phishdestroy.io Valve Steam Web API Ekosistem Denetimi // Ref: VAL-REG-2026-09 // Tüm haklar insanlığa devredilmiştir
PDF'yi aç ↗ Dosyaya Geri Dön
phishdestroy.io · Adli Araştırma Koalisyonu · Evrensel Kamu Kayıtları
DOSYA: VAL-REG-2026-09-EVID
KAYNAK: phishdestroy.io/steam_dossier/
HAKLAR: TÜM HAKLAR İNSANLIĞA DEVREDİLMİŞTİR

Adli Denetim Kanunu ve Düzenleyici Ek

Valve’daki Steam Ekosisteminde Sistematik Üçüncü Taraf API Sağlama, Otomatik Baypas Mimarisi ve Sözleşmeye Dayalı Yürürlük Dışı Uygulama
Etki Alanı Veren Kuruluş phishdestroy.io
Hedef Platform Valve Steam / Steamworks
Birincil Kimlik Doğrulama Vektörü Steam OpenID 2.0 / Web API
Yasal İthaf All Rights to Humanity (CC0)
Bölüm I: İdari Bildirim ve Olgusal Bulgular REF: MEMO-ÖZET-01

Bu belge, Valve Corporation’ın yayınlanmış ticari şartları, teknik kimlik doğrulama uç noktaları ve gözlemlenen üçüncü taraf ticari platformlar arasındaki operasyonel kesişim noktasını inceleyen resmi bir adli denetim raporudur. Denetim, pasif ve kimlik doğrulaması yapılmamış ağ gözlemi, RDAP kayıt doğrulaması ve halka açık Link Filter telemetri verileri kullanılarak gerçekleştirilmiştir.

Temel Gerçekler: Ampirik gözlemler, Valve’un kamuya açık sözleşme beyanları ile üretim altyapısı arasında sistematik bir uyuşmazlık olduğunu ortaya koymaktadır. Steam Abone Sözleşmesi (SSA), yetkisiz ticari kullanımı (§ 2.G), otomatik bot/komut dosyası etkileşimini (§ 4.C) ve hesap devrini (§ 1.C) kesin olarak yasaklarken, Valve Corporation, milyarlarca dolarlık ikincil işlem hacmi yaratan en az 175 ticari kuruluşa canlı, programlı OpenID kimlik doğrulama ve envanter sorgulama altyapısı sağlamaya devam etmektedir.

175
Denetlenmiş Ticari İşletmeciler
44
Ayrı Etki Alanına Sahip Kimlik Doğrulama Sunucuları
26
Filtre-Bölünmüş Proxy Çiftleri
100%
Uygulanmayan SSA § 2.G / § 4.C
0
Zorunlu Kimlik Doğrulama İptalleri
Uygulanabilir Sözleşmeye Dayalı ve Yasal Çerçeve
SSA § 2.G
Ticari Kullanım Yasağı: Valve Corporation’dan önceden yazılı izin alınmadan İçerik ve Hizmetlerin ticari amaçlarla kullanılmasını açıkça yasaklar.
SSA § 4.C
Otomasyon Kısıtlaması: Steam’in hizmetleri ve piyasalarıyla etkileşime giren komut dosyaları, alım satım botları, makrolar veya insan kontrolü dışında çalışan sistemlerin kullanımı kesinlikle yasaktır.
SSA § 1.C
Kişisel Kullanım Zorunluluğu: Hesapların kullanımını kişisel amaçlarla sınırlandırır; Steam kullanıcı hesaplarının satılmasını, kiralanmasını, devredilmesini veya takas edilmesini açıkça yasaklar.
AB DSA (2022/2065)
Sistemik Risk Değerlendirmesi (34/35. maddeler): Çok Büyük Çevrimiçi Platformlar (VLOP’lar), otomatik kötüye kullanım ve yetkisiz ticari sömürüden kaynaklanan sistemik riskleri aktif olarak tespit etmeli, değerlendirmeli ve azaltmalıdır.
Bölüm II: Ek Defter A — Belgelenmiş Bağlantı Filtresi Bölünmüş Çiftleri (26 Yolları) REF: EX-SPLIT-LEDGER

Bölünmüş Etki Alanı Kaçışının Adli Analizi: Valve’ın Steam Bağlantı Filtreleme sistemi kapsamında (steamcommunity.com/linkfilter/?url=...), bir son kullanıcı, işaretlenmiş bir kumar veya karaborsa platformuna yönlendiren bir bağlantıya tıkladığında, Valve göze çarpan bir uyarı görüntüler ("Bağlantı Engellendi! ... potansiyel olarak zararlı olarak işaretlendi"26 ). Bununla birlikte, adli yol izleme çalışmaları, bir bölünmüş etki alanı mimarisi: Link Filter'da birincil ticari alan adı ENGELLENMİŞ olsa da, Valve'un OpenID yanıt uç noktasını barındıran ikincil alan adı TEMİZ olarak işaretlenmiştir. Valve'un OpenID sunucuları, bu proxy sunucularından gelen kimlik doğrulama isteklerini kesintisiz olarak kabul eder; böylece, oturum açma işlemlerini sürdürürken tüketici güvenliği uyarısını etkisiz hale getirir.

# Birincil Ticari Alan Adı Ana Filtre OpenID Kimlik Doğrulama Proxy Etki Alanı Otorite Filtresi RDAP Kayıtlı Kayıt Esası
01 rollbit.com BLOCKED rbsnin.com CLEAN 2026-09-18 PASSIVE_CAPTURE
02 skin.club BLOCKED sc-auth.net CLEAN 2019-04-02 PASSIVE_CAPTURE
03 howl.gg BLOCKED howl.uno CLEAN 2026-08-11 PASSIVE_CAPTURE
04 duelbits.com BLOCKED switchflips.com CLEAN 2020-04-21 PASSIVE_CAPTURE
05 csgofast.com BLOCKED steam-login.authtofast.com CLEAN 2026-06-30 PASSIVE_CAPTURE
06 farmskins.com BLOCKED steam.kobal.cc CLEAN 2017-01-07 PASSIVE_CAPTURE
07 cobaltlab.tech BLOCKED cobaltauth.com CLEAN 2025-01-07 PASSIVE_CAPTURE
08 csgo.net BLOCKED cn2.easylot.net CLEAN 2016-09-03 PASSIVE_CAPTURE
09 ggdrop.com BLOCKED ggauth.com CLEAN 2023-05-03 PASSIVE_CAPTURE
10 rustchance.com BLOCKED hgfuihd.com CLEAN 2019-01-27 PASSIVE_CAPTURE
11 skin.fans BLOCKED auth.skinfans.com CLEAN 2018-07-16 PASSIVE_CAPTURE
12 skinport.com BLOCKED skinport.app CLEAN 2020-06-20 PASSIVE_CAPTURE
13 skins.cash BLOCKED skinscash.live CLEAN 2019-12-05 PASSIVE_CAPTURE
14 tf2hunt.com BLOCKED rstspcl.com CLEAN 2020-08-08 PASSIVE_CAPTURE
15 daddyskins.com BLOCKED go-go-daddy.com CLEAN 2019-01-26 PASSIVE_CAPTURE
16 key-drop.com BLOCKED kdauth.com CLEAN 2026-05-13 PASSIVE_CAPTURE
17 clash.gg BLOCKED clggauth.com CLEAN 2024-09-16 PASSIVE_CAPTURE
18 c5game.com BLOCKED www.imbastar.com CLEAN 2016-02-27 PASSIVE_CAPTURE
19 swap.gg BLOCKED swapauth.com CLEAN 2018-10-06 PASSIVE_CAPTURE
20 shadowpay.com BLOCKED thelogins.com CLEAN 2018-01-22 PASSIVE_CAPTURE
21 csgocases.com BLOCKED log-1n.com CLEAN 2017-11-27 PASSIVE_CAPTURE
22 csgogem.com BLOCKED api.csgem.com CLEAN 2014-03-08 PASSIVE_CAPTURE
23 gamdom.com BLOCKED login.gambldom.com CLEAN 2017-09-24 PASSIVE_CAPTURE
24 12cs.fail BLOCKED fail.games CLEAN 2021-08-24 PASSIVE_CAPTURE
25 skinsnipe.com BLOCKED pricing.tradeupspy.com CLEAN 2020-03-11 PASSIVE_CAPTURE
26 csgobig.com BLOCKED letmeinbig.com CLEAN 2023-01-20 PASSIVE_CAPTURE

* Not: 2026-09-19 ve 2026-09-21. adreslerindeki, kimlik doğrulaması yapılmamış Steam Bağlantı Filtresi uç noktalarına karşı gerçekleştirilen pasif denetimler. Ham HTTP yanıt gövdeleri ve SHA-256 özetleri, veri havuzu veri kümesinde (steam_tos_assets/linkfilter-2026-09-22.json) saklanmaktadır.

Bölüm III: Ek Defter B — 175’da Denetime Tabi Ticari Kuruluşların Kapsamlı Sayımı REF: EX-175-MASTER-CENSUS

Aşağıdaki kayıt, denetim veritabanında aktif olarak doğrulanmış tüm 175 üçüncü taraf ticari platformlarının ayrıntılarını içerir. Her kayıtta kuruluş adı, birincil ticari alan adı, gözlemlenen Steam OpenID kimlik doğrulama yolu, faaliyet sınıflandırması, sözleşme ihlali eşlemeleri (SSA § 2.G, SSA § 4.C, SSA § 1.C) ve kaynak veri kümesinde kaydedilen eylem alanı belirtilmiştir. "Tarihli kanıtlara bakınız" etiketi, okuyucuyu destekleyici kayıtlara yönlendirir; bu, Valve'un herhangi bir işlem yapmadığını ortaya koymaz. Eylem alanının bulunmaması, "belirlenemedi" olarak raporlanır.

Sergi Kuruluş Adı ve Ana Etki Alanı Gözlemlenen Kimlik Doğrulama Yolu / Proxy Sınıflandırma Sözleşme İhlali Valve Eylem
EX-001 CSGORoll
csgoroll.com
www.csgoroll.com
DIRECT
 Skin Gambling SSA § 2.G, SSA § 4.C See dated evidence
EX-002 CSGOEmpire
csgoempire.com
csgoempirelogin4.com
SPLIT PROXY
 Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-003 Rollbit
rollbit.com
rbsnin.com
SPLIT PROXY
 Crypto Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-004 500 Casino
500.casino
fivezerozero.co
SPLIT PROXY
 Licenced Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-005 CSGOBig
csgobig.com
csgobig.com
DIRECT
 Roulette/Slots SSA § 2.G, SSA § 4.C See dated evidence
EX-006 CaseDrop
casedrop.com
casedrop.com
DIRECT
 Case Opening SSA § 2.G, SSA § 4.C See dated evidence
EX-007 RustReaper
rustreaper.com
rustreaper.com
DIRECT
 Rust Roulette SSA § 2.G, SSA § 4.C See dated evidence
EX-008 BanditCamp
banditcamp.com
banditcamp.com
DIRECT
 Rust Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-009 SkinBox
skinbox.com
skinbox.com
DIRECT
 Case Opening SSA § 2.G, SSA § 4.C See dated evidence
EX-010 TastyDrop
tastydrop.com
tastydrop.com
DIRECT
 Case Opening SSA § 2.G, SSA § 4.C See dated evidence
EX-011 CSGOPolygon
csgopolygon.gg
csgopolygon.gg
DIRECT
 Roulette Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-012 MagicDrop
magicdrop.ru
magicdrop.ru
DIRECT
 Case Opening SSA § 2.G, SSA § 4.C See dated evidence
EX-013 CSDice
csdice.com
csdice.com
DIRECT
 Dice Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-014 Rustly
rustly.com
rustly.com
DIRECT
 Rust Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-015 SkinOdds
skinodds.com
skinodds.com
DIRECT
 Upgrader Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-016 CSGOWin
csgowin.com
csgowin.com
DIRECT
 Skin Roulette SSA § 2.G, SSA § 4.C See dated evidence
EX-017 CSGORun
csgorun.net
csgorun.net
DIRECT
 Crash Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-018 OpenSkins
openskins.com
openskins.com
DIRECT
 Case Opening SSA § 2.G, SSA § 4.C See dated evidence
EX-019 RustBet
rustbet.com
rustbet.com
DIRECT
 Rust Gambling SSA § 2.G, SSA § 4.C See dated evidence
EX-020 CSGOMagic
csgomagic.com
csgomagic.com
DIRECT
 Skin Roulette SSA § 2.G, SSA § 4.C See dated evidence
EX-021 CSGOBounty
csgobounty.com
csgobounty.com
DIRECT
 Upgrader/Contract SSA § 2.G, SSA § 4.C See dated evidence
EX-022 EZSkins
ezskins.com
ezskins.com
DIRECT
 Skin Roulette SSA § 2.G, SSA § 4.C See dated evidence
EX-023 RustCases
rustcases.com
rustcases.com
DIRECT
 Case Opening SSA § 2.G, SSA § 4.C See dated evidence
EX-024 CSGOReaper
csgoreaper.com
csgoreaper.com
DIRECT
 Skin Roulette SSA § 2.G, SSA § 4.C See dated evidence
EX-025 CSGOCases
csgocases.com
csgocases.com
DIRECT
 Skin Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-026 CSGO-Skins
csgo-skins.com
csgo-skins.com
DIRECT
 Case Upgrader SSA § 2.G, SSA § 4.C See dated evidence
EX-027 CSGONet
csgonet.com
csgonet.com
DIRECT
 Case Opening SSA § 2.G, SSA § 4.C See dated evidence
EX-028 WTFSkins
wtfskins.com
wtfskins.com
DIRECT
 Skin Roulette SSA § 2.G, SSA § 4.C See dated evidence
EX-029 CSGOFast
csgofast.com
steam-login.authtofast.com
SPLIT PROXY
 Roulette Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-030 Duelbits
duelbits.com
switchflips.com
SPLIT PROXY
 Crypto Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-031 FlameCases
flamecases.com
flamecases.com
DIRECT
 Case Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-032 Farmskins
farmskins.com
steam.kobal.cc
SPLIT PROXY
 Case Opener SSA § 2.G, SSA § 4.C See dated evidence
EX-033 CSGOLuck
csgoluck.com
csgoluck.com
DIRECT
 Skin Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-034 Gamedom
gamedom.com
gamedom.com
DIRECT
 Crypto Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-035 Skin.Club
skin.club
sc-auth.net
SPLIT PROXY
 Case Battles SSA § 2.G, SSA § 4.C See dated evidence
EX-036 DaddySkins
daddyskins.com
daddyskins.com
DIRECT
 Case Opening SSA § 2.G, SSA § 4.C See dated evidence
EX-037 Insane.gg
insane.gg
api.insane.gg
DIRECT
 Skin Roulette SSA § 2.G, SSA § 4.C See dated evidence
EX-038 Rustix
rustix.gg
rustix.gg
DIRECT
 Rust Gambling SSA § 2.G, SSA § 4.C See dated evidence
EX-039 Skins.Club
skins.club
skins.club
DIRECT
 Skin Upgrade SSA § 2.G, SSA § 4.C See dated evidence
EX-040 CSGOHouse
csgohouse.org
csgohouse.org
DIRECT
 Skin Roulette SSA § 2.G, SSA § 4.C See dated evidence
EX-041 SkinRave
skinrave.net
skinrave.net
DIRECT
 Skin Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-042 BloodyCase_GG
bloodycase.gg
bloodycase.gg
DIRECT
 Case Opening SSA § 2.G, SSA § 4.C See dated evidence
EX-043 CSGOClicker
csgoclicker.com
csgoclicker.com
DIRECT
 Clicker/Upgrade SSA § 2.G, SSA § 4.C See dated evidence
EX-044 RustBet_GG
rustbet.gg
rustbet.gg
DIRECT
 Rust Roulette SSA § 2.G, SSA § 4.C See dated evidence
EX-045 CS_Drop
cs-drop.com
cs-drop.com
DIRECT
 Case Opening SSA § 2.G, SSA § 4.C See dated evidence
EX-046 HellStore
hellstore.net
hellstore.net
DIRECT
 Skin Roulette SSA § 2.G, SSA § 4.C See dated evidence
EX-047 RustLoot
rustloot.com
rustloot.com
DIRECT
 Rust Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-048 CSGO_Case
csgo-case.com
csgo-case.com
DIRECT
 Case Opening SSA § 2.G, SSA § 4.C See dated evidence
EX-049 CS2Skin
cs2skin.com
cs2skin.com
DIRECT
 Skin Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-050 Juice_GG
juice.gg
letmeinjuice.com
SPLIT PROXY
 Skin Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-051 GGDrop
ggdrop.com
ggauth.com
SPLIT PROXY
 Case Opening SSA § 2.G, SSA § 4.C See dated evidence
EX-052 CSGOGem
csgogem.com
csgogem.com
DIRECT
 Skin Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-053 Rainbet
rainbet.com
services.rainbet.com
DIRECT
 Crypto Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-054 Howl_GG
howl.gg
howl.uno
SPLIT PROXY
 Skins Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-055 Chicken_GG
chicken.gg
chicken.gg
DIRECT
 Skin Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-056 CSGOCasino_GG
csgocasino.gg
api.csgocasino.gg
DIRECT
 Skin Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-057 Hunt_GG
hunt.gg
api.hunt.gg
DIRECT
 Skins Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-058 CSBattle
csbattle.com
csbattle.com
DIRECT
 Case Battles SSA § 2.G, SSA § 4.C See dated evidence
EX-059 SkinRave_GG
skinrave.gg
api.skinrave.gg
DIRECT
 Skin Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-060 CSDouble
csdouble.gg
csdouble.gg
DIRECT
 Skin Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-061 RustChance
rustchance.com
hgfuihd.com
SPLIT PROXY
 Rust Roulette SSA § 2.G, SSA § 4.C See dated evidence
EX-062 RustClash
rustclash.com
rustclash.com
DIRECT
 Rust Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-063 CobaltLab
cobaltlab.tech
cobaltauth.com
SPLIT PROXY
 Rust Automation SSA § 2.G, SSA § 4.C See dated evidence
EX-064 Raided_GG
raided.gg
api.raided.gg
DIRECT
 Rust Roulette SSA § 2.G, SSA § 4.C See dated evidence
EX-065 RustNeo
rustneo.gg
rustneo.gg
DIRECT
 Rust Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-066 Splits_GG
splits.gg
splits.gg
DIRECT
 Skin Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-067 Upgrader_Pro
upgrader.pro
upgauth.space
SPLIT PROXY
 Skin Upgrader SSA § 2.G, SSA § 4.C See dated evidence
EX-068 SkinFans
skin.fans
auth.skinfans.com
SPLIT PROXY
 Skin Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-069 HotPizza
hotpizza.one
hotpizza.one
DIRECT
 Case Opening SSA § 2.G, SSA § 4.C See dated evidence
EX-070 G4Skins
g4skins.com
auth.g4s.to
SPLIT PROXY
 Case Opening SSA § 2.G, SSA § 4.C See dated evidence
EX-071 12CS_Fail
12cs.fail
12cs.fail
DIRECT
 Crash Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-072 TF2Royal
tf2royal.com
tf2auth.com
SPLIT PROXY
 TF2 Gambling SSA § 2.G, SSA § 4.C See dated evidence
EX-073 TF2Easy
www.tf2easy.com
www.tf2easy.com
DIRECT
 TF2 Gambling SSA § 2.G, SSA § 4.C See dated evidence
EX-074 TF2Hunt
tf2hunt.com
rstspcl.com
SPLIT PROXY
 TF2 Gambling SSA § 2.G, SSA § 4.C See dated evidence
EX-075 TF2Bet
tf2.bet/coinflip
tf2.bet
DIRECT
 TF2 Gambling SSA § 2.G, SSA § 4.C See dated evidence
EX-076 TF2Blaze
tf2blaze.com
tf2blaze.com
DIRECT
 TF2 Gambling SSA § 2.G, SSA § 4.C See dated evidence
EX-077 OpenStars_GG
openstars.gg
openstars.gg
DIRECT
 Skin Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-078 Shuffle_Com
shuffle.com
shuffle.com
DIRECT
 Crypto Casino SSA § 2.G, SSA § 4.C See dated evidence
EX-079 Skins.com
skins.com
api.skins.com
DIRECT
 CS2 Market SSA § 2.G, SSA § 4.C See dated evidence
EX-080 White.Market
white.market
white.market
DIRECT
 P2P Market SSA § 2.G, SSA § 4.C See dated evidence
EX-081 Buff.Market
buff.market
buff.market
DIRECT
 CS2 Market SSA § 2.G, SSA § 4.C See dated evidence
EX-082 Avan.Market
avan.market
avan.market
DIRECT
 CS2 Market SSA § 2.G, SSA § 4.C See dated evidence
EX-083 CS.MONEY
cs.money
auth.dota.trade
SPLIT PROXY
 Trading Engine SSA § 2.G, SSA § 4.C See dated evidence
EX-084 UUSkins
uuskins.com
uuskins.com
DIRECT
 P2P Market SSA § 2.G, SSA § 4.C See dated evidence
EX-085 YouPin898
youpin898.com
youpin898.com
DIRECT
 Mass Market SSA § 2.G, SSA § 4.C See dated evidence
EX-086 Moon.Market
moon.market
moon.market
DIRECT
 P2P Market SSA § 2.G, SSA § 4.C See dated evidence
EX-087 CSFloat
csfloat.com
csgofloat.com
SPLIT PROXY
 P2P Market SSA § 2.G, SSA § 4.C See dated evidence
EX-088 Skin.Land
skin.land
auth.skin.land
DIRECT
 Skins Market SSA § 2.G, SSA § 4.C See dated evidence
EX-089 C5Game
c5game.com
c5game.com
DIRECT
 CS2 Market SSA § 2.G, SSA § 4.C See dated evidence
EX-090 HaloSkins
haloskins.com
haloskins.com
DIRECT
 Skins Market SSA § 2.G, SSA § 4.C See dated evidence
EX-091 Buff.163
buff.163.com
buff.163.com
DIRECT
 Corporate Market SSA § 2.G, SSA § 4.C See dated evidence
EX-092 Waxpeer
waxpeer.com
waxpeer.com
DIRECT
 P2P Marketplace SSA § 2.G, SSA § 4.C See dated evidence
EX-093 CS.MONEY Bot
cs.money
auth.dota.trade
SPLIT PROXY
 Bot Trading SSA § 2.G, SSA § 4.C See dated evidence
EX-094 Market.CSGO
market.csgo.com
dota2.net
SPLIT PROXY
 P2P Marketplace SSA § 2.G, SSA § 4.C See dated evidence
EX-095 Skinport
skinport.com
skinport.app
SPLIT PROXY
 Regulated Market SSA § 2.G, SSA § 4.C See dated evidence
EX-096 SkinFlow
skinflow.gg
api.skinflow.gg
DIRECT
 Marketplace/Swap SSA § 2.G, SSA § 4.C See dated evidence
EX-097 DMarket
dmarket.com
dmarket.com
DIRECT
 US Marketplace SSA § 2.G, SSA § 4.C See dated evidence
EX-098 Skin.place
skin.place
api.skin.place
DIRECT
 Skins Market SSA § 2.G, SSA § 4.C See dated evidence
EX-099 SkinsMonkey
skinsmonkey.com
skinsmonkey.com
DIRECT
 Instant Swap SSA § 2.G, SSA § 4.C See dated evidence
EX-100 SkinBaron
skinbaron.de
skinbaron.com
SPLIT PROXY
 Corporate Market SSA § 2.G, SSA § 4.C See dated evidence
EX-101 Steam
steamcommunity.com/market
steamcommunity.com/market
DIRECT
 Official Market SSA § 2.G, SSA § 4.C See dated evidence
EX-102 RustTM
rust.tm
dota2.net
SPLIT PROXY
 Rust Market SSA § 2.G, SSA § 4.C See dated evidence
EX-103 PirateSwap
pirateswap.com
login.pirateswap.com
DIRECT
 Instant Swap SSA § 2.G, SSA § 4.C See dated evidence
EX-104 Mannco.Store
mannco.store
mannco.store
DIRECT
 TF2 Marketplace SSA § 2.G, SSA § 4.C See dated evidence
EX-105 SkinSwap
skinswap.com
api.skinswap.com
DIRECT
 Instant Swap SSA § 2.G, SSA § 4.C See dated evidence
EX-106 LootFarm
lootfarm.com
lootfarm.com
DIRECT
 Trading Platform SSA § 2.G, SSA § 4.C See dated evidence
EX-107 Rustskins
rustskins.com
rustskins.com
DIRECT
 Rust Market SSA § 2.G, SSA § 4.C See dated evidence
EX-108 ExeSkins
exeskins.com
exeskins.com
DIRECT
 P2P Market SSA § 2.G, SSA § 4.C See dated evidence
EX-109 BalticSkins
balticskins.com
balticskins.com
DIRECT
 Skins Market SSA § 2.G, SSA § 4.C See dated evidence
EX-110 CS.Trade
cs.trade
cs.trade
DIRECT
 Instant Swap SSA § 2.G, SSA § 4.C See dated evidence
EX-111 RapidSkins
rapidskins.com
api.rapidskins.com
DIRECT
 CS2 Market SSA § 2.G, SSA § 4.C See dated evidence
EX-112 TradeIt
tradeit.gg
connect-tradeit.com
SPLIT PROXY
 CS2 Market SSA § 2.G, SSA § 4.C See dated evidence
EX-113 Krakatoa
krakatoa.com
krakatoa.com
DIRECT
 CS2 Market SSA § 2.G, SSA § 4.C See dated evidence
EX-114 ShadowPay
shadowpay.com
shadowpay.com
DIRECT
 P2P Marketplace SSA § 2.G, SSA § 4.C See dated evidence
EX-115 49skins
49skins.com
api.49skins.com
DIRECT
 CS2 Market SSA § 2.G, SSA § 4.C See dated evidence
EX-116 SkinVault
skinvault.gg
api.skinvault.gg
DIRECT
 CS2 Market SSA § 2.G, SSA § 4.C See dated evidence
EX-117 Aim Market
aim.market
aim.market
DIRECT
 Skins Trading SSA § 2.G, SSA § 4.C See dated evidence
EX-118 Skinout
skinout.gg
auth.skinout.gg
DIRECT
 Instant Sell Portal SSA § 2.G, SSA § 4.C See dated evidence
EX-119 NTSkins
ntskins.com
ntskins.com
DIRECT
 Skins Trading SSA § 2.G, SSA § 4.C See dated evidence
EX-120 IGXE
igxe.cn
igxe.cn
DIRECT
 Chinese Powerhouse SSA § 2.G, SSA § 4.C See dated evidence
EX-121 Swap.gg
swap.gg
swap.gg
DIRECT
 Automated Swap SSA § 2.G, SSA § 4.C See dated evidence
EX-122 Bitskins
bitskins.com
bitskins.com
DIRECT
 Cash-out Portal SSA § 2.G, SSA § 4.C See dated evidence
EX-123 GamerPay
gamerpay.gg
gamerpay.gg
DIRECT
 P2P Portal SSA § 2.G, SSA § 4.C See dated evidence
EX-124 TF2Mart
tf2mart.com
tf2mart.com
DIRECT
 TF2 Automation SSA § 2.G, SSA § 4.C See dated evidence
EX-125 SkinBid
skinbid.com
skinbid.com
DIRECT
 Skin Auctions SSA § 2.G, SSA § 4.C See dated evidence
EX-126 LootBear
lootbear.com
lootbear.com
DIRECT
 Skin Rental SSA § 2.G, SSA § 4.C See dated evidence
EX-127 Backpack.tf
backpack.tf
backpack.tf
DIRECT
 TF2 Valuation SSA § 2.G, SSA § 4.C See dated evidence
EX-128 Scrap.tf
scrap.tf
scrap.tf
DIRECT
 TF2 Scrap Swap SSA § 2.G, SSA § 4.C See dated evidence
EX-129 Marketplace.tf
marketplace.tf
marketplace.tf
DIRECT
 TF2 Cashout SSA § 2.G, SSA § 4.C See dated evidence
EX-130 STNTrading
stntrading.eu
stntrading.eu
DIRECT
 TF2 Botnet SSA § 2.G, SSA § 4.C See dated evidence
EX-131 Skins.Cash
skins.cash
skinscash.live
SPLIT PROXY
 Instant Cashout SSA § 2.G, SSA § 4.C See dated evidence
EX-132 SkinWallet
skinwallet.com
skinwallet.com
DIRECT
 Instant Cashout SSA § 2.G, SSA § 4.C See dated evidence
EX-133 Dota2Market
dota2market.com
dota2market.com
DIRECT
 Dota 2 Market SSA § 2.G, SSA § 4.C See dated evidence
EX-134 CSGO.NET
csgo.net
cn2.easylot.net
SPLIT PROXY
 Case Opening SSA § 2.G, SSA § 4.C See dated evidence
EX-135 Cybershoke
cybershoke.net
auth.cybershoke.net
DIRECT
 Community Hub SSA § 2.G, SSA § 4.C See dated evidence
EX-136 XPlay_GG
xplay.gg
xplay.gg
DIRECT
 Server Network SSA § 2.G, SSA § 4.C See dated evidence
EX-137 FastCup
fastcup.net
api.fastcup.net
DIRECT
 Matchmaker Hub SSA § 2.G, SSA § 4.C See dated evidence
EX-138 Esportal
esportal.com
esportal.com
DIRECT
 Matchmaking Portal SSA § 2.G, SSA § 4.C See dated evidence
EX-139 GamersClub
gamersclub.com.br
gamersclub.com.br
DIRECT
 LATAM Hub SSA § 2.G, SSA § 4.C See dated evidence
EX-140 Leetify
leetify.com
leetify.com
DIRECT
 SaaS Analytics SSA § 2.G, SSA § 4.C See dated evidence
EX-141 Scope_GG
scope.gg
scope.gg
DIRECT
 SaaS Analytics SSA § 2.G, SSA § 4.C See dated evidence
EX-142 TradeUpSpy
tradeupspy.com
api.tradeupspy.com
DIRECT
 SaaS Tools SSA § 2.G, SSA § 4.C See dated evidence
EX-143 Epidemic_GG
epidemic.gg
epidemic.gg
DIRECT
 SaaS Tools SSA § 2.G, SSA § 4.C See dated evidence
EX-144 CSDeals
cs.deals
api.cs.deals
DIRECT
 Marketplace SSA § 2.G, SSA § 4.C See dated evidence
EX-145 Pricempire
pricempire.com
pricempire.com
DIRECT
 SaaS Price DB SSA § 2.G, SSA § 4.C See dated evidence
EX-146 CS2Stash
cs2stash.com
cs2stash.com
DIRECT
 SaaS Index SSA § 2.G, SSA § 4.C See dated evidence
EX-147 CSGOSkins
csgoskins.gg
csgoskins.gg
DIRECT
 SaaS Index SSA § 2.G, SSA § 4.C See dated evidence
EX-148 SteamAnalyst
steamanalyst.com
steamanalyst.com
DIRECT
 SaaS Index SSA § 2.G, SSA § 4.C See dated evidence
EX-149 SteamCardExchange
steamcardexchange.net
steamcardexchange.net
DIRECT
 Trading Exchange SSA § 2.G, SSA § 4.C See dated evidence
EX-150 DotaBuff
dotabuff.com
dotabuff.com
DIRECT
 SaaS Tracker SSA § 2.G, SSA § 4.C See dated evidence
EX-151 Tracker_GG
tracker.gg
tracker.gg
DIRECT
 SaaS Tracker SSA § 2.G, SSA § 4.C See dated evidence
EX-152 FSB Market (an anonymized label; the original name is withheld here)
FSB Market
FSB Market
DIRECT
 Mass Blackmarket SSA § 2.G, SSA § 4.C, SSA § 1.C See dated evidence
EX-153 FunPay
funpay.com
funpay.com
DIRECT
 Account Exchange SSA § 2.G, SSA § 4.C, SSA § 1.C See dated evidence
EX-154 PlayerAuctions
playerauctions.com
playerauctions.com
DIRECT
 Grey Market SSA § 2.G, SSA § 1.C See dated evidence
EX-155 Eldorado.gg
eldorado.gg
eldorado.gg
DIRECT
 Account Portal SSA § 2.G, SSA § 1.C See dated evidence
EX-156 G2A
g2a.com
g2a.com
DIRECT
 Mass Key Market SSA § 2.G, SSA § 1.C See dated evidence
EX-157 Kinguin
kinguin.net
kinguin.net
DIRECT
 Mass Key Market SSA § 2.G, SSA § 1.C See dated evidence
EX-158 G2G.com
g2g.com
g2g.com
DIRECT
 Virtual Services SSA § 2.G, SSA § 1.C See dated evidence
EX-159 Playerup
playerup.com
playerup.com
DIRECT
 Account Broker SSA § 2.G, SSA § 1.C See dated evidence
EX-160 Z2U.com
z2u.com
www.z2u.com
DIRECT
 Ready-Account Hub SSA § 2.G, SSA § 1.C See dated evidence
EX-161 SmurfHub
smurfhub.net
smurfhub.net
DIRECT
 Smurf Shop SSA § 2.G, SSA § 1.C See dated evidence
EX-162 SmurfAccounts
smurfaccounts.com
smurfaccounts.com
DIRECT
 Smurf Shop SSA § 2.G, SSA § 1.C See dated evidence
EX-163 BuyCSGORank
buycsgorank.com
buycsgorank.com
DIRECT
 Rank Shop SSA § 2.G, SSA § 1.C See dated evidence
EX-164 CSGOSmurfKings
csgosmurfkings.com
csgosmurfkings.com
DIRECT
 Smurf Shop SSA § 2.G, SSA § 1.C See dated evidence
EX-165 SmurfStore_Co
smurfstore.co
smurfstore.co
DIRECT
 Smurf Shop SSA § 2.G, SSA § 1.C See dated evidence
EX-166 SteamLvlUp
steamlvlup.com
steamlvlup.com
DIRECT
 Card Leveling SSA § 2.G, SSA § 1.C See dated evidence
EX-167 SteamLevels
steamlevels.com
steamlevels.com
DIRECT
 Card Leveling SSA § 2.G, SSA § 1.C See dated evidence
EX-168 LevelSteam
levelsteam.com
levelsteam.com
DIRECT
 Card Leveling SSA § 2.G, SSA § 1.C See dated evidence
EX-169 SteamLevelU
steamlevelu.com
steamlevelu.com
DIRECT
 Card Leveling SSA § 2.G, SSA § 1.C See dated evidence
EX-170 EloKing
eloking.com
eloking.com
DIRECT
 Rank Boosting SSA § 2.G, SSA § 1.C See dated evidence
EX-171 Boosteria
boosteria.org
boosteria.org
DIRECT
 Rank Boosting SSA § 2.G, SSA § 1.C See dated evidence
EX-172 Overgear
overgear.com
overgear.com
DIRECT
 Boosting SaaS SSA § 2.G, SSA § 1.C See dated evidence
EX-173 BlazingBoost
blazingboost.com
blazingboost.com
DIRECT
 Boosting SaaS SSA § 2.G, SSA § 1.C See dated evidence
EX-174 Dota2Boost
dota2boost.com
dota2boost.com
DIRECT
 Rank Boosting SSA § 2.G, SSA § 1.C See dated evidence
EX-175 BuyBoost
buyboost.com
buyboost.com
DIRECT
 Boosting SaaS SSA § 2.G, SSA § 1.C See dated evidence
Bölüm IV: Teknik Mimari ve Kimlik Doğrulama Mekanizmaları REF: TEKNİK ANALİZ -01

1. OpenID’de Etki Alanı Sahipliği Doğrulamasının Olmaması 2.0: Valve’ın OpenID 2.0 protokolünün uygulaması (https://steamcommunity.com/openid/login) şunu değerlendirir: openid.return_to ve openid.realm Geliştiricilerin önceden kayıt olması, kriptografik doğrulama veya alan adı sahipliği doğrulaması gerektirmeden parametreler. Herhangi bir ticari işletmeci, kullanıcıları Valve adresindeki oturum açma ekranına yönlendirebilir ve rastgele alan adlarına yönlendirilmiş, kriptografik olarak imzalanmış bir kimlik beyanı (64-bitlik SteamID’yi içeren) alabilir.

2. Programatik Envanter Sorgulama ve API Anahtarının Kötüye Kullanımı: Kullanıcı kimlik doğrulaması OpenID aracılığıyla onaylandıktan sonra, operatörler genel ve iş ortağı Web API uç noktalarına sorgu gönderir (IEconItems_730/GetPlayerItems) envanter varlıklarını gerçek zamanlı olarak endekslemek için. Otomatikleştirilmiş ticaret ağları, eşler arası (P2P) ticaret tekliflerini sunmak, sorgulamak ve kabul etmek için programlı oturum belirteçleri kullanır; bu da SSA § 4.C’de yer alan insan dışı etkileşime ilişkin yasağı doğrudan ihlal etmektedir.

3. Bağlantı Filtresi Asimetrisi: Tüketicilere yönelik alan adı uyarılarının, tam işlevsel kimlik doğrulama uç noktalarıyla bir arada bulunması, düzenleyici bir çelişki yaratmaktadır: Valve adresindeki güvenlik telemetri sistemi bu operatörleri “potansiyel olarak zararlı” olarak sınıflandırmaktadır; ancak Valve adresindeki kimlik doğrulama altyapısı, bu operatörlerin kullanıcı tabanının kimlik doğrulamasını sürdürmektedir.

Delil Metodolojisi ve Delil Zinciri Beyanı

Bu belge, kimlik doğrulaması yapılmamış ağ yakalamaları, geçmiş RDAP kayıt defteri sorguları ve doğrulanmış kriptografik hash listelerinden oluşturulmuştur. Hiçbir kullanıcı oturum açma bilgisi, güvenlik ihlali testine tabi tutulmamış veya işlenmemiştir. Tüm bulgular, Eylül ayı itibarıyla gözlemlenebilir üretim ağı durumunu yansıtmaktadır 2026. Bu belge, adli, düzenleyici ve kamu soruşturmaları için hazırlanmış, tarafsız bir teknik delil niteliğindedir.

ÖZET: SHA-256, DOĞRULANMIŞ
c507c9025f93da0aadaf395c4d8882f25973211c318ee8e9b6f18a5b3755e050
ARŞİV: AÇIK HUKUK KAYDI
YAYINLAYAN VE İMZALAYAN: phishdestroy.io · Adli Araştırma Koalisyonu
YASAL DURUM: TÜM HAKLAR İNSANLIĞA DEVREDİLMİŞTİR · CC0 EVRENSEL KAMU MALI