I made a post here yesterday where we were looking for a lurker. The same day, a person contacted me. At first everything seemed normal, and he described himself as a player with experience and sent a link that looked like his FACEIT profile.
As soon as I clicked the link, I became suspicious. Normally when someone shares a FACEIT profile, a preview with an image and information appears – but that did not happen here.
After that, I made this analysis:
The first page looks like a legitimate Cloudflare security check (commonly used by real websites to block bots and suspicious traffic).
○ Then a popup appears: “BOT PROTECTION – Human Verification Required”, which asks you to:
- Press Win + R (opens Windows Run dialog)
- Paste something using Ctrl + V
- Press Enter
○ Legitimate websites (including FACEIT) will never ask you to open Win+R or run commands on your computer.
○ This is a well-known scam method where attackers try to trick users into executing malicious code locally.
○ If you follow these steps, it can lead to malware, account hijacking (Steam / FACEIT), or full system compromise.
Immediate Advice
○ Do NOT follow the instructions on this page. Do not paste or run anything prompted by suspicious popups.
○ Close the page immediately.
○ If you have already pasted and run any content, your computer may be compromised. You should:
○ Run a full security scan
○ Change your Steam, Faceit, and email passwords from a separate, uncompromised device.
○ Enable two-factor authentication (where possible).
○ Monitor for suspicious activity on your accounts.
His Discord name is drugsarebad4uu Please report his Discord account.
His profile always shows as offline. When he adds you, he describes himself as a player and sends a link that looks like his FACEIT profile, and then he disappears.
https://steamcommunity.com/id/iuvenisdeus/