# FORENSIC AUDIT ACT: Valve Steam Web API Ecosystem & Commercial Exploitation (Ref: VAL-REG-2026-09)

Canonical: https://phishdestroy.io/steam_dossier/regulatory_act_print
Language: en
Author: phishdestroy.io Forensic Research Coalition
Publisher: PhishDestroy

phishdestroy.io Valve Steam Web API Ecosystem Audit // Ref: VAL-REG-2026-09 // All rights surrendered to humanity

[Open PDF ↗](https://phishdestroy.io/steam_dossier/exports/pages/en/regulatory_act_print.pdf?v=print-20260929-v4) [Back to Dossier](https://phishdestroy.io/steam_dossier/index)

phishdestroy.io · Forensic Research Coalition · Universal Public Record

**DOCKET:** VAL-REG-2026-09-EVID

**PROVENANCE:** phishdestroy.io/steam_dossier/

**RIGHTS:** ALL RIGHTS SURRENDERED TO HUMANITY

# Forensic Audit Act & Regulatory Exhibit

Systematic Third-Party API Provisioning, Automated Bypass Architecture & Contractual Non-Enforcement in the Valve Steam Ecosystem

Issuing Domain **phishdestroy.io**

Target Platform **Valve Steam / Steamworks**

Primary Auth Vector **Steam OpenID 2.0 / Web API**

Legal Dedication **All Rights to Humanity (CC0)**

Section I: Executive Memorandum & Factual Findings REF: MEMO-SUMMARY-01

This document constitutes a formal forensic audit act examining the operational intersection between Valve Corporation's published commercial terms, its technical authentication endpoints, and observed third-party commercial platforms. The audit was conducted using passive, unauthenticated network observation, RDAP registration verification, and public Link Filter telemetry.

**Factual Core:** Empirical observation establishes a systematic divergence between Valve's public contractual representations and its production infrastructure. While the Steam Subscriber Agreement (SSA) strictly prohibits unauthorized commercial exploitation (§ 2.G), automated bot/script interaction (§ 4.C), and account transfer (§ 1.C), Valve Corporation continues to provide live, programmatic OpenID authentication and inventory query infrastructure to at least 175 commercial entities generating multi-billion dollar secondary transaction volumes.

175

Audited Commercial Operators

44

Separate-Domain Auth Hosts

26

Filter-Split Proxy Pairs

100%

Unenforced SSA § 2.G / § 4.C

0

Enforced Auth Revocations

Applicable Contractual & Statutory Framework

SSA § 2.G

**Commercial Use Prohibition:** Expressly forbids exploiting Content and Services for commercial purposes without prior written authorization from Valve Corporation.

SSA § 4.C

**Automation Restriction:** Strictly prohibits scripts, trading bots, macros, or non-human-controlled systems interacting with Steam services and markets.

SSA § 1.C

**Personal Use Mandate:** Restricts accounts to personal use; expressly forbids selling, leasing, transferring, or trading Steam user accounts.

EU DSA (2022/2065)

**Systemic Risk Assessment (Art. 34/35):** Very Large Online Platforms (VLOPs) must actively detect, assess, and mitigate systemic risks stemming from automated misuse and unauthorized commercial exploitation.

Section II: Exhibit Ledger A — Documented Link Filter Split Pairs (26 Routes) REF: EX-SPLIT-LEDGER

**Forensic Analysis of Split-Domain Evasion:** Under Valve's Steam Link Filter system (`steamcommunity.com/linkfilter/?url=...`), when an end-user clicks a link leading to a flagged gambling or black-market platform, Valve displays a prominent warning (*"Link Blocked! ... flagged as potentially malicious"*). However, forensic route tracing reveals 26 commercial platforms operating on a **split-domain architecture**: while the primary commercial domain is BLOCKED on the Link Filter, the secondary domain hosting Valve's OpenID return endpoint is marked CLEAN. Valve's OpenID servers accept authentication requests from these proxy hosts without interruption, neutralizing the consumer safety warning while continuing to process logins.

| # | Primary Commercial Domain | Main Filter | OpenID Auth Proxy Domain | Auth Filter | RDAP Registered | Capture Basis |
| --- | --- | --- | --- | --- | --- | --- |
| 01 | rollbit.com | BLOCKED | rbsnin.com | CLEAN | 2026-09-18 | PASSIVE_CAPTURE |
| 02 | skin.club | BLOCKED | sc-auth.net | CLEAN | 2019-04-02 | PASSIVE_CAPTURE |
| 03 | howl.gg | BLOCKED | howl.uno | CLEAN | 2026-08-11 | PASSIVE_CAPTURE |
| 04 | duelbits.com | BLOCKED | switchflips.com | CLEAN | 2020-04-21 | PASSIVE_CAPTURE |
| 05 | csgofast.com | BLOCKED | steam-login.authtofast.com | CLEAN | 2026-06-30 | PASSIVE_CAPTURE |
| 06 | farmskins.com | BLOCKED | steam.kobal.cc | CLEAN | 2017-01-07 | PASSIVE_CAPTURE |
| 07 | cobaltlab.tech | BLOCKED | cobaltauth.com | CLEAN | 2025-01-07 | PASSIVE_CAPTURE |
| 08 | csgo.net | BLOCKED | cn2.easylot.net | CLEAN | 2016-09-03 | PASSIVE_CAPTURE |
| 09 | ggdrop.com | BLOCKED | ggauth.com | CLEAN | 2023-05-03 | PASSIVE_CAPTURE |
| 10 | rustchance.com | BLOCKED | hgfuihd.com | CLEAN | 2019-01-27 | PASSIVE_CAPTURE |
| 11 | skin.fans | BLOCKED | auth.skinfans.com | CLEAN | 2018-07-16 | PASSIVE_CAPTURE |
| 12 | skinport.com | BLOCKED | skinport.app | CLEAN | 2020-06-20 | PASSIVE_CAPTURE |
| 13 | skins.cash | BLOCKED | skinscash.live | CLEAN | 2019-12-05 | PASSIVE_CAPTURE |
| 14 | tf2hunt.com | BLOCKED | rstspcl.com | CLEAN | 2020-08-08 | PASSIVE_CAPTURE |
| 15 | daddyskins.com | BLOCKED | go-go-daddy.com | CLEAN | 2019-01-26 | PASSIVE_CAPTURE |
| 16 | key-drop.com | BLOCKED | kdauth.com | CLEAN | 2026-05-13 | PASSIVE_CAPTURE |
| 17 | clash.gg | BLOCKED | clggauth.com | CLEAN | 2024-09-16 | PASSIVE_CAPTURE |
| 18 | c5game.com | BLOCKED | www.imbastar.com | CLEAN | 2016-02-27 | PASSIVE_CAPTURE |
| 19 | swap.gg | BLOCKED | swapauth.com | CLEAN | 2018-10-06 | PASSIVE_CAPTURE |
| 20 | shadowpay.com | BLOCKED | thelogins.com | CLEAN | 2018-01-22 | PASSIVE_CAPTURE |
| 21 | csgocases.com | BLOCKED | log-1n.com | CLEAN | 2017-11-27 | PASSIVE_CAPTURE |
| 22 | csgogem.com | BLOCKED | api.csgem.com | CLEAN | 2014-03-08 | PASSIVE_CAPTURE |
| 23 | gamdom.com | BLOCKED | login.gambldom.com | CLEAN | 2017-09-24 | PASSIVE_CAPTURE |
| 24 | 12cs.fail | BLOCKED | fail.games | CLEAN | 2021-08-24 | PASSIVE_CAPTURE |
| 25 | skinsnipe.com | BLOCKED | pricing.tradeupspy.com | CLEAN | 2020-03-11 | PASSIVE_CAPTURE |
| 26 | csgobig.com | BLOCKED | letmeinbig.com | CLEAN | 2023-01-20 | PASSIVE_CAPTURE |

* Note: Passive checks performed against unauthenticated Steam Link Filter endpoints on 2026-09-19 and 2026-09-21. Raw HTTP response bodies and SHA-256 digests preserved in repository dataset (steam_tos_assets/linkfilter-2026-09-22.json).

Section III: Exhibit Ledger B — Comprehensive Census of 175 Audited Commercial Entities REF: EX-175-MASTER-CENSUS

The following register details all 175 third-party commercial platforms actively verified in the audit database. Each record indicates the entity name, primary commercial domain, observed Steam OpenID authentication route, activity classification, contractual breach mappings (SSA § 2.G, SSA § 4.C, SSA § 1.C), and the action field recorded in the source dataset. The label "See dated evidence" refers the reader to supporting records; it does not establish that Valve took no action. An absent action field is reported as not established.

| Exhibit | Entity Name & Main Domain | Observed Auth Route / Proxy | Classification | Contractual Breach | Valve Action |
| --- | --- | --- | --- | --- | --- |
| EX-001 | **CSGORoll** csgoroll.com | www.csgoroll.com DIRECT | Skin Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-002 | **CSGOEmpire** csgoempire.com | csgoempirelogin4.com SPLIT PROXY | Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-003 | **Rollbit** rollbit.com | rbsnin.com SPLIT PROXY | Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-004 | **500 Casino** 500.casino | fivezerozero.co SPLIT PROXY | Licenced Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-005 | **CSGOBig** csgobig.com | csgobig.com DIRECT | Roulette/Slots | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-006 | **CaseDrop** casedrop.com | casedrop.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-007 | **RustReaper** rustreaper.com | rustreaper.com DIRECT | Rust Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-008 | **BanditCamp** banditcamp.com | banditcamp.com DIRECT | Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-009 | **SkinBox** skinbox.com | skinbox.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-010 | **TastyDrop** tastydrop.com | tastydrop.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-011 | **CSGOPolygon** csgopolygon.gg | csgopolygon.gg DIRECT | Roulette Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-012 | **MagicDrop** magicdrop.ru | magicdrop.ru DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-013 | **CSDice** csdice.com | csdice.com DIRECT | Dice Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-014 | **Rustly** rustly.com | rustly.com DIRECT | Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-015 | **SkinOdds** skinodds.com | skinodds.com DIRECT | Upgrader Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-016 | **CSGOWin** csgowin.com | csgowin.com DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-017 | **CSGORun** csgorun.net | csgorun.net DIRECT | Crash Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-018 | **OpenSkins** openskins.com | openskins.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-019 | **RustBet** rustbet.com | rustbet.com DIRECT | Rust Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-020 | **CSGOMagic** csgomagic.com | csgomagic.com DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-021 | **CSGOBounty** csgobounty.com | csgobounty.com DIRECT | Upgrader/Contract | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-022 | **EZSkins** ezskins.com | ezskins.com DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-023 | **RustCases** rustcases.com | rustcases.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-024 | **CSGOReaper** csgoreaper.com | csgoreaper.com DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-025 | **CSGOCases** csgocases.com | csgocases.com DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-026 | **CSGO-Skins** csgo-skins.com | csgo-skins.com DIRECT | Case Upgrader | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-027 | **CSGONet** csgonet.com | csgonet.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-028 | **WTFSkins** wtfskins.com | wtfskins.com DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-029 | **CSGOFast** csgofast.com | steam-login.authtofast.com SPLIT PROXY | Roulette Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-030 | **Duelbits** duelbits.com | switchflips.com SPLIT PROXY | Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-031 | **FlameCases** flamecases.com | flamecases.com DIRECT | Case Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-032 | **Farmskins** farmskins.com | steam.kobal.cc SPLIT PROXY | Case Opener | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-033 | **CSGOLuck** csgoluck.com | csgoluck.com DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-034 | **Gamedom** gamedom.com | gamedom.com DIRECT | Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-035 | **Skin.Club** skin.club | sc-auth.net SPLIT PROXY | Case Battles | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-036 | **DaddySkins** daddyskins.com | daddyskins.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-037 | **Insane.gg** insane.gg | api.insane.gg DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-038 | **Rustix** rustix.gg | rustix.gg DIRECT | Rust Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-039 | **Skins.Club** skins.club | skins.club DIRECT | Skin Upgrade | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-040 | **CSGOHouse** csgohouse.org | csgohouse.org DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-041 | **SkinRave** skinrave.net | skinrave.net DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-042 | **BloodyCase_GG** bloodycase.gg | bloodycase.gg DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-043 | **CSGOClicker** csgoclicker.com | csgoclicker.com DIRECT | Clicker/Upgrade | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-044 | **RustBet_GG** rustbet.gg | rustbet.gg DIRECT | Rust Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-045 | **CS_Drop** cs-drop.com | cs-drop.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-046 | **HellStore** hellstore.net | hellstore.net DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-047 | **RustLoot** rustloot.com | rustloot.com DIRECT | Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-048 | **CSGO_Case** csgo-case.com | csgo-case.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-049 | **CS2Skin** cs2skin.com | cs2skin.com DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-050 | **Juice_GG** juice.gg | letmeinjuice.com SPLIT PROXY | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-051 | **GGDrop** ggdrop.com | ggauth.com SPLIT PROXY | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-052 | **CSGOGem** csgogem.com | csgogem.com DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-053 | **Rainbet** rainbet.com | services.rainbet.com DIRECT | Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-054 | **Howl_GG** howl.gg | howl.uno SPLIT PROXY | Skins Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-055 | **Chicken_GG** chicken.gg | chicken.gg DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-056 | **CSGOCasino_GG** csgocasino.gg | api.csgocasino.gg DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-057 | **Hunt_GG** hunt.gg | api.hunt.gg DIRECT | Skins Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-058 | **CSBattle** csbattle.com | csbattle.com DIRECT | Case Battles | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-059 | **SkinRave_GG** skinrave.gg | api.skinrave.gg DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-060 | **CSDouble** csdouble.gg | csdouble.gg DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-061 | **RustChance** rustchance.com | hgfuihd.com SPLIT PROXY | Rust Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-062 | **RustClash** rustclash.com | rustclash.com DIRECT | Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-063 | **CobaltLab** cobaltlab.tech | cobaltauth.com SPLIT PROXY | Rust Automation | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-064 | **Raided_GG** raided.gg | api.raided.gg DIRECT | Rust Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-065 | **RustNeo** rustneo.gg | rustneo.gg DIRECT | Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-066 | **Splits_GG** splits.gg | splits.gg DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-067 | **Upgrader_Pro** upgrader.pro | upgauth.space SPLIT PROXY | Skin Upgrader | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-068 | **SkinFans** skin.fans | auth.skinfans.com SPLIT PROXY | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-069 | **HotPizza** hotpizza.one | hotpizza.one DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-070 | **G4Skins** g4skins.com | auth.g4s.to SPLIT PROXY | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-071 | **12CS_Fail** 12cs.fail | 12cs.fail DIRECT | Crash Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-072 | **TF2Royal** tf2royal.com | tf2auth.com SPLIT PROXY | TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-073 | **TF2Easy** www.tf2easy.com | www.tf2easy.com DIRECT | TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-074 | **TF2Hunt** tf2hunt.com | rstspcl.com SPLIT PROXY | TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-075 | **TF2Bet** tf2.bet/coinflip | tf2.bet DIRECT | TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-076 | **TF2Blaze** tf2blaze.com | tf2blaze.com DIRECT | TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-077 | **OpenStars_GG** openstars.gg | openstars.gg DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-078 | **Shuffle_Com** shuffle.com | shuffle.com DIRECT | Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-079 | **Skins.com** skins.com | api.skins.com DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-080 | **White.Market** white.market | white.market DIRECT | P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-081 | **Buff.Market** buff.market | buff.market DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-082 | **Avan.Market** avan.market | avan.market DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-083 | **CS.MONEY** cs.money | auth.dota.trade SPLIT PROXY | Trading Engine | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-084 | **UUSkins** uuskins.com | uuskins.com DIRECT | P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-085 | **YouPin898** youpin898.com | youpin898.com DIRECT | Mass Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-086 | **Moon.Market** moon.market | moon.market DIRECT | P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-087 | **CSFloat** csfloat.com | csgofloat.com SPLIT PROXY | P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-088 | **Skin.Land** skin.land | auth.skin.land DIRECT | Skins Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-089 | **C5Game** c5game.com | c5game.com DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-090 | **HaloSkins** haloskins.com | haloskins.com DIRECT | Skins Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-091 | **Buff.163** buff.163.com | buff.163.com DIRECT | Corporate Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-092 | **Waxpeer** waxpeer.com | waxpeer.com DIRECT | P2P Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-093 | **CS.MONEY Bot** cs.money | auth.dota.trade SPLIT PROXY | Bot Trading | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-094 | **Market.CSGO** market.csgo.com | dota2.net SPLIT PROXY | P2P Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-095 | **Skinport** skinport.com | skinport.app SPLIT PROXY | Regulated Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-096 | **SkinFlow** skinflow.gg | api.skinflow.gg DIRECT | Marketplace/Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-097 | **DMarket** dmarket.com | dmarket.com DIRECT | US Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-098 | **Skin.place** skin.place | api.skin.place DIRECT | Skins Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-099 | **SkinsMonkey** skinsmonkey.com | skinsmonkey.com DIRECT | Instant Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-100 | **SkinBaron** skinbaron.de | skinbaron.com SPLIT PROXY | Corporate Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-101 | **Steam** steamcommunity.com/market | steamcommunity.com/market DIRECT | Official Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-102 | **RustTM** rust.tm | dota2.net SPLIT PROXY | Rust Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-103 | **PirateSwap** pirateswap.com | login.pirateswap.com DIRECT | Instant Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-104 | **Mannco.Store** mannco.store | mannco.store DIRECT | TF2 Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-105 | **SkinSwap** skinswap.com | api.skinswap.com DIRECT | Instant Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-106 | **LootFarm** lootfarm.com | lootfarm.com DIRECT | Trading Platform | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-107 | **Rustskins** rustskins.com | rustskins.com DIRECT | Rust Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-108 | **ExeSkins** exeskins.com | exeskins.com DIRECT | P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-109 | **BalticSkins** balticskins.com | balticskins.com DIRECT | Skins Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-110 | **CS.Trade** cs.trade | cs.trade DIRECT | Instant Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-111 | **RapidSkins** rapidskins.com | api.rapidskins.com DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-112 | **TradeIt** tradeit.gg | connect-tradeit.com SPLIT PROXY | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-113 | **Krakatoa** krakatoa.com | krakatoa.com DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-114 | **ShadowPay** shadowpay.com | shadowpay.com DIRECT | P2P Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-115 | **49skins** 49skins.com | api.49skins.com DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-116 | **SkinVault** skinvault.gg | api.skinvault.gg DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-117 | **Aim Market** aim.market | aim.market DIRECT | Skins Trading | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-118 | **Skinout** skinout.gg | auth.skinout.gg DIRECT | Instant Sell Portal | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-119 | **NTSkins** ntskins.com | ntskins.com DIRECT | Skins Trading | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-120 | **IGXE** igxe.cn | igxe.cn DIRECT | Chinese Powerhouse | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-121 | **Swap.gg** swap.gg | swap.gg DIRECT | Automated Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-122 | **Bitskins** bitskins.com | bitskins.com DIRECT | Cash-out Portal | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-123 | **GamerPay** gamerpay.gg | gamerpay.gg DIRECT | P2P Portal | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-124 | **TF2Mart** tf2mart.com | tf2mart.com DIRECT | TF2 Automation | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-125 | **SkinBid** skinbid.com | skinbid.com DIRECT | Skin Auctions | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-126 | **LootBear** lootbear.com | lootbear.com DIRECT | Skin Rental | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-127 | **Backpack.tf** backpack.tf | backpack.tf DIRECT | TF2 Valuation | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-128 | **Scrap.tf** scrap.tf | scrap.tf DIRECT | TF2 Scrap Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-129 | **Marketplace.tf** marketplace.tf | marketplace.tf DIRECT | TF2 Cashout | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-130 | **STNTrading** stntrading.eu | stntrading.eu DIRECT | TF2 Botnet | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-131 | **Skins.Cash** skins.cash | skinscash.live SPLIT PROXY | Instant Cashout | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-132 | **SkinWallet** skinwallet.com | skinwallet.com DIRECT | Instant Cashout | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-133 | **Dota2Market** dota2market.com | dota2market.com DIRECT | Dota 2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-134 | **CSGO.NET** csgo.net | cn2.easylot.net SPLIT PROXY | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-135 | **Cybershoke** cybershoke.net | auth.cybershoke.net DIRECT | Community Hub | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-136 | **XPlay_GG** xplay.gg | xplay.gg DIRECT | Server Network | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-137 | **FastCup** fastcup.net | api.fastcup.net DIRECT | Matchmaker Hub | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-138 | **Esportal** esportal.com | esportal.com DIRECT | Matchmaking Portal | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-139 | **GamersClub** gamersclub.com.br | gamersclub.com.br DIRECT | LATAM Hub | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-140 | **Leetify** leetify.com | leetify.com DIRECT | SaaS Analytics | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-141 | **Scope_GG** scope.gg | scope.gg DIRECT | SaaS Analytics | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-142 | **TradeUpSpy** tradeupspy.com | api.tradeupspy.com DIRECT | SaaS Tools | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-143 | **Epidemic_GG** epidemic.gg | epidemic.gg DIRECT | SaaS Tools | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-144 | **CSDeals** cs.deals | api.cs.deals DIRECT | Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-145 | **Pricempire** pricempire.com | pricempire.com DIRECT | SaaS Price DB | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-146 | **CS2Stash** cs2stash.com | cs2stash.com DIRECT | SaaS Index | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-147 | **CSGOSkins** csgoskins.gg | csgoskins.gg DIRECT | SaaS Index | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-148 | **SteamAnalyst** steamanalyst.com | steamanalyst.com DIRECT | SaaS Index | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-149 | **SteamCardExchange** steamcardexchange.net | steamcardexchange.net DIRECT | Trading Exchange | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-150 | **DotaBuff** dotabuff.com | dotabuff.com DIRECT | SaaS Tracker | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-151 | **Tracker_GG** tracker.gg | tracker.gg DIRECT | SaaS Tracker | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-152 | **FSB Market (an anonymized label; the original name is withheld here)** FSB Market | FSB Market DIRECT | Mass Blackmarket | SSA § 2.G, SSA § 4.C, SSA § 1.C | See dated evidence |
| EX-153 | **FunPay** funpay.com | funpay.com DIRECT | Account Exchange | SSA § 2.G, SSA § 4.C, SSA § 1.C | See dated evidence |
| EX-154 | **PlayerAuctions** playerauctions.com | playerauctions.com DIRECT | Grey Market | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-155 | **Eldorado.gg** eldorado.gg | eldorado.gg DIRECT | Account Portal | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-156 | **G2A** g2a.com | g2a.com DIRECT | Mass Key Market | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-157 | **Kinguin** kinguin.net | kinguin.net DIRECT | Mass Key Market | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-158 | **G2G.com** g2g.com | g2g.com DIRECT | Virtual Services | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-159 | **Playerup** playerup.com | playerup.com DIRECT | Account Broker | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-160 | **Z2U.com** z2u.com | www.z2u.com DIRECT | Ready-Account Hub | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-161 | **SmurfHub** smurfhub.net | smurfhub.net DIRECT | Smurf Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-162 | **SmurfAccounts** smurfaccounts.com | smurfaccounts.com DIRECT | Smurf Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-163 | **BuyCSGORank** buycsgorank.com | buycsgorank.com DIRECT | Rank Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-164 | **CSGOSmurfKings** csgosmurfkings.com | csgosmurfkings.com DIRECT | Smurf Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-165 | **SmurfStore_Co** smurfstore.co | smurfstore.co DIRECT | Smurf Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-166 | **SteamLvlUp** steamlvlup.com | steamlvlup.com DIRECT | Card Leveling | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-167 | **SteamLevels** steamlevels.com | steamlevels.com DIRECT | Card Leveling | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-168 | **LevelSteam** levelsteam.com | levelsteam.com DIRECT | Card Leveling | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-169 | **SteamLevelU** steamlevelu.com | steamlevelu.com DIRECT | Card Leveling | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-170 | **EloKing** eloking.com | eloking.com DIRECT | Rank Boosting | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-171 | **Boosteria** boosteria.org | boosteria.org DIRECT | Rank Boosting | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-172 | **Overgear** overgear.com | overgear.com DIRECT | Boosting SaaS | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-173 | **BlazingBoost** blazingboost.com | blazingboost.com DIRECT | Boosting SaaS | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-174 | **Dota2Boost** dota2boost.com | dota2boost.com DIRECT | Rank Boosting | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-175 | **BuyBoost** buyboost.com | buyboost.com DIRECT | Boosting SaaS | SSA § 2.G, SSA § 1.C | See dated evidence |

Section IV: Technical Architecture & Authentication Mechanics REF: TECH-ANALYSIS-01

**1. Absence of Domain Ownership Validation in OpenID 2.0:** Valve's implementation of the OpenID 2.0 protocol (`https://steamcommunity.com/openid/login`) evaluates the `openid.return_to` and `openid.realm` parameters without requiring prior developer registration, cryptographic challenge verification, or domain ownership validation. Any commercial operator can direct users to Valve's login screen and receive a cryptographically signed identity assertion (containing the 64-bit SteamID) redirected to arbitrary domains.

**2. Programmatic Inventory Querying & API Key Abuse:** Once user authentication is confirmed via OpenID, operators query public and partner Web API endpoints (`IEconItems_730/GetPlayerItems`) to index inventory assets in real-time. Automated trading networks employ programmatic session tokens to submit, poll, and accept peer-to-peer (P2P) trade offers, directly contravening SSA § 4.C's prohibition on non-human interaction.

**3. Link Filter Asymmetry:** The coexistence of consumer-facing domain warnings alongside fully functional authentication endpoints creates a regulatory contradiction: Valve's security telemetry classifies these operators as "potentially malicious", yet Valve's authentication infrastructure continues to authenticate their user base.

Evidentiary Methodology & Chain of Custody Declaration

This document was generated from unauthenticated network captures, historical RDAP registry queries, and verified cryptographic hash manifests. No user login credentials were compromise-tested or processed. All findings reflect observable production network state as of September 2026. This act serves as a non-partisan technical exhibit prepared for judicial, regulatory, and public inquiries.

**DIGEST:** SHA-256 VERIFIED

c507c9025f93da0aadaf395c4d8882f25973211c318ee8e9b6f18a5b3755e050

**ARCHIVE:** OPEN LEGAL RECORD

ISSUED & SIGNED BY: **phishdestroy.io** · Forensic Research Coalition

LEGAL STATUS: **ALL RIGHTS SURRENDERED TO HUMANITY** · CC0 UNIVERSAL PUBLIC DOMAIN