phishdestroy.io · Forensic Research Coalition · Universal Public Record

DOCKET: VAL-REG-2026-09-EVID

PROVENANCE: phishdestroy.io/steam_dossier/

RIGHTS: ALL RIGHTS SURRENDERED TO HUMANITY

Forensic Audit Act & Regulatory Exhibit

Systematic Third-Party API Provisioning, Automated Bypass Architecture & Contractual Non-Enforcement in the Valve Steam Ecosystem

Issuing Domain phishdestroy.io

Target Platform Valve Steam / Steamworks

Primary Auth Vector Steam OpenID 2.0 / Web API

Legal Dedication All Rights to Humanity (CC0)

Section I: Executive Memorandum & Factual Findings REF: MEMO-SUMMARY-01

This document constitutes a formal forensic audit act examining the operational intersection between Valve Corporation's published commercial terms, its technical authentication endpoints, and observed third-party commercial platforms. The audit was conducted using passive, unauthenticated network observation, RDAP registration verification, and public Link Filter telemetry.

Factual Core: Empirical observation establishes a systematic divergence between Valve's public contractual representations and its production infrastructure. While the Steam Subscriber Agreement (SSA) strictly prohibits unauthorized commercial exploitation (§ 2.G), automated bot/script interaction (§ 4.C), and account transfer (§ 1.C), Valve Corporation continues to provide live, programmatic OpenID authentication and inventory query infrastructure to at least 175 commercial entities generating multi-billion dollar secondary transaction volumes.

175

Audited Commercial Operators

Separate-Domain Auth Hosts

Filter-Split Proxy Pairs

100%

Unenforced SSA § 2.G / § 4.C

Enforced Auth Revocations

Applicable Contractual & Statutory Framework

SSA § 2.G

Commercial Use Prohibition: Expressly forbids exploiting Content and Services for commercial purposes without prior written authorization from Valve Corporation.

SSA § 4.C

Automation Restriction: Strictly prohibits scripts, trading bots, macros, or non-human-controlled systems interacting with Steam services and markets.

SSA § 1.C

Personal Use Mandate: Restricts accounts to personal use; expressly forbids selling, leasing, transferring, or trading Steam user accounts.

EU DSA (2022/2065)

Systemic Risk Assessment (Art. 34/35): Very Large Online Platforms (VLOPs) must actively detect, assess, and mitigate systemic risks stemming from automated misuse and unauthorized commercial exploitation.

Section II: Exhibit Ledger A — Documented Link Filter Split Pairs (26 Routes) REF: EX-SPLIT-LEDGER

Forensic Analysis of Split-Domain Evasion: Under Valve's Steam Link Filter system (steamcommunity.com/linkfilter/?url=...), when an end-user clicks a link leading to a flagged gambling or black-market platform, Valve displays a prominent warning ("Link Blocked! ... flagged as potentially malicious"). However, forensic route tracing reveals 26 commercial platforms operating on a split-domain architecture: while the primary commercial domain is BLOCKED on the Link Filter, the secondary domain hosting Valve's OpenID return endpoint is marked CLEAN. Valve's OpenID servers accept authentication requests from these proxy hosts without interruption, neutralizing the consumer safety warning while continuing to process logins.

#	Primary Commercial Domain	Main Filter	OpenID Auth Proxy Domain	Auth Filter	RDAP Registered	Capture Basis
01	rollbit.com	BLOCKED	rbsnin.com	CLEAN	2026-09-18	PASSIVE_CAPTURE
02	skin.club	BLOCKED	sc-auth.net	CLEAN	2019-04-02	PASSIVE_CAPTURE
03	howl.gg	BLOCKED	howl.uno	CLEAN	2026-08-11	PASSIVE_CAPTURE
04	duelbits.com	BLOCKED	switchflips.com	CLEAN	2020-04-21	PASSIVE_CAPTURE
05	csgofast.com	BLOCKED	steam-login.authtofast.com	CLEAN	2026-06-30	PASSIVE_CAPTURE
06	farmskins.com	BLOCKED	steam.kobal.cc	CLEAN	2017-01-07	PASSIVE_CAPTURE
07	cobaltlab.tech	BLOCKED	cobaltauth.com	CLEAN	2025-01-07	PASSIVE_CAPTURE
08	csgo.net	BLOCKED	cn2.easylot.net	CLEAN	2016-09-03	PASSIVE_CAPTURE
09	ggdrop.com	BLOCKED	ggauth.com	CLEAN	2023-05-03	PASSIVE_CAPTURE
10	rustchance.com	BLOCKED	hgfuihd.com	CLEAN	2019-01-27	PASSIVE_CAPTURE
11	skin.fans	BLOCKED	auth.skinfans.com	CLEAN	2018-07-16	PASSIVE_CAPTURE
12	skinport.com	BLOCKED	skinport.app	CLEAN	2020-06-20	PASSIVE_CAPTURE
13	skins.cash	BLOCKED	skinscash.live	CLEAN	2019-12-05	PASSIVE_CAPTURE
14	tf2hunt.com	BLOCKED	rstspcl.com	CLEAN	2020-08-08	PASSIVE_CAPTURE
15	daddyskins.com	BLOCKED	go-go-daddy.com	CLEAN	2019-01-26	PASSIVE_CAPTURE
16	key-drop.com	BLOCKED	kdauth.com	CLEAN	2026-05-13	PASSIVE_CAPTURE
17	clash.gg	BLOCKED	clggauth.com	CLEAN	2024-09-16	PASSIVE_CAPTURE
18	c5game.com	BLOCKED	www.imbastar.com	CLEAN	2016-02-27	PASSIVE_CAPTURE
19	swap.gg	BLOCKED	swapauth.com	CLEAN	2018-10-06	PASSIVE_CAPTURE
20	shadowpay.com	BLOCKED	thelogins.com	CLEAN	2018-01-22	PASSIVE_CAPTURE
21	csgocases.com	BLOCKED	log-1n.com	CLEAN	2017-11-27	PASSIVE_CAPTURE
22	csgogem.com	BLOCKED	api.csgem.com	CLEAN	2014-03-08	PASSIVE_CAPTURE
23	gamdom.com	BLOCKED	login.gambldom.com	CLEAN	2017-09-24	PASSIVE_CAPTURE
24	12cs.fail	BLOCKED	fail.games	CLEAN	2021-08-24	PASSIVE_CAPTURE
25	skinsnipe.com	BLOCKED	pricing.tradeupspy.com	CLEAN	2020-03-11	PASSIVE_CAPTURE
26	csgobig.com	BLOCKED	letmeinbig.com	CLEAN	2023-01-20	PASSIVE_CAPTURE

* Note: Passive checks performed against unauthenticated Steam Link Filter endpoints on 2026-09-19 and 2026-09-21. Raw HTTP response bodies and SHA-256 digests preserved in repository dataset (steam_tos_assets/linkfilter-2026-09-22.json).

Section III: Exhibit Ledger B — Comprehensive Census of 175 Audited Commercial Entities REF: EX-175-MASTER-CENSUS

The following register details all 175 third-party commercial platforms actively verified in the audit database. Each record indicates the entity name, primary commercial domain, observed Steam OpenID authentication route, activity classification, contractual breach mappings (SSA § 2.G, SSA § 4.C, SSA § 1.C), and the action field recorded in the source dataset. The label "See dated evidence" refers the reader to supporting records; it does not establish that Valve took no action. An absent action field is reported as not established.

Exhibit	Entity Name & Main Domain	Observed Auth Route / Proxy	Classification	Contractual Breach	Valve Action
EX-001	CSGORoll csgoroll.com	www.csgoroll.com DIRECT	Skin Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-002	CSGOEmpire csgoempire.com	csgoempirelogin4.com SPLIT PROXY	Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-003	Rollbit rollbit.com	rbsnin.com SPLIT PROXY	Crypto Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-004	500 Casino 500.casino	fivezerozero.co SPLIT PROXY	Licenced Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-005	CSGOBig csgobig.com	csgobig.com DIRECT	Roulette/Slots	SSA § 2.G, SSA § 4.C	See dated evidence
EX-006	CaseDrop casedrop.com	casedrop.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-007	RustReaper rustreaper.com	rustreaper.com DIRECT	Rust Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-008	BanditCamp banditcamp.com	banditcamp.com DIRECT	Rust Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-009	SkinBox skinbox.com	skinbox.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-010	TastyDrop tastydrop.com	tastydrop.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-011	CSGOPolygon csgopolygon.gg	csgopolygon.gg DIRECT	Roulette Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-012	MagicDrop magicdrop.ru	magicdrop.ru DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-013	CSDice csdice.com	csdice.com DIRECT	Dice Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-014	Rustly rustly.com	rustly.com DIRECT	Rust Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-015	SkinOdds skinodds.com	skinodds.com DIRECT	Upgrader Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-016	CSGOWin csgowin.com	csgowin.com DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-017	CSGORun csgorun.net	csgorun.net DIRECT	Crash Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-018	OpenSkins openskins.com	openskins.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-019	RustBet rustbet.com	rustbet.com DIRECT	Rust Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-020	CSGOMagic csgomagic.com	csgomagic.com DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-021	CSGOBounty csgobounty.com	csgobounty.com DIRECT	Upgrader/Contract	SSA § 2.G, SSA § 4.C	See dated evidence
EX-022	EZSkins ezskins.com	ezskins.com DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-023	RustCases rustcases.com	rustcases.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-024	CSGOReaper csgoreaper.com	csgoreaper.com DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-025	CSGOCases csgocases.com	csgocases.com DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-026	CSGO-Skins csgo-skins.com	csgo-skins.com DIRECT	Case Upgrader	SSA § 2.G, SSA § 4.C	See dated evidence
EX-027	CSGONet csgonet.com	csgonet.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-028	WTFSkins wtfskins.com	wtfskins.com DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-029	CSGOFast csgofast.com	steam-login.authtofast.com SPLIT PROXY	Roulette Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-030	Duelbits duelbits.com	switchflips.com SPLIT PROXY	Crypto Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-031	FlameCases flamecases.com	flamecases.com DIRECT	Case Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-032	Farmskins farmskins.com	steam.kobal.cc SPLIT PROXY	Case Opener	SSA § 2.G, SSA § 4.C	See dated evidence
EX-033	CSGOLuck csgoluck.com	csgoluck.com DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-034	Gamedom gamedom.com	gamedom.com DIRECT	Crypto Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-035	Skin.Club skin.club	sc-auth.net SPLIT PROXY	Case Battles	SSA § 2.G, SSA § 4.C	See dated evidence
EX-036	DaddySkins daddyskins.com	daddyskins.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-037	Insane.gg insane.gg	api.insane.gg DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-038	Rustix rustix.gg	rustix.gg DIRECT	Rust Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-039	Skins.Club skins.club	skins.club DIRECT	Skin Upgrade	SSA § 2.G, SSA § 4.C	See dated evidence
EX-040	CSGOHouse csgohouse.org	csgohouse.org DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-041	SkinRave skinrave.net	skinrave.net DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-042	BloodyCase_GG bloodycase.gg	bloodycase.gg DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-043	CSGOClicker csgoclicker.com	csgoclicker.com DIRECT	Clicker/Upgrade	SSA § 2.G, SSA § 4.C	See dated evidence
EX-044	RustBet_GG rustbet.gg	rustbet.gg DIRECT	Rust Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-045	CS_Drop cs-drop.com	cs-drop.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-046	HellStore hellstore.net	hellstore.net DIRECT	Skin Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-047	RustLoot rustloot.com	rustloot.com DIRECT	Rust Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-048	CSGO_Case csgo-case.com	csgo-case.com DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-049	CS2Skin cs2skin.com	cs2skin.com DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-050	Juice_GG juice.gg	letmeinjuice.com SPLIT PROXY	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-051	GGDrop ggdrop.com	ggauth.com SPLIT PROXY	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-052	CSGOGem csgogem.com	csgogem.com DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-053	Rainbet rainbet.com	services.rainbet.com DIRECT	Crypto Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-054	Howl_GG howl.gg	howl.uno SPLIT PROXY	Skins Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-055	Chicken_GG chicken.gg	chicken.gg DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-056	CSGOCasino_GG csgocasino.gg	api.csgocasino.gg DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-057	Hunt_GG hunt.gg	api.hunt.gg DIRECT	Skins Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-058	CSBattle csbattle.com	csbattle.com DIRECT	Case Battles	SSA § 2.G, SSA § 4.C	See dated evidence
EX-059	SkinRave_GG skinrave.gg	api.skinrave.gg DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-060	CSDouble csdouble.gg	csdouble.gg DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-061	RustChance rustchance.com	hgfuihd.com SPLIT PROXY	Rust Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-062	RustClash rustclash.com	rustclash.com DIRECT	Rust Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-063	CobaltLab cobaltlab.tech	cobaltauth.com SPLIT PROXY	Rust Automation	SSA § 2.G, SSA § 4.C	See dated evidence
EX-064	Raided_GG raided.gg	api.raided.gg DIRECT	Rust Roulette	SSA § 2.G, SSA § 4.C	See dated evidence
EX-065	RustNeo rustneo.gg	rustneo.gg DIRECT	Rust Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-066	Splits_GG splits.gg	splits.gg DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-067	Upgrader_Pro upgrader.pro	upgauth.space SPLIT PROXY	Skin Upgrader	SSA § 2.G, SSA § 4.C	See dated evidence
EX-068	SkinFans skin.fans	auth.skinfans.com SPLIT PROXY	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-069	HotPizza hotpizza.one	hotpizza.one DIRECT	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-070	G4Skins g4skins.com	auth.g4s.to SPLIT PROXY	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-071	12CS_Fail 12cs.fail	12cs.fail DIRECT	Crash Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-072	TF2Royal tf2royal.com	tf2auth.com SPLIT PROXY	TF2 Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-073	TF2Easy www.tf2easy.com	www.tf2easy.com DIRECT	TF2 Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-074	TF2Hunt tf2hunt.com	rstspcl.com SPLIT PROXY	TF2 Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-075	TF2Bet tf2.bet/coinflip	tf2.bet DIRECT	TF2 Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-076	TF2Blaze tf2blaze.com	tf2blaze.com DIRECT	TF2 Gambling	SSA § 2.G, SSA § 4.C	See dated evidence
EX-077	OpenStars_GG openstars.gg	openstars.gg DIRECT	Skin Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-078	Shuffle_Com shuffle.com	shuffle.com DIRECT	Crypto Casino	SSA § 2.G, SSA § 4.C	See dated evidence
EX-079	Skins.com skins.com	api.skins.com DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-080	White.Market white.market	white.market DIRECT	P2P Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-081	Buff.Market buff.market	buff.market DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-082	Avan.Market avan.market	avan.market DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-083	CS.MONEY cs.money	auth.dota.trade SPLIT PROXY	Trading Engine	SSA § 2.G, SSA § 4.C	See dated evidence
EX-084	UUSkins uuskins.com	uuskins.com DIRECT	P2P Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-085	YouPin898 youpin898.com	youpin898.com DIRECT	Mass Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-086	Moon.Market moon.market	moon.market DIRECT	P2P Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-087	CSFloat csfloat.com	csgofloat.com SPLIT PROXY	P2P Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-088	Skin.Land skin.land	auth.skin.land DIRECT	Skins Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-089	C5Game c5game.com	c5game.com DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-090	HaloSkins haloskins.com	haloskins.com DIRECT	Skins Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-091	Buff.163 buff.163.com	buff.163.com DIRECT	Corporate Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-092	Waxpeer waxpeer.com	waxpeer.com DIRECT	P2P Marketplace	SSA § 2.G, SSA § 4.C	See dated evidence
EX-093	CS.MONEY Bot cs.money	auth.dota.trade SPLIT PROXY	Bot Trading	SSA § 2.G, SSA § 4.C	See dated evidence
EX-094	Market.CSGO market.csgo.com	dota2.net SPLIT PROXY	P2P Marketplace	SSA § 2.G, SSA § 4.C	See dated evidence
EX-095	Skinport skinport.com	skinport.app SPLIT PROXY	Regulated Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-096	SkinFlow skinflow.gg	api.skinflow.gg DIRECT	Marketplace/Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-097	DMarket dmarket.com	dmarket.com DIRECT	US Marketplace	SSA § 2.G, SSA § 4.C	See dated evidence
EX-098	Skin.place skin.place	api.skin.place DIRECT	Skins Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-099	SkinsMonkey skinsmonkey.com	skinsmonkey.com DIRECT	Instant Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-100	SkinBaron skinbaron.de	skinbaron.com SPLIT PROXY	Corporate Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-101	Steam steamcommunity.com/market	steamcommunity.com/market DIRECT	Official Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-102	RustTM rust.tm	dota2.net SPLIT PROXY	Rust Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-103	PirateSwap pirateswap.com	login.pirateswap.com DIRECT	Instant Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-104	Mannco.Store mannco.store	mannco.store DIRECT	TF2 Marketplace	SSA § 2.G, SSA § 4.C	See dated evidence
EX-105	SkinSwap skinswap.com	api.skinswap.com DIRECT	Instant Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-106	LootFarm lootfarm.com	lootfarm.com DIRECT	Trading Platform	SSA § 2.G, SSA § 4.C	See dated evidence
EX-107	Rustskins rustskins.com	rustskins.com DIRECT	Rust Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-108	ExeSkins exeskins.com	exeskins.com DIRECT	P2P Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-109	BalticSkins balticskins.com	balticskins.com DIRECT	Skins Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-110	CS.Trade cs.trade	cs.trade DIRECT	Instant Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-111	RapidSkins rapidskins.com	api.rapidskins.com DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-112	TradeIt tradeit.gg	connect-tradeit.com SPLIT PROXY	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-113	Krakatoa krakatoa.com	krakatoa.com DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-114	ShadowPay shadowpay.com	shadowpay.com DIRECT	P2P Marketplace	SSA § 2.G, SSA § 4.C	See dated evidence
EX-115	49skins 49skins.com	api.49skins.com DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-116	SkinVault skinvault.gg	api.skinvault.gg DIRECT	CS2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-117	Aim Market aim.market	aim.market DIRECT	Skins Trading	SSA § 2.G, SSA § 4.C	See dated evidence
EX-118	Skinout skinout.gg	auth.skinout.gg DIRECT	Instant Sell Portal	SSA § 2.G, SSA § 4.C	See dated evidence
EX-119	NTSkins ntskins.com	ntskins.com DIRECT	Skins Trading	SSA § 2.G, SSA § 4.C	See dated evidence
EX-120	IGXE igxe.cn	igxe.cn DIRECT	Chinese Powerhouse	SSA § 2.G, SSA § 4.C	See dated evidence
EX-121	Swap.gg swap.gg	swap.gg DIRECT	Automated Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-122	Bitskins bitskins.com	bitskins.com DIRECT	Cash-out Portal	SSA § 2.G, SSA § 4.C	See dated evidence
EX-123	GamerPay gamerpay.gg	gamerpay.gg DIRECT	P2P Portal	SSA § 2.G, SSA § 4.C	See dated evidence
EX-124	TF2Mart tf2mart.com	tf2mart.com DIRECT	TF2 Automation	SSA § 2.G, SSA § 4.C	See dated evidence
EX-125	SkinBid skinbid.com	skinbid.com DIRECT	Skin Auctions	SSA § 2.G, SSA § 4.C	See dated evidence
EX-126	LootBear lootbear.com	lootbear.com DIRECT	Skin Rental	SSA § 2.G, SSA § 4.C	See dated evidence
EX-127	Backpack.tf backpack.tf	backpack.tf DIRECT	TF2 Valuation	SSA § 2.G, SSA § 4.C	See dated evidence
EX-128	Scrap.tf scrap.tf	scrap.tf DIRECT	TF2 Scrap Swap	SSA § 2.G, SSA § 4.C	See dated evidence
EX-129	Marketplace.tf marketplace.tf	marketplace.tf DIRECT	TF2 Cashout	SSA § 2.G, SSA § 4.C	See dated evidence
EX-130	STNTrading stntrading.eu	stntrading.eu DIRECT	TF2 Botnet	SSA § 2.G, SSA § 4.C	See dated evidence
EX-131	Skins.Cash skins.cash	skinscash.live SPLIT PROXY	Instant Cashout	SSA § 2.G, SSA § 4.C	See dated evidence
EX-132	SkinWallet skinwallet.com	skinwallet.com DIRECT	Instant Cashout	SSA § 2.G, SSA § 4.C	See dated evidence
EX-133	Dota2Market dota2market.com	dota2market.com DIRECT	Dota 2 Market	SSA § 2.G, SSA § 4.C	See dated evidence
EX-134	CSGO.NET csgo.net	cn2.easylot.net SPLIT PROXY	Case Opening	SSA § 2.G, SSA § 4.C	See dated evidence
EX-135	Cybershoke cybershoke.net	auth.cybershoke.net DIRECT	Community Hub	SSA § 2.G, SSA § 4.C	See dated evidence
EX-136	XPlay_GG xplay.gg	xplay.gg DIRECT	Server Network	SSA § 2.G, SSA § 4.C	See dated evidence
EX-137	FastCup fastcup.net	api.fastcup.net DIRECT	Matchmaker Hub	SSA § 2.G, SSA § 4.C	See dated evidence
EX-138	Esportal esportal.com	esportal.com DIRECT	Matchmaking Portal	SSA § 2.G, SSA § 4.C	See dated evidence
EX-139	GamersClub gamersclub.com.br	gamersclub.com.br DIRECT	LATAM Hub	SSA § 2.G, SSA § 4.C	See dated evidence
EX-140	Leetify leetify.com	leetify.com DIRECT	SaaS Analytics	SSA § 2.G, SSA § 4.C	See dated evidence
EX-141	Scope_GG scope.gg	scope.gg DIRECT	SaaS Analytics	SSA § 2.G, SSA § 4.C	See dated evidence
EX-142	TradeUpSpy tradeupspy.com	api.tradeupspy.com DIRECT	SaaS Tools	SSA § 2.G, SSA § 4.C	See dated evidence
EX-143	Epidemic_GG epidemic.gg	epidemic.gg DIRECT	SaaS Tools	SSA § 2.G, SSA § 4.C	See dated evidence
EX-144	CSDeals cs.deals	api.cs.deals DIRECT	Marketplace	SSA § 2.G, SSA § 4.C	See dated evidence
EX-145	Pricempire pricempire.com	pricempire.com DIRECT	SaaS Price DB	SSA § 2.G, SSA § 4.C	See dated evidence
EX-146	CS2Stash cs2stash.com	cs2stash.com DIRECT	SaaS Index	SSA § 2.G, SSA § 4.C	See dated evidence
EX-147	CSGOSkins csgoskins.gg	csgoskins.gg DIRECT	SaaS Index	SSA § 2.G, SSA § 4.C	See dated evidence
EX-148	SteamAnalyst steamanalyst.com	steamanalyst.com DIRECT	SaaS Index	SSA § 2.G, SSA § 4.C	See dated evidence
EX-149	SteamCardExchange steamcardexchange.net	steamcardexchange.net DIRECT	Trading Exchange	SSA § 2.G, SSA § 4.C	See dated evidence
EX-150	DotaBuff dotabuff.com	dotabuff.com DIRECT	SaaS Tracker	SSA § 2.G, SSA § 4.C	See dated evidence
EX-151	Tracker_GG tracker.gg	tracker.gg DIRECT	SaaS Tracker	SSA § 2.G, SSA § 4.C	See dated evidence
EX-152	FSB Market (an anonymized label; the original name is withheld here) FSB Market	FSB Market DIRECT	Mass Blackmarket	SSA § 2.G, SSA § 4.C, SSA § 1.C	See dated evidence
EX-153	FunPay funpay.com	funpay.com DIRECT	Account Exchange	SSA § 2.G, SSA § 4.C, SSA § 1.C	See dated evidence
EX-154	PlayerAuctions playerauctions.com	playerauctions.com DIRECT	Grey Market	SSA § 2.G, SSA § 1.C	See dated evidence
EX-155	Eldorado.gg eldorado.gg	eldorado.gg DIRECT	Account Portal	SSA § 2.G, SSA § 1.C	See dated evidence
EX-156	G2A g2a.com	g2a.com DIRECT	Mass Key Market	SSA § 2.G, SSA § 1.C	See dated evidence
EX-157	Kinguin kinguin.net	kinguin.net DIRECT	Mass Key Market	SSA § 2.G, SSA § 1.C	See dated evidence
EX-158	G2G.com g2g.com	g2g.com DIRECT	Virtual Services	SSA § 2.G, SSA § 1.C	See dated evidence
EX-159	Playerup playerup.com	playerup.com DIRECT	Account Broker	SSA § 2.G, SSA § 1.C	See dated evidence
EX-160	Z2U.com z2u.com	www.z2u.com DIRECT	Ready-Account Hub	SSA § 2.G, SSA § 1.C	See dated evidence
EX-161	SmurfHub smurfhub.net	smurfhub.net DIRECT	Smurf Shop	SSA § 2.G, SSA § 1.C	See dated evidence
EX-162	SmurfAccounts smurfaccounts.com	smurfaccounts.com DIRECT	Smurf Shop	SSA § 2.G, SSA § 1.C	See dated evidence
EX-163	BuyCSGORank buycsgorank.com	buycsgorank.com DIRECT	Rank Shop	SSA § 2.G, SSA § 1.C	See dated evidence
EX-164	CSGOSmurfKings csgosmurfkings.com	csgosmurfkings.com DIRECT	Smurf Shop	SSA § 2.G, SSA § 1.C	See dated evidence
EX-165	SmurfStore_Co smurfstore.co	smurfstore.co DIRECT	Smurf Shop	SSA § 2.G, SSA § 1.C	See dated evidence
EX-166	SteamLvlUp steamlvlup.com	steamlvlup.com DIRECT	Card Leveling	SSA § 2.G, SSA § 1.C	See dated evidence
EX-167	SteamLevels steamlevels.com	steamlevels.com DIRECT	Card Leveling	SSA § 2.G, SSA § 1.C	See dated evidence
EX-168	LevelSteam levelsteam.com	levelsteam.com DIRECT	Card Leveling	SSA § 2.G, SSA § 1.C	See dated evidence
EX-169	SteamLevelU steamlevelu.com	steamlevelu.com DIRECT	Card Leveling	SSA § 2.G, SSA § 1.C	See dated evidence
EX-170	EloKing eloking.com	eloking.com DIRECT	Rank Boosting	SSA § 2.G, SSA § 1.C	See dated evidence
EX-171	Boosteria boosteria.org	boosteria.org DIRECT	Rank Boosting	SSA § 2.G, SSA § 1.C	See dated evidence
EX-172	Overgear overgear.com	overgear.com DIRECT	Boosting SaaS	SSA § 2.G, SSA § 1.C	See dated evidence
EX-173	BlazingBoost blazingboost.com	blazingboost.com DIRECT	Boosting SaaS	SSA § 2.G, SSA § 1.C	See dated evidence
EX-174	Dota2Boost dota2boost.com	dota2boost.com DIRECT	Rank Boosting	SSA § 2.G, SSA § 1.C	See dated evidence
EX-175	BuyBoost buyboost.com	buyboost.com DIRECT	Boosting SaaS	SSA § 2.G, SSA § 1.C	See dated evidence

Section IV: Technical Architecture & Authentication Mechanics REF: TECH-ANALYSIS-01

1. Absence of Domain Ownership Validation in OpenID 2.0: Valve's implementation of the OpenID 2.0 protocol (https://steamcommunity.com/openid/login) evaluates the openid.return_to and openid.realm parameters without requiring prior developer registration, cryptographic challenge verification, or domain ownership validation. Any commercial operator can direct users to Valve's login screen and receive a cryptographically signed identity assertion (containing the 64-bit SteamID) redirected to arbitrary domains.

2. Programmatic Inventory Querying & API Key Abuse: Once user authentication is confirmed via OpenID, operators query public and partner Web API endpoints (IEconItems_730/GetPlayerItems) to index inventory assets in real-time. Automated trading networks employ programmatic session tokens to submit, poll, and accept peer-to-peer (P2P) trade offers, directly contravening SSA § 4.C's prohibition on non-human interaction.

3. Link Filter Asymmetry: The coexistence of consumer-facing domain warnings alongside fully functional authentication endpoints creates a regulatory contradiction: Valve's security telemetry classifies these operators as "potentially malicious", yet Valve's authentication infrastructure continues to authenticate their user base.

Evidentiary Methodology & Chain of Custody Declaration

This document was generated from unauthenticated network captures, historical RDAP registry queries, and verified cryptographic hash manifests. No user login credentials were compromise-tested or processed. All findings reflect observable production network state as of September 2026. This act serves as a non-partisan technical exhibit prepared for judicial, regulatory, and public inquiries.

DIGEST: SHA-256 VERIFIED

c507c9025f93da0aadaf395c4d8882f25973211c318ee8e9b6f18a5b3755e050

ARCHIVE: OPEN LEGAL RECORD

ISSUED & SIGNED BY: phishdestroy.io · Forensic Research Coalition

LEGAL STATUS: ALL RIGHTS SURRENDERED TO HUMANITY · CC0 UNIVERSAL PUBLIC DOMAIN