Thanks for the tips and I definitely need and welcome any help!

But I'm not sure I understand your first two paragraphs above.  My question is:  Since the LT's already get the Steam user ID in the first place and store them in the LT's server, why not just put it on the URL of the LT's instead of the inconsistent user names?  And why would this make LT's less reliably?

And about getting the Steam user ID, do you have any experience with Steam API, e.g. to retrieve the Steam users' data(ID, library...etc), games info, and market items info?  I really want to learn it.  Any suggestion for a good place to start from?

But the problem is how do I create a Lestrades.com link when the URL of the Steam profile is in the "/id/(Steam custom names)" format and the names in the URL are different in both webpages of the Steam and Lestrades.com, e.g. like yours?

Any update for the new URL system?

Hi, is there any possibility to use only the Steam profile ID number in all the URL of the Lestrades.com profile page rather than mixture of the Steam custom ID name and ID number?

I wrote a script to add a Lestrades.com link on the Steam profile page.  All works great except sometimes the URL of the Lestrades.com profile page is not correct because the ID names in the URLs of Steam and Lestrades.com are different.

For before being hijacked, I think the key is the way how the Steam Guard to grant the access of any action for the account. 


There are mainly two methods, one is , like what Steam using, to provide an access code which is valid within a minute, so the attackers can use the code do what they want within that one minute.


The other one is, like Microsoft do, there is no code, the account owner have to press "grant it" every time there is an action needed to be confirmed on the app.


As for removing the Steam Guard, I think the priority of the process is, since the attackers can't remove the Steam Guard from the app apparently, they got to change the E-mail or Cellphone number first and then removing the Steam Guard through E-mail or Message to the phone. 
So, within one minute, they use the Steam Guard code we gave them to grant the actions of replacing the E-mail and Cellphone number with their own then BANG!!!  We know the rest of story. 

But I'm super curious about how can the hijacker remove/alter the Steam Guard protection?
I just tried to remove mine and it need to be done on the user's own mobile app in their own phone. :hmm: :hmm:

Oops!  I forgot this option.   :lol:
This should be a light speed method I think!   :niark:I've thought about mentioning LT on that SG thread about how I dealt with this issue regarding to wishlisted games lost on trade site.
I may find a right time to do it later if possible.    :)

Earlier I found there is something wrong about my wishlist on SG, Barter.vg and Steam.  The Lestrade's.com seems the only one not suffered the damage by it because there is an option not to remove those games from list.  I use Lestrade's.com to recover my automatically removed 430+ games on Barter.vg(poor mechanism), it took me half hour to complete the process though. 

I appreciate it!!!

The discussion on Steamgifts:
https://www.steamgifts.com/discussion/gtQIC/steam-wishlist-missing-games