# 《法证审计法》：Valve Steam 网站 API 生态系统与商业应用（参考编号：VAL-REG-2026-09）

Canonical: https://phishdestroy.io/steam_dossier/zh/regulatory_act_print
Language: zh
Author: phishdestroy.io Forensic Research Coalition
Publisher: PhishDestroy

phishdestroy.io Valve Steam Web API 生态系统审计 // 参考编号：VAL-REG-2026-09 // 所有权利均归全人类所有

[打开 PDF ↗](https://phishdestroy.io/steam_dossier/exports/pages/zh/regulatory_act_print.pdf?v=print-20260929-v5) [返回档案](https://phishdestroy.io/steam_dossier/index)

phishdestroy.io · 法医研究联盟 · 通用公共记录

**案卷：** VAL-REG-2026-09-EVID

**来源：** phishdestroy.io/steam_dossier/

**权利：** 所有权利均归属于全人类

# 《法证审计法》及监管附件

Valve Steam 生态系统中的系统化第三方 API 资源配置、自动化绕过架构及合同条款不强制执行

签发域 **phishdestroy.io**

目标平台 **Valve Steam / Steamworks简体中文（大陆）**

主要授权向量 **Steam OpenID 2.0 / 网站 API**

法律声明 **《人类的一切权利》（CC0）**

第一部分：行政备忘录与事实认定 参考编号：MEMO-SUMMARY-01

本文件是一份正式的法证审计报告，旨在审查Valve公司公布的商业条款、其技术认证端点以及观察到的第三方商业平台之间的运营关联。本次审计通过被动、未经身份验证的网络观察、RDAP注册验证以及公开的Link Filter遥测数据进行。

**事实核心：** 实证观察表明，Valve 的公开合同声明与其生产基础设施之间存在系统性偏差。 尽管《Steam订阅协议》（SSA）严格禁止未经授权的商业利用（§ 2.G）、自动化机器人/脚本交互（§ 4.C）以及账户转让（§ 1.C），但Valve公司仍持续为至少175家商业实体提供实时、程序化的OpenID身份验证和库存查询基础设施，这些实体产生的二级市场交易量高达数十亿美元。

175

经审计的商业运营商

44

独立域认证主机

26

过滤器-拆分代理对

100%

未实施的《社会保障法》第2.G条/第4.C条

0

强制撤销授权

适用的合同与法律框架

《社会保障法》第2.G条

**禁止商业用途：** 严禁未经Valve公司事先书面授权，将内容和服务用于商业目的。

《社会保障法》第4.C条

**自动化限制：** 严禁任何脚本、交易机器人、宏或非人工控制的系统与Steam的服务和交易市场进行交互。

《社会保障法》第1.C条

**个人使用规定：** 账户仅限个人使用；明令禁止出售、出租、转让或交易 Steam 用户账户。

欧盟《数字服务法》（2022/2065）

**系统性风险评估（第34/35条）：** 超大型在线平台（VLOPs）必须积极发现、评估并缓解因自动化滥用和未经授权的商业利用而产生的系统性风险。

第二节：附件账簿 A — 已记录的链接过滤器拆分对（26 路由） 参考编号：EX-SPLIT-LEDGER

**对分域规避机制的法医分析：** 在Valve的Steam链接过滤系统下（`steamcommunity.com/linkfilter/?url=...`)，当最终用户点击一个指向被标记的赌博或黑市平台的链接时，Valve 会显示一条醒目的警告（*“链接已被屏蔽！……被标记为可能具有恶意”*)。然而，取证路由追踪显示，26 商业平台运行在 **分域架构**：虽然主要商业域名在“链接过滤器”中被标记为“被封锁”，但托管 Valve 的 OpenID 响应端点的次要域名却被标记为“安全”。Valve 的 OpenID 服务器会不间断地接受来自这些代理主机的身份验证请求，从而消除用户安全警告，同时继续处理登录操作。

| # | 主要商业域名 | 主过滤器 | OpenID 身份验证代理域名 | 身份验证过滤器 | RDAP 已注册 | 捕获依据 |
| --- | --- | --- | --- | --- | --- | --- |
| 01 | rollbit.com | BLOCKED | rbsnin.com | CLEAN | 2026-09-18 | PASSIVE_CAPTURE |
| 02 | skin.club | BLOCKED | sc-auth.net | CLEAN | 2019-04-02 | PASSIVE_CAPTURE |
| 03 | howl.gg | BLOCKED | howl.uno | CLEAN | 2026-08-11 | PASSIVE_CAPTURE |
| 04 | duelbits.com | BLOCKED | switchflips.com | CLEAN | 2020-04-21 | PASSIVE_CAPTURE |
| 05 | csgofast.com | BLOCKED | steam-login.authtofast.com | CLEAN | 2026-06-30 | PASSIVE_CAPTURE |
| 06 | farmskins.com | BLOCKED | steam.kobal.cc | CLEAN | 2017-01-07 | PASSIVE_CAPTURE |
| 07 | cobaltlab.tech | BLOCKED | cobaltauth.com | CLEAN | 2025-01-07 | PASSIVE_CAPTURE |
| 08 | csgo.net | BLOCKED | cn2.easylot.net | CLEAN | 2016-09-03 | PASSIVE_CAPTURE |
| 09 | ggdrop.com | BLOCKED | ggauth.com | CLEAN | 2023-05-03 | PASSIVE_CAPTURE |
| 10 | rustchance.com | BLOCKED | hgfuihd.com | CLEAN | 2019-01-27 | PASSIVE_CAPTURE |
| 11 | skin.fans | BLOCKED | auth.skinfans.com | CLEAN | 2018-07-16 | PASSIVE_CAPTURE |
| 12 | skinport.com | BLOCKED | skinport.app | CLEAN | 2020-06-20 | PASSIVE_CAPTURE |
| 13 | skins.cash | BLOCKED | skinscash.live | CLEAN | 2019-12-05 | PASSIVE_CAPTURE |
| 14 | tf2hunt.com | BLOCKED | rstspcl.com | CLEAN | 2020-08-08 | PASSIVE_CAPTURE |
| 15 | daddyskins.com | BLOCKED | go-go-daddy.com | CLEAN | 2019-01-26 | PASSIVE_CAPTURE |
| 16 | key-drop.com | BLOCKED | kdauth.com | CLEAN | 2026-05-13 | PASSIVE_CAPTURE |
| 17 | clash.gg | BLOCKED | clggauth.com | CLEAN | 2024-09-16 | PASSIVE_CAPTURE |
| 18 | c5game.com | BLOCKED | www.imbastar.com | CLEAN | 2016-02-27 | PASSIVE_CAPTURE |
| 19 | swap.gg | BLOCKED | swapauth.com | CLEAN | 2018-10-06 | PASSIVE_CAPTURE |
| 20 | shadowpay.com | BLOCKED | thelogins.com | CLEAN | 2018-01-22 | PASSIVE_CAPTURE |
| 21 | csgocases.com | BLOCKED | log-1n.com | CLEAN | 2017-11-27 | PASSIVE_CAPTURE |
| 22 | csgogem.com | BLOCKED | api.csgem.com | CLEAN | 2014-03-08 | PASSIVE_CAPTURE |
| 23 | gamdom.com | BLOCKED | login.gambldom.com | CLEAN | 2017-09-24 | PASSIVE_CAPTURE |
| 24 | 12cs.fail | BLOCKED | fail.games | CLEAN | 2021-08-24 | PASSIVE_CAPTURE |
| 25 | skinsnipe.com | BLOCKED | pricing.tradeupspy.com | CLEAN | 2020-03-11 | PASSIVE_CAPTURE |
| 26 | csgobig.com | BLOCKED | letmeinbig.com | CLEAN | 2023-01-20 | PASSIVE_CAPTURE |

* 注：针对 2026-09-19 和 2026-09-21. 上未经验证的 Steam Link Filter 端点执行的被动检查，其原始 HTTP 响应正文和 SHA-256 摘要已保存在存储库数据集（steam_tos_assets/linkfilter-2026-09-22.json）中。

第三部分：B类展品登记簿——175经审计商业实体的全面普查 参考编号：EX-175-MASTER-CENSUS

以下登记册详细列出了审计数据库中所有已通过积极验证的175第三方商业平台。每条记录包含实体名称、主要商业域名、观察到的Steam OpenID认证路径、活动分类、合同违约映射（SSA § 2.G、SSA § 4.C、SSA § 1.C）以及源数据集中记录的“行动”字段。 标签“参见带日期的证据”旨在引导读者查阅支持性记录；它并不意味着Valve未采取任何行动。若“行动”字段缺失，则报告为“未确定”。

| 展品 | 实体名称与主域名 | 已观察到的身份验证路由/代理 | 分类 | 违约 | Valve 动作 |
| --- | --- | --- | --- | --- | --- |
| EX-001 | **CSGORoll** csgoroll.com | www.csgoroll.com DIRECT | Skin Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-002 | **CSGOEmpire** csgoempire.com | csgoempirelogin4.com SPLIT PROXY | Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-003 | **Rollbit** rollbit.com | rbsnin.com SPLIT PROXY | Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-004 | **500 Casino** 500.casino | fivezerozero.co SPLIT PROXY | Licenced Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-005 | **CSGOBig** csgobig.com | csgobig.com DIRECT | Roulette/Slots | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-006 | **CaseDrop** casedrop.com | casedrop.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-007 | **RustReaper** rustreaper.com | rustreaper.com DIRECT | Rust Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-008 | **BanditCamp** banditcamp.com | banditcamp.com DIRECT | Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-009 | **SkinBox** skinbox.com | skinbox.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-010 | **TastyDrop** tastydrop.com | tastydrop.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-011 | **CSGOPolygon** csgopolygon.gg | csgopolygon.gg DIRECT | Roulette Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-012 | **MagicDrop** magicdrop.ru | magicdrop.ru DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-013 | **CSDice** csdice.com | csdice.com DIRECT | Dice Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-014 | **Rustly** rustly.com | rustly.com DIRECT | Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-015 | **SkinOdds** skinodds.com | skinodds.com DIRECT | Upgrader Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-016 | **CSGOWin** csgowin.com | csgowin.com DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-017 | **CSGORun** csgorun.net | csgorun.net DIRECT | Crash Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-018 | **OpenSkins** openskins.com | openskins.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-019 | **RustBet** rustbet.com | rustbet.com DIRECT | Rust Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-020 | **CSGOMagic** csgomagic.com | csgomagic.com DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-021 | **CSGOBounty** csgobounty.com | csgobounty.com DIRECT | Upgrader/Contract | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-022 | **EZSkins** ezskins.com | ezskins.com DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-023 | **RustCases** rustcases.com | rustcases.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-024 | **CSGOReaper** csgoreaper.com | csgoreaper.com DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-025 | **CSGOCases** csgocases.com | csgocases.com DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-026 | **CSGO-Skins** csgo-skins.com | csgo-skins.com DIRECT | Case Upgrader | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-027 | **CSGONet** csgonet.com | csgonet.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-028 | **WTFSkins** wtfskins.com | wtfskins.com DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-029 | **CSGOFast** csgofast.com | steam-login.authtofast.com SPLIT PROXY | Roulette Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-030 | **Duelbits** duelbits.com | switchflips.com SPLIT PROXY | Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-031 | **FlameCases** flamecases.com | flamecases.com DIRECT | Case Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-032 | **Farmskins** farmskins.com | steam.kobal.cc SPLIT PROXY | Case Opener | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-033 | **CSGOLuck** csgoluck.com | csgoluck.com DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-034 | **Gamedom** gamedom.com | gamedom.com DIRECT | Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-035 | **Skin.Club** skin.club | sc-auth.net SPLIT PROXY | Case Battles | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-036 | **DaddySkins** daddyskins.com | daddyskins.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-037 | **Insane.gg** insane.gg | api.insane.gg DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-038 | **Rustix** rustix.gg | rustix.gg DIRECT | Rust Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-039 | **Skins.Club** skins.club | skins.club DIRECT | Skin Upgrade | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-040 | **CSGOHouse** csgohouse.org | csgohouse.org DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-041 | **SkinRave** skinrave.net | skinrave.net DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-042 | **BloodyCase_GG** bloodycase.gg | bloodycase.gg DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-043 | **CSGOClicker** csgoclicker.com | csgoclicker.com DIRECT | Clicker/Upgrade | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-044 | **RustBet_GG** rustbet.gg | rustbet.gg DIRECT | Rust Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-045 | **CS_Drop** cs-drop.com | cs-drop.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-046 | **HellStore** hellstore.net | hellstore.net DIRECT | Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-047 | **RustLoot** rustloot.com | rustloot.com DIRECT | Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-048 | **CSGO_Case** csgo-case.com | csgo-case.com DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-049 | **CS2Skin** cs2skin.com | cs2skin.com DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-050 | **Juice_GG** juice.gg | letmeinjuice.com SPLIT PROXY | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-051 | **GGDrop** ggdrop.com | ggauth.com SPLIT PROXY | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-052 | **CSGOGem** csgogem.com | csgogem.com DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-053 | **Rainbet** rainbet.com | services.rainbet.com DIRECT | Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-054 | **Howl_GG** howl.gg | howl.uno SPLIT PROXY | Skins Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-055 | **Chicken_GG** chicken.gg | chicken.gg DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-056 | **CSGOCasino_GG** csgocasino.gg | api.csgocasino.gg DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-057 | **Hunt_GG** hunt.gg | api.hunt.gg DIRECT | Skins Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-058 | **CSBattle** csbattle.com | csbattle.com DIRECT | Case Battles | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-059 | **SkinRave_GG** skinrave.gg | api.skinrave.gg DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-060 | **CSDouble** csdouble.gg | csdouble.gg DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-061 | **RustChance** rustchance.com | hgfuihd.com SPLIT PROXY | Rust Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-062 | **RustClash** rustclash.com | rustclash.com DIRECT | Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-063 | **CobaltLab** cobaltlab.tech | cobaltauth.com SPLIT PROXY | Rust Automation | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-064 | **Raided_GG** raided.gg | api.raided.gg DIRECT | Rust Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-065 | **RustNeo** rustneo.gg | rustneo.gg DIRECT | Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-066 | **Splits_GG** splits.gg | splits.gg DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-067 | **Upgrader_Pro** upgrader.pro | upgauth.space SPLIT PROXY | Skin Upgrader | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-068 | **SkinFans** skin.fans | auth.skinfans.com SPLIT PROXY | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-069 | **HotPizza** hotpizza.one | hotpizza.one DIRECT | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-070 | **G4Skins** g4skins.com | auth.g4s.to SPLIT PROXY | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-071 | **12CS_Fail** 12cs.fail | 12cs.fail DIRECT | Crash Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-072 | **TF2Royal** tf2royal.com | tf2auth.com SPLIT PROXY | TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-073 | **TF2Easy** www.tf2easy.com | www.tf2easy.com DIRECT | TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-074 | **TF2Hunt** tf2hunt.com | rstspcl.com SPLIT PROXY | TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-075 | **TF2Bet** tf2.bet/coinflip | tf2.bet DIRECT | TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-076 | **TF2Blaze** tf2blaze.com | tf2blaze.com DIRECT | TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-077 | **OpenStars_GG** openstars.gg | openstars.gg DIRECT | Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-078 | **Shuffle_Com** shuffle.com | shuffle.com DIRECT | Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-079 | **Skins.com** skins.com | api.skins.com DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-080 | **White.Market** white.market | white.market DIRECT | P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-081 | **Buff.Market** buff.market | buff.market DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-082 | **Avan.Market** avan.market | avan.market DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-083 | **CS.MONEY** cs.money | auth.dota.trade SPLIT PROXY | Trading Engine | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-084 | **UUSkins** uuskins.com | uuskins.com DIRECT | P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-085 | **YouPin898** youpin898.com | youpin898.com DIRECT | Mass Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-086 | **Moon.Market** moon.market | moon.market DIRECT | P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-087 | **CSFloat** csfloat.com | csgofloat.com SPLIT PROXY | P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-088 | **Skin.Land** skin.land | auth.skin.land DIRECT | Skins Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-089 | **C5Game** c5game.com | c5game.com DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-090 | **HaloSkins** haloskins.com | haloskins.com DIRECT | Skins Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-091 | **Buff.163** buff.163.com | buff.163.com DIRECT | Corporate Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-092 | **Waxpeer** waxpeer.com | waxpeer.com DIRECT | P2P Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-093 | **CS.MONEY Bot** cs.money | auth.dota.trade SPLIT PROXY | Bot Trading | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-094 | **Market.CSGO** market.csgo.com | dota2.net SPLIT PROXY | P2P Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-095 | **Skinport** skinport.com | skinport.app SPLIT PROXY | Regulated Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-096 | **SkinFlow** skinflow.gg | api.skinflow.gg DIRECT | Marketplace/Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-097 | **DMarket** dmarket.com | dmarket.com DIRECT | US Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-098 | **Skin.place** skin.place | api.skin.place DIRECT | Skins Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-099 | **SkinsMonkey** skinsmonkey.com | skinsmonkey.com DIRECT | Instant Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-100 | **SkinBaron** skinbaron.de | skinbaron.com SPLIT PROXY | Corporate Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-101 | **Steam** steamcommunity.com/market | steamcommunity.com/market DIRECT | Official Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-102 | **RustTM** rust.tm | dota2.net SPLIT PROXY | Rust Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-103 | **PirateSwap** pirateswap.com | login.pirateswap.com DIRECT | Instant Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-104 | **Mannco.Store** mannco.store | mannco.store DIRECT | TF2 Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-105 | **SkinSwap** skinswap.com | api.skinswap.com DIRECT | Instant Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-106 | **LootFarm** lootfarm.com | lootfarm.com DIRECT | Trading Platform | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-107 | **Rustskins** rustskins.com | rustskins.com DIRECT | Rust Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-108 | **ExeSkins** exeskins.com | exeskins.com DIRECT | P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-109 | **BalticSkins** balticskins.com | balticskins.com DIRECT | Skins Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-110 | **CS.Trade** cs.trade | cs.trade DIRECT | Instant Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-111 | **RapidSkins** rapidskins.com | api.rapidskins.com DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-112 | **TradeIt** tradeit.gg | connect-tradeit.com SPLIT PROXY | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-113 | **Krakatoa** krakatoa.com | krakatoa.com DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-114 | **ShadowPay** shadowpay.com | shadowpay.com DIRECT | P2P Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-115 | **49skins** 49skins.com | api.49skins.com DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-116 | **SkinVault** skinvault.gg | api.skinvault.gg DIRECT | CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-117 | **Aim Market** aim.market | aim.market DIRECT | Skins Trading | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-118 | **Skinout** skinout.gg | auth.skinout.gg DIRECT | Instant Sell Portal | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-119 | **NTSkins** ntskins.com | ntskins.com DIRECT | Skins Trading | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-120 | **IGXE** igxe.cn | igxe.cn DIRECT | Chinese Powerhouse | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-121 | **Swap.gg** swap.gg | swap.gg DIRECT | Automated Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-122 | **Bitskins** bitskins.com | bitskins.com DIRECT | Cash-out Portal | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-123 | **GamerPay** gamerpay.gg | gamerpay.gg DIRECT | P2P Portal | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-124 | **TF2Mart** tf2mart.com | tf2mart.com DIRECT | TF2 Automation | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-125 | **SkinBid** skinbid.com | skinbid.com DIRECT | Skin Auctions | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-126 | **LootBear** lootbear.com | lootbear.com DIRECT | Skin Rental | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-127 | **Backpack.tf** backpack.tf | backpack.tf DIRECT | TF2 Valuation | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-128 | **Scrap.tf** scrap.tf | scrap.tf DIRECT | TF2 Scrap Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-129 | **Marketplace.tf** marketplace.tf | marketplace.tf DIRECT | TF2 Cashout | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-130 | **STNTrading** stntrading.eu | stntrading.eu DIRECT | TF2 Botnet | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-131 | **Skins.Cash** skins.cash | skinscash.live SPLIT PROXY | Instant Cashout | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-132 | **SkinWallet** skinwallet.com | skinwallet.com DIRECT | Instant Cashout | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-133 | **Dota2Market** dota2market.com | dota2market.com DIRECT | Dota 2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-134 | **CSGO.NET** csgo.net | cn2.easylot.net SPLIT PROXY | Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-135 | **Cybershoke** cybershoke.net | auth.cybershoke.net DIRECT | Community Hub | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-136 | **XPlay_GG** xplay.gg | xplay.gg DIRECT | Server Network | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-137 | **FastCup** fastcup.net | api.fastcup.net DIRECT | Matchmaker Hub | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-138 | **Esportal** esportal.com | esportal.com DIRECT | Matchmaking Portal | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-139 | **GamersClub** gamersclub.com.br | gamersclub.com.br DIRECT | LATAM Hub | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-140 | **Leetify** leetify.com | leetify.com DIRECT | SaaS Analytics | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-141 | **Scope_GG** scope.gg | scope.gg DIRECT | SaaS Analytics | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-142 | **TradeUpSpy** tradeupspy.com | api.tradeupspy.com DIRECT | SaaS Tools | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-143 | **Epidemic_GG** epidemic.gg | epidemic.gg DIRECT | SaaS Tools | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-144 | **CSDeals** cs.deals | api.cs.deals DIRECT | Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-145 | **Pricempire** pricempire.com | pricempire.com DIRECT | SaaS Price DB | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-146 | **CS2Stash** cs2stash.com | cs2stash.com DIRECT | SaaS Index | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-147 | **CSGOSkins** csgoskins.gg | csgoskins.gg DIRECT | SaaS Index | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-148 | **SteamAnalyst** steamanalyst.com | steamanalyst.com DIRECT | SaaS Index | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-149 | **SteamCardExchange** steamcardexchange.net | steamcardexchange.net DIRECT | Trading Exchange | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-150 | **DotaBuff** dotabuff.com | dotabuff.com DIRECT | SaaS Tracker | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-151 | **Tracker_GG** tracker.gg | tracker.gg DIRECT | SaaS Tracker | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-152 | **FSB Market (an anonymized label; the original name is withheld here)** FSB Market | FSB Market DIRECT | Mass Blackmarket | SSA § 2.G, SSA § 4.C, SSA § 1.C | See dated evidence |
| EX-153 | **FunPay** funpay.com | funpay.com DIRECT | Account Exchange | SSA § 2.G, SSA § 4.C, SSA § 1.C | See dated evidence |
| EX-154 | **PlayerAuctions** playerauctions.com | playerauctions.com DIRECT | Grey Market | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-155 | **Eldorado.gg** eldorado.gg | eldorado.gg DIRECT | Account Portal | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-156 | **G2A** g2a.com | g2a.com DIRECT | Mass Key Market | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-157 | **Kinguin** kinguin.net | kinguin.net DIRECT | Mass Key Market | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-158 | **G2G.com** g2g.com | g2g.com DIRECT | Virtual Services | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-159 | **Playerup** playerup.com | playerup.com DIRECT | Account Broker | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-160 | **Z2U.com** z2u.com | www.z2u.com DIRECT | Ready-Account Hub | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-161 | **SmurfHub** smurfhub.net | smurfhub.net DIRECT | Smurf Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-162 | **SmurfAccounts** smurfaccounts.com | smurfaccounts.com DIRECT | Smurf Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-163 | **BuyCSGORank** buycsgorank.com | buycsgorank.com DIRECT | Rank Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-164 | **CSGOSmurfKings** csgosmurfkings.com | csgosmurfkings.com DIRECT | Smurf Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-165 | **SmurfStore_Co** smurfstore.co | smurfstore.co DIRECT | Smurf Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-166 | **SteamLvlUp** steamlvlup.com | steamlvlup.com DIRECT | Card Leveling | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-167 | **SteamLevels** steamlevels.com | steamlevels.com DIRECT | Card Leveling | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-168 | **LevelSteam** levelsteam.com | levelsteam.com DIRECT | Card Leveling | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-169 | **SteamLevelU** steamlevelu.com | steamlevelu.com DIRECT | Card Leveling | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-170 | **EloKing** eloking.com | eloking.com DIRECT | Rank Boosting | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-171 | **Boosteria** boosteria.org | boosteria.org DIRECT | Rank Boosting | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-172 | **Overgear** overgear.com | overgear.com DIRECT | Boosting SaaS | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-173 | **BlazingBoost** blazingboost.com | blazingboost.com DIRECT | Boosting SaaS | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-174 | **Dota2Boost** dota2boost.com | dota2boost.com DIRECT | Rank Boosting | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-175 | **BuyBoost** buyboost.com | buyboost.com DIRECT | Boosting SaaS | SSA § 2.G, SSA § 1.C | See dated evidence |

第四节：技术架构与身份验证机制 参考编号：TECH-ANALYSIS-01

**1. OpenID 中缺乏域名所有权验证 2.0:** Valve 对 OpenID 2.0 协议的实现（`https://steamcommunity.com/openid/login`) 评估了 `openid.return_to` 以及 `openid.realm` 无需开发者事先注册、加密挑战验证或域名所有权验证即可获取相关参数。任何商业运营商均可将用户引导至 Valve 的登录界面，并接收一份经加密签名的身份声明（其中包含 64-格式的 SteamID），该声明会被重定向至任意域名。

**2. 程序化广告库存查询及API密滥用：** 一旦通过 OpenID 确认用户身份验证，运营商便会向公共和合作伙伴的 Web API 端点发起查询（`IEconItems_730/GetPlayerItems`) 以实时对库存资产进行索引。自动化交易网络利用程序化会话令牌来提交、查询和接受点对点（P2P）交易要约，这直接违反了《SSA》第4.C条关于禁止非人类交互的规定。

**3. 链路过滤不对称：** 面向消费者的域名警告与功能完好的身份验证端点并存，这造成了监管上的矛盾：Valve 的安全遥测系统将这些运营商归类为“潜在恶意”对象，但 Valve 的身份验证基础设施仍在为其用户群提供身份验证服务。

证据方法与证据保管链声明

本文件基于未经身份验证的网络捕获数据、RDAP历史注册表查询结果以及经过验证的加密哈希清单生成。未对任何用户登录凭据进行泄露测试或处理。所有发现均反映截至9月2026.的生产网络可观察状态。本文件作为一份无党派的技术证据，供司法、监管及公众调查使用。

**摘要：** SHA-256已验证

c507c9025f93da0aadaf395c4d8882f25973211c318ee8e9b6f18a5b3755e050

**存档：** 公开法律记录

签发并签署人： **phishdestroy.io** · 法医研究联盟

法律地位： **所有权利均归属于全人类** · CC0 通用公有领域