phishdestroy.io · Koalisi Penelitian Forensik · Arsip Publik Universal

DAFTAR PERKARA: VAL-REG-2026-09-EVID

ASAL-USUL: phishdestroy.io/steam_dossier/

HAK: SEMUA HAK DILEPASKAN UNTUK KEMANUSIAAN

Undang-Undang Audit Forensik & Lampiran Peraturan

Penyediaan Sistemik Layanan "API" oleh Pihak Ketiga, Arsitektur Bypass Otomatis, dan Ketidakberlakuan Klausul Kontrak dalam Ekosistem "Valve" Steam

Penerbitan Domain phishdestroy.io

Platform Sasaran Valve Steam / Steamworks

Vektor Otentikasi Utama Steam OpenID 2.0 / Situs Web API

Pernyataan Hukum All Rights to Humanity (CC0)

Bagian I: Surat Edaran Eksekutif & Temuan Fakta REF: MEMO-RINGKASAN-01

Dokumen ini merupakan laporan audit forensik resmi yang mengkaji hubungan operasional antara ketentuan komersial yang dipublikasikan oleh PerusahaanValve, titik akhir otentikasi teknisnya, serta platform komersial pihak ketiga yang teramati. Audit ini dilakukan melalui pengamatan jaringan pasif tanpa otentikasi, verifikasi pendaftaran di RDAP, serta data telemetri Link Filter yang tersedia untuk umum.

Inti Fakta: Pengamatan empiris menunjukkan adanya perbedaan sistematis antara pernyataan kontrak publik yang disampaikan oleh Valve dan infrastruktur produksinya. Meskipun Perjanjian Pelanggan (Subscriber Agreement/SSA) Steam secara tegas melarang eksploitasi komersial tanpa izin (§ 2.G), interaksi bot/skrip otomatis (§ 4.C), dan transfer akun (§ 1.C), Valve Corporation tetap menyediakan infrastruktur otentikasi OpenID dan kueri inventaris secara langsung dan terprogram kepada setidaknya 175 entitas komersial yang menghasilkan volume transaksi sekunder senilai miliaran dolar.

175

Operator Komersial yang Telah Diaudit

Host Otentikasi dengan Domain Terpisah

Pasangan Proxy dengan Pembagian Filter

100%

Pasal SSA yang belum diberlakukan: § 2.G / § 4.C

Pencabutan Otorisasi yang Dipaksakan

Kerangka Kerja Kontrak dan Peraturan Perundang-undangan yang Berlaku

SSA § 2.G

Larangan Penggunaan Komersial: Dilarang keras memanfaatkan Konten dan Layanan untuk tujuan komersial tanpa izin tertulis terlebih dahulu dari Valve Corporation.

SSA § 4.C

Pembatasan Otomatisasi: Dilarang keras menggunakan skrip, bot perdagangan, makro, atau sistem yang tidak dikendalikan oleh manusia untuk berinteraksi dengan layanan dan pasar Steam.

SSA § 1.C

Kewajiban Penggunaan Pribadi: Membatasi penggunaan akun hanya untuk keperluan pribadi; secara tegas melarang penjualan, penyewaan, pengalihan, atau pertukaran akun penggunSteam.

DSA Uni Eropa (2022/2065)

Penilaian Risiko Sistemik (Pasal 34/35): Platform Daring Berskala Sangat Besar (VLOP) harus secara aktif mendeteksi, menilai, dan memitigasi risiko sistemik yang timbul akibat penyalahgunaan otomatis dan eksploitasi komersial tanpa izin.

Bagian II: Buku Besar Lampiran A — Pasangan Pemisahan Filter Tautan yang Terdokumentasi (Rute 26) REF: EX-SPLIT-LEDGER

Analisis Forensik Terhadap Teknik Pengelakan Domain Terpisah: Di bawah sistem Filter Tautan "Steam" () yang dikembangkan oleh Valve (steamcommunity.com/linkfilter/?url=...), ketika pengguna akhir mengklik tautan yang mengarah ke platform perjudian atau pasar gelap yang telah ditandai, Valve menampilkan peringatan yang mencolok ("Tautan Diblokir! ... dilaporkan sebagai tautan yang berpotensi berbahaya"). Namun, penelusuran jalur forensik menunjukkan bahwa 26 merupakan platform komersial yang beroperasi di arsitektur domain terpisah: meskipun domain komersial utama DIBLOKIR di Link Filter, domain sekunder yang menampung titik akhir respons OpenID Valve ditandai sebagai AMAN. Server OpenID Valve menerima permintaan otentikasi dari host proxy ini tanpa gangguan, sehingga menonaktifkan peringatan keamanan bagi pengguna sambil tetap memproses proses masuk.

#	Domain Komersial Utama	Filter Utama	Domain Proksi Otentikasi OpenID	Filter Otorisasi	RDAP Telah terdaftar	Dasar Pengambilan Data
01	rollbit.com	BLOCKED	rbsnin.com	CLEAN	2026-09-18	PASSIVE_CAPTURE
02	skin.club	BLOCKED	sc-auth.net	CLEAN	2019-04-02	PASSIVE_CAPTURE
03	howl.gg	BLOCKED	howl.uno	CLEAN	2026-08-11	PASSIVE_CAPTURE
04	duelbits.com	BLOCKED	switchflips.com	CLEAN	2020-04-21	PASSIVE_CAPTURE
05	csgofast.com	BLOCKED	steam-login.authtofast.com	CLEAN	2026-06-30	PASSIVE_CAPTURE
06	farmskins.com	BLOCKED	steam.kobal.cc	CLEAN	2017-01-07	PASSIVE_CAPTURE
07	cobaltlab.tech	BLOCKED	cobaltauth.com	CLEAN	2025-01-07	PASSIVE_CAPTURE
08	csgo.net	BLOCKED	cn2.easylot.net	CLEAN	2016-09-03	PASSIVE_CAPTURE
09	ggdrop.com	BLOCKED	ggauth.com	CLEAN	2023-05-03	PASSIVE_CAPTURE
10	rustchance.com	BLOCKED	hgfuihd.com	CLEAN	2019-01-27	PASSIVE_CAPTURE
11	skin.fans	BLOCKED	auth.skinfans.com	CLEAN	2018-07-16	PASSIVE_CAPTURE
12	skinport.com	BLOCKED	skinport.app	CLEAN	2020-06-20	PASSIVE_CAPTURE
13	skins.cash	BLOCKED	skinscash.live	CLEAN	2019-12-05	PASSIVE_CAPTURE
14	tf2hunt.com	BLOCKED	rstspcl.com	CLEAN	2020-08-08	PASSIVE_CAPTURE
15	daddyskins.com	BLOCKED	go-go-daddy.com	CLEAN	2019-01-26	PASSIVE_CAPTURE
16	key-drop.com	BLOCKED	kdauth.com	CLEAN	2026-05-13	PASSIVE_CAPTURE
17	clash.gg	BLOCKED	clggauth.com	CLEAN	2024-09-16	PASSIVE_CAPTURE
18	c5game.com	BLOCKED	www.imbastar.com	CLEAN	2016-02-27	PASSIVE_CAPTURE
19	swap.gg	BLOCKED	swapauth.com	CLEAN	2018-10-06	PASSIVE_CAPTURE
20	shadowpay.com	BLOCKED	thelogins.com	CLEAN	2018-01-22	PASSIVE_CAPTURE
21	csgocases.com	BLOCKED	log-1n.com	CLEAN	2017-11-27	PASSIVE_CAPTURE
22	csgogem.com	BLOCKED	api.csgem.com	CLEAN	2014-03-08	PASSIVE_CAPTURE
23	gamdom.com	BLOCKED	login.gambldom.com	CLEAN	2017-09-24	PASSIVE_CAPTURE
24	12cs.fail	BLOCKED	fail.games	CLEAN	2021-08-24	PASSIVE_CAPTURE
25	skinsnipe.com	BLOCKED	pricing.tradeupspy.com	CLEAN	2020-03-11	PASSIVE_CAPTURE
26	csgobig.com	BLOCKED	letmeinbig.com	CLEAN	2023-01-20	PASSIVE_CAPTURE

* Catatan: Pemeriksaan pasif dilakukan terhadap titik akhir Filter Tautan Steam yang belum diautentikasi di 2026-09-19 dan 2026-09-21.. Isi respons HTTP mentah serta ringkasan SHA-256 disimpan dalam dataset repositori (steam_tos_assets/linkfilter-2026-09-22.json).

Bagian III: Buku Besar Lampiran B — Sensus Komprehensif Entitas Komersial yang Telah Diaudit oleh Badan Pengawasan Perdagangan (175) REF: EX-175-MASTER-CENSUS

Daftar berikut ini memuat rincian semua platform komersial pihak ketiga 175 yang telah diverifikasi secara aktif dalam basis data audit. Setiap catatan mencantumkan nama entitas, domain komersial utama, rute otentikasi OpenID yang teramati Steam, klasifikasi aktivitas, pemetaan pelanggaran kontrak (SSA § 2.G, SSA § 4.C, SSA § 1.C), serta kolom tindakan yang tercatat dalam kumpulan data sumber. Label "Lihat bukti bertanggal" mengarahkan pembaca ke catatan pendukung; label ini tidak menunjukkan bahwa Valve tidak mengambil tindakan apa pun. Kolom tindakan yang tidak ada dilaporkan sebagai "tidak ditetapkan".

Pameran	Nama Entitas & Domain Utama	Rute Otentikasi / Proksi yang Diamati	Klasifikasi	Pelanggaran Kontrak	Valve Aksi
EX-001	CSGORoll csgoroll.com	www.csgoroll.com DIRECT	Skin Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-002	CSGOEmpire csgoempire.com	csgoempirelogin4.com SPLIT PROXY	Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-003	Rollbit rollbit.com	rbsnin.com SPLIT PROXY	Crypto Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-004	500 Casino 500.casino	fivezerozero.co SPLIT PROXY	Licenced Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-005	CSGOBig csgobig.com	csgobig.com DIRECT	Roulette/Slots	SSA § 2.G, SSA § 4.C	See dated evidence
EX-006	CaseDrop casedrop.com	casedrop.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-007	RustReaper rustreaper.com	rustreaper.com DIRECT	Rust Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-008	BanditCamp banditcamp.com	banditcamp.com DIRECT	Rust Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-009	SkinBox skinbox.com	skinbox.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-010	TastyDrop tastydrop.com	tastydrop.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-011	CSGOPolygon csgopolygon.gg	csgopolygon.gg DIRECT	Roulette Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-012	MagicDrop magicdrop.ru	magicdrop.ru DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-013	CSDice csdice.com	csdice.com DIRECT	Dice Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-014	Rustly rustly.com	rustly.com DIRECT	Rust Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-015	SkinOdds skinodds.com	skinodds.com DIRECT	Upgrader Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-016	CSGOWin csgowin.com	csgowin.com DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-017	CSGORun csgorun.net	csgorun.net DIRECT	Crash Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-018	OpenSkins openskins.com	openskins.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-019	RustBet rustbet.com	rustbet.com DIRECT	Rust Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-020	CSGOMagic csgomagic.com	csgomagic.com DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-021	CSGOBounty csgobounty.com	csgobounty.com DIRECT	Upgrader/Contract	SSA § 2.G, SSA § 4.C	See dated evidence
EX-022	EZSkins ezskins.com	ezskins.com DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-023	RustCases rustcases.com	rustcases.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-024	CSGOReaper csgoreaper.com	csgoreaper.com DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-025	CSGOCases csgocases.com	csgocases.com DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-026	CSGO-Skins csgo-skins.com	csgo-skins.com DIRECT	Case Upgrader	SSA § 2.G, SSA § 4.C	See dated evidence
EX-027	CSGONet csgonet.com	csgonet.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-028	WTFSkins wtfskins.com	wtfskins.com DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-029	CSGOFast csgofast.com	steam-login.authtofast.com SPLIT PROXY	Roulette Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-030	Duelbits duelbits.com	switchflips.com SPLIT PROXY	Crypto Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-031	FlameCases flamecases.com	flamecases.com DIRECT	Case Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-032	Farmskins farmskins.com	steam.kobal.cc SPLIT PROXY	Case Opener	SSA § 2.G, SSA § 4.C	See dated evidence
EX-033	CSGOLuck csgoluck.com	csgoluck.com DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-034	Gamedom gamedom.com	gamedom.com DIRECT	Crypto Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-035	Skin.Club skin.club	sc-auth.net SPLIT PROXY	Case Battles	SSA § 2.G, SSA § 4.C	See dated evidence
EX-036	DaddySkins daddyskins.com	daddyskins.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-037	Insane.gg insane.gg	api.insane.gg DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-038	Rustix rustix.gg	rustix.gg DIRECT	Rust Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-039	Skins.Club skins.club	skins.club DIRECT	Skin Upgrade	SSA § 2.G, SSA § 4.C	See dated evidence
EX-040	CSGOHouse csgohouse.org	csgohouse.org DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-041	SkinRave skinrave.net	skinrave.net DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-042	BloodyCase_GG bloodycase.gg	bloodycase.gg DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-043	CSGOClicker csgoclicker.com	csgoclicker.com DIRECT	Clicker/Upgrade	SSA § 2.G, SSA § 4.C	See dated evidence
EX-044	RustBet_GG rustbet.gg	rustbet.gg DIRECT	Rust Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-045	CS_Drop cs-drop.com	cs-drop.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-046	HellStore hellstore.net	hellstore.net DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-047	RustLoot rustloot.com	rustloot.com DIRECT	Rust Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-048	CSGO_Case csgo-case.com	csgo-case.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-049	CS2Skin cs2skin.com	cs2skin.com DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-050	Juice_GG juice.gg	letmeinjuice.com SPLIT PROXY	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-051	GGDrop ggdrop.com	ggauth.com SPLIT PROXY	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-052	CSGOGem csgogem.com	csgogem.com DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-053	Rainbet rainbet.com	services.rainbet.com DIRECT	Crypto Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-054	Howl_GG howl.gg	howl.uno SPLIT PROXY	Skins Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-055	Chicken_GG chicken.gg	chicken.gg DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-056	CSGOCasino_GG csgocasino.gg	api.csgocasino.gg DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-057	Hunt_GG hunt.gg	api.hunt.gg DIRECT	Skins Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-058	CSBattle csbattle.com	csbattle.com DIRECT	Case Battles	SSA § 2.G, SSA § 4.C	See dated evidence
EX-059	SkinRave_GG skinrave.gg	api.skinrave.gg DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-060	CSDouble csdouble.gg	csdouble.gg DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-061	RustChance rustchance.com	hgfuihd.com SPLIT PROXY	Rust Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-062	RustClash rustclash.com	rustclash.com DIRECT	Rust Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-063	CobaltLab cobaltlab.tech	cobaltauth.com SPLIT PROXY	Rust Automation	SSA § 2.G, SSA § 4.C	See dated evidence
EX-064	Raided_GG raided.gg	api.raided.gg DIRECT	Rust Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-065	RustNeo rustneo.gg	rustneo.gg DIRECT	Rust Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-066	Splits_GG splits.gg	splits.gg DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-067	Upgrader_Pro upgrader.pro	upgauth.space SPLIT PROXY	Skin Upgrader	SSA § 2.G, SSA § 4.C	See dated evidence
EX-068	SkinFans skin.fans	auth.skinfans.com SPLIT PROXY	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-069	HotPizza hotpizza.one	hotpizza.one DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-070	G4Skins g4skins.com	auth.g4s.to SPLIT PROXY	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-071	12CS_Fail 12cs.fail	12cs.fail DIRECT	Crash Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-072	TF2Royal tf2royal.com	tf2auth.com SPLIT PROXY	TF2 Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-073	TF2Easy www.tf2easy.com	www.tf2easy.com DIRECT	TF2 Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-074	TF2Hunt tf2hunt.com	rstspcl.com SPLIT PROXY	TF2 Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-075	TF2Bet tf2.bet/coinflip	tf2.bet DIRECT	TF2 Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-076	TF2Blaze tf2blaze.com	tf2blaze.com DIRECT	TF2 Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-077	OpenStars_GG openstars.gg	openstars.gg DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-078	Shuffle_Com shuffle.com	shuffle.com DIRECT	Crypto Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-079	Skins.com skins.com	api.skins.com DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-080	White.Market white.market	white.market DIRECT	P2P Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-081	Buff.Market buff.market	buff.market DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-082	Avan.Market avan.market	avan.market DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-083	CS.MONEY cs.money	auth.dota.trade SPLIT PROXY	Trading Engine	SSA § 2.G, SSA § 4.C	See dated evidence
EX-084	UUSkins uuskins.com	uuskins.com DIRECT	P2P Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-085	YouPin898 youpin898.com	youpin898.com DIRECT	Mass Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-086	Moon.Market moon.market	moon.market DIRECT	P2P Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-087	CSFloat csfloat.com	csgofloat.com SPLIT PROXY	P2P Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-088	Skin.Land skin.land	auth.skin.land DIRECT	Skins Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-089	C5Game c5game.com	c5game.com DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-090	HaloSkins haloskins.com	haloskins.com DIRECT	Skins Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-091	Buff.163 buff.163.com	buff.163.com DIRECT	Corporate Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-092	Waxpeer waxpeer.com	waxpeer.com DIRECT	P2P Marketplace	SSA § 2.G, SSA § 4.C	See dated evidence
EX-093	CS.MONEY Bot cs.money	auth.dota.trade SPLIT PROXY	Bot Trading	SSA § 2.G, SSA § 4.C	See dated evidence
EX-094	Market.CSGO market.csgo.com	dota2.net SPLIT PROXY	P2P Marketplace	SSA § 2.G, SSA § 4.C	See dated evidence
EX-095	Skinport skinport.com	skinport.app SPLIT PROXY	Regulated Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-096	SkinFlow skinflow.gg	api.skinflow.gg DIRECT	Marketplace/Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-097	DMarket dmarket.com	dmarket.com DIRECT	US Marketplace	SSA § 2.G, SSA § 4.C	See dated evidence
EX-098	Skin.place skin.place	api.skin.place DIRECT	Skins Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-099	SkinsMonkey skinsmonkey.com	skinsmonkey.com DIRECT	Instant Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-100	SkinBaron skinbaron.de	skinbaron.com SPLIT PROXY	Corporate Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-101	Steam steamcommunity.com/market	steamcommunity.com/market DIRECT	Official Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-102	RustTM rust.tm	dota2.net SPLIT PROXY	Rust Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-103	PirateSwap pirateswap.com	login.pirateswap.com DIRECT	Instant Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-104	Mannco.Store mannco.store	mannco.store DIRECT	TF2 Marketplace	SSA § 2.G, SSA § 4.C	See dated evidence
EX-105	SkinSwap skinswap.com	api.skinswap.com DIRECT	Instant Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-106	LootFarm lootfarm.com	lootfarm.com DIRECT	Trading Platform	SSA § 2.G, SSA § 4.C	See dated evidence
EX-107	Rustskins rustskins.com	rustskins.com DIRECT	Rust Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-108	ExeSkins exeskins.com	exeskins.com DIRECT	P2P Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-109	BalticSkins balticskins.com	balticskins.com DIRECT	Skins Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-110	CS.Trade cs.trade	cs.trade DIRECT	Instant Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-111	RapidSkins rapidskins.com	api.rapidskins.com DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-112	TradeIt tradeit.gg	connect-tradeit.com SPLIT PROXY	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-113	Krakatoa krakatoa.com	krakatoa.com DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-114	ShadowPay shadowpay.com	shadowpay.com DIRECT	P2P Marketplace	SSA § 2.G, SSA § 4.C	See dated evidence
EX-115	49skins 49skins.com	api.49skins.com DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-116	SkinVault skinvault.gg	api.skinvault.gg DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-117	Aim Market aim.market	aim.market DIRECT	Skins Trading	SSA § 2.G, SSA § 4.C	See dated evidence
EX-118	Skinout skinout.gg	auth.skinout.gg DIRECT	Instant Sell Portal	SSA § 2.G, SSA § 4.C	See dated evidence
EX-119	NTSkins ntskins.com	ntskins.com DIRECT	Skins Trading	SSA § 2.G, SSA § 4.C	See dated evidence
EX-120	IGXE igxe.cn	igxe.cn DIRECT	Chinese Powerhouse	SSA § 2.G, SSA § 4.C	See dated evidence
EX-121	Swap.gg swap.gg	swap.gg DIRECT	Automated Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-122	Bitskins bitskins.com	bitskins.com DIRECT	Cash-out Portal	SSA § 2.G, SSA § 4.C	See dated evidence
EX-123	GamerPay gamerpay.gg	gamerpay.gg DIRECT	P2P Portal	SSA § 2.G, SSA § 4.C	See dated evidence
EX-124	TF2Mart tf2mart.com	tf2mart.com DIRECT	TF2 Automation	SSA § 2.G, SSA § 4.C	See dated evidence
EX-125	SkinBid skinbid.com	skinbid.com DIRECT	Skin Auctions	SSA § 2.G, SSA § 4.C	See dated evidence
EX-126	LootBear lootbear.com	lootbear.com DIRECT	Skin Rental	SSA § 2.G, SSA § 4.C	See dated evidence
EX-127	Backpack.tf backpack.tf	backpack.tf DIRECT	TF2 Valuation	SSA § 2.G, SSA § 4.C	See dated evidence
EX-128	Scrap.tf scrap.tf	scrap.tf DIRECT	TF2 Scrap Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-129	Marketplace.tf marketplace.tf	marketplace.tf DIRECT	TF2 Cashout	SSA § 2.G, SSA § 4.C	See dated evidence
EX-130	STNTrading stntrading.eu	stntrading.eu DIRECT	TF2 Botnet	SSA § 2.G, SSA § 4.C	See dated evidence
EX-131	Skins.Cash skins.cash	skinscash.live SPLIT PROXY	Instant Cashout	SSA § 2.G, SSA § 4.C	See dated evidence
EX-132	SkinWallet skinwallet.com	skinwallet.com DIRECT	Instant Cashout	SSA § 2.G, SSA § 4.C	See dated evidence
EX-133	Dota2Market dota2market.com	dota2market.com DIRECT	Dota 2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-134	CSGO.NET csgo.net	cn2.easylot.net SPLIT PROXY	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-135	Cybershoke cybershoke.net	auth.cybershoke.net DIRECT	Community Hub	SSA § 2.G, SSA § 4.C	See dated evidence
EX-136	XPlay_GG xplay.gg	xplay.gg DIRECT	Server Network	SSA § 2.G, SSA § 4.C	See dated evidence
EX-137	FastCup fastcup.net	api.fastcup.net DIRECT	Matchmaker Hub	SSA § 2.G, SSA § 4.C	See dated evidence
EX-138	Esportal esportal.com	esportal.com DIRECT	Matchmaking Portal	SSA § 2.G, SSA § 4.C	See dated evidence
EX-139	GamersClub gamersclub.com.br	gamersclub.com.br DIRECT	LATAM Hub	SSA § 2.G, SSA § 4.C	See dated evidence
EX-140	Leetify leetify.com	leetify.com DIRECT	SaaS Analytics	SSA § 2.G, SSA § 4.C	See dated evidence
EX-141	Scope_GG scope.gg	scope.gg DIRECT	SaaS Analytics	SSA § 2.G, SSA § 4.C	See dated evidence
EX-142	TradeUpSpy tradeupspy.com	api.tradeupspy.com DIRECT	SaaS Tools	SSA § 2.G, SSA § 4.C	See dated evidence
EX-143	Epidemic_GG epidemic.gg	epidemic.gg DIRECT	SaaS Tools	SSA § 2.G, SSA § 4.C	See dated evidence
EX-144	CSDeals cs.deals	api.cs.deals DIRECT	Marketplace	SSA § 2.G, SSA § 4.C	See dated evidence
EX-145	Pricempire pricempire.com	pricempire.com DIRECT	SaaS Price DB	SSA § 2.G, SSA § 4.C	See dated evidence
EX-146	CS2Stash cs2stash.com	cs2stash.com DIRECT	SaaS Index	SSA § 2.G, SSA § 4.C	See dated evidence
EX-147	CSGOSkins csgoskins.gg	csgoskins.gg DIRECT	SaaS Index	SSA § 2.G, SSA § 4.C	See dated evidence
EX-148	SteamAnalyst steamanalyst.com	steamanalyst.com DIRECT	SaaS Index	SSA § 2.G, SSA § 4.C	See dated evidence
EX-149	SteamCardExchange steamcardexchange.net	steamcardexchange.net DIRECT	Trading Exchange	SSA § 2.G, SSA § 4.C	See dated evidence
EX-150	DotaBuff dotabuff.com	dotabuff.com DIRECT	SaaS Tracker	SSA § 2.G, SSA § 4.C	See dated evidence
EX-151	Tracker_GG tracker.gg	tracker.gg DIRECT	SaaS Tracker	SSA § 2.G, SSA § 4.C	See dated evidence
EX-152	FSB Market (an anonymized label; the original name is withheld here) FSB Market	FSB Market DIRECT	Mass Blackmarket	SSA § 2.G, SSA § 4.C, SSA § 1.C	See dated evidence
EX-153	FunPay funpay.com	funpay.com DIRECT	Account Exchange	SSA § 2.G, SSA § 4.C, SSA § 1.C	See dated evidence
EX-154	PlayerAuctions playerauctions.com	playerauctions.com DIRECT	Grey Market	SSA § 2.G, SSA § 1.C	See dated evidence
EX-155	Eldorado.gg eldorado.gg	eldorado.gg DIRECT	Account Portal	SSA § 2.G, SSA § 1.C	See dated evidence
EX-156	G2A g2a.com	g2a.com DIRECT	Mass Key Market	SSA § 2.G, SSA § 1.C	See dated evidence
EX-157	Kinguin kinguin.net	kinguin.net DIRECT	Mass Key Market	SSA § 2.G, SSA § 1.C	See dated evidence
EX-158	G2G.com g2g.com	g2g.com DIRECT	Virtual Services	SSA § 2.G, SSA § 1.C	See dated evidence
EX-159	Playerup playerup.com	playerup.com DIRECT	Account Broker	SSA § 2.G, SSA § 1.C	See dated evidence
EX-160	Z2U.com z2u.com	www.z2u.com DIRECT	Ready-Account Hub	SSA § 2.G, SSA § 1.C	See dated evidence
EX-161	SmurfHub smurfhub.net	smurfhub.net DIRECT	Smurf Shop	SSA § 2.G, SSA § 1.C	See dated evidence
EX-162	SmurfAccounts smurfaccounts.com	smurfaccounts.com DIRECT	Smurf Shop	SSA § 2.G, SSA § 1.C	See dated evidence
EX-163	BuyCSGORank buycsgorank.com	buycsgorank.com DIRECT	Rank Shop	SSA § 2.G, SSA § 1.C	See dated evidence
EX-164	CSGOSmurfKings csgosmurfkings.com	csgosmurfkings.com DIRECT	Smurf Shop	SSA § 2.G, SSA § 1.C	See dated evidence
EX-165	SmurfStore_Co smurfstore.co	smurfstore.co DIRECT	Smurf Shop	SSA § 2.G, SSA § 1.C	See dated evidence
EX-166	SteamLvlUp steamlvlup.com	steamlvlup.com DIRECT	Card Leveling	SSA § 2.G, SSA § 1.C	See dated evidence
EX-167	SteamLevels steamlevels.com	steamlevels.com DIRECT	Card Leveling	SSA § 2.G, SSA § 1.C	See dated evidence
EX-168	LevelSteam levelsteam.com	levelsteam.com DIRECT	Card Leveling	SSA § 2.G, SSA § 1.C	See dated evidence
EX-169	SteamLevelU steamlevelu.com	steamlevelu.com DIRECT	Card Leveling	SSA § 2.G, SSA § 1.C	See dated evidence
EX-170	EloKing eloking.com	eloking.com DIRECT	Rank Boosting	SSA § 2.G, SSA § 1.C	See dated evidence
EX-171	Boosteria boosteria.org	boosteria.org DIRECT	Rank Boosting	SSA § 2.G, SSA § 1.C	See dated evidence
EX-172	Overgear overgear.com	overgear.com DIRECT	Boosting SaaS	SSA § 2.G, SSA § 1.C	See dated evidence
EX-173	BlazingBoost blazingboost.com	blazingboost.com DIRECT	Boosting SaaS	SSA § 2.G, SSA § 1.C	See dated evidence
EX-174	Dota2Boost dota2boost.com	dota2boost.com DIRECT	Rank Boosting	SSA § 2.G, SSA § 1.C	See dated evidence
EX-175	BuyBoost buyboost.com	buyboost.com DIRECT	Boosting SaaS	SSA § 2.G, SSA § 1.C	See dated evidence

Bagian IV: Arsitektur Teknis & Mekanisme Otentikasi REF: ANALISIS TEKNIS -01

1. Tidak Adanya Validasi Kepemilikan Domain dalam OpenID 2.0: Penerapan protokol OpenID 2.0 oleh Valve (https://steamcommunity.com/openid/login) mengevaluasi openid.return_to dan openid.realm parameter tanpa memerlukan pendaftaran pengembang terlebih dahulu, verifikasi tantangan kriptografis, atau validasi kepemilikan domain. Setiap operator komersial dapat mengarahkan pengguna ke layar masuk Valve dan menerima pernyataan identitas yang ditandatangani secara kriptografis (yang berisi SteamID dengan bit "64-") yang dialihkan ke domain mana pun.

2. Penyalahgunaan Kunci "Programmatic Inventory Querying" dan "API": Setelah otentikasi pengguna dikonfirmasi melalui OpenID, operator melakukan permintaan ke titik akhir Web API publik dan mitra (IEconItems_730/GetPlayerItems) untuk mengindeks aset inventaris secara real-time. Jaringan perdagangan otomatis menggunakan token sesi terprogram untuk mengirimkan, memeriksa, dan menerima penawaran perdagangan peer-to-peer (P2P), yang secara langsung bertentangan dengan larangan interaksi non-manusia sebagaimana diatur dalam SSA § 4.C.

3. Asimetri Filter Tautan: Adanya peringatan domain yang ditujukan kepada konsumen bersamaan dengan titik akhir otentikasi yang berfungsi penuh menimbulkan kontradiksi regulasi: telemetri keamanan Valve mengklasifikasikan operator-operator ini sebagai "berpotensi berbahaya", namun infrastruktur otentikasi Valve tetap melakukan otentikasi terhadap basis penggunanya.

Metodologi Pembuktian & Pernyataan Rantai Pengawasan

Dokumen ini disusun berdasarkan data tangkapan jaringan yang belum terotentikasi, riwayat kueri registri RDAP, serta manifes hash kriptografi yang telah diverifikasi. Tidak ada kredensial login pengguna yang diuji terhadap kemungkinan kebocoran atau diproses. Semua temuan mencerminkan kondisi jaringan produksi yang dapat diamati per tanggal 2026.. Dokumen ini berfungsi sebagai bukti teknis yang netral dan disiapkan untuk keperluan penyelidikan yudisial, regulasi, dan publik.

RINGKASAN: SHA-256: TERVERIFIKASI

c507c9025f93da0aadaf395c4d8882f25973211c318ee8e9b6f18a5b3755e050

ARSIP: REKAM JEJAK HUKUM YANG TERBUKA

DITERBITKAN & DITANDATANGANI OLEH: phishdestroy.io · Koalisi Penelitian Forensik

STATUS HUKUM: SEMUA HAK DILEPASKAN UNTUK KEMANUSIAAN · CC0 DOMAIN PUBLIK UNIVERSAL