{
  "schema": "phishdestroy.text-export.v1",
  "object_type": "Published page text and corresponding PDF digest",
  "id": "pt/regulatory_act_print.html",
  "language": "pt",
  "title": "LEI DE AUDITORIA FORENSE: Valve Steam Web API Ecossistema e Exploração Comercial (Ref.: VAL-REG-2026-09)",
  "source_url": "https://phishdestroy.io/steam_dossier/pt/regulatory_act_print",
  "source_html_sha256": "ba267cdc4c3a6a3765d06d187b32147dc805dc92463e68ee255882ea7ff20116",
  "exported_at": "2026-09-30T21:14:33.840Z",
  "scope": "Print reading edition. Research prose is retained; raster images and identified visual catalogues are replaced by source links. See editorial_scope for exact omissions. Support archive exports retain the core discussion and link the full gallery.",
  "editorial_scope": {
    "policy": "Research prose, conclusions, methodological limits and analytical tables retained without paragraph truncation. Named catalogues and visual galleries are linked; raster images are not embedded.",
    "linked_sections": [],
    "raster_images_replaced": 0
  },
  "license": {
    "identifier": "CC0-1.0",
    "url": "https://creativecommons.org/publicdomain/zero/1.0/",
    "rights_statement_url": "https://phishdestroy.io/steam_dossier/steam_tos_assets/license-rights.json",
    "rights_statement_sha256": "80d67354f8e5efd65b03696be950fb0f95c188d0089b1604281d0a4daff3f4cb",
    "application": "Authored research materials; third-party materials retain their own rights."
  },
  "pdf": {
    "filename": "regulatory_act_print.pdf",
    "url": "https://phishdestroy.io/steam_dossier/exports/pages/pt/regulatory_act_print.pdf?v=print-20260930-links-v6",
    "sha256": "54dd9d955cda203c5bea0dca5314f14aba8fe9ef8ea2dabf7528b4ec07263202",
    "bytes": 186869,
    "pages": 14
  },
  "integrity": {
    "signed_object": "regulatory_act_print.content.json",
    "scope": "The exact UTF-8 bytes of this JSON file. It contains the published text and identifies the corresponding PDF by SHA-256. It is distinct from the separately signed rights statement.",
    "signature_file": "regulatory_act_print.content.json.asc",
    "digest_file": "regulatory_act_print.content.json.sha256",
    "format": "ASCII-armored detached OpenPGP",
    "signing_key_fingerprint": "129FC7F39C40C69D2EF3C329BFCF9E8DD295EE01",
    "public_key": "https://phishdestroy.io/.well-known/pgp-key.txt",
    "verify": [
      "gpg --import pgp-key.txt",
      "gpg --verify regulatory_act_print.content.json.asc regulatory_act_print.content.json",
      "sha256sum -c regulatory_act_print.content.json.sha256"
    ]
  },
  "content": {
    "text": "phishdestroy.io · Coligação de Investigação Forense · Registo Público Universal\nREGISTO: VAL-REG-2026-09-EVID\nPROVENIÊNCIA: phishdestroy.io/steam_dossier/\nDIREITOS: TODOS OS DIREITOS CEDIDOS À HUMANIDADE\nLei da Auditoria Forense e Anexo Regulamentar\nProvisionamento sistemático de «API» por terceiros, arquitetura de bypass automatizada e não aplicação contratual no ecossistema «Valve» Steam\nDomínio emissorphishdestroy.io\nPlataforma de destinoValve Steam / Steamworks\nVetor de autenticação primárioSteam OpenID 2.0 / Web API\nAviso legalAll Rights to Humanity (CC0)\nSecção I: Memorando Executivo e Conclusões FactuaisREF: MEMO-RESUMO-01\n\nO presente documento constitui um relatório formal de auditoria forense que analisa a interação operacional entre os termos comerciais publicados pelaValve, os seus pontos finais de autenticação técnica e as plataformas comerciais de terceiros observadas. A auditoria foi realizada através da observação passiva e não autenticada da rede, da verificação de registos no RDAP e da telemetria pública do Link Filter.\n\nNúcleo factual: A observação empírica revela uma divergência sistemática entre as declarações contratuais públicas da «Valve» e a sua infraestrutura de produção. Embora o Acordo de Subscrição do «Steam» (SSA) proíba estritamente a exploração comercial não autorizada (§ 2.G), a interação automatizada com bots/scripts (§ 4.C) e a transferência de contas (§ 1.C), a Valve Corporation continua a fornecer, em tempo real, uma infraestrutura programática de autenticação OpenID e de consulta de inventário a, pelo menos, 175 entidades comerciais, gerando volumes de transações secundárias na ordem dos milhares de milhões de dólares.\n\n175\nOperadores comerciais auditados\n44\nHosts de autenticação com domínios separados\n26\nPares de proxies com filtragem dividida\n100%\nArtigo 2.G / Artigo 4.C da SSA, não aplicados\n0\nRevogações de autenticação impostas\nQuadro contratual e legal aplicável\nSSA § 2.G\nProibição de utilização comercial: É expressamente proibida a exploração de Conteúdos e Serviços para fins comerciais sem autorização prévia por escrito da Valve Corporation.\nSSA § 4.C\nRestrição à automatização: É estritamente proibida a utilização de scripts, bots de negociação, macros ou sistemas não controlados por seres humanos que interajam com os serviços e mercados dSteam.\nSSA § 1.C\nObrigação de uso pessoal: Limita as contas ao uso pessoal; proíbe expressamente a venda, o aluguer, a transferência ou a troca de contas de utilizador dSteam.\nDSA da UE (2022/2065)\nAvaliação do Risco Sistémico (Art. 34/35): As plataformas online de grande dimensão (VLOPs) devem detetar, avaliar e mitigar ativamente os riscos sistémicos decorrentes da utilização indevida automatizada e da exploração comercial não autorizada.\nSecção II: Registo de Anexos A — Pares de divisão de filtros de ligação documentados (rotas 26)REF: EX-SPLIT-LEDGER\n\nAnálise forense da evasão por domínios divididos: No âmbito do sistema de filtragem de links «Steam» () de Valve (steamcommunity.com/linkfilter/?url=...), quando um utilizador final clica numa ligação que conduz a uma plataforma de jogos de azar ou do mercado negro sinalizada, o Valve apresenta um aviso em destaque («Link bloqueado! ... sinalizado como potencialmente malicioso»). No entanto, a análise forense do percurso revela que 26 plataformas comerciais operam numa arquitetura de domínios separados: embora o domínio comercial principal esteja BLOQUEADO no Filtro de Links, o domínio secundário que aloja o ponto final de resposta OpenID do Valve está marcado como LIMPO. Os servidores OpenID do Valve aceitam pedidos de autenticação provenientes destes servidores proxy sem interrupção, neutralizando o aviso de segurança ao consumidor e continuando a processar os inícios de sessão.\n\n#\tDomínio comercial principal\tFiltro principal\tDomínio do proxy de autenticação OpenID\tFiltro de autenticação\tRDAP Registado\tBase de registo\n01\trollbit.com\tBLOCKED\trbsnin.com\tCLEAN\t2026-09-18\tPASSIVE_CAPTURE\n02\tskin.club\tBLOCKED\tsc-auth.net\tCLEAN\t2019-04-02\tPASSIVE_CAPTURE\n03\thowl.gg\tBLOCKED\thowl.uno\tCLEAN\t2026-08-11\tPASSIVE_CAPTURE\n04\tduelbits.com\tBLOCKED\tswitchflips.com\tCLEAN\t2020-04-21\tPASSIVE_CAPTURE\n05\tcsgofast.com\tBLOCKED\tsteam-login.authtofast.com\tCLEAN\t2026-06-30\tPASSIVE_CAPTURE\n06\tfarmskins.com\tBLOCKED\tsteam.kobal.cc\tCLEAN\t2017-01-07\tPASSIVE_CAPTURE\n07\tcobaltlab.tech\tBLOCKED\tcobaltauth.com\tCLEAN\t2025-01-07\tPASSIVE_CAPTURE\n08\tcsgo.net\tBLOCKED\tcn2.easylot.net\tCLEAN\t2016-09-03\tPASSIVE_CAPTURE\n09\tggdrop.com\tBLOCKED\tggauth.com\tCLEAN\t2023-05-03\tPASSIVE_CAPTURE\n10\trustchance.com\tBLOCKED\thgfuihd.com\tCLEAN\t2019-01-27\tPASSIVE_CAPTURE\n11\tskin.fans\tBLOCKED\tauth.skinfans.com\tCLEAN\t2018-07-16\tPASSIVE_CAPTURE\n12\tskinport.com\tBLOCKED\tskinport.app\tCLEAN\t2020-06-20\tPASSIVE_CAPTURE\n13\tskins.cash\tBLOCKED\tskinscash.live\tCLEAN\t2019-12-05\tPASSIVE_CAPTURE\n14\ttf2hunt.com\tBLOCKED\trstspcl.com\tCLEAN\t2020-08-08\tPASSIVE_CAPTURE\n15\tdaddyskins.com\tBLOCKED\tgo-go-daddy.com\tCLEAN\t2019-01-26\tPASSIVE_CAPTURE\n16\tkey-drop.com\tBLOCKED\tkdauth.com\tCLEAN\t2026-05-13\tPASSIVE_CAPTURE\n17\tclash.gg\tBLOCKED\tclggauth.com\tCLEAN\t2024-09-16\tPASSIVE_CAPTURE\n18\tc5game.com\tBLOCKED\twww.imbastar.com\tCLEAN\t2016-02-27\tPASSIVE_CAPTURE\n19\tswap.gg\tBLOCKED\tswapauth.com\tCLEAN\t2018-10-06\tPASSIVE_CAPTURE\n20\tshadowpay.com\tBLOCKED\tthelogins.com\tCLEAN\t2018-01-22\tPASSIVE_CAPTURE\n21\tcsgocases.com\tBLOCKED\tlog-1n.com\tCLEAN\t2017-11-27\tPASSIVE_CAPTURE\n22\tcsgogem.com\tBLOCKED\tapi.csgem.com\tCLEAN\t2014-03-08\tPASSIVE_CAPTURE\n23\tgamdom.com\tBLOCKED\tlogin.gambldom.com\tCLEAN\t2017-09-24\tPASSIVE_CAPTURE\n24\t12cs.fail\tBLOCKED\tfail.games\tCLEAN\t2021-08-24\tPASSIVE_CAPTURE\n25\tskinsnipe.com\tBLOCKED\tpricing.tradeupspy.com\tCLEAN\t2020-03-11\tPASSIVE_CAPTURE\n26\tcsgobig.com\tBLOCKED\tletmeinbig.com\tCLEAN\t2023-01-20\tPASSIVE_CAPTURE\n\n* Nota: Verificações passivas realizadas em pontos finais não autenticados do Filtro de Links «Steam» em 2026-09-19 e 2026-09-21.. Os corpos das respostas HTTP em bruto e os resumos SHA-256 são preservados no conjunto de dados do repositório (steam_tos_assets/linkfilter-2026-09-22.json).\n\nSecção III: Registo de Anexos B — Censo Exaustivo das Entidades Comerciais Auditar175REF: EX-175-, CENSOS PRINCIPAIS\n\nO registo seguinte detalha todas as plataformas comerciais de terceiros 175 ativamente verificadas na base de dados de auditoria. Cada registo indica o nome da entidade, o domínio comercial principal, a rota de autenticação OpenID observada Steam, a classificação da atividade, os mapeamentos de violação contratual (SSA § 2.G, SSA § 4.C, SSA § 1.C) e o campo de ação registado no conjunto de dados de origem. A indicação «Ver provas datadas» remete o leitor para registos de apoio; não significa que Valve não tenha tomado qualquer medida. A ausência de um campo de ação é indicada como «não estabelecido».\n\nExposição\tNome da entidade e domínio principal\tRota de autenticação observada / Proxy\tClassificação\tViolação contratual\tValve Ação\nEX-001\tCSGORoll\ncsgoroll.com\n\t\nwww.csgoroll.com\nDIRECT\n\tSkin Gambling\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-002\tCSGOEmpire\ncsgoempire.com\n\t\ncsgoempirelogin4.com\nSPLIT PROXY\n\tCasino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-003\tRollbit\nrollbit.com\n\t\nrbsnin.com\nSPLIT PROXY\n\tCrypto Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-004\t500 Casino\n500.casino\n\t\nfivezerozero.co\nSPLIT PROXY\n\tLicenced Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-005\tCSGOBig\ncsgobig.com\n\t\ncsgobig.com\nDIRECT\n\tRoulette/Slots\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-006\tCaseDrop\ncasedrop.com\n\t\ncasedrop.com\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-007\tRustReaper\nrustreaper.com\n\t\nrustreaper.com\nDIRECT\n\tRust Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-008\tBanditCamp\nbanditcamp.com\n\t\nbanditcamp.com\nDIRECT\n\tRust Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-009\tSkinBox\nskinbox.com\n\t\nskinbox.com\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-010\tTastyDrop\ntastydrop.com\n\t\ntastydrop.com\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-011\tCSGOPolygon\ncsgopolygon.gg\n\t\ncsgopolygon.gg\nDIRECT\n\tRoulette Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-012\tMagicDrop\nmagicdrop.ru\n\t\nmagicdrop.ru\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-013\tCSDice\ncsdice.com\n\t\ncsdice.com\nDIRECT\n\tDice Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-014\tRustly\nrustly.com\n\t\nrustly.com\nDIRECT\n\tRust Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-015\tSkinOdds\nskinodds.com\n\t\nskinodds.com\nDIRECT\n\tUpgrader Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-016\tCSGOWin\ncsgowin.com\n\t\ncsgowin.com\nDIRECT\n\tSkin Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-017\tCSGORun\ncsgorun.net\n\t\ncsgorun.net\nDIRECT\n\tCrash Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-018\tOpenSkins\nopenskins.com\n\t\nopenskins.com\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-019\tRustBet\nrustbet.com\n\t\nrustbet.com\nDIRECT\n\tRust Gambling\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-020\tCSGOMagic\ncsgomagic.com\n\t\ncsgomagic.com\nDIRECT\n\tSkin Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-021\tCSGOBounty\ncsgobounty.com\n\t\ncsgobounty.com\nDIRECT\n\tUpgrader/Contract\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-022\tEZSkins\nezskins.com\n\t\nezskins.com\nDIRECT\n\tSkin Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-023\tRustCases\nrustcases.com\n\t\nrustcases.com\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-024\tCSGOReaper\ncsgoreaper.com\n\t\ncsgoreaper.com\nDIRECT\n\tSkin Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-025\tCSGOCases\ncsgocases.com\n\t\ncsgocases.com\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-026\tCSGO-Skins\ncsgo-skins.com\n\t\ncsgo-skins.com\nDIRECT\n\tCase Upgrader\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-027\tCSGONet\ncsgonet.com\n\t\ncsgonet.com\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-028\tWTFSkins\nwtfskins.com\n\t\nwtfskins.com\nDIRECT\n\tSkin Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-029\tCSGOFast\ncsgofast.com\n\t\nsteam-login.authtofast.com\nSPLIT PROXY\n\tRoulette Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-030\tDuelbits\nduelbits.com\n\t\nswitchflips.com\nSPLIT PROXY\n\tCrypto Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-031\tFlameCases\nflamecases.com\n\t\nflamecases.com\nDIRECT\n\tCase Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-032\tFarmskins\nfarmskins.com\n\t\nsteam.kobal.cc\nSPLIT PROXY\n\tCase Opener\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-033\tCSGOLuck\ncsgoluck.com\n\t\ncsgoluck.com\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-034\tGamedom\ngamedom.com\n\t\ngamedom.com\nDIRECT\n\tCrypto Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-035\tSkin.Club\nskin.club\n\t\nsc-auth.net\nSPLIT PROXY\n\tCase Battles\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-036\tDaddySkins\ndaddyskins.com\n\t\ndaddyskins.com\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-037\tInsane.gg\ninsane.gg\n\t\napi.insane.gg\nDIRECT\n\tSkin Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-038\tRustix\nrustix.gg\n\t\nrustix.gg\nDIRECT\n\tRust Gambling\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-039\tSkins.Club\nskins.club\n\t\nskins.club\nDIRECT\n\tSkin Upgrade\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-040\tCSGOHouse\ncsgohouse.org\n\t\ncsgohouse.org\nDIRECT\n\tSkin Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-041\tSkinRave\nskinrave.net\n\t\nskinrave.net\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-042\tBloodyCase_GG\nbloodycase.gg\n\t\nbloodycase.gg\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-043\tCSGOClicker\ncsgoclicker.com\n\t\ncsgoclicker.com\nDIRECT\n\tClicker/Upgrade\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-044\tRustBet_GG\nrustbet.gg\n\t\nrustbet.gg\nDIRECT\n\tRust Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-045\tCS_Drop\ncs-drop.com\n\t\ncs-drop.com\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-046\tHellStore\nhellstore.net\n\t\nhellstore.net\nDIRECT\n\tSkin Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-047\tRustLoot\nrustloot.com\n\t\nrustloot.com\nDIRECT\n\tRust Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-048\tCSGO_Case\ncsgo-case.com\n\t\ncsgo-case.com\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-049\tCS2Skin\ncs2skin.com\n\t\ncs2skin.com\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-050\tJuice_GG\njuice.gg\n\t\nletmeinjuice.com\nSPLIT PROXY\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-051\tGGDrop\nggdrop.com\n\t\nggauth.com\nSPLIT PROXY\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-052\tCSGOGem\ncsgogem.com\n\t\ncsgogem.com\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-053\tRainbet\nrainbet.com\n\t\nservices.rainbet.com\nDIRECT\n\tCrypto Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-054\tHowl_GG\nhowl.gg\n\t\nhowl.uno\nSPLIT PROXY\n\tSkins Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-055\tChicken_GG\nchicken.gg\n\t\nchicken.gg\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-056\tCSGOCasino_GG\ncsgocasino.gg\n\t\napi.csgocasino.gg\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-057\tHunt_GG\nhunt.gg\n\t\napi.hunt.gg\nDIRECT\n\tSkins Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-058\tCSBattle\ncsbattle.com\n\t\ncsbattle.com\nDIRECT\n\tCase Battles\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-059\tSkinRave_GG\nskinrave.gg\n\t\napi.skinrave.gg\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-060\tCSDouble\ncsdouble.gg\n\t\ncsdouble.gg\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-061\tRustChance\nrustchance.com\n\t\nhgfuihd.com\nSPLIT PROXY\n\tRust Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-062\tRustClash\nrustclash.com\n\t\nrustclash.com\nDIRECT\n\tRust Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-063\tCobaltLab\ncobaltlab.tech\n\t\ncobaltauth.com\nSPLIT PROXY\n\tRust Automation\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-064\tRaided_GG\nraided.gg\n\t\napi.raided.gg\nDIRECT\n\tRust Roulette\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-065\tRustNeo\nrustneo.gg\n\t\nrustneo.gg\nDIRECT\n\tRust Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-066\tSplits_GG\nsplits.gg\n\t\nsplits.gg\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-067\tUpgrader_Pro\nupgrader.pro\n\t\nupgauth.space\nSPLIT PROXY\n\tSkin Upgrader\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-068\tSkinFans\nskin.fans\n\t\nauth.skinfans.com\nSPLIT PROXY\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-069\tHotPizza\nhotpizza.one\n\t\nhotpizza.one\nDIRECT\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-070\tG4Skins\ng4skins.com\n\t\nauth.g4s.to\nSPLIT PROXY\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-071\t12CS_Fail\n12cs.fail\n\t\n12cs.fail\nDIRECT\n\tCrash Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-072\tTF2Royal\ntf2royal.com\n\t\ntf2auth.com\nSPLIT PROXY\n\tTF2 Gambling\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-073\tTF2Easy\nwww.tf2easy.com\n\t\nwww.tf2easy.com\nDIRECT\n\tTF2 Gambling\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-074\tTF2Hunt\ntf2hunt.com\n\t\nrstspcl.com\nSPLIT PROXY\n\tTF2 Gambling\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-075\tTF2Bet\ntf2.bet/coinflip\n\t\ntf2.bet\nDIRECT\n\tTF2 Gambling\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-076\tTF2Blaze\ntf2blaze.com\n\t\ntf2blaze.com\nDIRECT\n\tTF2 Gambling\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-077\tOpenStars_GG\nopenstars.gg\n\t\nopenstars.gg\nDIRECT\n\tSkin Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-078\tShuffle_Com\nshuffle.com\n\t\nshuffle.com\nDIRECT\n\tCrypto Casino\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-079\tSkins.com\nskins.com\n\t\napi.skins.com\nDIRECT\n\tCS2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-080\tWhite.Market\nwhite.market\n\t\nwhite.market\nDIRECT\n\tP2P Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-081\tBuff.Market\nbuff.market\n\t\nbuff.market\nDIRECT\n\tCS2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-082\tAvan.Market\navan.market\n\t\navan.market\nDIRECT\n\tCS2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-083\tCS.MONEY\ncs.money\n\t\nauth.dota.trade\nSPLIT PROXY\n\tTrading Engine\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-084\tUUSkins\nuuskins.com\n\t\nuuskins.com\nDIRECT\n\tP2P Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-085\tYouPin898\nyoupin898.com\n\t\nyoupin898.com\nDIRECT\n\tMass Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-086\tMoon.Market\nmoon.market\n\t\nmoon.market\nDIRECT\n\tP2P Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-087\tCSFloat\ncsfloat.com\n\t\ncsgofloat.com\nSPLIT PROXY\n\tP2P Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-088\tSkin.Land\nskin.land\n\t\nauth.skin.land\nDIRECT\n\tSkins Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-089\tC5Game\nc5game.com\n\t\nc5game.com\nDIRECT\n\tCS2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-090\tHaloSkins\nhaloskins.com\n\t\nhaloskins.com\nDIRECT\n\tSkins Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-091\tBuff.163\nbuff.163.com\n\t\nbuff.163.com\nDIRECT\n\tCorporate Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-092\tWaxpeer\nwaxpeer.com\n\t\nwaxpeer.com\nDIRECT\n\tP2P Marketplace\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-093\tCS.MONEY Bot\ncs.money\n\t\nauth.dota.trade\nSPLIT PROXY\n\tBot Trading\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-094\tMarket.CSGO\nmarket.csgo.com\n\t\ndota2.net\nSPLIT PROXY\n\tP2P Marketplace\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-095\tSkinport\nskinport.com\n\t\nskinport.app\nSPLIT PROXY\n\tRegulated Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-096\tSkinFlow\nskinflow.gg\n\t\napi.skinflow.gg\nDIRECT\n\tMarketplace/Swap\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-097\tDMarket\ndmarket.com\n\t\ndmarket.com\nDIRECT\n\tUS Marketplace\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-098\tSkin.place\nskin.place\n\t\napi.skin.place\nDIRECT\n\tSkins Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-099\tSkinsMonkey\nskinsmonkey.com\n\t\nskinsmonkey.com\nDIRECT\n\tInstant Swap\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-100\tSkinBaron\nskinbaron.de\n\t\nskinbaron.com\nSPLIT PROXY\n\tCorporate Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-101\tSteam\nsteamcommunity.com/market\n\t\nsteamcommunity.com/market\nDIRECT\n\tOfficial Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-102\tRustTM\nrust.tm\n\t\ndota2.net\nSPLIT PROXY\n\tRust Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-103\tPirateSwap\npirateswap.com\n\t\nlogin.pirateswap.com\nDIRECT\n\tInstant Swap\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-104\tMannco.Store\nmannco.store\n\t\nmannco.store\nDIRECT\n\tTF2 Marketplace\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-105\tSkinSwap\nskinswap.com\n\t\napi.skinswap.com\nDIRECT\n\tInstant Swap\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-106\tLootFarm\nlootfarm.com\n\t\nlootfarm.com\nDIRECT\n\tTrading Platform\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-107\tRustskins\nrustskins.com\n\t\nrustskins.com\nDIRECT\n\tRust Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-108\tExeSkins\nexeskins.com\n\t\nexeskins.com\nDIRECT\n\tP2P Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-109\tBalticSkins\nbalticskins.com\n\t\nbalticskins.com\nDIRECT\n\tSkins Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-110\tCS.Trade\ncs.trade\n\t\ncs.trade\nDIRECT\n\tInstant Swap\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-111\tRapidSkins\nrapidskins.com\n\t\napi.rapidskins.com\nDIRECT\n\tCS2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-112\tTradeIt\ntradeit.gg\n\t\nconnect-tradeit.com\nSPLIT PROXY\n\tCS2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-113\tKrakatoa\nkrakatoa.com\n\t\nkrakatoa.com\nDIRECT\n\tCS2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-114\tShadowPay\nshadowpay.com\n\t\nshadowpay.com\nDIRECT\n\tP2P Marketplace\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-115\t49skins\n49skins.com\n\t\napi.49skins.com\nDIRECT\n\tCS2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-116\tSkinVault\nskinvault.gg\n\t\napi.skinvault.gg\nDIRECT\n\tCS2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-117\tAim Market\naim.market\n\t\naim.market\nDIRECT\n\tSkins Trading\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-118\tSkinout\nskinout.gg\n\t\nauth.skinout.gg\nDIRECT\n\tInstant Sell Portal\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-119\tNTSkins\nntskins.com\n\t\nntskins.com\nDIRECT\n\tSkins Trading\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-120\tIGXE\nigxe.cn\n\t\nigxe.cn\nDIRECT\n\tChinese Powerhouse\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-121\tSwap.gg\nswap.gg\n\t\nswap.gg\nDIRECT\n\tAutomated Swap\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-122\tBitskins\nbitskins.com\n\t\nbitskins.com\nDIRECT\n\tCash-out Portal\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-123\tGamerPay\ngamerpay.gg\n\t\ngamerpay.gg\nDIRECT\n\tP2P Portal\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-124\tTF2Mart\ntf2mart.com\n\t\ntf2mart.com\nDIRECT\n\tTF2 Automation\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-125\tSkinBid\nskinbid.com\n\t\nskinbid.com\nDIRECT\n\tSkin Auctions\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-126\tLootBear\nlootbear.com\n\t\nlootbear.com\nDIRECT\n\tSkin Rental\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-127\tBackpack.tf\nbackpack.tf\n\t\nbackpack.tf\nDIRECT\n\tTF2 Valuation\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-128\tScrap.tf\nscrap.tf\n\t\nscrap.tf\nDIRECT\n\tTF2 Scrap Swap\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-129\tMarketplace.tf\nmarketplace.tf\n\t\nmarketplace.tf\nDIRECT\n\tTF2 Cashout\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-130\tSTNTrading\nstntrading.eu\n\t\nstntrading.eu\nDIRECT\n\tTF2 Botnet\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-131\tSkins.Cash\nskins.cash\n\t\nskinscash.live\nSPLIT PROXY\n\tInstant Cashout\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-132\tSkinWallet\nskinwallet.com\n\t\nskinwallet.com\nDIRECT\n\tInstant Cashout\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-133\tDota2Market\ndota2market.com\n\t\ndota2market.com\nDIRECT\n\tDota 2 Market\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-134\tCSGO.NET\ncsgo.net\n\t\ncn2.easylot.net\nSPLIT PROXY\n\tCase Opening\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-135\tCybershoke\ncybershoke.net\n\t\nauth.cybershoke.net\nDIRECT\n\tCommunity Hub\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-136\tXPlay_GG\nxplay.gg\n\t\nxplay.gg\nDIRECT\n\tServer Network\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-137\tFastCup\nfastcup.net\n\t\napi.fastcup.net\nDIRECT\n\tMatchmaker Hub\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-138\tEsportal\nesportal.com\n\t\nesportal.com\nDIRECT\n\tMatchmaking Portal\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-139\tGamersClub\ngamersclub.com.br\n\t\ngamersclub.com.br\nDIRECT\n\tLATAM Hub\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-140\tLeetify\nleetify.com\n\t\nleetify.com\nDIRECT\n\tSaaS Analytics\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-141\tScope_GG\nscope.gg\n\t\nscope.gg\nDIRECT\n\tSaaS Analytics\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-142\tTradeUpSpy\ntradeupspy.com\n\t\napi.tradeupspy.com\nDIRECT\n\tSaaS Tools\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-143\tEpidemic_GG\nepidemic.gg\n\t\nepidemic.gg\nDIRECT\n\tSaaS Tools\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-144\tCSDeals\ncs.deals\n\t\napi.cs.deals\nDIRECT\n\tMarketplace\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-145\tPricempire\npricempire.com\n\t\npricempire.com\nDIRECT\n\tSaaS Price DB\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-146\tCS2Stash\ncs2stash.com\n\t\ncs2stash.com\nDIRECT\n\tSaaS Index\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-147\tCSGOSkins\ncsgoskins.gg\n\t\ncsgoskins.gg\nDIRECT\n\tSaaS Index\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-148\tSteamAnalyst\nsteamanalyst.com\n\t\nsteamanalyst.com\nDIRECT\n\tSaaS Index\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-149\tSteamCardExchange\nsteamcardexchange.net\n\t\nsteamcardexchange.net\nDIRECT\n\tTrading Exchange\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-150\tDotaBuff\ndotabuff.com\n\t\ndotabuff.com\nDIRECT\n\tSaaS Tracker\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-151\tTracker_GG\ntracker.gg\n\t\ntracker.gg\nDIRECT\n\tSaaS Tracker\tSSA § 2.G, SSA § 4.C\tSee dated evidence\nEX-152\tFSB Market (an anonymized label; the original name is withheld here)\nFSB Market\n\t\nFSB Market\nDIRECT\n\tMass Blackmarket\tSSA § 2.G, SSA § 4.C, SSA § 1.C\tSee dated evidence\nEX-153\tFunPay\nfunpay.com\n\t\nfunpay.com\nDIRECT\n\tAccount Exchange\tSSA § 2.G, SSA § 4.C, SSA § 1.C\tSee dated evidence\nEX-154\tPlayerAuctions\nplayerauctions.com\n\t\nplayerauctions.com\nDIRECT\n\tGrey Market\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-155\tEldorado.gg\neldorado.gg\n\t\neldorado.gg\nDIRECT\n\tAccount Portal\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-156\tG2A\ng2a.com\n\t\ng2a.com\nDIRECT\n\tMass Key Market\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-157\tKinguin\nkinguin.net\n\t\nkinguin.net\nDIRECT\n\tMass Key Market\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-158\tG2G.com\ng2g.com\n\t\ng2g.com\nDIRECT\n\tVirtual Services\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-159\tPlayerup\nplayerup.com\n\t\nplayerup.com\nDIRECT\n\tAccount Broker\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-160\tZ2U.com\nz2u.com\n\t\nwww.z2u.com\nDIRECT\n\tReady-Account Hub\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-161\tSmurfHub\nsmurfhub.net\n\t\nsmurfhub.net\nDIRECT\n\tSmurf Shop\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-162\tSmurfAccounts\nsmurfaccounts.com\n\t\nsmurfaccounts.com\nDIRECT\n\tSmurf Shop\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-163\tBuyCSGORank\nbuycsgorank.com\n\t\nbuycsgorank.com\nDIRECT\n\tRank Shop\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-164\tCSGOSmurfKings\ncsgosmurfkings.com\n\t\ncsgosmurfkings.com\nDIRECT\n\tSmurf Shop\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-165\tSmurfStore_Co\nsmurfstore.co\n\t\nsmurfstore.co\nDIRECT\n\tSmurf Shop\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-166\tSteamLvlUp\nsteamlvlup.com\n\t\nsteamlvlup.com\nDIRECT\n\tCard Leveling\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-167\tSteamLevels\nsteamlevels.com\n\t\nsteamlevels.com\nDIRECT\n\tCard Leveling\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-168\tLevelSteam\nlevelsteam.com\n\t\nlevelsteam.com\nDIRECT\n\tCard Leveling\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-169\tSteamLevelU\nsteamlevelu.com\n\t\nsteamlevelu.com\nDIRECT\n\tCard Leveling\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-170\tEloKing\neloking.com\n\t\neloking.com\nDIRECT\n\tRank Boosting\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-171\tBoosteria\nboosteria.org\n\t\nboosteria.org\nDIRECT\n\tRank Boosting\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-172\tOvergear\novergear.com\n\t\novergear.com\nDIRECT\n\tBoosting SaaS\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-173\tBlazingBoost\nblazingboost.com\n\t\nblazingboost.com\nDIRECT\n\tBoosting SaaS\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-174\tDota2Boost\ndota2boost.com\n\t\ndota2boost.com\nDIRECT\n\tRank Boosting\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nEX-175\tBuyBoost\nbuyboost.com\n\t\nbuyboost.com\nDIRECT\n\tBoosting SaaS\tSSA § 2.G, SSA § 1.C\tSee dated evidence\nSecção IV: Arquitetura Técnica e Mecanismos de AutenticaçãoREF: ANÁLISE TÉCNICA -01\n\n1. Ausência de validação da titularidade do domínio no OpenID 2.0: A implementação do protocolo OpenID 2.0 pela Valve (https://steamcommunity.com/openid/login) avalia o openid.return_to e openid.realm parâmetros sem exigir o registo prévio do programador, a verificação de um desafio criptográfico ou a validação da titularidade do domínio. Qualquer operador comercial pode redirecionar os utilizadores para o ecrã de início de sessão do Valve e receber uma afirmação de identidade assinada criptograficamente (contendo o SteamID de 64-bits) redirecionada para domínios arbitrários.\n\n2. Consulta programática do inventário e abuso da chave «API»: Assim que a autenticação do utilizador for confirmada através do OpenID, os operadores consultam os pontos de extremidade de WebAPIs públicos e de parceiros (IEconItems_730/GetPlayerItems) para indexar ativos de inventário em tempo real. As redes de negociação automatizadas utilizam tokens de sessão programáticos para apresentar, consultar e aceitar ofertas de negociação ponto a ponto (P2P), infringindo diretamente a proibição de interação não humana prevista no §4.C da SSA.\n\n3. Assimetria do filtro de ligações: A coexistência de avisos de domínio dirigidos aos consumidores, a par de pontos finais de autenticação totalmente funcionais, cria uma contradição regulamentar: a telemetria de segurança do Valve classifica estes operadores como «potencialmente maliciosos», mas a infraestrutura de autenticação do Valve continua a autenticar a sua base de utilizadores.\n\nMetodologia Probatória e Declaração sobre a Cadeia de Custódia\n\nEste documento foi gerado a partir de capturas de rede não autenticadas, consultas históricas ao registo RDAP e manifestos de hash criptográfico verificados. Nenhuma credencial de início de sessão de utilizador foi submetida a testes de comprometimento nem processada. Todas as conclusões refletem o estado observável da rede de produção à data de 2026. Este documento constitui uma prova técnica imparcial, preparada para inquéritos judiciais, regulamentares e públicos.\n\nRESUMO: SHA-256 VERIFICADO\nc507c9025f93da0aadaf395c4d8882f25973211c318ee8e9b6f18a5b3755e050\nARQUIVO: REGISTO JURÍDICO PÚBLICO\nEMITIDO E ASSINADO POR: phishdestroy.io · Coligação para a Investigação Forense\nSTATUS JURÍDICO: TODOS OS DIREITOS CEDIDOS À HUMANIDADE · CC0 DOMÍNIO PÚBLICO UNIVERSAL",
    "headings": [
      {
        "level": 1,
        "id": null,
        "text": "Lei da Auditoria Forense e Anexo Regulamentar"
      }
    ],
    "links": []
  }
}