법정감사법 및 규제 관련 부속서

ValveSteam 생태계 내 체계적인 제3자 ‘API’ 프로비저닝, 자동화된 우회 아키텍처 및 계약상 미이행

도메인 발급 phishdestroy.io

대상 플랫폼 Valve Steam / Steamworks

1차 인증 벡터 Steam OpenID 2.0 / 웹 API

법적 헌사 All Rights to Humanity (CC0)

제1부: 행정 지침서 및 사실 조사 결과 참조: MEMO-SUMMARY-01

본 문서는 ‘Valve’ 사가 공개한 상업적 조건, 해당 회사의 기술적 인증 엔드포인트, 그리고 관찰된 제3자 상업 플랫폼 간의 운영상 상호 연관성을 검토하는 공식적인 포렌식 감사 보고서입니다. 본 감사는 수동적이고 인증되지 않은 네트워크 관찰, RDAP 등록 정보 확인, 그리고 공개된 Link Filter 텔레메트리 데이터를 활용하여 수행되었습니다.

사실적 핵심: 실증적 관찰을 통해 ‘Valve’의 공개적인 계약상 진술과 실제 생산 인프라 간에 체계적인 괴리가 존재함이 확인되었다. Steam 가입자 계약(SSA)은 무단 상업적 이용(§ 2.G), 자동화된 봇/스크립트 상호작용(§ 4.C), 계정 양도(§ 1.C)를 엄격히 금지하고 있음에도 불구하고, Valve Corporation은 수십억 달러 규모의 2차 거래량을 발생시키는 최소 175개의 상업적 주체들에게 실시간 프로그래밍 방식의 OpenID 인증 및 재고 조회 인프라를 지속적으로 제공하고 있다.

175

감사 대상 상업 운영자

별도 도메인 인증 호스트

필터-분할 프록시 쌍

100%

시행되지 않은 사회보장법(SSA) 제2.G조 / 제4.C조

강제 인증 취소

적용되는 계약상 및 법적 체계

SSA §2.G

상업적 이용 금지: Valve Corporation의 사전 서면 승인 없이 콘텐츠 및 서비스를 상업적 목적으로 이용하는 것을 명시적으로 금지합니다.

SSA §4.C

자동화 제한: Steam의 서비스 및 시장과 상호작용하는 스크립트, 트레이딩 봇, 매크로 또는 사람이 직접 제어하지 않는 시스템의 사용을 엄격히 금지합니다.

SSA §1.C

개인용 사용 의무화: 계정은 개인용으로만 사용해야 하며, Steam 사용자 계정의 판매, 대여, 양도 또는 거래를 명시적으로 금지합니다.

EU DSA(2022/2065)

전계적 위험 평가 (34/35조): 초대형 온라인 플랫폼(VLOP)은 자동화된 오용 및 무단 상업적 이용에서 비롯되는 시스템적 위험을 적극적으로 탐지, 평가 및 완화해야 합니다.

제2절: 전시 원장 A — 문서화된 링크 필터 분할 쌍 (26 경로) 참조: EX-SPLIT-LEDGER

분할 도메인 회피 기법에 대한 포렌식 분석: Valve의 ‘Steam’ 링크 필터 시스템(steamcommunity.com/linkfilter/?url=...), 최종 사용자가 신고된 도박 또는 암시장 플랫폼으로 연결되는 링크를 클릭하면, Valve에서 눈에 잘 띄는 경고 메시지가 표시됩니다 ("링크가 차단되었습니다! ... 잠재적으로 악성일 가능성이 있는 것으로 표시되었습니다"). 그러나 포렌식 경로 추적 결과, 26 상업용 플랫폼이 분할 도메인 아키텍처: 링크 필터에서 주 상업용 도메인은 ‘차단(BLOCKED)’ 상태로 표시되지만, Valve의 OpenID 응답 엔드포인트를 호스팅하는 보조 도메인은 ‘안전(CLEAN)’으로 표시됩니다. Valve의 OpenID 서버는 이러한 프록시 호스트로부터의 인증 요청을 중단 없이 수락하여, 사용자 안전 경고를 무력화하면서도 로그인 처리를 계속합니다.

#	주요 상업용 도메인	주 필터	OpenID 인증 프록시 도메인	인증 필터	RDAP 등록됨	포획 기준
01	rollbit.com	BLOCKED	rbsnin.com	CLEAN	2026-09-18	PASSIVE_CAPTURE
02	skin.club	BLOCKED	sc-auth.net	CLEAN	2019-04-02	PASSIVE_CAPTURE
03	howl.gg	BLOCKED	howl.uno	CLEAN	2026-08-11	PASSIVE_CAPTURE
04	duelbits.com	BLOCKED	switchflips.com	CLEAN	2020-04-21	PASSIVE_CAPTURE
05	csgofast.com	BLOCKED	steam-login.authtofast.com	CLEAN	2026-06-30	PASSIVE_CAPTURE
06	farmskins.com	BLOCKED	steam.kobal.cc	CLEAN	2017-01-07	PASSIVE_CAPTURE
07	cobaltlab.tech	BLOCKED	cobaltauth.com	CLEAN	2025-01-07	PASSIVE_CAPTURE
08	csgo.net	BLOCKED	cn2.easylot.net	CLEAN	2016-09-03	PASSIVE_CAPTURE
09	ggdrop.com	BLOCKED	ggauth.com	CLEAN	2023-05-03	PASSIVE_CAPTURE
10	rustchance.com	BLOCKED	hgfuihd.com	CLEAN	2019-01-27	PASSIVE_CAPTURE
11	skin.fans	BLOCKED	auth.skinfans.com	CLEAN	2018-07-16	PASSIVE_CAPTURE
12	skinport.com	BLOCKED	skinport.app	CLEAN	2020-06-20	PASSIVE_CAPTURE
13	skins.cash	BLOCKED	skinscash.live	CLEAN	2019-12-05	PASSIVE_CAPTURE
14	tf2hunt.com	BLOCKED	rstspcl.com	CLEAN	2020-08-08	PASSIVE_CAPTURE
15	daddyskins.com	BLOCKED	go-go-daddy.com	CLEAN	2019-01-26	PASSIVE_CAPTURE
16	key-drop.com	BLOCKED	kdauth.com	CLEAN	2026-05-13	PASSIVE_CAPTURE
17	clash.gg	BLOCKED	clggauth.com	CLEAN	2024-09-16	PASSIVE_CAPTURE
18	c5game.com	BLOCKED	www.imbastar.com	CLEAN	2016-02-27	PASSIVE_CAPTURE
19	swap.gg	BLOCKED	swapauth.com	CLEAN	2018-10-06	PASSIVE_CAPTURE
20	shadowpay.com	BLOCKED	thelogins.com	CLEAN	2018-01-22	PASSIVE_CAPTURE
21	csgocases.com	BLOCKED	log-1n.com	CLEAN	2017-11-27	PASSIVE_CAPTURE
22	csgogem.com	BLOCKED	api.csgem.com	CLEAN	2014-03-08	PASSIVE_CAPTURE
23	gamdom.com	BLOCKED	login.gambldom.com	CLEAN	2017-09-24	PASSIVE_CAPTURE
24	12cs.fail	BLOCKED	fail.games	CLEAN	2021-08-24	PASSIVE_CAPTURE
25	skinsnipe.com	BLOCKED	pricing.tradeupspy.com	CLEAN	2020-03-11	PASSIVE_CAPTURE
26	csgobig.com	BLOCKED	letmeinbig.com	CLEAN	2023-01-20	PASSIVE_CAPTURE

* 참고: 2026-09-19 및 2026-09-21.에서 인증되지 않은 Steam 링크 필터 엔드포인트를 대상으로 수행된 수동 검사. 원시 HTTP 응답 본문 및 SHA-256 해시 값은 저장소 데이터셋(steam_tos_assets/linkfilter-2026-09-22.json)에 보존됩니다.

제3부: 증빙 장부 B — 175의 감사 대상 상업 기관에 대한 종합 조사 참조: EX-175-MASTER-CENSUS

다음 등록부에는 감사 데이터베이스에서 적극적으로 검증된 모든 ‘175’ 제3자 상업용 플랫폼에 대한 세부 정보가 수록되어 있습니다. 각 기록에는 기관명, 주요 상업용 도메인, 확인된 Steam OpenID 인증 경로, 활동 분류, 계약 위반 매핑(SSA § 2.G, SSA § 4.C, SSA § 1.C) 및 원본 데이터 세트에 기록된 조치 필드가 표시됩니다. “날짜가 명시된 증거 참조(See dated evidence)”라는 표기는 독자로 하여금 관련 기록을 확인하도록 안내하는 것이며, Valve가 아무런 조치를 취하지 않았음을 입증하는 것은 아닙니다. 조치 필드가 누락된 경우, 해당 사항은 확인되지 않은 것으로 보고됩니다.

증거물	엔티티 이름 및 주요 도메인	관측된 인증 경로/프록시	분류	계약 위반	Valve 액션
EX-001	CSGORoll csgoroll.com	www.csgoroll.com DIRECT	Skin Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-002	CSGOEmpire csgoempire.com	csgoempirelogin4.com SPLIT PROXY	Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-003	Rollbit rollbit.com	rbsnin.com SPLIT PROXY	Crypto Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-004	500 Casino 500.casino	fivezerozero.co SPLIT PROXY	Licenced Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-005	CSGOBig csgobig.com	csgobig.com DIRECT	Roulette/Slots	SSA § 2.G, SSA § 4.C	See dated evidence
EX-006	CaseDrop casedrop.com	casedrop.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-007	RustReaper rustreaper.com	rustreaper.com DIRECT	Rust Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-008	BanditCamp banditcamp.com	banditcamp.com DIRECT	Rust Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-009	SkinBox skinbox.com	skinbox.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-010	TastyDrop tastydrop.com	tastydrop.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-011	CSGOPolygon csgopolygon.gg	csgopolygon.gg DIRECT	Roulette Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-012	MagicDrop magicdrop.ru	magicdrop.ru DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-013	CSDice csdice.com	csdice.com DIRECT	Dice Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-014	Rustly rustly.com	rustly.com DIRECT	Rust Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-015	SkinOdds skinodds.com	skinodds.com DIRECT	Upgrader Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-016	CSGOWin csgowin.com	csgowin.com DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-017	CSGORun csgorun.net	csgorun.net DIRECT	Crash Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-018	OpenSkins openskins.com	openskins.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-019	RustBet rustbet.com	rustbet.com DIRECT	Rust Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-020	CSGOMagic csgomagic.com	csgomagic.com DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-021	CSGOBounty csgobounty.com	csgobounty.com DIRECT	Upgrader/Contract	SSA § 2.G, SSA § 4.C	See dated evidence
EX-022	EZSkins ezskins.com	ezskins.com DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-023	RustCases rustcases.com	rustcases.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-024	CSGOReaper csgoreaper.com	csgoreaper.com DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-025	CSGOCases csgocases.com	csgocases.com DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-026	CSGO-Skins csgo-skins.com	csgo-skins.com DIRECT	Case Upgrader	SSA § 2.G, SSA § 4.C	See dated evidence
EX-027	CSGONet csgonet.com	csgonet.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-028	WTFSkins wtfskins.com	wtfskins.com DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-029	CSGOFast csgofast.com	steam-login.authtofast.com SPLIT PROXY	Roulette Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-030	Duelbits duelbits.com	switchflips.com SPLIT PROXY	Crypto Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-031	FlameCases flamecases.com	flamecases.com DIRECT	Case Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-032	Farmskins farmskins.com	steam.kobal.cc SPLIT PROXY	Case Opener	SSA § 2.G, SSA § 4.C	See dated evidence
EX-033	CSGOLuck csgoluck.com	csgoluck.com DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-034	Gamedom gamedom.com	gamedom.com DIRECT	Crypto Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-035	Skin.Club skin.club	sc-auth.net SPLIT PROXY	Case Battles	SSA § 2.G, SSA § 4.C	See dated evidence
EX-036	DaddySkins daddyskins.com	daddyskins.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-037	Insane.gg insane.gg	api.insane.gg DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-038	Rustix rustix.gg	rustix.gg DIRECT	Rust Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-039	Skins.Club skins.club	skins.club DIRECT	Skin Upgrade	SSA § 2.G, SSA § 4.C	See dated evidence
EX-040	CSGOHouse csgohouse.org	csgohouse.org DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-041	SkinRave skinrave.net	skinrave.net DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-042	BloodyCase_GG bloodycase.gg	bloodycase.gg DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-043	CSGOClicker csgoclicker.com	csgoclicker.com DIRECT	Clicker/Upgrade	SSA § 2.G, SSA § 4.C	See dated evidence
EX-044	RustBet_GG rustbet.gg	rustbet.gg DIRECT	Rust Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-045	CS_Drop cs-drop.com	cs-drop.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-046	HellStore hellstore.net	hellstore.net DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-047	RustLoot rustloot.com	rustloot.com DIRECT	Rust Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-048	CSGO_Case csgo-case.com	csgo-case.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-049	CS2Skin cs2skin.com	cs2skin.com DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-050	Juice_GG juice.gg	letmeinjuice.com SPLIT PROXY	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-051	GGDrop ggdrop.com	ggauth.com SPLIT PROXY	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-052	CSGOGem csgogem.com	csgogem.com DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-053	Rainbet rainbet.com	services.rainbet.com DIRECT	Crypto Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-054	Howl_GG howl.gg	howl.uno SPLIT PROXY	Skins Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-055	Chicken_GG chicken.gg	chicken.gg DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-056	CSGOCasino_GG csgocasino.gg	api.csgocasino.gg DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-057	Hunt_GG hunt.gg	api.hunt.gg DIRECT	Skins Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-058	CSBattle csbattle.com	csbattle.com DIRECT	Case Battles	SSA § 2.G, SSA § 4.C	See dated evidence
EX-059	SkinRave_GG skinrave.gg	api.skinrave.gg DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-060	CSDouble csdouble.gg	csdouble.gg DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-061	RustChance rustchance.com	hgfuihd.com SPLIT PROXY	Rust Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-062	RustClash rustclash.com	rustclash.com DIRECT	Rust Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-063	CobaltLab cobaltlab.tech	cobaltauth.com SPLIT PROXY	Rust Automation	SSA § 2.G, SSA § 4.C	See dated evidence
EX-064	Raided_GG raided.gg	api.raided.gg DIRECT	Rust Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-065	RustNeo rustneo.gg	rustneo.gg DIRECT	Rust Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-066	Splits_GG splits.gg	splits.gg DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-067	Upgrader_Pro upgrader.pro	upgauth.space SPLIT PROXY	Skin Upgrader	SSA § 2.G, SSA § 4.C	See dated evidence
EX-068	SkinFans skin.fans	auth.skinfans.com SPLIT PROXY	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-069	HotPizza hotpizza.one	hotpizza.one DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-070	G4Skins g4skins.com	auth.g4s.to SPLIT PROXY	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-071	12CS_Fail 12cs.fail	12cs.fail DIRECT	Crash Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-072	TF2Royal tf2royal.com	tf2auth.com SPLIT PROXY	TF2 Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-073	TF2Easy www.tf2easy.com	www.tf2easy.com DIRECT	TF2 Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-074	TF2Hunt tf2hunt.com	rstspcl.com SPLIT PROXY	TF2 Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-075	TF2Bet tf2.bet/coinflip	tf2.bet DIRECT	TF2 Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-076	TF2Blaze tf2blaze.com	tf2blaze.com DIRECT	TF2 Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-077	OpenStars_GG openstars.gg	openstars.gg DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-078	Shuffle_Com shuffle.com	shuffle.com DIRECT	Crypto Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-079	Skins.com skins.com	api.skins.com DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-080	White.Market white.market	white.market DIRECT	P2P Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-081	Buff.Market buff.market	buff.market DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-082	Avan.Market avan.market	avan.market DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-083	CS.MONEY cs.money	auth.dota.trade SPLIT PROXY	Trading Engine	SSA § 2.G, SSA § 4.C	See dated evidence
EX-084	UUSkins uuskins.com	uuskins.com DIRECT	P2P Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-085	YouPin898 youpin898.com	youpin898.com DIRECT	Mass Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-086	Moon.Market moon.market	moon.market DIRECT	P2P Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-087	CSFloat csfloat.com	csgofloat.com SPLIT PROXY	P2P Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-088	Skin.Land skin.land	auth.skin.land DIRECT	Skins Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-089	C5Game c5game.com	c5game.com DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-090	HaloSkins haloskins.com	haloskins.com DIRECT	Skins Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-091	Buff.163 buff.163.com	buff.163.com DIRECT	Corporate Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-092	Waxpeer waxpeer.com	waxpeer.com DIRECT	P2P Marketplace	SSA § 2.G, SSA § 4.C	See dated evidence
EX-093	CS.MONEY Bot cs.money	auth.dota.trade SPLIT PROXY	Bot Trading	SSA § 2.G, SSA § 4.C	See dated evidence
EX-094	Market.CSGO market.csgo.com	dota2.net SPLIT PROXY	P2P Marketplace	SSA § 2.G, SSA § 4.C	See dated evidence
EX-095	Skinport skinport.com	skinport.app SPLIT PROXY	Regulated Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-096	SkinFlow skinflow.gg	api.skinflow.gg DIRECT	Marketplace/Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-097	DMarket dmarket.com	dmarket.com DIRECT	US Marketplace	SSA § 2.G, SSA § 4.C	See dated evidence
EX-098	Skin.place skin.place	api.skin.place DIRECT	Skins Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-099	SkinsMonkey skinsmonkey.com	skinsmonkey.com DIRECT	Instant Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-100	SkinBaron skinbaron.de	skinbaron.com SPLIT PROXY	Corporate Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-101	Steam steamcommunity.com/market	steamcommunity.com/market DIRECT	Official Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-102	RustTM rust.tm	dota2.net SPLIT PROXY	Rust Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-103	PirateSwap pirateswap.com	login.pirateswap.com DIRECT	Instant Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-104	Mannco.Store mannco.store	mannco.store DIRECT	TF2 Marketplace	SSA § 2.G, SSA § 4.C	See dated evidence
EX-105	SkinSwap skinswap.com	api.skinswap.com DIRECT	Instant Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-106	LootFarm lootfarm.com	lootfarm.com DIRECT	Trading Platform	SSA § 2.G, SSA § 4.C	See dated evidence
EX-107	Rustskins rustskins.com	rustskins.com DIRECT	Rust Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-108	ExeSkins exeskins.com	exeskins.com DIRECT	P2P Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-109	BalticSkins balticskins.com	balticskins.com DIRECT	Skins Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-110	CS.Trade cs.trade	cs.trade DIRECT	Instant Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-111	RapidSkins rapidskins.com	api.rapidskins.com DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-112	TradeIt tradeit.gg	connect-tradeit.com SPLIT PROXY	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-113	Krakatoa krakatoa.com	krakatoa.com DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-114	ShadowPay shadowpay.com	shadowpay.com DIRECT	P2P Marketplace	SSA § 2.G, SSA § 4.C	See dated evidence
EX-115	49skins 49skins.com	api.49skins.com DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-116	SkinVault skinvault.gg	api.skinvault.gg DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-117	Aim Market aim.market	aim.market DIRECT	Skins Trading	SSA § 2.G, SSA § 4.C	See dated evidence
EX-118	Skinout skinout.gg	auth.skinout.gg DIRECT	Instant Sell Portal	SSA § 2.G, SSA § 4.C	See dated evidence
EX-119	NTSkins ntskins.com	ntskins.com DIRECT	Skins Trading	SSA § 2.G, SSA § 4.C	See dated evidence
EX-120	IGXE igxe.cn	igxe.cn DIRECT	Chinese Powerhouse	SSA § 2.G, SSA § 4.C	See dated evidence
EX-121	Swap.gg swap.gg	swap.gg DIRECT	Automated Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-122	Bitskins bitskins.com	bitskins.com DIRECT	Cash-out Portal	SSA § 2.G, SSA § 4.C	See dated evidence
EX-123	GamerPay gamerpay.gg	gamerpay.gg DIRECT	P2P Portal	SSA § 2.G, SSA § 4.C	See dated evidence
EX-124	TF2Mart tf2mart.com	tf2mart.com DIRECT	TF2 Automation	SSA § 2.G, SSA § 4.C	See dated evidence
EX-125	SkinBid skinbid.com	skinbid.com DIRECT	Skin Auctions	SSA § 2.G, SSA § 4.C	See dated evidence
EX-126	LootBear lootbear.com	lootbear.com DIRECT	Skin Rental	SSA § 2.G, SSA § 4.C	See dated evidence
EX-127	Backpack.tf backpack.tf	backpack.tf DIRECT	TF2 Valuation	SSA § 2.G, SSA § 4.C	See dated evidence
EX-128	Scrap.tf scrap.tf	scrap.tf DIRECT	TF2 Scrap Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-129	Marketplace.tf marketplace.tf	marketplace.tf DIRECT	TF2 Cashout	SSA § 2.G, SSA § 4.C	See dated evidence
EX-130	STNTrading stntrading.eu	stntrading.eu DIRECT	TF2 Botnet	SSA § 2.G, SSA § 4.C	See dated evidence
EX-131	Skins.Cash skins.cash	skinscash.live SPLIT PROXY	Instant Cashout	SSA § 2.G, SSA § 4.C	See dated evidence
EX-132	SkinWallet skinwallet.com	skinwallet.com DIRECT	Instant Cashout	SSA § 2.G, SSA § 4.C	See dated evidence
EX-133	Dota2Market dota2market.com	dota2market.com DIRECT	Dota 2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-134	CSGO.NET csgo.net	cn2.easylot.net SPLIT PROXY	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-135	Cybershoke cybershoke.net	auth.cybershoke.net DIRECT	Community Hub	SSA § 2.G, SSA § 4.C	See dated evidence
EX-136	XPlay_GG xplay.gg	xplay.gg DIRECT	Server Network	SSA § 2.G, SSA § 4.C	See dated evidence
EX-137	FastCup fastcup.net	api.fastcup.net DIRECT	Matchmaker Hub	SSA § 2.G, SSA § 4.C	See dated evidence
EX-138	Esportal esportal.com	esportal.com DIRECT	Matchmaking Portal	SSA § 2.G, SSA § 4.C	See dated evidence
EX-139	GamersClub gamersclub.com.br	gamersclub.com.br DIRECT	LATAM Hub	SSA § 2.G, SSA § 4.C	See dated evidence
EX-140	Leetify leetify.com	leetify.com DIRECT	SaaS Analytics	SSA § 2.G, SSA § 4.C	See dated evidence
EX-141	Scope_GG scope.gg	scope.gg DIRECT	SaaS Analytics	SSA § 2.G, SSA § 4.C	See dated evidence
EX-142	TradeUpSpy tradeupspy.com	api.tradeupspy.com DIRECT	SaaS Tools	SSA § 2.G, SSA § 4.C	See dated evidence
EX-143	Epidemic_GG epidemic.gg	epidemic.gg DIRECT	SaaS Tools	SSA § 2.G, SSA § 4.C	See dated evidence
EX-144	CSDeals cs.deals	api.cs.deals DIRECT	Marketplace	SSA § 2.G, SSA § 4.C	See dated evidence
EX-145	Pricempire pricempire.com	pricempire.com DIRECT	SaaS Price DB	SSA § 2.G, SSA § 4.C	See dated evidence
EX-146	CS2Stash cs2stash.com	cs2stash.com DIRECT	SaaS Index	SSA § 2.G, SSA § 4.C	See dated evidence
EX-147	CSGOSkins csgoskins.gg	csgoskins.gg DIRECT	SaaS Index	SSA § 2.G, SSA § 4.C	See dated evidence
EX-148	SteamAnalyst steamanalyst.com	steamanalyst.com DIRECT	SaaS Index	SSA § 2.G, SSA § 4.C	See dated evidence
EX-149	SteamCardExchange steamcardexchange.net	steamcardexchange.net DIRECT	Trading Exchange	SSA § 2.G, SSA § 4.C	See dated evidence
EX-150	DotaBuff dotabuff.com	dotabuff.com DIRECT	SaaS Tracker	SSA § 2.G, SSA § 4.C	See dated evidence
EX-151	Tracker_GG tracker.gg	tracker.gg DIRECT	SaaS Tracker	SSA § 2.G, SSA § 4.C	See dated evidence
EX-152	FSB Market (an anonymized label; the original name is withheld here) FSB Market	FSB Market DIRECT	Mass Blackmarket	SSA § 2.G, SSA § 4.C, SSA § 1.C	See dated evidence
EX-153	FunPay funpay.com	funpay.com DIRECT	Account Exchange	SSA § 2.G, SSA § 4.C, SSA § 1.C	See dated evidence
EX-154	PlayerAuctions playerauctions.com	playerauctions.com DIRECT	Grey Market	SSA § 2.G, SSA § 1.C	See dated evidence
EX-155	Eldorado.gg eldorado.gg	eldorado.gg DIRECT	Account Portal	SSA § 2.G, SSA § 1.C	See dated evidence
EX-156	G2A g2a.com	g2a.com DIRECT	Mass Key Market	SSA § 2.G, SSA § 1.C	See dated evidence
EX-157	Kinguin kinguin.net	kinguin.net DIRECT	Mass Key Market	SSA § 2.G, SSA § 1.C	See dated evidence
EX-158	G2G.com g2g.com	g2g.com DIRECT	Virtual Services	SSA § 2.G, SSA § 1.C	See dated evidence
EX-159	Playerup playerup.com	playerup.com DIRECT	Account Broker	SSA § 2.G, SSA § 1.C	See dated evidence
EX-160	Z2U.com z2u.com	www.z2u.com DIRECT	Ready-Account Hub	SSA § 2.G, SSA § 1.C	See dated evidence
EX-161	SmurfHub smurfhub.net	smurfhub.net DIRECT	Smurf Shop	SSA § 2.G, SSA § 1.C	See dated evidence
EX-162	SmurfAccounts smurfaccounts.com	smurfaccounts.com DIRECT	Smurf Shop	SSA § 2.G, SSA § 1.C	See dated evidence
EX-163	BuyCSGORank buycsgorank.com	buycsgorank.com DIRECT	Rank Shop	SSA § 2.G, SSA § 1.C	See dated evidence
EX-164	CSGOSmurfKings csgosmurfkings.com	csgosmurfkings.com DIRECT	Smurf Shop	SSA § 2.G, SSA § 1.C	See dated evidence
EX-165	SmurfStore_Co smurfstore.co	smurfstore.co DIRECT	Smurf Shop	SSA § 2.G, SSA § 1.C	See dated evidence
EX-166	SteamLvlUp steamlvlup.com	steamlvlup.com DIRECT	Card Leveling	SSA § 2.G, SSA § 1.C	See dated evidence
EX-167	SteamLevels steamlevels.com	steamlevels.com DIRECT	Card Leveling	SSA § 2.G, SSA § 1.C	See dated evidence
EX-168	LevelSteam levelsteam.com	levelsteam.com DIRECT	Card Leveling	SSA § 2.G, SSA § 1.C	See dated evidence
EX-169	SteamLevelU steamlevelu.com	steamlevelu.com DIRECT	Card Leveling	SSA § 2.G, SSA § 1.C	See dated evidence
EX-170	EloKing eloking.com	eloking.com DIRECT	Rank Boosting	SSA § 2.G, SSA § 1.C	See dated evidence
EX-171	Boosteria boosteria.org	boosteria.org DIRECT	Rank Boosting	SSA § 2.G, SSA § 1.C	See dated evidence
EX-172	Overgear overgear.com	overgear.com DIRECT	Boosting SaaS	SSA § 2.G, SSA § 1.C	See dated evidence
EX-173	BlazingBoost blazingboost.com	blazingboost.com DIRECT	Boosting SaaS	SSA § 2.G, SSA § 1.C	See dated evidence
EX-174	Dota2Boost dota2boost.com	dota2boost.com DIRECT	Rank Boosting	SSA § 2.G, SSA § 1.C	See dated evidence
EX-175	BuyBoost buyboost.com	buyboost.com DIRECT	Boosting SaaS	SSA § 2.G, SSA § 1.C	See dated evidence

제4장: 기술 아키텍처 및 인증 메커니즘 참조: TECH-ANALYSIS-01

1. OpenID에서 도메인 소유권 검증 기능의 부재 2.0: Valve의 OpenID 2.0 프로토콜 구현 (https://steamcommunity.com/openid/login)는 다음을 평가합니다. openid.return_to 그리고 openid.realm 개발자의 사전 등록, 암호화 기반 인증 검증 또는 도메인 소유권 확인 절차 없이도 매개변수를 제공할 수 있습니다. 모든 상업 운영자는 사용자를 Valve의 로그인 화면으로 안내하고, 임의의 도메인으로 리디렉션된 암호화 서명이 포함된 신원 확인 정보(64-비트 SteamID 포함)를 수신할 수 있습니다.

2. 프로그래매틱 인벤토리 조회 및 API 키 남용: OpenID를 통해 사용자 인증이 확인되면, 운영자는 공개 및 제휴 웹 API 엔드포인트에 쿼리를 보냅니다 (IEconItems_730/GetPlayerItems)를 통해 재고 자산을 실시간으로 색인화합니다. 자동화된 거래 네트워크는 프로그래매틱 세션 토큰을 활용하여 P2P(Peer-to-Peer) 거래 제안을 제출, 조회 및 수락하는데, 이는 SSA §4.C에서 규정하는 비인간 상호작용 금지 조항에 명백히 위배됩니다.

3. 링크 필터 비대칭성: 소비자 대상 도메인 경고와 완벽하게 작동하는 인증 엔드포인트가 공존하는 상황은 규제상의 모순을 야기합니다. 즉, Valve의 보안 텔레메트리 시스템은 해당 운영자를 “잠재적 악성”으로 분류하고 있음에도 불구하고, Valve의 인증 인프라는 계속해서 해당 사용자 기반을 인증하고 있습니다.

증거 수집 방법론 및 증거 관리 이력서

본 문서는 인증되지 않은 네트워크 캡처 데이터, 과거 RDAP 레지스트리 조회 결과 및 검증된 암호화 해시 매니페스트를 바탕으로 작성되었습니다. 어떠한 사용자 로그인 자격 증명도 유출 테스트를 거치거나 처리되지 않았습니다. 모든 조사 결과는 9월 2026. 시점의 관찰 가능한 운영 네트워크 상태를 반영합니다. 본 문서는 사법, 규제 및 대중의 조회를 위해 작성된 초당파적인 기술적 증거 자료입니다.

요약: SHA-256, 검증 완료

c507c9025f93da0aadaf395c4d8882f25973211c318ee8e9b6f18a5b3755e050

아카이브: 공개 법률 기록

발행 및 서명자: phishdestroy.io · 법과학 연구 연합

법적 지위: 모든 권리는 인류에게 양도됨 · CC0 범용 퍼블릭 도메인