{
  "generated": "2026-09-22",
  "description": "Канонический реестр ЖИВЫХ платформ Steam-авторизации + теневой маркетплейс. Мёртвые домены исключены. Собран: досье PhishDestroy (2026-09-21) + ручной сбор пользователя + live-проверки assistant. Batch 2026-09-22c: skinsnipe.com и csgobig.com добавлены как filter-split (realm снят вживую, RDAP и Link Filter записаны); jabka.to -> jabauth.com в pending_verification.",
  "filter_split_total": 26,
  "separate_domain_total": 44,
  "oldest_split_auth_host": {
    "auth_host": "csgem.com",
    "front_end": "csgogem.com",
    "rdap_reg": "2014-03-08",
    "age_at_2026-09-22": "12 years 6 months",
    "main_filter": "BLOCKED",
    "realm_filter": "CLEAN",
    "note": "Front-end blocked by Steam's own Link Filter; the authentication host it sends users to has never been. Supersedes cn2.easylot.net (2016-09-03, 10 years) as the oldest split-pair auth host in the register. realm_src is user, so the route has no per-route capture file; the Link Filter split itself is captured with raw HTML and SHA-256 in linkfilter-2026-09-22.json."
  },
  "evidence_basis": {
    "with_published_evidence_file": 27,
    "with_published_evidence_file_note": "realm_src = live | supplied | Steam login-page notice. Each has a per-route JSON in steam_tos_assets/auth-route-audit/ and a row in the Section 3 evidence table. Of these, 16 are filter-split pairs and 11 are separate-domain routes without a main-domain split.",
    "manually_collected": 17,
    "manually_collected_note": "realm_src = user. Collected by hand, not reproduced from a capture, a supplied OpenID URL or a Steam login-page notice, and therefore carrying no per-route evidence file for the realm. Of these, 10 are filter-split pairs and 7 are without a split. The five promoted on 2026-09-22 do carry a Link Filter capture for both hosts (raw HTML + SHA-256) even though the realm itself is hand-collected. Counted in the register, listed separately in the dossier.",
    "excluded": "tfauth.com (tf2easy.com) removed 2026-09-22: no verifiable evidentiary source links it to its origin site, per AUTH_AUDIT.md. arena.fragnet.net is likewise unlinked and is held in same_domain_or_subdomain, outside the separate-domain count.",
    "pending": "5 further separate-domain routes are held in pending_verification (batch 2026-09-22a) awaiting an RDAP date for the auth host. They are not in separate_domain_total and not in the age chart. Promoting them takes the total to 47.",
    "correction_2026-09-22": "csgogem.com -> api.csgem.com was filed under same_domain_or_subdomain on the assumption that api.csgem.com was a subdomain of the front-end. It is not: csgem.com is its own registrable domain, registered 2014-03-08, while csgogem.com was registered 2016-10-16. csgogem.com returns BLOCKED and api.csgem.com returns CLEAN, so the route is a filter-split pair — and the oldest auth host in the register. csbattle.com -> csbattle.com, which has a published evidence file, was absent from this register altogether and has been added to same_domain_or_subdomain."
  },
  "method": "openid.realm из redirect/notice Steam; Link Filter: BLOCKED='Link Blocked!', CLEAN='You are leaving Steam'. RDAP: регистрация домена.",
  "filter_split_pairs": [
    {
      "main": "rollbit.com",
      "main_filter": "BLOCKED",
      "realm": "rbsnin.com",
      "realm_filter": "CLEAN",
      "realm_src": "live",
      "rdap_reg": "2026-09-18"
    },
    {
      "main": "skin.club",
      "main_filter": "BLOCKED",
      "realm": "sc-auth.net",
      "realm_filter": "CLEAN",
      "realm_src": "supplied",
      "rdap_reg": "2019-04-02"
    },
    {
      "main": "howl.gg",
      "main_filter": "BLOCKED",
      "realm": "howl.uno",
      "realm_filter": "CLEAN",
      "realm_src": "live",
      "rdap_reg": "2026-08-11"
    },
    {
      "main": "duelbits.com",
      "main_filter": "BLOCKED",
      "realm": "switchflips.com",
      "realm_filter": "CLEAN",
      "realm_src": "supplied",
      "rdap_reg": "2020-04-21"
    },
    {
      "main": "csgofast.com",
      "main_filter": "BLOCKED",
      "realm": "steam-login.authtofast.com",
      "realm_filter": "CLEAN",
      "realm_src": "supplied",
      "rdap_reg": "2026-06-30"
    },
    {
      "main": "farmskins.com",
      "main_filter": "BLOCKED",
      "realm": "steam.kobal.cc",
      "realm_filter": "CLEAN",
      "realm_src": "live",
      "rdap_reg": "2017-01-07"
    },
    {
      "main": "cobaltlab.tech",
      "main_filter": "BLOCKED",
      "realm": "cobaltauth.com",
      "realm_filter": "CLEAN",
      "realm_src": "supplied",
      "rdap_reg": "2025-01-07"
    },
    {
      "main": "csgo.net",
      "main_filter": "BLOCKED",
      "realm": "cn2.easylot.net",
      "realm_filter": "CLEAN",
      "realm_src": "live",
      "rdap_reg": "2016-09-03"
    },
    {
      "main": "ggdrop.com",
      "main_filter": "BLOCKED",
      "realm": "ggauth.com",
      "realm_filter": "CLEAN",
      "realm_src": "supplied",
      "rdap_reg": "2023-05-03"
    },
    {
      "main": "rustchance.com",
      "main_filter": "BLOCKED",
      "realm": "hgfuihd.com",
      "realm_filter": "CLEAN",
      "realm_src": "supplied",
      "rdap_reg": "2019-01-27"
    },
    {
      "main": "skin.fans",
      "main_filter": "BLOCKED",
      "realm": "auth.skinfans.com",
      "realm_filter": "CLEAN",
      "realm_src": "supplied",
      "rdap_reg": "2018-07-16"
    },
    {
      "main": "skinport.com",
      "main_filter": "BLOCKED",
      "realm": "skinport.app",
      "realm_filter": "CLEAN",
      "realm_src": "supplied",
      "rdap_reg": "2020-06-20"
    },
    {
      "main": "skins.cash",
      "main_filter": "BLOCKED",
      "realm": "skinscash.live",
      "realm_filter": "CLEAN",
      "realm_src": "live",
      "rdap_reg": "2019-12-05"
    },
    {
      "main": "tf2hunt.com",
      "main_filter": "BLOCKED",
      "realm": "rstspcl.com",
      "realm_filter": "CLEAN",
      "realm_src": "live",
      "rdap_reg": "2020-08-08"
    },
    {
      "main": "daddyskins.com",
      "main_filter": "BLOCKED",
      "realm": "go-go-daddy.com",
      "realm_filter": "CLEAN",
      "realm_src": "user",
      "rdap_reg": "2019-01-26",
      "rdap_verified": "2026-09-22",
      "rdap_source": "rdap.verisign.com/com/v1 — registration 2019-01-26T19:10:28Z"
    },
    {
      "main": "key-drop.com",
      "main_filter": "BLOCKED",
      "realm": "kdauth.com",
      "realm_filter": "CLEAN",
      "realm_src": "user",
      "rdap_reg": "2026-05-13"
    },
    {
      "main": "clash.gg",
      "main_filter": "BLOCKED",
      "realm": "clggauth.com",
      "realm_filter": "CLEAN",
      "realm_src": "user",
      "rdap_reg": "2024-09-16"
    },
    {
      "main": "c5game.com",
      "main_filter": "BLOCKED",
      "realm": "www.imbastar.com",
      "realm_filter": "CLEAN",
      "realm_src": "user",
      "rdap_reg": "2016-02-27"
    },
    {
      "main": "swap.gg",
      "main_filter": "BLOCKED",
      "realm": "swapauth.com",
      "realm_filter": "CLEAN",
      "realm_src": "user",
      "rdap_reg": "2018-10-06"
    },
    {
      "main": "shadowpay.com",
      "main_filter": "BLOCKED",
      "realm": "thelogins.com",
      "realm_filter": "CLEAN",
      "realm_src": "user",
      "rdap_reg": "2018-01-22"
    },
    {
      "main": "csgocases.com",
      "main_filter": "BLOCKED",
      "realm": "log-1n.com",
      "realm_filter": "CLEAN",
      "realm_src": "user",
      "rdap_reg": "2017-11-27"
    },
    {
      "main": "csgogem.com",
      "main_filter": "BLOCKED",
      "realm": "api.csgem.com",
      "realm_filter": "CLEAN",
      "realm_src": "user",
      "rdap_reg": "2014-03-08",
      "lf_checked": "2026-09-22",
      "note": "Oldest auth host in the register. csgem.com registered 2014-03-08, two and a half years before the front-end csgogem.com (2016-10-16). Previously misfiled under same_domain_or_subdomain; csgem.com is a separate registrable domain, not a subdomain."
    },
    {
      "main": "gamdom.com",
      "main_filter": "BLOCKED",
      "realm": "login.gambldom.com",
      "realm_filter": "CLEAN",
      "realm_src": "user",
      "rdap_reg": "2017-09-24",
      "rdap_verified": "2026-09-22",
      "rdap_source": "rdap.verisign.com/com/v1 — registration 2017-09-24T13:29:17Z",
      "lf_checked": "2026-09-22",
      "note": "Auth host on gambldom.com — one letter off the brand."
    },
    {
      "main": "12cs.fail",
      "main_filter": "BLOCKED",
      "realm": "fail.games",
      "realm_filter": "CLEAN",
      "realm_src": "user",
      "rdap_reg": "2021-08-24",
      "lf_checked": "2026-09-22"
    },
    {
      "main": "skinsnipe.com",
      "main_filter": "BLOCKED",
      "realm": "pricing.tradeupspy.com",
      "realm_filter": "CLEAN",
      "realm_src": "live",
      "rdap_reg": "2020-03-11",
      "rdap_verified": "2026-09-22",
      "rdap_source": "rdap.verisign.com/com/v1 — registration 2020-03-11T10:58:55Z",
      "classification_note": "Challenged and upheld 2026-09-22. This stays in filter_split_pairs: the test is whether the auth host sits on a registrable domain OTHER than the blocked main domain (skinsnipe.com). tradeupspy.com is a separate registrable domain, so the pair is a split. same_domain_or_subdomain is reserved for routes where the auth host is on the platform's OWN registrable domain, i.e. main == realm's registrable domain.",
      "note": "Auth host is a subdomain of tradeupspy.com, which separately authenticates its own users directly on api.tradeupspy.com. One registrable domain, two roles. Batch 2026-09-22c."
    },
    {
      "main": "csgobig.com",
      "main_filter": "BLOCKED",
      "realm": "letmeinbig.com",
      "realm_filter": "CLEAN",
      "realm_src": "live",
      "rdap_reg": "2023-01-20",
      "note": "letmeinbig.com serves the CSGOBig application and declares og:url https://csgobig.com/. Replaces csgobiglogin.com, a naming-pattern guess that is not a registered domain (RDAP 404). Batch 2026-09-22c."
    }
  ],
  "separate_domain_no_split": [
    {
      "main": "csgoempire.com",
      "realm": "csgoempirelogin4.com",
      "realm_filter": "CLEAN",
      "realm_src": "live",
      "rdap_reg": "2020-07-20",
      "note": "login1-10 batch"
    },
    {
      "main": "cs.money",
      "realm": "auth.dota.trade",
      "realm_filter": "CLEAN",
      "realm_src": "supplied",
      "rdap_reg": "2016-07-15"
    },
    {
      "main": "csfloat.com",
      "realm": "csgofloat.com",
      "realm_filter": "CLEAN",
      "realm_src": "supplied",
      "rdap_reg": "2015-09-29"
    },
    {
      "main": "g4skins.com",
      "realm": "auth.g4s.to",
      "realm_filter": "CLEAN",
      "realm_src": "supplied",
      "rdap_reg": "2021-05-30"
    },
    {
      "main": "juice.gg",
      "realm": "letmeinjuice.com",
      "realm_filter": "CLEAN",
      "realm_src": "supplied",
      "rdap_reg": "2024-04-15"
    },
    {
      "main": "market.csgo.com",
      "realm": "dota2.net",
      "realm_filter": "CLEAN",
      "realm_src": "supplied",
      "rdap_reg": "2011-10-29"
    },
    {
      "main": "rust.tm",
      "realm": "dota2.net",
      "realm_filter": "CLEAN",
      "realm_src": "supplied",
      "rdap_reg": "2011-10-29"
    },
    {
      "main": "csgolounge.com",
      "realm": "dota2.net",
      "realm_filter": "CLEAN",
      "realm_src": "user",
      "rdap_reg": "2011-10-29",
      "lf_checked": "2026-09-22",
      "note": "Main returns CLEAN, so this is not a split pair. Third front-end recorded on dota2.net."
    },
    {
      "main": "dota2lounge.com",
      "realm": "dota2.net",
      "realm_filter": "CLEAN",
      "realm_src": "user",
      "rdap_reg": "2011-10-29",
      "lf_checked": "2026-09-22",
      "note": "Fourth front-end on dota2.net. One auth domain, registered 2011-10-29, now records four separate front-end brands."
    },
    {
      "main": "skinbaron.de",
      "realm": "skinbaron.com",
      "realm_filter": "CLEAN",
      "realm_src": "supplied",
      "rdap_reg": "2015-12-22"
    },
    {
      "main": "tf2royal.com",
      "realm": "tf2auth.com",
      "realm_filter": "CLEAN",
      "realm_src": "supplied",
      "rdap_reg": "2021-07-27"
    },
    {
      "main": "tradeit.gg",
      "realm": "connect-tradeit.com",
      "realm_filter": "CLEAN",
      "realm_src": "supplied",
      "rdap_reg": "2022-02-23"
    },
    {
      "main": "upgrader.pro",
      "realm": "upgauth.space",
      "realm_filter": "CLEAN",
      "realm_src": "supplied",
      "rdap_reg": "2026-08-14"
    },
    {
      "main": "rustcases.com",
      "realm": "rstlgn.com",
      "realm_filter": "CLEAN",
      "realm_src": "user",
      "rdap_reg": "2021-07-10"
    },
    {
      "main": "hellcase.com",
      "realm": "steam.loginhell.com",
      "realm_filter": "CLEAN",
      "realm_src": "user",
      "rdap_reg": "2018-01-22"
    },
    {
      "main": "csland.gg",
      "realm": "dland-steam.me",
      "realm_filter": "CLEAN",
      "realm_src": "user",
      "rdap_reg": "2025-11-20"
    },
    {
      "main": "igxe.cn",
      "realm": "gamingsky.cn",
      "realm_filter": "CLEAN",
      "realm_src": "user",
      "rdap_reg": null
    },
    {
      "main": "lis-skins.com",
      "realm": "lisauth.com",
      "realm_filter": "CLEAN",
      "realm_src": "user",
      "rdap_reg": "2024-07-08"
    }
  ],
  "same_domain_or_subdomain": [
    {
      "main": "cs2skin.com",
      "realm": "cs2skin.com"
    },
    {
      "main": "cs.trade",
      "realm": "cs.trade",
      "realm_src": "user",
      "observed": "2026-09-22"
    },
    {
      "main": "caseway.net",
      "realm": "caseway.net",
      "realm_src": "user",
      "observed": "2026-09-22"
    },
    {
      "main": "csbattle.com",
      "realm": "csbattle.com"
    },
    {
      "main": "rainbet.com",
      "realm": "services.rainbet.com"
    },
    {
      "main": "chicken.gg",
      "realm": "chicken.gg"
    },
    {
      "main": "hunt.gg",
      "realm": "api.hunt.gg"
    },
    {
      "main": "skinrave.gg",
      "realm": "api.skinrave.gg"
    },
    {
      "main": "rustclash.com",
      "realm": "rustclash.com"
    },
    {
      "main": "rustneo.gg",
      "realm": "rustneo.gg"
    },
    {
      "main": "splits.gg",
      "realm": "splits.gg"
    },
    {
      "main": "xplay.gg",
      "realm": "xplay.gg"
    },
    {
      "main": "csgoroll.com",
      "realm": "www.csgoroll.com"
    },
    {
      "main": "csgowin.com",
      "realm": "api.csgowin.com"
    },
    {
      "main": "rustmagic.com",
      "realm": "api.rustmagic.com"
    },
    {
      "main": "insane.gg",
      "realm": "api.insane.gg"
    },
    {
      "main": "csgoluck.com",
      "realm": "csgoluck.com"
    },
    {
      "main": "csgocasino.gg",
      "realm": "api.csgocasino.gg"
    },
    {
      "main": "skins.com",
      "realm": "api.skins.com"
    },
    {
      "main": "skinflow.gg",
      "realm": "api.skinflow.gg"
    },
    {
      "main": "pirateswap.com",
      "realm": "login.pirateswap.com"
    },
    {
      "main": "rapidskins.com",
      "realm": "api.rapidskins.com"
    },
    {
      "main": "49skins.com",
      "realm": "api.49skins.com"
    },
    {
      "main": "skinvault.gg",
      "realm": "api.skinvault.gg"
    },
    {
      "main": "skinout.gg",
      "realm": "auth.skinout.gg"
    },
    {
      "main": "cybershoke.net",
      "realm": "auth.cybershoke.net"
    },
    {
      "main": "fastcup.net",
      "realm": "api.fastcup.net"
    },
    {
      "main": "tradeupspy.com",
      "realm": "api.tradeupspy.com"
    },
    {
      "main": "cs.deals",
      "realm": "api.cs.deals"
    },
    {
      "main": "kinguin.net",
      "realm": "id.kinguin.net"
    },
    {
      "main": "scmm.app",
      "realm": "api.scmm.app"
    },
    {
      "main": "skin.land",
      "realm": "auth.skin.land"
    },
    {
      "main": "skinswap.com",
      "realm": "api.skinswap.com"
    },
    {
      "main": "haloskins.com",
      "realm": "www.haloskins.com"
    },
    {
      "main": "skin.place",
      "realm": "api.skin.place"
    },
    {
      "main": "rustskins.com",
      "realm": "api.rustskins.com"
    },
    {
      "main": "buff.market",
      "realm": "api.buff.market"
    },
    {
      "main": "moon.market",
      "realm": "moon.market"
    },
    {
      "main": "stntrading.eu",
      "realm": "stntrading.eu"
    },
    {
      "main": "buff.163.com",
      "realm": "buff.163.com"
    },
    {
      "main": "skinsmonkey.com",
      "realm": "skinsmonkey.com"
    },
    {
      "main": "aim.market",
      "realm": "aim.market"
    },
    {
      "main": "ntskins.com",
      "realm": "ntskins.com"
    },
    {
      "main": "backpack.tf",
      "realm": "backpack.tf"
    },
    {
      "main": "scrap.tf",
      "realm": "scrap.tf"
    },
    {
      "main": "marketplace.tf",
      "realm": "marketplace.tf"
    },
    {
      "main": "waxpeer.com",
      "realm": "waxpeer.com"
    },
    {
      "main": "white.market",
      "realm": "white.market"
    },
    {
      "main": "avan.market",
      "realm": "avan.market"
    },
    {
      "main": "ecosteam.cn",
      "realm": "www.ecosteam.cn"
    },
    {
      "main": "pricempire.com",
      "realm": "pricempire.com"
    },
    {
      "main": "steamanalyst.com",
      "realm": "www.steamanalyst.com"
    },
    {
      "main": "steamcardexchange.net",
      "realm": "www.steamcardexchange.net"
    },
    {
      "main": "dotabuff.com",
      "realm": "dotabuff.com"
    },
    {
      "main": "steamlevels.com",
      "realm": "steamlevels.com"
    },
    {
      "main": "playerup.com",
      "realm": "www.playerup.com"
    },
    {
      "main": "csgoskins.gg",
      "realm": "csgoskins.gg"
    },
    {
      "main": "arena.fragnet.net",
      "realm": "arena.fragnet.net"
    }
  ],
  "pending_verification": {
    "note": "Separate-domain auth routes supplied by manual collection and held outside separate_domain_total until each route has both an RDAP registration date for the auth host and a Link Filter reading for the main domain, because the register is used for the age of the route and for the main-vs-proxy contrast. Five of the routes below are batch 2026-09-22a and still need their RDAP dates; jabka.to -> jabauth.com was supplied with batch 2026-09-22c and needs both. Batch 2026-09-22b has cleared both requirements and been promoted; see promoted_2026-09-22b.",
    "required_before_promotion": [
      "rdap_reg for the auth host",
      "main-domain Link Filter state, unauthenticated GET, raw HTML + SHA-256"
    ],
    "routes": [
      {
        "main": "csgo-skins.com",
        "realm": "loginskins.com",
        "realm_src": "user",
        "rdap_reg": null,
        "main_filter": null
      },
      {
        "main": "cscase.net",
        "realm": "casetrust.net",
        "realm_src": "user",
        "rdap_reg": null,
        "main_filter": null
      },
      {
        "main": "dropskin.com",
        "realm": "csgoskin4login.net",
        "realm_src": "user",
        "rdap_reg": null,
        "main_filter": null
      },
      {
        "main": "casehug.com",
        "realm": "hugcase.com",
        "realm_src": "user",
        "rdap_reg": null,
        "main_filter": null
      },
      {
        "main": "bloodycase.com",
        "realm": "bloody.one",
        "realm_src": "user",
        "rdap_reg": null,
        "main_filter": null,
        "note": "Third distinct entity under this brand in the dataset. bloody.case (auth bloodycaselogin.com) was removed on a definitive NXDOMAIN from both resolvers (platforms-removed.json); bloodycase.gg is listed in dead_domains_2026-09-22.json. bloodycase.com with auth host bloody.one is a separate live registration. Succession between the three is not established by any record located; the three registrations and their dates are."
      },
      {
        "main": "jabka.to",
        "realm": "jabauth.com",
        "realm_src": "user",
        "rdap_reg": null,
        "main_filter": null,
        "note": "Supplied 2026-09-22, batch 2026-09-22c."
      }
    ],
    "promoted_2026-09-22b": {
      "note": "Batch 2026-09-22b cleared both promotion requirements on 2026-09-22: RDAP dates for every auth host, and a Link Filter check of every main and auth host with the raw HTML and SHA-256 recorded in linkfilter-2026-09-22.json. All five have left this holding area.",
      "to_filter_split_pairs": [
        "csgogem.com (BLOCKED) -> api.csgem.com (CLEAN), auth host csgem.com registered 2014-03-08 — now the oldest auth host in the register",
        "gamdom.com (BLOCKED) -> login.gambldom.com (CLEAN), gambldom.com registered 2017-09-24",
        "12cs.fail (BLOCKED) -> fail.games (CLEAN), registered 2021-08-24"
      ],
      "to_separate_domain_no_split": [
        "csgolounge.com (CLEAN) -> dota2.net",
        "dota2lounge.com (CLEAN) -> dota2.net"
      ],
      "dota2_net_finding": "Both Lounge front-ends returned CLEAN, so dota2.net remains a no-split auth host and stays out of the age chart. This was checked specifically because dota2.net is the oldest auth host in the collection (2011-10-29) and a BLOCKED main would have made it the oldest split pair. It did not. Four separate front-end brands now sit on that one auth domain: market.csgo.com, rust.tm, csgolounge.com, dota2lounge.com."
    },
    "resolved_this_batch": [
      "csbattle.com -> csbattle.com moved into same_domain_or_subdomain; it has an evidence file (auth-route-audit/csbattle.com.json) but was missing from this register.",
      "upgrader.pro -> upgauth.space, g4skins.com -> auth.g4s.to already in separate_domain_no_split.",
      "skin.fans -> auth.skinfans.com, farmskins.com -> steam.kobal.cc, rollbit.com -> rbsnin.com already in filter_split_pairs.",
      "csgocasino.gg -> api.csgocasino.gg, hunt.gg -> api.hunt.gg already in same_domain_or_subdomain and correctly classified."
    ],
    "already_in_register": [
      "csgo.net -> cn2.easylot.net (filter_split_pairs)",
      "skins.cash -> skinscash.live (filter_split_pairs)",
      "cs2skin.com -> cs2skin.com (same_domain_or_subdomain)",
      "skinflow.gg -> api.skinflow.gg (same_domain_or_subdomain)"
    ]
  },
  "no_steam_login": [
    "shuffle.com",
    "skinup.gg",
    "skinsback.com",
    "tracker.gg",
    "funpay.com",
    "playerauctions.com",
    "eloking.com",
    "boosteria.org",
    "overgear.com",
    "blazingboost.com",
    "buyboost.com",
    "g2g.com",
    "ecosteam.com"
  ],
  "unresolved": [
    "cases.gg",
    "rustix.gg",
    "tf2.bet"
  ],
  "shadow_market": {
    "lolz.team": {
      "domain": "lolz.team",
      "alt": "lzt.market",
      "filter_lolz_team": "CLEAN",
      "filter_lzt_market": "CLEAN",
      "rdap_registrar": "Squarespace Domains II LLC",
      "rdap_registration": "2024-09-19",
      "rdap_transfer": "2024-11-25",
      "nameservers": [
        "ns1.ddos-filter.com",
        "ns2.ddos-filter.com"
      ],
      "note": "Теневой форум (Lolzteam). Продажа краденых Steam-аккаунтов; баланс пополняется скинами. Ключевой узел Steam-экосистемы перепродажи. Steam НЕ блокирует домен в Link Filter.",
      "observed_by": "user, 2026-09-22"
    }
  }
}