The login page does not exist not, so it's kinda hard to tell what happened here.

Just want to remind that all sign-in / login forms have to be in steam domain ( https://steamcommunity.com/openid/login?<params>), and yours most likely was in some random .ml / .xyz domain.

That esport4play site was registered today - whois - so yes, it's a scam.

I'm pretty impressed Steam gives that warning.

Edit: Content stolen from epulze.com - unless that site is a scam too. Trust no-one!

ran into this a few months ago, blacklisted the friend i had known and talked with for some time and warned others who we both knew. i thought her account may have been phished.

Yeah, yesterday I was also contacted by a trader who told me absolutely same.

Glad I ignored him.

Gath? He's on my friends list too. Been there for some time. Never tried to send ME any messages like that. Are you sure it's his profile?

Got similar scam too. Also from what could be called prominent user.

Key clue that something wishy was going on was that login page had a picture of cert icon... Of Chrome while I was on Firefox... And fishy title bar...

I think you should write a huge bold warning before that spoiler-tagged link you've provided in the post. Someone could lose their account just by signing up there out of curiosity!

And that's obviously phishing, just look at the sign-up page's link. THAT'S A SCAM!

It's clearly a fake login page designed to steal your password, especially obvious if like me you're not using the Chrome browser.

Notice how the fake in-page popup (the inner one with white decoration) is mimicking a chrome tab, which doesn't really look like my Firefox style (the outer one with dark theme).

The important thing here is noting it's not a real tab/window, just a fake form inside the same page...

View attached image.

As a regular on the Steam forums I saw this scam method posted very often. Alas people still seem to fall for it.

also from now on I have new steam protocol - no fkn links from sites I dont know

How about a new internet protocol: check the page URL whenever you're entering sensitive data, and reject all popups? This way you can still browse "sites you don't know", which is pretty much what the Internet was about before Big Tech invaded it.

someone from my friendlist told me to do the same thing. i refused. was connected to my steam account already but this site asked me to connect again...

It's pretty common method of scam, just never click on any kind of links people send to you, as simple as that.
Well, maybe some sites can be exception, like Gyazo or Imgur, like if they are world-known

I never have anyone trying to phish me...even phishers don't like me :(

The same guy messaged me today with the same request, had to remove him from my friends list.

I had 2 people message me about voting LOL

For future reference: go directly to steamcommunity.com and login to your account, then go to whatever site you're trying to log into, if the site is still asking for your password you're being phished.

Hey, my account getting hacked somehow. There is someone ask same question like this to me. and then I login with steam account on that site. So sorry the trouble I made. I just hope there is nobody getting hacked. I have like 200+ friend. I dont know what to do.

As a veteran user of our site, it is expected that you are familiar with our past rules about "calling out" other users and try to avoid doing so. As our rules have (somewhat) recently changed, however, let me remind you and everyone else of what to avoid.

First, you should avoid "naming and shaming" specific users within the forum as this could amount to personal attacks and/or hate speech. In almost all instances, it is possible to discuss a matter without resorting to such tactics, and most topics of discussion do not require the names of specific individuals.

Second, our currently Guidelines specifically prohibit the public disclosure of someone else's private and/or identifying information. This includes, but is not limited to, names, addresses, phone numbers, photos, and private messages. The Guidelines also prohibit the posting of unsafe content, such as links to scams and dangerous websites.

In hindsight, your original post, while apparently made with good intentions, could be seen as violating a few of our rules. In the future, please be mindful of how you construct your posts and the manner in which those posts may be interpreted. (Yes, it was entirely possible for your original post to have been written in compliance with our Guidelines.)

And I thank you for making this thread, maybe this will be help some people knowing this phising method. I just want to fix everything right now. Could someone help me?

I got message from steam support, like this

Thanks for contacting Steam Support.

It looks like your account was compromised. However, you've since updated your password. This should prevent any further unauthorized access to your account.

If you're concerned about security, check out our Security Recommendations article.

That being said, if you have any further questions, please let us know - we will be happy to assist you.

Steam Support

So, I'm free from the hacker?

Well, after coming home from work, I see that Gath has unfriended me. Oh well, Guess the guy that took control knows we are on to him now.

Edit- Just found his profile and he has this message on it-
Hey I'm sorry if there any trouble I make, Because my account get hacked. But I'm already taking it back. If you already got the phising link and want to talk about it, just add me back so we can solved this problem together.

one reason I don't have many friends
I don't play multiplayer anyway