{
  "generated": "2026-09-22",
  "description": "Coverage test of the Steam Link Filter against an independent public phishing feed. Domains were passed to steamcommunity.com/linkfilter unauthenticated, one request at a time, ~2.5s spacing, rotating desktop User-Agents. No phishing site was visited; only the linkfilter blocklist endpoint was queried. Verdict keyed to the interstitial strings \"Link Blocked!\" (BLOCKED) and \"You are leaving Steam\" (NOT_BLOCKED).",
  "source_feed": {
    "name": "Discord-AntiScam scam-links",
    "url": "https://github.com/Discord-AntiScam/scam-links",
    "local_copy": "VALVE_EVIDENCE_PACK/databases/steam_phishing_domains.json",
    "total_domains": 36516,
    "label": "High (Active Phishing) / Steam/Discord Accounts"
  },
  "sample": {
    "n": 250,
    "seed": 20260922,
    "blocked": 9,
    "not_blocked": 241,
    "block_rate": 0.036,
    "block_rate_ci95": [
      0.019,
      0.067
    ]
  },
  "blocked_domains": [
    "bitofux.com",
    "sleamcommuntly.ru",
    "steam-wallet-rewards.com",
    "steambi.pw",
    "steamcommunmity.com",
    "steamcomnucity.com",
    "stearncommunit.com.ru",
    "stemconmmnunity.com",
    "stemconmmunnity.com"
  ],
  "note_on_blocked": "8 of 9 are homoglyph clones of steamcommunity.com; the filter concentrates on lookalikes of Valve's own domain.",
  "positive_control": {
    "method": "known skin-gambling mains from Section 3 of the dossier",
    "result": "7/7 BLOCKED",
    "domains": {
      "csgofast.com": "BLOCKED",
      "csgo500.com": "BLOCKED",
      "rollbit.com": "BLOCKED",
      "skin.club": "BLOCKED",
      "csgo.net": "BLOCKED",
      "duelbits.com": "BLOCKED",
      "farmskins.com": "BLOCKED"
    }
  },
  "limitations": "Coverage rate on one feed, sample of 250 with stated CI. Not a per-domain census. Motive (why coverage is low) is not asserted; it is left as a question for Valve."
}