We have recently discovered a new generation of phishing sites circulating on Steam, especially in the Counter-Strike: Global Offensive community but that does not mean others aren't affected by this.

These sites display a fake popup window, created with HTML, that looks just like the real deal and makes it hard to spot for people who don't know about it. Everyone could fall for it. (example[img.guurgle.me])

How to spot those? The easiest way is to try and drag the popup out of the website, browsers obviously don't allow rendering outside, hence why fake sites can't do that. This is how a scam site or a fake popup[files.guurgle.me] behaves and this is how a real popup[files.guurgle.me] behaves.

The popup being real does not automatically mean that the site is real though. Please make sure to also check the url (it should start with "https://gtm.you1.cn") and make sure that your connection to the Steam Community is secure (indicated by the green padlock and the text "Valve Corp [US]"). (example[img.guurgle.me] of missing padlock and "Valve Corp [US]" text)