Meanwhile at Steam Support : WE created STEAM GUARD and people still manage to fuck up their accounts.
I even told Haxton after he sent me a ref link that a specific site is scam.
Just to note : THERE ARE NO FREE Steam Gift sites.
The only trustable source is either the special sales on steam itself or partners of steam.
A scam site is easy to detect since 90% of them work the same way.
1.Gather cookies.
2.Give victim a link to share (let them think they get points)
3.Every new visitor will share cookies after clicking the ref link.
4.Create traffic
5.Gather more info through register
6.Sell data to third-party
But since nearly every scam site doesn't bother to have good security its really fun to fuck the sites up with XSS Injection or SQL Injection
I found a scam site once which gathered steam passwords (yes some people still give their login data out that easy)
So I used a exploit in its system. (Password were saved on a internal folder in a txt file pretty stupid)
With the exploit I got access to the admin account downloaded the txt file + delete it on server and reported it to steam + the hoster.
Whenever you see a scam site please report it to the related service.
In this case Steam Support, they are all trying hard to find every scam site but if you would report it you would help out alot
Have a great day