{
  "schema": "phishdestroy.text-export.v1",
  "object_type": "Published page text and corresponding PDF digest",
  "id": "regulatory_act_print.html",
  "language": "en",
  "title": "FORENSIC AUDIT ACT: Valve Steam Web API Ecosystem & Commercial Exploitation (Ref: VAL-REG-2026-09)",
  "source_url": "https://phishdestroy.io/steam_dossier/regulatory_act_print",
  "source_html_sha256": "1710735efee586335cb0dd0c56460bed6a223c507d3bb00b31561a6a51f05015",
  "exported_at": "2026-09-30T21:13:35.526Z",
  "scope": "Print reading edition. Research prose is retained; raster images and identified visual catalogues are replaced by source links. See editorial_scope for exact omissions. Support archive exports retain the core discussion and link the full gallery.",
  "editorial_scope": {
    "policy": "Research prose, conclusions, methodological limits and analytical tables retained without paragraph truncation. Named catalogues and visual galleries are linked; raster images are not embedded.",
    "linked_sections": [],
    "raster_images_replaced": 0
  },
  "license": {
    "identifier": "CC0-1.0",
    "url": "https://creativecommons.org/publicdomain/zero/1.0/",
    "rights_statement_url": "https://phishdestroy.io/steam_dossier/steam_tos_assets/license-rights.json",
    "rights_statement_sha256": "80d67354f8e5efd65b03696be950fb0f95c188d0089b1604281d0a4daff3f4cb",
    "application": "Authored research materials; third-party materials retain their own rights."
  },
  "pdf": {
    "filename": "regulatory_act_print.pdf",
    "url": "https://phishdestroy.io/steam_dossier/exports/pages/en/regulatory_act_print.pdf?v=print-20260930-links-v6",
    "sha256": "18450a02c56db0b70b0d9d7f43f99b006457b90a685c530120c8693ba7df6448",
    "bytes": 183663,
    "pages": 13
  },
  "integrity": {
    "signed_object": "regulatory_act_print.content.json",
    "scope": "The exact UTF-8 bytes of this JSON file. It contains the published text and identifies the corresponding PDF by SHA-256. It is distinct from the separately signed rights statement.",
    "signature_file": "regulatory_act_print.content.json.asc",
    "digest_file": "regulatory_act_print.content.json.sha256",
    "format": "ASCII-armored detached OpenPGP",
    "signing_key_fingerprint": "129FC7F39C40C69D2EF3C329BFCF9E8DD295EE01",
    "public_key": "https://phishdestroy.io/.well-known/pgp-key.txt",
    "verify": [
      "gpg --import pgp-key.txt",
      "gpg --verify regulatory_act_print.content.json.asc regulatory_act_print.content.json",
      "sha256sum -c regulatory_act_print.content.json.sha256"
    ]
  },
  "content": {
    "text": "phishdestroy.io · Forensic Research Coalition · Universal Public Record\nDOCKET: VAL-REG-2026-09-EVID\nPROVENANCE: phishdestroy.io/steam_dossier/\nRIGHTS: ALL RIGHTS SURRENDERED TO HUMANITY\nForensic Audit Act & Regulatory Exhibit\nSystematic Third-Party API Provisioning, Automated Bypass Architecture & Contractual Non-Enforcement in the Valve Steam Ecosystem\nIssuing Domainphishdestroy.io\nTarget PlatformValve Steam / Steamworks\nPrimary Auth VectorSteam OpenID 2.0 / Web API\nLegal DedicationAll Rights to Humanity (CC0)\nSection I: Executive Memorandum & Factual FindingsREF: MEMO-SUMMARY-01\n\nThis document constitutes a formal forensic audit act examining the operational intersection between Valve Corporation's published commercial terms, its technical authentication endpoints, and observed third-party commercial platforms. The audit was conducted using passive, unauthenticated network observation, RDAP registration verification, and public Link Filter telemetry.\n\nFactual Core: Empirical observation establishes a systematic divergence between Valve's public contractual representations and its production infrastructure. While the Steam Subscriber Agreement (SSA) strictly prohibits unauthorized commercial exploitation (§ 2.G), automated bot/script interaction (§ 4.C), and account transfer (§ 1.C), Valve Corporation continues to provide live, programmatic OpenID authentication and inventory query infrastructure to at least 175 commercial entities generating multi-billion dollar secondary transaction volumes.\n\n175\nAudited Commercial Operators\n44\nSeparate-Domain Auth Hosts\n26\nFilter-Split Proxy Pairs\n100%\nUnenforced SSA § 2.G / § 4.C\n0\nEnforced Auth Revocations\nApplicable Contractual & Statutory Framework\nSSA § 2.G\nCommercial Use Prohibition: Expressly forbids exploiting Content and Services for commercial purposes without prior written authorization from Valve Corporation.\nSSA § 4.C\nAutomation Restriction: Strictly prohibits scripts, trading bots, macros, or non-human-controlled systems interacting with Steam services and markets.\nSSA § 1.C\nPersonal Use Mandate: Restricts accounts to personal use; expressly forbids selling, leasing, transferring, or trading Steam user accounts.\nEU DSA (2022/2065)\nSystemic Risk Assessment (Art. 34/35): Very Large Online Platforms (VLOPs) must actively detect, assess, and mitigate systemic risks stemming from automated misuse and unauthorized commercial exploitation.\nSection II: Exhibit Ledger A — Documented Link Filter Split Pairs (26 Routes)REF: EX-SPLIT-LEDGER\n\nForensic Analysis of Split-Domain Evasion: Under Valve's Steam Link Filter system (steamcommunity.com/linkfilter/?url=...), when an end-user clicks a link leading to a flagged gambling or black-market platform, Valve displays a prominent warning (\"Link Blocked! ... flagged as potentially malicious\"). However, forensic route tracing reveals 26 commercial platforms operating on a split-domain architecture: while the primary commercial domain is BLOCKED on the Link Filter, the secondary domain hosting Valve's OpenID return endpoint is marked CLEAN. Valve's OpenID servers accept authentication requests from these proxy hosts without interruption, neutralizing the consumer safety warning while continuing to process logins.\n\n#\tPrimary Commercial Domain\tMain Filter\tOpenID Auth Proxy Domain\tAuth Filter\tRDAP Registered\tCapture Basis\n01\trollbit.com\tBLOCKED\trbsnin.com\tCLEAN\t2026-09-18\tPASSIVE_CAPTURE\n02\tskin.club\tBLOCKED\tsc-auth.net\tCLEAN\t2019-04-02\tPASSIVE_CAPTURE\n03\thowl.gg\tBLOCKED\thowl.uno\tCLEAN\t2026-08-11\tPASSIVE_CAPTURE\n04\tduelbits.com\tBLOCKED\tswitchflips.com\tCLEAN\t2020-04-21\tPASSIVE_CAPTURE\n05\tcsgofast.com\tBLOCKED\tsteam-login.authtofast.com\tCLEAN\t2026-06-30\tPASSIVE_CAPTURE\n06\tfarmskins.com\tBLOCKED\tsteam.kobal.cc\tCLEAN\t2017-01-07\tPASSIVE_CAPTURE\n07\tcobaltlab.tech\tBLOCKED\tcobaltauth.com\tCLEAN\t2025-01-07\tPASSIVE_CAPTURE\n08\tcsgo.net\tBLOCKED\tcn2.easylot.net\tCLEAN\t2016-09-03\tPASSIVE_CAPTURE\n09\tggdrop.com\tBLOCKED\tggauth.com\tCLEAN\t2023-05-03\tPASSIVE_CAPTURE\n10\trustchance.com\tBLOCKED\thgfuihd.com\tCLEAN\t2019-01-27\tPASSIVE_CAPTURE\n11\tskin.fans\tBLOCKED\tauth.skinfans.com\tCLEAN\t2018-07-16\tPASSIVE_CAPTURE\n12\tskinport.com\tBLOCKED\tskinport.app\tCLEAN\t2020-06-20\tPASSIVE_CAPTURE\n13\tskins.cash\tBLOCKED\tskinscash.live\tCLEAN\t2019-12-05\tPASSIVE_CAPTURE\n14\ttf2hunt.com\tBLOCKED\trstspcl.com\tCLEAN\t2020-08-08\tPASSIVE_CAPTURE\n15\tdaddyskins.com\tBLOCKED\tgo-go-daddy.com\tCLEAN\t2019-01-26\tPASSIVE_CAPTURE\n16\tkey-drop.com\tBLOCKED\tkdauth.com\tCLEAN\t2026-05-13\tPASSIVE_CAPTURE\n17\tclash.gg\tBLOCKED\tclggauth.com\tCLEAN\t2024-09-16\tPASSIVE_CAPTURE\n18\tc5game.com\tBLOCKED\twww.imbastar.com\tCLEAN\t2016-02-27\tPASSIVE_CAPTURE\n19\tswap.gg\tBLOCKED\tswapauth.com\tCLEAN\t2018-10-06\tPASSIVE_CAPTURE\n20\tshadowpay.com\tBLOCKED\tthelogins.com\tCLEAN\t2018-01-22\tPASSIVE_CAPTURE\n21\tcsgocases.com\tBLOCKED\tlog-1n.com\tCLEAN\t2017-11-27\tPASSIVE_CAPTURE\n22\tcsgogem.com\tBLOCKED\tapi.csgem.com\tCLEAN\t2014-03-08\tPASSIVE_CAPTURE\n23\tgamdom.com\tBLOCKED\tlogin.gambldom.com\tCLEAN\t2017-09-24\tPASSIVE_CAPTURE\n24\t12cs.fail\tBLOCKED\tfail.games\tCLEAN\t2021-08-24\tPASSIVE_CAPTURE\n25\tskinsnipe.com\tBLOCKED\tpricing.tradeupspy.com\tCLEAN\t2020-03-11\tPASSIVE_CAPTURE\n26\tcsgobig.com\tBLOCKED\tletmeinbig.com\tCLEAN\t2023-01-20\tPASSIVE_CAPTURE\n\n* Note: Passive checks performed against unauthenticated Steam Link Filter endpoints on 2026-09-19 and 2026-09-21. Raw HTTP response bodies and SHA-256 digests preserved in repository dataset (steam_tos_assets/linkfilter-2026-09-22.json).\n\nSection III: Exhibit Ledger B — Comprehensive Census of 175 Audited Commercial EntitiesREF: EX-175-MASTER-CENSUS\n\nThe following register details all 175 third-party commercial platforms actively verified in the audit database. Each record indicates the entity name, primary commercial domain, observed Steam OpenID authentication route, activity classification, contractual breach mappings (SSA § 2.G, SSA § 4.C, SSA § 1.C), and the action field recorded in the source dataset. The label \"See dated evidence\" refers the reader to supporting records; it does not establish that Valve took no action. An absent action field is reported as not established.\n\nExhibit\tEntity Name & Main Domain\tObserved Auth Route / Proxy\tClassification\tContractual Breach\tValve Action\nEX-001\tCSGORoll\ncsgoroll.com\n\t\nwww.csgoroll.com\nDIRECT\n\tSkin Gambling\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-002\tCSGOEmpire\ncsgoempire.com\n\t\ncsgoempirelogin4.com\nSPLIT PROXY\n\tCasino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-003\tRollbit\nrollbit.com\n\t\nrbsnin.com\nSPLIT PROXY\n\tCrypto Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-004\t500 Casino\n500.casino\n\t\nfivezerozero.co\nSPLIT PROXY\n\tLicenced Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-005\tCSGOBig\ncsgobig.com\n\t\ncsgobig.com\nDIRECT\n\tRoulette/Slots\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-006\tCaseDrop\ncasedrop.com\n\t\ncasedrop.com\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-007\tRustReaper\nrustreaper.com\n\t\nrustreaper.com\nDIRECT\n\tRust Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-008\tBanditCamp\nbanditcamp.com\n\t\nbanditcamp.com\nDIRECT\n\tRust Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-009\tSkinBox\nskinbox.com\n\t\nskinbox.com\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-010\tTastyDrop\ntastydrop.com\n\t\ntastydrop.com\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-011\tCSGOPolygon\ncsgopolygon.gg\n\t\ncsgopolygon.gg\nDIRECT\n\tRoulette Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-012\tMagicDrop\nmagicdrop.ru\n\t\nmagicdrop.ru\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-013\tCSDice\ncsdice.com\n\t\ncsdice.com\nDIRECT\n\tDice Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-014\tRustly\nrustly.com\n\t\nrustly.com\nDIRECT\n\tRust Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-015\tSkinOdds\nskinodds.com\n\t\nskinodds.com\nDIRECT\n\tUpgrader Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-016\tCSGOWin\ncsgowin.com\n\t\ncsgowin.com\nDIRECT\n\tSkin Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-017\tCSGORun\ncsgorun.net\n\t\ncsgorun.net\nDIRECT\n\tCrash Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-018\tOpenSkins\nopenskins.com\n\t\nopenskins.com\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-019\tRustBet\nrustbet.com\n\t\nrustbet.com\nDIRECT\n\tRust Gambling\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-020\tCSGOMagic\ncsgomagic.com\n\t\ncsgomagic.com\nDIRECT\n\tSkin Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-021\tCSGOBounty\ncsgobounty.com\n\t\ncsgobounty.com\nDIRECT\n\tUpgrader/Contract\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-022\tEZSkins\nezskins.com\n\t\nezskins.com\nDIRECT\n\tSkin Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-023\tRustCases\nrustcases.com\n\t\nrustcases.com\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-024\tCSGOReaper\ncsgoreaper.com\n\t\ncsgoreaper.com\nDIRECT\n\tSkin Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-025\tCSGOCases\ncsgocases.com\n\t\ncsgocases.com\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-026\tCSGO-Skins\ncsgo-skins.com\n\t\ncsgo-skins.com\nDIRECT\n\tCase Upgrader\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-027\tCSGONet\ncsgonet.com\n\t\ncsgonet.com\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-028\tWTFSkins\nwtfskins.com\n\t\nwtfskins.com\nDIRECT\n\tSkin Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-029\tCSGOFast\ncsgofast.com\n\t\nsteam-login.authtofast.com\nSPLIT PROXY\n\tRoulette Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-030\tDuelbits\nduelbits.com\n\t\nswitchflips.com\nSPLIT PROXY\n\tCrypto Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-031\tFlameCases\nflamecases.com\n\t\nflamecases.com\nDIRECT\n\tCase Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-032\tFarmskins\nfarmskins.com\n\t\nsteam.kobal.cc\nSPLIT PROXY\n\tCase Opener\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-033\tCSGOLuck\ncsgoluck.com\n\t\ncsgoluck.com\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-034\tGamedom\ngamedom.com\n\t\ngamedom.com\nDIRECT\n\tCrypto Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-035\tSkin.Club\nskin.club\n\t\nsc-auth.net\nSPLIT PROXY\n\tCase Battles\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-036\tDaddySkins\ndaddyskins.com\n\t\ndaddyskins.com\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-037\tInsane.gg\ninsane.gg\n\t\napi.insane.gg\nDIRECT\n\tSkin Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-038\tRustix\nrustix.gg\n\t\nrustix.gg\nDIRECT\n\tRust Gambling\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-039\tSkins.Club\nskins.club\n\t\nskins.club\nDIRECT\n\tSkin Upgrade\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-040\tCSGOHouse\ncsgohouse.org\n\t\ncsgohouse.org\nDIRECT\n\tSkin Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-041\tSkinRave\nskinrave.net\n\t\nskinrave.net\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-042\tBloodyCase_GG\nbloodycase.gg\n\t\nbloodycase.gg\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-043\tCSGOClicker\ncsgoclicker.com\n\t\ncsgoclicker.com\nDIRECT\n\tClicker/Upgrade\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-044\tRustBet_GG\nrustbet.gg\n\t\nrustbet.gg\nDIRECT\n\tRust Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-045\tCS_Drop\ncs-drop.com\n\t\ncs-drop.com\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-046\tHellStore\nhellstore.net\n\t\nhellstore.net\nDIRECT\n\tSkin Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-047\tRustLoot\nrustloot.com\n\t\nrustloot.com\nDIRECT\n\tRust Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-048\tCSGO_Case\ncsgo-case.com\n\t\ncsgo-case.com\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-049\tCS2Skin\ncs2skin.com\n\t\ncs2skin.com\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-050\tJuice_GG\njuice.gg\n\t\nletmeinjuice.com\nSPLIT PROXY\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-051\tGGDrop\nggdrop.com\n\t\nggauth.com\nSPLIT PROXY\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-052\tCSGOGem\ncsgogem.com\n\t\ncsgogem.com\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-053\tRainbet\nrainbet.com\n\t\nservices.rainbet.com\nDIRECT\n\tCrypto Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-054\tHowl_GG\nhowl.gg\n\t\nhowl.uno\nSPLIT PROXY\n\tSkins Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-055\tChicken_GG\nchicken.gg\n\t\nchicken.gg\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-056\tCSGOCasino_GG\ncsgocasino.gg\n\t\napi.csgocasino.gg\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-057\tHunt_GG\nhunt.gg\n\t\napi.hunt.gg\nDIRECT\n\tSkins Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-058\tCSBattle\ncsbattle.com\n\t\ncsbattle.com\nDIRECT\n\tCase Battles\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-059\tSkinRave_GG\nskinrave.gg\n\t\napi.skinrave.gg\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-060\tCSDouble\ncsdouble.gg\n\t\ncsdouble.gg\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-061\tRustChance\nrustchance.com\n\t\nhgfuihd.com\nSPLIT PROXY\n\tRust Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-062\tRustClash\nrustclash.com\n\t\nrustclash.com\nDIRECT\n\tRust Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-063\tCobaltLab\ncobaltlab.tech\n\t\ncobaltauth.com\nSPLIT PROXY\n\tRust Automation\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-064\tRaided_GG\nraided.gg\n\t\napi.raided.gg\nDIRECT\n\tRust Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-065\tRustNeo\nrustneo.gg\n\t\nrustneo.gg\nDIRECT\n\tRust Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-066\tSplits_GG\nsplits.gg\n\t\nsplits.gg\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-067\tUpgrader_Pro\nupgrader.pro\n\t\nupgauth.space\nSPLIT PROXY\n\tSkin Upgrader\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-068\tSkinFans\nskin.fans\n\t\nauth.skinfans.com\nSPLIT PROXY\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-069\tHotPizza\nhotpizza.one\n\t\nhotpizza.one\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-070\tG4Skins\ng4skins.com\n\t\nauth.g4s.to\nSPLIT PROXY\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-071\t12CS_Fail\n12cs.fail\n\t\n12cs.fail\nDIRECT\n\tCrash Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-072\tTF2Royal\ntf2royal.com\n\t\ntf2auth.com\nSPLIT PROXY\n\tTF2 Gambling\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-073\tTF2Easy\nwww.tf2easy.com\n\t\nwww.tf2easy.com\nDIRECT\n\tTF2 Gambling\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-074\tTF2Hunt\ntf2hunt.com\n\t\nrstspcl.com\nSPLIT PROXY\n\tTF2 Gambling\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-075\tTF2Bet\ntf2.bet/coinflip\n\t\ntf2.bet\nDIRECT\n\tTF2 Gambling\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-076\tTF2Blaze\ntf2blaze.com\n\t\ntf2blaze.com\nDIRECT\n\tTF2 Gambling\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-077\tOpenStars_GG\nopenstars.gg\n\t\nopenstars.gg\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-078\tShuffle_Com\nshuffle.com\n\t\nshuffle.com\nDIRECT\n\tCrypto Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-079\tSkins.com\nskins.com\n\t\napi.skins.com\nDIRECT\n\tCS2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-080\tWhite.Market\nwhite.market\n\t\nwhite.market\nDIRECT\n\tP2P Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-081\tBuff.Market\nbuff.market\n\t\nbuff.market\nDIRECT\n\tCS2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-082\tAvan.Market\navan.market\n\t\navan.market\nDIRECT\n\tCS2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-083\tCS.MONEY\ncs.money\n\t\nauth.dota.trade\nSPLIT PROXY\n\tTrading Engine\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-084\tUUSkins\nuuskins.com\n\t\nuuskins.com\nDIRECT\n\tP2P Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-085\tYouPin898\nyoupin898.com\n\t\nyoupin898.com\nDIRECT\n\tMass Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-086\tMoon.Market\nmoon.market\n\t\nmoon.market\nDIRECT\n\tP2P Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-087\tCSFloat\ncsfloat.com\n\t\ncsgofloat.com\nSPLIT PROXY\n\tP2P Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-088\tSkin.Land\nskin.land\n\t\nauth.skin.land\nDIRECT\n\tSkins Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-089\tC5Game\nc5game.com\n\t\nc5game.com\nDIRECT\n\tCS2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-090\tHaloSkins\nhaloskins.com\n\t\nhaloskins.com\nDIRECT\n\tSkins Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-091\tBuff.163\nbuff.163.com\n\t\nbuff.163.com\nDIRECT\n\tCorporate Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-092\tWaxpeer\nwaxpeer.com\n\t\nwaxpeer.com\nDIRECT\n\tP2P Marketplace\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-093\tCS.MONEY Bot\ncs.money\n\t\nauth.dota.trade\nSPLIT PROXY\n\tBot Trading\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-094\tMarket.CSGO\nmarket.csgo.com\n\t\ndota2.net\nSPLIT PROXY\n\tP2P Marketplace\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-095\tSkinport\nskinport.com\n\t\nskinport.app\nSPLIT PROXY\n\tRegulated Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-096\tSkinFlow\nskinflow.gg\n\t\napi.skinflow.gg\nDIRECT\n\tMarketplace/Swap\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-097\tDMarket\ndmarket.com\n\t\ndmarket.com\nDIRECT\n\tUS Marketplace\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-098\tSkin.place\nskin.place\n\t\napi.skin.place\nDIRECT\n\tSkins Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-099\tSkinsMonkey\nskinsmonkey.com\n\t\nskinsmonkey.com\nDIRECT\n\tInstant Swap\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-100\tSkinBaron\nskinbaron.de\n\t\nskinbaron.com\nSPLIT PROXY\n\tCorporate Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-101\tSteam\nsteamcommunity.com/market\n\t\nsteamcommunity.com/market\nDIRECT\n\tOfficial Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-102\tRustTM\nrust.tm\n\t\ndota2.net\nSPLIT PROXY\n\tRust Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-103\tPirateSwap\npirateswap.com\n\t\nlogin.pirateswap.com\nDIRECT\n\tInstant Swap\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-104\tMannco.Store\nmannco.store\n\t\nmannco.store\nDIRECT\n\tTF2 Marketplace\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-105\tSkinSwap\nskinswap.com\n\t\napi.skinswap.com\nDIRECT\n\tInstant Swap\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-106\tLootFarm\nlootfarm.com\n\t\nlootfarm.com\nDIRECT\n\tTrading Platform\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-107\tRustskins\nrustskins.com\n\t\nrustskins.com\nDIRECT\n\tRust Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-108\tExeSkins\nexeskins.com\n\t\nexeskins.com\nDIRECT\n\tP2P Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-109\tBalticSkins\nbalticskins.com\n\t\nbalticskins.com\nDIRECT\n\tSkins Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-110\tCS.Trade\ncs.trade\n\t\ncs.trade\nDIRECT\n\tInstant Swap\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-111\tRapidSkins\nrapidskins.com\n\t\napi.rapidskins.com\nDIRECT\n\tCS2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-112\tTradeIt\ntradeit.gg\n\t\nconnect-tradeit.com\nSPLIT PROXY\n\tCS2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-113\tKrakatoa\nkrakatoa.com\n\t\nkrakatoa.com\nDIRECT\n\tCS2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-114\tShadowPay\nshadowpay.com\n\t\nshadowpay.com\nDIRECT\n\tP2P Marketplace\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-115\t49skins\n49skins.com\n\t\napi.49skins.com\nDIRECT\n\tCS2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-116\tSkinVault\nskinvault.gg\n\t\napi.skinvault.gg\nDIRECT\n\tCS2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-117\tAim Market\naim.market\n\t\naim.market\nDIRECT\n\tSkins Trading\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-118\tSkinout\nskinout.gg\n\t\nauth.skinout.gg\nDIRECT\n\tInstant Sell Portal\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-119\tNTSkins\nntskins.com\n\t\nntskins.com\nDIRECT\n\tSkins Trading\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-120\tIGXE\nigxe.cn\n\t\nigxe.cn\nDIRECT\n\tChinese Powerhouse\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-121\tSwap.gg\nswap.gg\n\t\nswap.gg\nDIRECT\n\tAutomated Swap\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-122\tBitskins\nbitskins.com\n\t\nbitskins.com\nDIRECT\n\tCash-out Portal\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-123\tGamerPay\ngamerpay.gg\n\t\ngamerpay.gg\nDIRECT\n\tP2P Portal\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-124\tTF2Mart\ntf2mart.com\n\t\ntf2mart.com\nDIRECT\n\tTF2 Automation\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-125\tSkinBid\nskinbid.com\n\t\nskinbid.com\nDIRECT\n\tSkin Auctions\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-126\tLootBear\nlootbear.com\n\t\nlootbear.com\nDIRECT\n\tSkin Rental\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-127\tBackpack.tf\nbackpack.tf\n\t\nbackpack.tf\nDIRECT\n\tTF2 Valuation\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-128\tScrap.tf\nscrap.tf\n\t\nscrap.tf\nDIRECT\n\tTF2 Scrap Swap\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-129\tMarketplace.tf\nmarketplace.tf\n\t\nmarketplace.tf\nDIRECT\n\tTF2 Cashout\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-130\tSTNTrading\nstntrading.eu\n\t\nstntrading.eu\nDIRECT\n\tTF2 Botnet\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-131\tSkins.Cash\nskins.cash\n\t\nskinscash.live\nSPLIT PROXY\n\tInstant Cashout\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-132\tSkinWallet\nskinwallet.com\n\t\nskinwallet.com\nDIRECT\n\tInstant Cashout\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-133\tDota2Market\ndota2market.com\n\t\ndota2market.com\nDIRECT\n\tDota 2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-134\tCSGO.NET\ncsgo.net\n\t\ncn2.easylot.net\nSPLIT PROXY\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-135\tCybershoke\ncybershoke.net\n\t\nauth.cybershoke.net\nDIRECT\n\tCommunity Hub\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-136\tXPlay_GG\nxplay.gg\n\t\nxplay.gg\nDIRECT\n\tServer Network\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-137\tFastCup\nfastcup.net\n\t\napi.fastcup.net\nDIRECT\n\tMatchmaker Hub\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-138\tEsportal\nesportal.com\n\t\nesportal.com\nDIRECT\n\tMatchmaking Portal\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-139\tGamersClub\ngamersclub.com.br\n\t\ngamersclub.com.br\nDIRECT\n\tLATAM Hub\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-140\tLeetify\nleetify.com\n\t\nleetify.com\nDIRECT\n\tSaaS Analytics\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-141\tScope_GG\nscope.gg\n\t\nscope.gg\nDIRECT\n\tSaaS Analytics\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-142\tTradeUpSpy\ntradeupspy.com\n\t\napi.tradeupspy.com\nDIRECT\n\tSaaS Tools\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-143\tEpidemic_GG\nepidemic.gg\n\t\nepidemic.gg\nDIRECT\n\tSaaS Tools\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-144\tCSDeals\ncs.deals\n\t\napi.cs.deals\nDIRECT\n\tMarketplace\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-145\tPricempire\npricempire.com\n\t\npricempire.com\nDIRECT\n\tSaaS Price DB\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-146\tCS2Stash\ncs2stash.com\n\t\ncs2stash.com\nDIRECT\n\tSaaS Index\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-147\tCSGOSkins\ncsgoskins.gg\n\t\ncsgoskins.gg\nDIRECT\n\tSaaS Index\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-148\tSteamAnalyst\nsteamanalyst.com\n\t\nsteamanalyst.com\nDIRECT\n\tSaaS Index\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-149\tSteamCardExchange\nsteamcardexchange.net\n\t\nsteamcardexchange.net\nDIRECT\n\tTrading Exchange\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-150\tDotaBuff\ndotabuff.com\n\t\ndotabuff.com\nDIRECT\n\tSaaS Tracker\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-151\tTracker_GG\ntracker.gg\n\t\ntracker.gg\nDIRECT\n\tSaaS Tracker\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-152\tFSB Market (an anonymized label; the original name is withheld here)\nFSB Market\n\t\nFSB Market\nDIRECT\n\tMass Blackmarket\tSSA § 2.G, SSA § 4.C, SSA § 1.C\tSee dated evidence\nEX-153\tFunPay\nfunpay.com\n\t\nfunpay.com\nDIRECT\n\tAccount Exchange\tSSA § 2.G, SSA § 4.C, SSA § 1.C\tSee dated evidence\nEX-154\tPlayerAuctions\nplayerauctions.com\n\t\nplayerauctions.com\nDIRECT\n\tGrey Market\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-155\tEldorado.gg\neldorado.gg\n\t\neldorado.gg\nDIRECT\n\tAccount Portal\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-156\tG2A\ng2a.com\n\t\ng2a.com\nDIRECT\n\tMass Key Market\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-157\tKinguin\nkinguin.net\n\t\nkinguin.net\nDIRECT\n\tMass Key Market\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-158\tG2G.com\ng2g.com\n\t\ng2g.com\nDIRECT\n\tVirtual Services\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-159\tPlayerup\nplayerup.com\n\t\nplayerup.com\nDIRECT\n\tAccount Broker\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-160\tZ2U.com\nz2u.com\n\t\nwww.z2u.com\nDIRECT\n\tReady-Account Hub\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-161\tSmurfHub\nsmurfhub.net\n\t\nsmurfhub.net\nDIRECT\n\tSmurf Shop\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-162\tSmurfAccounts\nsmurfaccounts.com\n\t\nsmurfaccounts.com\nDIRECT\n\tSmurf Shop\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-163\tBuyCSGORank\nbuycsgorank.com\n\t\nbuycsgorank.com\nDIRECT\n\tRank Shop\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-164\tCSGOSmurfKings\ncsgosmurfkings.com\n\t\ncsgosmurfkings.com\nDIRECT\n\tSmurf Shop\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-165\tSmurfStore_Co\nsmurfstore.co\n\t\nsmurfstore.co\nDIRECT\n\tSmurf Shop\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-166\tSteamLvlUp\nsteamlvlup.com\n\t\nsteamlvlup.com\nDIRECT\n\tCard Leveling\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-167\tSteamLevels\nsteamlevels.com\n\t\nsteamlevels.com\nDIRECT\n\tCard Leveling\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-168\tLevelSteam\nlevelsteam.com\n\t\nlevelsteam.com\nDIRECT\n\tCard Leveling\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-169\tSteamLevelU\nsteamlevelu.com\n\t\nsteamlevelu.com\nDIRECT\n\tCard Leveling\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-170\tEloKing\neloking.com\n\t\neloking.com\nDIRECT\n\tRank Boosting\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-171\tBoosteria\nboosteria.org\n\t\nboosteria.org\nDIRECT\n\tRank Boosting\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-172\tOvergear\novergear.com\n\t\novergear.com\nDIRECT\n\tBoosting SaaS\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-173\tBlazingBoost\nblazingboost.com\n\t\nblazingboost.com\nDIRECT\n\tBoosting SaaS\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-174\tDota2Boost\ndota2boost.com\n\t\ndota2boost.com\nDIRECT\n\tRank Boosting\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-175\tBuyBoost\nbuyboost.com\n\t\nbuyboost.com\nDIRECT\n\tBoosting SaaS\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nSection IV: Technical Architecture & Authentication MechanicsREF: TECH-ANALYSIS-01\n\n1. Absence of Domain Ownership Validation in OpenID 2.0: Valve's implementation of the OpenID 2.0 protocol (https://steamcommunity.com/openid/login) evaluates the openid.return_to and openid.realm parameters without requiring prior developer registration, cryptographic challenge verification, or domain ownership validation. Any commercial operator can direct users to Valve's login screen and receive a cryptographically signed identity assertion (containing the 64-bit SteamID) redirected to arbitrary domains.\n\n2. Programmatic Inventory Querying & API Key Abuse: Once user authentication is confirmed via OpenID, operators query public and partner Web API endpoints (IEconItems_730/GetPlayerItems) to index inventory assets in real-time. Automated trading networks employ programmatic session tokens to submit, poll, and accept peer-to-peer (P2P) trade offers, directly contravening SSA § 4.C's prohibition on non-human interaction.\n\n3. Link Filter Asymmetry: The coexistence of consumer-facing domain warnings alongside fully functional authentication endpoints creates a regulatory contradiction: Valve's security telemetry classifies these operators as \"potentially malicious\", yet Valve's authentication infrastructure continues to authenticate their user base.\n\nEvidentiary Methodology & Chain of Custody Declaration\n\nThis document was generated from unauthenticated network captures, historical RDAP registry queries, and verified cryptographic hash manifests. No user login credentials were compromise-tested or processed. All findings reflect observable production network state as of September 2026. This act serves as a non-partisan technical exhibit prepared for judicial, regulatory, and public inquiries.\n\nDIGEST: SHA-256 VERIFIED\nc507c9025f93da0aadaf395c4d8882f25973211c318ee8e9b6f18a5b3755e050\nARCHIVE: OPEN LEGAL RECORD\nISSUED & SIGNED BY: phishdestroy.io · Forensic Research Coalition\nLEGAL STATUS: ALL RIGHTS SURRENDERED TO HUMANITY · CC0 UNIVERSAL PUBLIC DOMAIN",
    "headings": [
      {
        "level": 1,
        "id": null,
        "text": "Forensic Audit Act & Regulatory Exhibit"
      }
    ],
    "links": []
  }
}