an online proxy (using https://www.croxyproxy.com/), but it just redirected me to an actual workshop item, so I don't know what their deal is. Maybe it's an IP grabber, a web vulnerability exploit, or something else? However, I thought it would be an actual fake website to get account credentials or something.

The account in question.
https://steamcommunity.com/profiles/76561199544963321/

SCAM LINK!!!:
https://steam.workshopsunusually.com/sharedfiles/filesdetails/Bounty_Brim/

paper crypt
#

The scam link isn't a workshop link. They're looking to get you to log in on the scam link to get your credentials and man in the middle the authenticator or something.

dense whale
#

there is another subdomain, https://login.workshopsunusually.com, which when locating /index.php redirects you to a fake steam login page (if no url path provided it'll redirect you to the real steam website)

#

any attempt to reach workshopsunusually.com errors, and any url path provided to steam.workshopsunusually.com just redirects you to steamcommunity.com (if no url path provided, it displays a openrestry welcome page)