《法证审计法》及监管附件
本文件是一份正式的法证审计报告,旨在审查Valve公司公布的商业条款、其技术认证端点以及观察到的第三方商业平台之间的运营关联。本次审计通过被动、未经身份验证的网络观察、RDAP注册验证以及公开的Link Filter遥测数据进行。
事实核心: 实证观察表明,Valve 的公开合同声明与其生产基础设施之间存在系统性偏差。 尽管《Steam订阅协议》(SSA)严格禁止未经授权的商业利用(§ 2.G)、自动化机器人/脚本交互(§ 4.C)以及账户转让(§ 1.C),但Valve公司仍持续为至少175家商业实体提供实时、程序化的OpenID身份验证和库存查询基础设施,这些实体产生的二级市场交易量高达数十亿美元。
对分域规避机制的法医分析: 在Valve的Steam链接过滤系统下(steamcommunity.com/linkfilter/?url=...),当最终用户点击一个指向被标记的赌博或黑市平台的链接时,Valve 会显示一条醒目的警告(“链接已被屏蔽!……被标记为可能具有恶意”)。然而,取证路由追踪显示,26 商业平台运行在 分域架构:虽然主要商业域名在“链接过滤器”中被标记为“被封锁”,但托管 Valve 的 OpenID 响应端点的次要域名却被标记为“安全”。Valve 的 OpenID 服务器会不间断地接受来自这些代理主机的身份验证请求,从而消除用户安全警告,同时继续处理登录操作。
| # | 主要商业域名 | 主过滤器 | OpenID 身份验证代理域名 | 身份验证过滤器 | RDAP 已注册 | 捕获依据 |
|---|---|---|---|---|---|---|
| 01 | rollbit.com | BLOCKED | rbsnin.com | CLEAN | 2026-09-18 | PASSIVE_CAPTURE |
| 02 | skin.club | BLOCKED | sc-auth.net | CLEAN | 2019-04-02 | PASSIVE_CAPTURE |
| 03 | howl.gg | BLOCKED | howl.uno | CLEAN | 2026-08-11 | PASSIVE_CAPTURE |
| 04 | duelbits.com | BLOCKED | switchflips.com | CLEAN | 2020-04-21 | PASSIVE_CAPTURE |
| 05 | csgofast.com | BLOCKED | steam-login.authtofast.com | CLEAN | 2026-06-30 | PASSIVE_CAPTURE |
| 06 | farmskins.com | BLOCKED | steam.kobal.cc | CLEAN | 2017-01-07 | PASSIVE_CAPTURE |
| 07 | cobaltlab.tech | BLOCKED | cobaltauth.com | CLEAN | 2025-01-07 | PASSIVE_CAPTURE |
| 08 | csgo.net | BLOCKED | cn2.easylot.net | CLEAN | 2016-09-03 | PASSIVE_CAPTURE |
| 09 | ggdrop.com | BLOCKED | ggauth.com | CLEAN | 2023-05-03 | PASSIVE_CAPTURE |
| 10 | rustchance.com | BLOCKED | hgfuihd.com | CLEAN | 2019-01-27 | PASSIVE_CAPTURE |
| 11 | skin.fans | BLOCKED | auth.skinfans.com | CLEAN | 2018-07-16 | PASSIVE_CAPTURE |
| 12 | skinport.com | BLOCKED | skinport.app | CLEAN | 2020-06-20 | PASSIVE_CAPTURE |
| 13 | skins.cash | BLOCKED | skinscash.live | CLEAN | 2019-12-05 | PASSIVE_CAPTURE |
| 14 | tf2hunt.com | BLOCKED | rstspcl.com | CLEAN | 2020-08-08 | PASSIVE_CAPTURE |
| 15 | daddyskins.com | BLOCKED | go-go-daddy.com | CLEAN | 2019-01-26 | PASSIVE_CAPTURE |
| 16 | key-drop.com | BLOCKED | kdauth.com | CLEAN | 2026-05-13 | PASSIVE_CAPTURE |
| 17 | clash.gg | BLOCKED | clggauth.com | CLEAN | 2024-09-16 | PASSIVE_CAPTURE |
| 18 | c5game.com | BLOCKED | www.imbastar.com | CLEAN | 2016-02-27 | PASSIVE_CAPTURE |
| 19 | swap.gg | BLOCKED | swapauth.com | CLEAN | 2018-10-06 | PASSIVE_CAPTURE |
| 20 | shadowpay.com | BLOCKED | thelogins.com | CLEAN | 2018-01-22 | PASSIVE_CAPTURE |
| 21 | csgocases.com | BLOCKED | log-1n.com | CLEAN | 2017-11-27 | PASSIVE_CAPTURE |
| 22 | csgogem.com | BLOCKED | api.csgem.com | CLEAN | 2014-03-08 | PASSIVE_CAPTURE |
| 23 | gamdom.com | BLOCKED | login.gambldom.com | CLEAN | 2017-09-24 | PASSIVE_CAPTURE |
| 24 | 12cs.fail | BLOCKED | fail.games | CLEAN | 2021-08-24 | PASSIVE_CAPTURE |
| 25 | skinsnipe.com | BLOCKED | pricing.tradeupspy.com | CLEAN | 2020-03-11 | PASSIVE_CAPTURE |
| 26 | csgobig.com | BLOCKED | letmeinbig.com | CLEAN | 2023-01-20 | PASSIVE_CAPTURE |
* 注:针对 2026-09-19 和 2026-09-21. 上未经验证的 Steam Link Filter 端点执行的被动检查,其原始 HTTP 响应正文和 SHA-256 摘要已保存在存储库数据集(steam_tos_assets/linkfilter-2026-09-22.json)中。
以下登记册详细列出了审计数据库中所有已通过积极验证的175第三方商业平台。每条记录包含实体名称、主要商业域名、观察到的Steam OpenID认证路径、活动分类、合同违约映射(SSA § 2.G、SSA § 4.C、SSA § 1.C)以及源数据集中记录的“行动”字段。 标签“参见带日期的证据”旨在引导读者查阅支持性记录;它并不意味着Valve未采取任何行动。若“行动”字段缺失,则报告为“未确定”。
| 展品 | 实体名称与主域名 | 已观察到的身份验证路由/代理 | 分类 | 违约 | Valve 动作 |
|---|---|---|---|---|---|
| EX-001 |
CSGORoll
csgoroll.com
|
www.csgoroll.com
DIRECT
|
Skin Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-002 |
CSGOEmpire
csgoempire.com
|
csgoempirelogin4.com
SPLIT PROXY
|
Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-003 |
Rollbit
rollbit.com
|
rbsnin.com
SPLIT PROXY
|
Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-004 |
500 Casino
500.casino
|
fivezerozero.co
SPLIT PROXY
|
Licenced Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-005 |
CSGOBig
csgobig.com
|
csgobig.com
DIRECT
|
Roulette/Slots | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-006 |
CaseDrop
casedrop.com
|
casedrop.com
DIRECT
|
Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-007 |
RustReaper
rustreaper.com
|
rustreaper.com
DIRECT
|
Rust Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-008 |
BanditCamp
banditcamp.com
|
banditcamp.com
DIRECT
|
Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-009 |
SkinBox
skinbox.com
|
skinbox.com
DIRECT
|
Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-010 |
TastyDrop
tastydrop.com
|
tastydrop.com
DIRECT
|
Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-011 |
CSGOPolygon
csgopolygon.gg
|
csgopolygon.gg
DIRECT
|
Roulette Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-012 |
MagicDrop
magicdrop.ru
|
magicdrop.ru
DIRECT
|
Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-013 |
CSDice
csdice.com
|
csdice.com
DIRECT
|
Dice Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-014 |
Rustly
rustly.com
|
rustly.com
DIRECT
|
Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-015 |
SkinOdds
skinodds.com
|
skinodds.com
DIRECT
|
Upgrader Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-016 |
CSGOWin
csgowin.com
|
csgowin.com
DIRECT
|
Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-017 |
CSGORun
csgorun.net
|
csgorun.net
DIRECT
|
Crash Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-018 |
OpenSkins
openskins.com
|
openskins.com
DIRECT
|
Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-019 |
RustBet
rustbet.com
|
rustbet.com
DIRECT
|
Rust Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-020 |
CSGOMagic
csgomagic.com
|
csgomagic.com
DIRECT
|
Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-021 |
CSGOBounty
csgobounty.com
|
csgobounty.com
DIRECT
|
Upgrader/Contract | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-022 |
EZSkins
ezskins.com
|
ezskins.com
DIRECT
|
Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-023 |
RustCases
rustcases.com
|
rustcases.com
DIRECT
|
Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-024 |
CSGOReaper
csgoreaper.com
|
csgoreaper.com
DIRECT
|
Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-025 |
CSGOCases
csgocases.com
|
csgocases.com
DIRECT
|
Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-026 |
CSGO-Skins
csgo-skins.com
|
csgo-skins.com
DIRECT
|
Case Upgrader | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-027 |
CSGONet
csgonet.com
|
csgonet.com
DIRECT
|
Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-028 |
WTFSkins
wtfskins.com
|
wtfskins.com
DIRECT
|
Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-029 |
CSGOFast
csgofast.com
|
steam-login.authtofast.com
SPLIT PROXY
|
Roulette Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-030 |
Duelbits
duelbits.com
|
switchflips.com
SPLIT PROXY
|
Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-031 |
FlameCases
flamecases.com
|
flamecases.com
DIRECT
|
Case Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-032 |
Farmskins
farmskins.com
|
steam.kobal.cc
SPLIT PROXY
|
Case Opener | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-033 |
CSGOLuck
csgoluck.com
|
csgoluck.com
DIRECT
|
Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-034 |
Gamedom
gamedom.com
|
gamedom.com
DIRECT
|
Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-035 |
Skin.Club
skin.club
|
sc-auth.net
SPLIT PROXY
|
Case Battles | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-036 |
DaddySkins
daddyskins.com
|
daddyskins.com
DIRECT
|
Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-037 |
Insane.gg
insane.gg
|
api.insane.gg
DIRECT
|
Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-038 |
Rustix
rustix.gg
|
rustix.gg
DIRECT
|
Rust Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-039 |
Skins.Club
skins.club
|
skins.club
DIRECT
|
Skin Upgrade | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-040 |
CSGOHouse
csgohouse.org
|
csgohouse.org
DIRECT
|
Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-041 |
SkinRave
skinrave.net
|
skinrave.net
DIRECT
|
Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-042 |
BloodyCase_GG
bloodycase.gg
|
bloodycase.gg
DIRECT
|
Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-043 |
CSGOClicker
csgoclicker.com
|
csgoclicker.com
DIRECT
|
Clicker/Upgrade | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-044 |
RustBet_GG
rustbet.gg
|
rustbet.gg
DIRECT
|
Rust Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-045 |
CS_Drop
cs-drop.com
|
cs-drop.com
DIRECT
|
Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-046 |
HellStore
hellstore.net
|
hellstore.net
DIRECT
|
Skin Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-047 |
RustLoot
rustloot.com
|
rustloot.com
DIRECT
|
Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-048 |
CSGO_Case
csgo-case.com
|
csgo-case.com
DIRECT
|
Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-049 |
CS2Skin
cs2skin.com
|
cs2skin.com
DIRECT
|
Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-050 |
Juice_GG
juice.gg
|
letmeinjuice.com
SPLIT PROXY
|
Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-051 |
GGDrop
ggdrop.com
|
ggauth.com
SPLIT PROXY
|
Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-052 |
CSGOGem
csgogem.com
|
csgogem.com
DIRECT
|
Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-053 |
Rainbet
rainbet.com
|
services.rainbet.com
DIRECT
|
Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-054 |
Howl_GG
howl.gg
|
howl.uno
SPLIT PROXY
|
Skins Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-055 |
Chicken_GG
chicken.gg
|
chicken.gg
DIRECT
|
Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-056 |
CSGOCasino_GG
csgocasino.gg
|
api.csgocasino.gg
DIRECT
|
Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-057 |
Hunt_GG
hunt.gg
|
api.hunt.gg
DIRECT
|
Skins Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-058 |
CSBattle
csbattle.com
|
csbattle.com
DIRECT
|
Case Battles | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-059 |
SkinRave_GG
skinrave.gg
|
api.skinrave.gg
DIRECT
|
Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-060 |
CSDouble
csdouble.gg
|
csdouble.gg
DIRECT
|
Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-061 |
RustChance
rustchance.com
|
hgfuihd.com
SPLIT PROXY
|
Rust Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-062 |
RustClash
rustclash.com
|
rustclash.com
DIRECT
|
Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-063 |
CobaltLab
cobaltlab.tech
|
cobaltauth.com
SPLIT PROXY
|
Rust Automation | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-064 |
Raided_GG
raided.gg
|
api.raided.gg
DIRECT
|
Rust Roulette | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-065 |
RustNeo
rustneo.gg
|
rustneo.gg
DIRECT
|
Rust Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-066 |
Splits_GG
splits.gg
|
splits.gg
DIRECT
|
Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-067 |
Upgrader_Pro
upgrader.pro
|
upgauth.space
SPLIT PROXY
|
Skin Upgrader | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-068 |
SkinFans
skin.fans
|
auth.skinfans.com
SPLIT PROXY
|
Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-069 |
HotPizza
hotpizza.one
|
hotpizza.one
DIRECT
|
Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-070 |
G4Skins
g4skins.com
|
auth.g4s.to
SPLIT PROXY
|
Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-071 |
12CS_Fail
12cs.fail
|
12cs.fail
DIRECT
|
Crash Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-072 |
TF2Royal
tf2royal.com
|
tf2auth.com
SPLIT PROXY
|
TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-073 |
TF2Easy
www.tf2easy.com
|
www.tf2easy.com
DIRECT
|
TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-074 |
TF2Hunt
tf2hunt.com
|
rstspcl.com
SPLIT PROXY
|
TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-075 |
TF2Bet
tf2.bet/coinflip
|
tf2.bet
DIRECT
|
TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-076 |
TF2Blaze
tf2blaze.com
|
tf2blaze.com
DIRECT
|
TF2 Gambling | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-077 |
OpenStars_GG
openstars.gg
|
openstars.gg
DIRECT
|
Skin Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-078 |
Shuffle_Com
shuffle.com
|
shuffle.com
DIRECT
|
Crypto Casino | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-079 |
Skins.com
skins.com
|
api.skins.com
DIRECT
|
CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-080 |
White.Market
white.market
|
white.market
DIRECT
|
P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-081 |
Buff.Market
buff.market
|
buff.market
DIRECT
|
CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-082 |
Avan.Market
avan.market
|
avan.market
DIRECT
|
CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-083 |
CS.MONEY
cs.money
|
auth.dota.trade
SPLIT PROXY
|
Trading Engine | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-084 |
UUSkins
uuskins.com
|
uuskins.com
DIRECT
|
P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-085 |
YouPin898
youpin898.com
|
youpin898.com
DIRECT
|
Mass Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-086 |
Moon.Market
moon.market
|
moon.market
DIRECT
|
P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-087 |
CSFloat
csfloat.com
|
csgofloat.com
SPLIT PROXY
|
P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-088 |
Skin.Land
skin.land
|
auth.skin.land
DIRECT
|
Skins Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-089 |
C5Game
c5game.com
|
c5game.com
DIRECT
|
CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-090 |
HaloSkins
haloskins.com
|
haloskins.com
DIRECT
|
Skins Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-091 |
Buff.163
buff.163.com
|
buff.163.com
DIRECT
|
Corporate Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-092 |
Waxpeer
waxpeer.com
|
waxpeer.com
DIRECT
|
P2P Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-093 |
CS.MONEY Bot
cs.money
|
auth.dota.trade
SPLIT PROXY
|
Bot Trading | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-094 |
Market.CSGO
market.csgo.com
|
dota2.net
SPLIT PROXY
|
P2P Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-095 |
Skinport
skinport.com
|
skinport.app
SPLIT PROXY
|
Regulated Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-096 |
SkinFlow
skinflow.gg
|
api.skinflow.gg
DIRECT
|
Marketplace/Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-097 |
DMarket
dmarket.com
|
dmarket.com
DIRECT
|
US Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-098 |
Skin.place
skin.place
|
api.skin.place
DIRECT
|
Skins Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-099 |
SkinsMonkey
skinsmonkey.com
|
skinsmonkey.com
DIRECT
|
Instant Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-100 |
SkinBaron
skinbaron.de
|
skinbaron.com
SPLIT PROXY
|
Corporate Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-101 |
Steam
steamcommunity.com/market
|
steamcommunity.com/market
DIRECT
|
Official Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-102 |
RustTM
rust.tm
|
dota2.net
SPLIT PROXY
|
Rust Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-103 |
PirateSwap
pirateswap.com
|
login.pirateswap.com
DIRECT
|
Instant Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-104 |
Mannco.Store
mannco.store
|
mannco.store
DIRECT
|
TF2 Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-105 |
SkinSwap
skinswap.com
|
api.skinswap.com
DIRECT
|
Instant Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-106 |
LootFarm
lootfarm.com
|
lootfarm.com
DIRECT
|
Trading Platform | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-107 |
Rustskins
rustskins.com
|
rustskins.com
DIRECT
|
Rust Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-108 |
ExeSkins
exeskins.com
|
exeskins.com
DIRECT
|
P2P Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-109 |
BalticSkins
balticskins.com
|
balticskins.com
DIRECT
|
Skins Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-110 |
CS.Trade
cs.trade
|
cs.trade
DIRECT
|
Instant Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-111 |
RapidSkins
rapidskins.com
|
api.rapidskins.com
DIRECT
|
CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-112 |
TradeIt
tradeit.gg
|
connect-tradeit.com
SPLIT PROXY
|
CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-113 |
Krakatoa
krakatoa.com
|
krakatoa.com
DIRECT
|
CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-114 |
ShadowPay
shadowpay.com
|
shadowpay.com
DIRECT
|
P2P Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-115 |
49skins
49skins.com
|
api.49skins.com
DIRECT
|
CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-116 |
SkinVault
skinvault.gg
|
api.skinvault.gg
DIRECT
|
CS2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-117 |
Aim Market
aim.market
|
aim.market
DIRECT
|
Skins Trading | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-118 |
Skinout
skinout.gg
|
auth.skinout.gg
DIRECT
|
Instant Sell Portal | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-119 |
NTSkins
ntskins.com
|
ntskins.com
DIRECT
|
Skins Trading | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-120 |
IGXE
igxe.cn
|
igxe.cn
DIRECT
|
Chinese Powerhouse | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-121 |
Swap.gg
swap.gg
|
swap.gg
DIRECT
|
Automated Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-122 |
Bitskins
bitskins.com
|
bitskins.com
DIRECT
|
Cash-out Portal | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-123 |
GamerPay
gamerpay.gg
|
gamerpay.gg
DIRECT
|
P2P Portal | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-124 |
TF2Mart
tf2mart.com
|
tf2mart.com
DIRECT
|
TF2 Automation | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-125 |
SkinBid
skinbid.com
|
skinbid.com
DIRECT
|
Skin Auctions | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-126 |
LootBear
lootbear.com
|
lootbear.com
DIRECT
|
Skin Rental | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-127 |
Backpack.tf
backpack.tf
|
backpack.tf
DIRECT
|
TF2 Valuation | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-128 |
Scrap.tf
scrap.tf
|
scrap.tf
DIRECT
|
TF2 Scrap Swap | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-129 |
Marketplace.tf
marketplace.tf
|
marketplace.tf
DIRECT
|
TF2 Cashout | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-130 |
STNTrading
stntrading.eu
|
stntrading.eu
DIRECT
|
TF2 Botnet | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-131 |
Skins.Cash
skins.cash
|
skinscash.live
SPLIT PROXY
|
Instant Cashout | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-132 |
SkinWallet
skinwallet.com
|
skinwallet.com
DIRECT
|
Instant Cashout | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-133 |
Dota2Market
dota2market.com
|
dota2market.com
DIRECT
|
Dota 2 Market | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-134 |
CSGO.NET
csgo.net
|
cn2.easylot.net
SPLIT PROXY
|
Case Opening | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-135 |
Cybershoke
cybershoke.net
|
auth.cybershoke.net
DIRECT
|
Community Hub | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-136 |
XPlay_GG
xplay.gg
|
xplay.gg
DIRECT
|
Server Network | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-137 |
FastCup
fastcup.net
|
api.fastcup.net
DIRECT
|
Matchmaker Hub | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-138 |
Esportal
esportal.com
|
esportal.com
DIRECT
|
Matchmaking Portal | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-139 |
GamersClub
gamersclub.com.br
|
gamersclub.com.br
DIRECT
|
LATAM Hub | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-140 |
Leetify
leetify.com
|
leetify.com
DIRECT
|
SaaS Analytics | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-141 |
Scope_GG
scope.gg
|
scope.gg
DIRECT
|
SaaS Analytics | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-142 |
TradeUpSpy
tradeupspy.com
|
api.tradeupspy.com
DIRECT
|
SaaS Tools | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-143 |
Epidemic_GG
epidemic.gg
|
epidemic.gg
DIRECT
|
SaaS Tools | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-144 |
CSDeals
cs.deals
|
api.cs.deals
DIRECT
|
Marketplace | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-145 |
Pricempire
pricempire.com
|
pricempire.com
DIRECT
|
SaaS Price DB | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-146 |
CS2Stash
cs2stash.com
|
cs2stash.com
DIRECT
|
SaaS Index | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-147 |
CSGOSkins
csgoskins.gg
|
csgoskins.gg
DIRECT
|
SaaS Index | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-148 |
SteamAnalyst
steamanalyst.com
|
steamanalyst.com
DIRECT
|
SaaS Index | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-149 |
SteamCardExchange
steamcardexchange.net
|
steamcardexchange.net
DIRECT
|
Trading Exchange | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-150 |
DotaBuff
dotabuff.com
|
dotabuff.com
DIRECT
|
SaaS Tracker | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-151 |
Tracker_GG
tracker.gg
|
tracker.gg
DIRECT
|
SaaS Tracker | SSA § 2.G, SSA § 4.C | See dated evidence |
| EX-152 |
FSB Market (an anonymized label; the original name is withheld here)
FSB Market
|
FSB Market
DIRECT
|
Mass Blackmarket | SSA § 2.G, SSA § 4.C, SSA § 1.C | See dated evidence |
| EX-153 |
FunPay
funpay.com
|
funpay.com
DIRECT
|
Account Exchange | SSA § 2.G, SSA § 4.C, SSA § 1.C | See dated evidence |
| EX-154 |
PlayerAuctions
playerauctions.com
|
playerauctions.com
DIRECT
|
Grey Market | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-155 |
Eldorado.gg
eldorado.gg
|
eldorado.gg
DIRECT
|
Account Portal | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-156 |
G2A
g2a.com
|
g2a.com
DIRECT
|
Mass Key Market | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-157 |
Kinguin
kinguin.net
|
kinguin.net
DIRECT
|
Mass Key Market | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-158 |
G2G.com
g2g.com
|
g2g.com
DIRECT
|
Virtual Services | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-159 |
Playerup
playerup.com
|
playerup.com
DIRECT
|
Account Broker | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-160 |
Z2U.com
z2u.com
|
www.z2u.com
DIRECT
|
Ready-Account Hub | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-161 |
SmurfHub
smurfhub.net
|
smurfhub.net
DIRECT
|
Smurf Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-162 |
SmurfAccounts
smurfaccounts.com
|
smurfaccounts.com
DIRECT
|
Smurf Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-163 |
BuyCSGORank
buycsgorank.com
|
buycsgorank.com
DIRECT
|
Rank Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-164 |
CSGOSmurfKings
csgosmurfkings.com
|
csgosmurfkings.com
DIRECT
|
Smurf Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-165 |
SmurfStore_Co
smurfstore.co
|
smurfstore.co
DIRECT
|
Smurf Shop | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-166 |
SteamLvlUp
steamlvlup.com
|
steamlvlup.com
DIRECT
|
Card Leveling | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-167 |
SteamLevels
steamlevels.com
|
steamlevels.com
DIRECT
|
Card Leveling | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-168 |
LevelSteam
levelsteam.com
|
levelsteam.com
DIRECT
|
Card Leveling | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-169 |
SteamLevelU
steamlevelu.com
|
steamlevelu.com
DIRECT
|
Card Leveling | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-170 |
EloKing
eloking.com
|
eloking.com
DIRECT
|
Rank Boosting | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-171 |
Boosteria
boosteria.org
|
boosteria.org
DIRECT
|
Rank Boosting | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-172 |
Overgear
overgear.com
|
overgear.com
DIRECT
|
Boosting SaaS | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-173 |
BlazingBoost
blazingboost.com
|
blazingboost.com
DIRECT
|
Boosting SaaS | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-174 |
Dota2Boost
dota2boost.com
|
dota2boost.com
DIRECT
|
Rank Boosting | SSA § 2.G, SSA § 1.C | See dated evidence |
| EX-175 |
BuyBoost
buyboost.com
|
buyboost.com
DIRECT
|
Boosting SaaS | SSA § 2.G, SSA § 1.C | See dated evidence |
1. OpenID 中缺乏域名所有权验证 2.0: Valve 对 OpenID 2.0 协议的实现(https://steamcommunity.com/openid/login) 评估了 openid.return_to 以及 openid.realm 无需开发者事先注册、加密挑战验证或域名所有权验证即可获取相关参数。任何商业运营商均可将用户引导至 Valve 的登录界面,并接收一份经加密签名的身份声明(其中包含 64-格式的 SteamID),该声明会被重定向至任意域名。
2. 程序化广告库存查询及API密滥用: 一旦通过 OpenID 确认用户身份验证,运营商便会向公共和合作伙伴的 Web API 端点发起查询(IEconItems_730/GetPlayerItems) 以实时对库存资产进行索引。自动化交易网络利用程序化会话令牌来提交、查询和接受点对点(P2P)交易要约,这直接违反了《SSA》第4.C条关于禁止非人类交互的规定。
3. 链路过滤不对称: 面向消费者的域名警告与功能完好的身份验证端点并存,这造成了监管上的矛盾:Valve 的安全遥测系统将这些运营商归类为“潜在恶意”对象,但 Valve 的身份验证基础设施仍在为其用户群提供身份验证服务。
本文件基于未经身份验证的网络捕获数据、RDAP历史注册表查询结果以及经过验证的加密哈希清单生成。未对任何用户登录凭据进行泄露测试或处理。所有发现均反映截至9月2026.的生产网络可观察状态。本文件作为一份无党派的技术证据,供司法、监管及公众调查使用。