# 「フォレンジック監査法」：Valve Steam Web API エコシステムと商業的活用（参照：VAL-REG-2026-09）

Canonical: https://phishdestroy.io/steam_dossier/ja/regulatory_act_print
Language: ja
Author: phishdestroy.io Forensic Research Coalition
Publisher: PhishDestroy

phishdestroy.io Valve Steam Web API エコシステム監査 // 参照番号：VAL-REG-2026-09 // すべての権利は人類に譲渡されました

[PDFを開く ↗](https://phishdestroy.io/steam_dossier/exports/pages/ja/regulatory_act_print.pdf?v=print-20260929-v5) [「ドシエ」に戻る](https://phishdestroy.io/steam_dossier/index)

phishdestroy.io ・法医学研究連合・ユニバーサル・パブリック・レコード

**事件番号：** VAL-REG-2026-09-EVID

**来歴：** phishdestroy.io/steam_dossier/

**権利：** すべての権利は人類に委ねられた

# 法務監査法および規制関連資料

ValveのSteamエコシステムにおける、体系的なサードパーティによるAPIのプロビジョニング、自動化されたバイパスアーキテクチャ、および契約上の不履行

発行ドメイン **phishdestroy.io**

対象プラットフォーム **Valve Steam / Steamworks**

一次認証ベクトル **Steam OpenID 2.0 / Web API**

法的献辞 **All Rights to Humanity (CC0)**

第I部：執行部覚書および事実認定 参照：MEMO-SUMMARY-01

本書は、Valve社の公表されている商用規約、同社の技術的な認証エンドポイント、および確認されたサードパーティの商用プラットフォーム間の運用上の関連性を検証する、正式なフォレンジック監査報告書である。本監査は、受動的かつ認証不要なネットワーク監視、RDAPの登録確認、および公開されているLink Filterのテレメトリデータを用いて実施された。

**事実の核心：** 実証的な観察により、Valveの公的な契約上の表明と、その生産インフラとの間に体系的な乖離があることが明らかになっている。 Steamの加入者契約（SSA）では、無許可の商業的利用（§ 2.G）、自動化されたボット／スクリプトによる操作（§ 4.C）、およびアカウントの譲渡（§ 1.C）が厳格に禁止されているにもかかわらず、Valve Corporationは、数十億ドル規模の二次取引量を発生させている少なくとも175の商業事業体に対し、リアルタイムかつプログラム化されたOpenID認証および在庫照会インフラの提供を継続している。

175

監査を受けた商業事業者

44

別ドメインの認証ホスト

26

フィルタ分割プロキシペア

100%

施行されていない社会保障法（SSA）第2.G条／第4.C条

0

強制的な認証情報の失効

適用される契約上および法的な枠組み

SSA 第2.G条

**商用利用の禁止：** Valve Corporationからの事前の書面による許可なく、コンテンツおよびサービスを商業目的で利用することを固く禁じます。

SSA 第4.C条

**自動化の制限：** Steamのサービスおよび市場とやり取りを行うスクリプト、トレーディングボット、マクロ、または人間による操作ではないシステムの使用を固く禁じます。

SSA 第1.C条

**個人利用に関する規定：** アカウントは個人利用に限定されます。Steamのユーザーアカウントの販売、貸与、譲渡、または取引は固く禁じられています。

EUのDSA（2022/2065）

**システミック・リスク評価（34/35条）：** 超大規模オンラインプラットフォーム（VLOP）は、自動化された不正利用や無断の商業的搾取に起因するシステミックリスクを、積極的に検知、評価し、軽減しなければならない。

第II節：別紙台帳A — リンクフィルタ分割ペアの記録（26ルート） 参照番号：EX-SPLIT-LEDGER

**スプリットドメイン回避手法のフォレンジック分析：** Valveの「Steam」リンクフィルタシステムでは（`steamcommunity.com/linkfilter/?url=...`)、エンドユーザーが、警告対象のギャンブルサイトや闇市場プラットフォームへのリンクをクリックすると、Valve は目立つ警告を表示します（*「リンクがブロックされました！… 悪意のある可能性があると報告されました」*）。しかし、フォレンジックによる経路追跡の結果、26の商用プラットフォームが **分割ドメインアーキテクチャ**: リンクフィルターでは、主要な商用ドメインが「BLOCKED」と判定されている一方で、ValveのOpenIDリターンエンドポイントをホストしているセカンダリドメインは「CLEAN」と判定されています。ValveのOpenIDサーバーは、これらのプロキシホストからの認証リクエストを中断することなく受け入れており、これにより、消費者に表示される安全警告を無効化しつつ、ログイン処理を継続しています。

| # | 主要な商用ドメイン | メインフィルター | OpenID 認証プロキシドメイン | 認証フィルター | RDAP 登録済み | 取得基準 |
| --- | --- | --- | --- | --- | --- | --- |
| 01 | rollbit.com | BLOCKED | rbsnin.com | CLEAN | 2026-09-18 | PASSIVE_CAPTURE |
| 02 | skin.club | BLOCKED | sc-auth.net | CLEAN | 2019-04-02 | PASSIVE_CAPTURE |
| 03 | howl.gg | BLOCKED | howl.uno | CLEAN | 2026-08-11 | PASSIVE_CAPTURE |
| 04 | duelbits.com | BLOCKED | switchflips.com | CLEAN | 2020-04-21 | PASSIVE_CAPTURE |
| 05 | csgofast.com | BLOCKED | steam-login.authtofast.com | CLEAN | 2026-06-30 | PASSIVE_CAPTURE |
| 06 | farmskins.com | BLOCKED | steam.kobal.cc | CLEAN | 2017-01-07 | PASSIVE_CAPTURE |
| 07 | cobaltlab.tech | BLOCKED | cobaltauth.com | CLEAN | 2025-01-07 | PASSIVE_CAPTURE |
| 08 | csgo.net | BLOCKED | cn2.easylot.net | CLEAN | 2016-09-03 | PASSIVE_CAPTURE |
| 09 | ggdrop.com | BLOCKED | ggauth.com | CLEAN | 2023-05-03 | PASSIVE_CAPTURE |
| 10 | rustchance.com | BLOCKED | hgfuihd.com | CLEAN | 2019-01-27 | PASSIVE_CAPTURE |
| 11 | skin.fans | BLOCKED | auth.skinfans.com | CLEAN | 2018-07-16 | PASSIVE_CAPTURE |
| 12 | skinport.com | BLOCKED | skinport.app | CLEAN | 2020-06-20 | PASSIVE_CAPTURE |
| 13 | skins.cash | BLOCKED | skinscash.live | CLEAN | 2019-12-05 | PASSIVE_CAPTURE |
| 14 | tf2hunt.com | BLOCKED | rstspcl.com | CLEAN | 2020-08-08 | PASSIVE_CAPTURE |
| 15 | daddyskins.com | BLOCKED | go-go-daddy.com | CLEAN | 2019-01-26 | PASSIVE_CAPTURE |
| 16 | key-drop.com | BLOCKED | kdauth.com | CLEAN | 2026-05-13 | PASSIVE_CAPTURE |
| 17 | clash.gg | BLOCKED | clggauth.com | CLEAN | 2024-09-16 | PASSIVE_CAPTURE |
| 18 | c5game.com | BLOCKED | www.imbastar.com | CLEAN | 2016-02-27 | PASSIVE_CAPTURE |
| 19 | swap.gg | BLOCKED | swapauth.com | CLEAN | 2018-10-06 | PASSIVE_CAPTURE |
| 20 | shadowpay.com | BLOCKED | thelogins.com | CLEAN | 2018-01-22 | PASSIVE_CAPTURE |
| 21 | csgocases.com | BLOCKED | log-1n.com | CLEAN | 2017-11-27 | PASSIVE_CAPTURE |
| 22 | csgogem.com | BLOCKED | api.csgem.com | CLEAN | 2014-03-08 | PASSIVE_CAPTURE |
| 23 | gamdom.com | BLOCKED | login.gambldom.com | CLEAN | 2017-09-24 | PASSIVE_CAPTURE |
| 24 | 12cs.fail | BLOCKED | fail.games | CLEAN | 2021-08-24 | PASSIVE_CAPTURE |
| 25 | skinsnipe.com | BLOCKED | pricing.tradeupspy.com | CLEAN | 2020-03-11 | PASSIVE_CAPTURE |
| 26 | csgobig.com | BLOCKED | letmeinbig.com | CLEAN | 2023-01-20 | PASSIVE_CAPTURE |

* 注：2026-09-19 および 2026-09-21. 上の、認証されていない Steam リンクフィルターエンドポイントに対して実行されたパッシブチェック。生の HTTP レスポンス本文および SHA-256 ダイジェストは、リポジトリデータセット（steam_tos_assets/linkfilter-2026-09-22.json）に保存されています。

第III節：別紙台帳B — 「175」の監査対象商業事業体に関する包括的調査 参照番号：EX-175-MASTER-CENSUS

以下の登録簿には、監査データベースにおいて積極的に検証されたすべての「175」のサードパーティ商用プラットフォームの詳細が記載されています。各レコードには、事業体名、主要な商用ドメイン、確認された Steam の OpenID 認証ルート、活動分類、契約違反のマッピング（SSA § 2.G、SSA § 4.C、SSA § 1.C）、およびソースデータセットに記録された「措置」フィールドが示されています。 「日付入りの証拠を参照」というラベルは、読者に裏付けとなる記録を参照するよう促すものであり、Valveが措置を講じなかったことを立証するものではない。措置フィールドが存在しない場合は、「立証されていない」として報告される。

| 展示物 | 組織名およびメインドメイン | 観測された認証ルート／プロキシ | 分類 | 契約違反 | Valve アクション |
| --- | --- | --- | --- | --- | --- |
| EX-001 | **CSGORoll** csgoroll.com | www.csgoroll.com DIRECT | Skin Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-002 | **CSGOEmpire** csgoempire.com | csgoempirelogin4.com SPLIT PROXY | Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-003 | **Rollbit** rollbit.com | rbsnin.com SPLIT PROXY | Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-004 | **500 Casino** 500.casino | fivezerozero.co SPLIT PROXY | Licenced Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-005 | **CSGOBig** csgobig.com | csgobig.com DIRECT | Roulette/Slots | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-006 | **CaseDrop** casedrop.com | casedrop.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-007 | **RustReaper** rustreaper.com | rustreaper.com DIRECT | Rust Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-008 | **BanditCamp** banditcamp.com | banditcamp.com DIRECT | Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-009 | **SkinBox** skinbox.com | skinbox.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-010 | **TastyDrop** tastydrop.com | tastydrop.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-011 | **CSGOPolygon** csgopolygon.gg | csgopolygon.gg DIRECT | Roulette Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-012 | **MagicDrop** magicdrop.ru | magicdrop.ru DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-013 | **CSDice** csdice.com | csdice.com DIRECT | Dice Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-014 | **Rustly** rustly.com | rustly.com DIRECT | Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-015 | **SkinOdds** skinodds.com | skinodds.com DIRECT | Upgrader Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-016 | **CSGOWin** csgowin.com | csgowin.com DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-017 | **CSGORun** csgorun.net | csgorun.net DIRECT | Crash Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-018 | **OpenSkins** openskins.com | openskins.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-019 | **RustBet** rustbet.com | rustbet.com DIRECT | Rust Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-020 | **CSGOMagic** csgomagic.com | csgomagic.com DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-021 | **CSGOBounty** csgobounty.com | csgobounty.com DIRECT | Upgrader/Contract | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-022 | **EZSkins** ezskins.com | ezskins.com DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-023 | **RustCases** rustcases.com | rustcases.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-024 | **CSGOReaper** csgoreaper.com | csgoreaper.com DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-025 | **CSGOCases** csgocases.com | csgocases.com DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-026 | **CSGO-Skins** csgo-skins.com | csgo-skins.com DIRECT | Case Upgrader | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-027 | **CSGONet** csgonet.com | csgonet.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-028 | **WTFSkins** wtfskins.com | wtfskins.com DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-029 | **CSGOFast** csgofast.com | steam-login.authtofast.com SPLIT PROXY | Roulette Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-030 | **Duelbits** duelbits.com | switchflips.com SPLIT PROXY | Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-031 | **FlameCases** flamecases.com | flamecases.com DIRECT | Case Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-032 | **Farmskins** farmskins.com | steam.kobal.cc SPLIT PROXY | Case Opener | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-033 | **CSGOLuck** csgoluck.com | csgoluck.com DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-034 | **Gamedom** gamedom.com | gamedom.com DIRECT | Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-035 | **Skin.Club** skin.club | sc-auth.net SPLIT PROXY | Case Battles | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-036 | **DaddySkins** daddyskins.com | daddyskins.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-037 | **Insane.gg** insane.gg | api.insane.gg DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-038 | **Rustix** rustix.gg | rustix.gg DIRECT | Rust Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-039 | **Skins.Club** skins.club | skins.club DIRECT | Skin Upgrade | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-040 | **CSGOHouse** csgohouse.org | csgohouse.org DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-041 | **SkinRave** skinrave.net | skinrave.net DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-042 | **BloodyCase_GG** bloodycase.gg | bloodycase.gg DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-043 | **CSGOClicker** csgoclicker.com | csgoclicker.com DIRECT | Clicker/Upgrade | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-044 | **RustBet_GG** rustbet.gg | rustbet.gg DIRECT | Rust Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-045 | **CS_Drop** cs-drop.com | cs-drop.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-046 | **HellStore** hellstore.net | hellstore.net DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-047 | **RustLoot** rustloot.com | rustloot.com DIRECT | Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-048 | **CSGO_Case** csgo-case.com | csgo-case.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-049 | **CS2Skin** cs2skin.com | cs2skin.com DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-050 | **Juice_GG** juice.gg | letmeinjuice.com SPLIT PROXY | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-051 | **GGDrop** ggdrop.com | ggauth.com SPLIT PROXY | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-052 | **CSGOGem** csgogem.com | csgogem.com DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-053 | **Rainbet** rainbet.com | services.rainbet.com DIRECT | Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-054 | **Howl_GG** howl.gg | howl.uno SPLIT PROXY | Skins Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-055 | **Chicken_GG** chicken.gg | chicken.gg DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-056 | **CSGOCasino_GG** csgocasino.gg | api.csgocasino.gg DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-057 | **Hunt_GG** hunt.gg | api.hunt.gg DIRECT | Skins Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-058 | **CSBattle** csbattle.com | csbattle.com DIRECT | Case Battles | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-059 | **SkinRave_GG** skinrave.gg | api.skinrave.gg DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-060 | **CSDouble** csdouble.gg | csdouble.gg DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-061 | **RustChance** rustchance.com | hgfuihd.com SPLIT PROXY | Rust Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-062 | **RustClash** rustclash.com | rustclash.com DIRECT | Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-063 | **CobaltLab** cobaltlab.tech | cobaltauth.com SPLIT PROXY | Rust Automation | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-064 | **Raided_GG** raided.gg | api.raided.gg DIRECT | Rust Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-065 | **RustNeo** rustneo.gg | rustneo.gg DIRECT | Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-066 | **Splits_GG** splits.gg | splits.gg DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-067 | **Upgrader_Pro** upgrader.pro | upgauth.space SPLIT PROXY | Skin Upgrader | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-068 | **SkinFans** skin.fans | auth.skinfans.com SPLIT PROXY | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-069 | **HotPizza** hotpizza.one | hotpizza.one DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-070 | **G4Skins** g4skins.com | auth.g4s.to SPLIT PROXY | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-071 | **12CS_Fail** 12cs.fail | 12cs.fail DIRECT | Crash Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-072 | **TF2Royal** tf2royal.com | tf2auth.com SPLIT PROXY | TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-073 | **TF2Easy** www.tf2easy.com | www.tf2easy.com DIRECT | TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-074 | **TF2Hunt** tf2hunt.com | rstspcl.com SPLIT PROXY | TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-075 | **TF2Bet** tf2.bet/coinflip | tf2.bet DIRECT | TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-076 | **TF2Blaze** tf2blaze.com | tf2blaze.com DIRECT | TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-077 | **OpenStars_GG** openstars.gg | openstars.gg DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-078 | **Shuffle_Com** shuffle.com | shuffle.com DIRECT | Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-079 | **Skins.com** skins.com | api.skins.com DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-080 | **White.Market** white.market | white.market DIRECT | P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-081 | **Buff.Market** buff.market | buff.market DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-082 | **Avan.Market** avan.market | avan.market DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-083 | **CS.MONEY** cs.money | auth.dota.trade SPLIT PROXY | Trading Engine | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-084 | **UUSkins** uuskins.com | uuskins.com DIRECT | P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-085 | **YouPin898** youpin898.com | youpin898.com DIRECT | Mass Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-086 | **Moon.Market** moon.market | moon.market DIRECT | P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-087 | **CSFloat** csfloat.com | csgofloat.com SPLIT PROXY | P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-088 | **Skin.Land** skin.land | auth.skin.land DIRECT | Skins Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-089 | **C5Game** c5game.com | c5game.com DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-090 | **HaloSkins** haloskins.com | haloskins.com DIRECT | Skins Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-091 | **Buff.163** buff.163.com | buff.163.com DIRECT | Corporate Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-092 | **Waxpeer** waxpeer.com | waxpeer.com DIRECT | P2P Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-093 | **CS.MONEY Bot** cs.money | auth.dota.trade SPLIT PROXY | Bot Trading | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-094 | **Market.CSGO** market.csgo.com | dota2.net SPLIT PROXY | P2P Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-095 | **Skinport** skinport.com | skinport.app SPLIT PROXY | Regulated Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-096 | **SkinFlow** skinflow.gg | api.skinflow.gg DIRECT | Marketplace/Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-097 | **DMarket** dmarket.com | dmarket.com DIRECT | US Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-098 | **Skin.place** skin.place | api.skin.place DIRECT | Skins Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-099 | **SkinsMonkey** skinsmonkey.com | skinsmonkey.com DIRECT | Instant Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-100 | **SkinBaron** skinbaron.de | skinbaron.com SPLIT PROXY | Corporate Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-101 | **Steam** steamcommunity.com/market | steamcommunity.com/market DIRECT | Official Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-102 | **RustTM** rust.tm | dota2.net SPLIT PROXY | Rust Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-103 | **PirateSwap** pirateswap.com | login.pirateswap.com DIRECT | Instant Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-104 | **Mannco.Store** mannco.store | mannco.store DIRECT | TF2 Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-105 | **SkinSwap** skinswap.com | api.skinswap.com DIRECT | Instant Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-106 | **LootFarm** lootfarm.com | lootfarm.com DIRECT | Trading Platform | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-107 | **Rustskins** rustskins.com | rustskins.com DIRECT | Rust Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-108 | **ExeSkins** exeskins.com | exeskins.com DIRECT | P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-109 | **BalticSkins** balticskins.com | balticskins.com DIRECT | Skins Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-110 | **CS.Trade** cs.trade | cs.trade DIRECT | Instant Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-111 | **RapidSkins** rapidskins.com | api.rapidskins.com DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-112 | **TradeIt** tradeit.gg | connect-tradeit.com SPLIT PROXY | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-113 | **Krakatoa** krakatoa.com | krakatoa.com DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-114 | **ShadowPay** shadowpay.com | shadowpay.com DIRECT | P2P Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-115 | **49skins** 49skins.com | api.49skins.com DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-116 | **SkinVault** skinvault.gg | api.skinvault.gg DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-117 | **Aim Market** aim.market | aim.market DIRECT | Skins Trading | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-118 | **Skinout** skinout.gg | auth.skinout.gg DIRECT | Instant Sell Portal | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-119 | **NTSkins** ntskins.com | ntskins.com DIRECT | Skins Trading | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-120 | **IGXE** igxe.cn | igxe.cn DIRECT | Chinese Powerhouse | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-121 | **Swap.gg** swap.gg | swap.gg DIRECT | Automated Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-122 | **Bitskins** bitskins.com | bitskins.com DIRECT | Cash-out Portal | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-123 | **GamerPay** gamerpay.gg | gamerpay.gg DIRECT | P2P Portal | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-124 | **TF2Mart** tf2mart.com | tf2mart.com DIRECT | TF2 Automation | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-125 | **SkinBid** skinbid.com | skinbid.com DIRECT | Skin Auctions | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-126 | **LootBear** lootbear.com | lootbear.com DIRECT | Skin Rental | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-127 | **Backpack.tf** backpack.tf | backpack.tf DIRECT | TF2 Valuation | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-128 | **Scrap.tf** scrap.tf | scrap.tf DIRECT | TF2 Scrap Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-129 | **Marketplace.tf** marketplace.tf | marketplace.tf DIRECT | TF2 Cashout | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-130 | **STNTrading** stntrading.eu | stntrading.eu DIRECT | TF2 Botnet | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-131 | **Skins.Cash** skins.cash | skinscash.live SPLIT PROXY | Instant Cashout | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-132 | **SkinWallet** skinwallet.com | skinwallet.com DIRECT | Instant Cashout | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-133 | **Dota2Market** dota2market.com | dota2market.com DIRECT | Dota 2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-134 | **CSGO.NET** csgo.net | cn2.easylot.net SPLIT PROXY | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-135 | **Cybershoke** cybershoke.net | auth.cybershoke.net DIRECT | Community Hub | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-136 | **XPlay_GG** xplay.gg | xplay.gg DIRECT | Server Network | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-137 | **FastCup** fastcup.net | api.fastcup.net DIRECT | Matchmaker Hub | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-138 | **Esportal** esportal.com | esportal.com DIRECT | Matchmaking Portal | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-139 | **GamersClub** gamersclub.com.br | gamersclub.com.br DIRECT | LATAM Hub | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-140 | **Leetify** leetify.com | leetify.com DIRECT | SaaS Analytics | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-141 | **Scope_GG** scope.gg | scope.gg DIRECT | SaaS Analytics | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-142 | **TradeUpSpy** tradeupspy.com | api.tradeupspy.com DIRECT | SaaS Tools | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-143 | **Epidemic_GG** epidemic.gg | epidemic.gg DIRECT | SaaS Tools | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-144 | **CSDeals** cs.deals | api.cs.deals DIRECT | Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-145 | **Pricempire** pricempire.com | pricempire.com DIRECT | SaaS Price DB | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-146 | **CS2Stash** cs2stash.com | cs2stash.com DIRECT | SaaS Index | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-147 | **CSGOSkins** csgoskins.gg | csgoskins.gg DIRECT | SaaS Index | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-148 | **SteamAnalyst** steamanalyst.com | steamanalyst.com DIRECT | SaaS Index | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-149 | **SteamCardExchange** steamcardexchange.net | steamcardexchange.net DIRECT | Trading Exchange | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-150 | **DotaBuff** dotabuff.com | dotabuff.com DIRECT | SaaS Tracker | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-151 | **Tracker_GG** tracker.gg | tracker.gg DIRECT | SaaS Tracker | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-152 | **FSB Market (an anonymized label; the original name is withheld here)** FSB Market | FSB Market DIRECT | Mass Blackmarket | SSA § 2.G, SSA § 4.C, SSA § 1.C | See dated evidence |
| EX-153 | **FunPay** funpay.com | funpay.com DIRECT | Account Exchange | SSA § 2.G, SSA § 4.C, SSA § 1.C | See dated evidence |
| EX-154 | **PlayerAuctions** playerauctions.com | playerauctions.com DIRECT | Grey Market | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-155 | **Eldorado.gg** eldorado.gg | eldorado.gg DIRECT | Account Portal | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-156 | **G2A** g2a.com | g2a.com DIRECT | Mass Key Market | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-157 | **Kinguin** kinguin.net | kinguin.net DIRECT | Mass Key Market | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-158 | **G2G.com** g2g.com | g2g.com DIRECT | Virtual Services | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-159 | **Playerup** playerup.com | playerup.com DIRECT | Account Broker | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-160 | **Z2U.com** z2u.com | www.z2u.com DIRECT | Ready-Account Hub | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-161 | **SmurfHub** smurfhub.net | smurfhub.net DIRECT | Smurf Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-162 | **SmurfAccounts** smurfaccounts.com | smurfaccounts.com DIRECT | Smurf Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-163 | **BuyCSGORank** buycsgorank.com | buycsgorank.com DIRECT | Rank Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-164 | **CSGOSmurfKings** csgosmurfkings.com | csgosmurfkings.com DIRECT | Smurf Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-165 | **SmurfStore_Co** smurfstore.co | smurfstore.co DIRECT | Smurf Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-166 | **SteamLvlUp** steamlvlup.com | steamlvlup.com DIRECT | Card Leveling | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-167 | **SteamLevels** steamlevels.com | steamlevels.com DIRECT | Card Leveling | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-168 | **LevelSteam** levelsteam.com | levelsteam.com DIRECT | Card Leveling | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-169 | **SteamLevelU** steamlevelu.com | steamlevelu.com DIRECT | Card Leveling | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-170 | **EloKing** eloking.com | eloking.com DIRECT | Rank Boosting | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-171 | **Boosteria** boosteria.org | boosteria.org DIRECT | Rank Boosting | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-172 | **Overgear** overgear.com | overgear.com DIRECT | Boosting SaaS | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-173 | **BlazingBoost** blazingboost.com | blazingboost.com DIRECT | Boosting SaaS | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-174 | **Dota2Boost** dota2boost.com | dota2boost.com DIRECT | Rank Boosting | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-175 | **BuyBoost** buyboost.com | buyboost.com DIRECT | Boosting SaaS | SSA § 2.G, SSA § 1.C | See dated evidence |

第IV章：技術アーキテクチャと認証の仕組み 参照：TECH-ANALYSIS-01

**1. OpenIDにおけるドメイン所有権の検証機能の欠如 2.0:** ValveによるOpenID 2.0 プロトコルの実装（`https://steamcommunity.com/openid/login`) は、 `openid.return_to` そして `openid.realm` 開発者の事前の登録、暗号によるチャレンジ検証、ドメイン所有権の確認を必要とせずにパラメータを指定できます。あらゆる商用事業者は、ユーザーをValveのログイン画面に誘導し、任意のドメインにリダイレクトされた、暗号的に署名されたIDアサーション（64-ビットのSteamIDを含む）を受け取ることができます。

**2. プログラムによるインベントリ照会およびAPIキーの不正利用：** OpenID を通じてユーザー認証が確認されると、オペレーターはパブリックおよびパートナーの Web API エンドポイントにクエリを送信します（`IEconItems_730/GetPlayerItems`) により、在庫資産をリアルタイムでインデックス化している。自動取引ネットワークでは、プログラムによるセッショントークンを用いて、ピアツーピア（P2P）の取引オファーの送信、ポーリング、および受諾を行っており、これはSSA第4.C条が定める「人間以外の主体との相互作用」の禁止規定に直接違反している。

**3. リンクフィルタの非対称性：** ユーザー向けのドメイン警告と、完全に機能している認証エンドポイントが併存していることは、規制上の矛盾を生み出しています。Valveのセキュリティテレメトリでは、これらの事業者を「潜在的に悪意のあるもの」として分類しているにもかかわらず、Valveの認証インフラは、引き続きそれらのユーザーを認証し続けているのです。

証拠の取り扱い方法および証拠の保管経路に関する宣言

本書は、認証されていないネットワークキャプチャ、RDAPの過去のレジストリクエリ、および検証済みの暗号ハッシュマニフェストに基づいて作成されました。ユーザーのログイン認証情報は、侵害テストの対象にもならず、処理もされていません。すべての調査結果は、9月2026.時点における実稼働ネットワークの観測可能な状態を反映したものです。本書は、司法、規制当局、および一般からの照会に対応するために作成された、超党派的な技術的証拠資料としての役割を果たします。

**ダイジェスト：** SHA-256 検証済み

c507c9025f93da0aadaf395c4d8882f25973211c318ee8e9b6f18a5b3755e050

**アーカイブ：** 公開法廷記録

発行者および署名者： **phishdestroy.io** ・法科学研究連合

法的地位： **すべての権利は人類に委ねられた** ・CC0 ユニバーサル・パブリック・ドメイン