Primeoffensive.com is a scam

I would say I would never fall for this shit, but I guess everyone says the same, until it happens.

Spoiler: Chatlog

TheJmJ granted me permission to share this.

The screenshot above shows how the hijacking occurs. They ask you to join a competition and when you say you can't they wouldn't mind having you as a placeholder. They'll link you to the Primeoffensive site which is extremely buggy and eventually redirects to Challengermode website which is a legitimate website for all I know. I've done some actual competitions there, so I remembered that site and didn't think much of the other website.

Guess that's the one that hijacks your session and proceeds to contacting your friends for more victims. Those he contacted he blocks and/or removes. Not sure how to find out who he removed though.

Be warned.

 

rip, i decided to add them to troll, but looks like its just a big bot software since they dont reply to anything.

 

Yeah it appears they own multiple domains. I spoke Dutch to one of them, not sure if he actually was Dutch but I suppose they just used a translator. When I looked at the login entries on my account it said it was logged in from Moscow, so either they are russian or they’re using a vpn aswell.

 

seems there's tons of sites, added 2 more last night (in prayers to troll 1 person :/), different links as well. I got bored and went on completely clean Iphone 6 to check the link out, The steam sign on button redirects you to like sdh696agdsg8ag.tk then is just a fake sign in page that sends the details to them.

Luckily, I was able to type in some nasty logins and click submit 200 times before i got bored. But lol, crazy on your research, ofc their from countries that dont get prosecuit for crimes.

 

Depending on how much you care about it:

- You can find the registrar of the domain on a whois site (their IANA ID is 1250, so the registrar is OwnRegistrar).
- You can then send the abuse email of the registrar a message pertaining to the email if it is partaking in phishing activity.
- Even if the registrar says they can't/won't do anything, you could ask for them to share who the host is of the domain, and then also report them to the hosting provider. Hosting providers typically might be more inclined to help out over a registrar.

You can also check phishing.org, which has a navigation option somewhere on the top right of the website which will list out phishing watchdogs (Google safebrowsing, IC3, FTC, USCert, Knowbe4).

There's a blog posted by the "guardyourdomain" organization pertaining to phishing site takedowns, there are some specific steps in what procedure they take to get malicious domains flagged or taken down.

edit: That particular domain also uses Cloudflare for its nameservers, you can hit up abuse.cloudflare.com and file a ticket for phishing domains with them as well.