Restricted Platforms
Last updated: 2026-06-30
GermanProxy.io maintains a list of platforms that are technically blocked across our infrastructure as part of our proactive anti-fraud, anti-money-laundering, and § 27 StGB compliance strategy. This page describes the categories of restricted platforms and the reasons for their inclusion.
The restricted-platforms list is incorporated by reference into our General Terms and Conditions (Section 10.3) and may be updated at our reasonable discretion without prior notice to individual customers. Each category below is described by type; where individual platforms are named, they are illustrative examples only. Each category is non-exhaustive and the block applies to comparable services whether or not they are named here. The underlying machine-readable domain lists are maintained internally and applied at the routing layer.
Why Platforms Are Restricted
The platforms listed below are technically blocked because they are, according to published threat intelligence and consumer-protection reporting, associated with an elevated risk of one or more of the following:
- Identity fraud and account takeover
- Money laundering (§ 261 StGB, Regulation (EU) 2023/1113)
- Stolen-goods resale (§ 259 StGB)
- Trafficking in stolen payment card data (“carding”)
- Cash-out routes for proceeds of computer fraud (§ 263a StGB)
- Coordination of phishing and social-engineering operations
- Romance-scam and confidence-fraud anbahnung (§ 263 StGB)
Restricting access to these platforms across our routing infrastructure supports our position as a § 8 DDG mere-conduit provider while substantially reducing the practical risk of our service being misused by third-party fraudsters.
Restricted Categories
1. Online Classifieds & Peer-to-Peer Resale Marketplaces
European consumer-to-consumer marketplaces, including online classifieds and clothing-resale platforms and their associated app and API backends (for example kleinanzeigen.de and vinted). The block applies across this category whether or not an individual platform is named here. According to published threat intelligence and consumer-protection reporting, this platform category exhibits an elevated incidence of advance-payment fraud, stolen-goods resale, and money-mule recruitment.
A complete machine-readable domain list is maintained internally and applied at the routing layer (apex + wildcard).
Hard block — no exceptions.
2. Retail Online-Banking Portals (Europe / EEA)
Customer-facing online-banking portals of retail, direct and neobank institutions across the EU/EEA, the United Kingdom and Switzerland, including their associated two-factor-authentication backends, and including pan-European neobanks, e-money institutions and payment / buy-now-pay-later services (for example paypal.com and klarna). The block applies across this category whether or not an individual institution is named here.
A complete machine-readable domain list is maintained internally and applied at the routing layer (apex + wildcard).
Hard block — no exceptions. No GermanProxy.io customer has a legitimate business need to access their own or any third party’s online banking through our routing infrastructure.
3. CS:GO / CS2 Skin Trading & Skin-Gambling Platforms
Third-party marketplaces and casino-style platforms used for trading and gambling with in-game cosmetic items (“skins”). These platforms are documented in published industry research as cash-out vehicles for proceeds of credit-card fraud and computer fraud.
Hard block — no exceptions. Legitimate skin trading takes place via the official Steam marketplace, which is not affected by this restriction.
4. Carding Forums & Breach Marketplaces
Online forums and marketplaces specializing in the discussion, trade, and distribution of stolen payment card data, credentials, and exploitation toolkits.
Hard block — no exceptions.
5. Stolen-Data Auto-Shops
Automated marketplaces for the bulk sale of stolen payment cards, account credentials, and identity packages (“fullz”).
Hard block — no exceptions.
6. Carding Cash-Out Services
Gift-card and voucher resale platforms, social-media “panel” reseller services, and peer-to-peer cryptocurrency exchanges with documented elevated use for converting stolen payment cards into untraceable value. The block applies across this category whether or not an individual service is named here.
Hard block — no exceptions.
7. Selected Postal Address-Change Endpoints
Specific subdomains operated by Deutsche Post for online address-change requests (“Nachsendeauftrag”). These endpoints are used in account-takeover operations to redirect physical mail (replacement cards, activation codes) to addresses controlled by the perpetrator.
Hard block — no exceptions. Regular postal services, package tracking, and the Deutsche Post main domain remain accessible.
8. Online Dating & Partner-Matching Platforms
Online dating, partner-matching and social-introduction platforms, including their associated app and API backends (for example tinder). The block applies across this category whether or not an individual platform is named here. According to published threat intelligence and consumer-protection reporting, such platforms are a recognised entry point for romance-scam and confidence-fraud schemes (§ 263 StGB) in which a residential mobile IP is used to make fraudulent profiles appear authentic.
GermanProxy.io does not assert that these platforms lack any legitimate use. The restriction reflects a deliberate operational and commercial decision: this platform category falls outside the customer base GermanProxy.io chooses to serve.
A complete machine-readable domain list is maintained internally and applied at the routing layer (apex + wildcard).
Hard block — no exceptions.
9. Dynamic Threat Intelligence (Continuously Updated)
In addition to the static categories above, GermanProxy.io integrates dynamic threat-intelligence feeds from established industry sources, including URLhaus (abuse.ch), Spamhaus DROP/EDROP, and Phishtank. This automatically blocks rotating phishing infrastructure, command-and-control domains for banking trojans, and active malware distribution endpoints as they are identified.
Hard block — no exceptions.
No Unblocking — All Categories
All restricted categories (1 through 9) are subject to a hard block with no exceptions whatsoever. GermanProxy.io does not maintain any procedure — formal or informal — for unblocking restricted platforms or categories on individual customer request. Emails requesting unblocking will not be processed and may not receive a reply.
Cooperation with Law Enforcement
GermanProxy.io cooperates with lawful requests from German and EU law-enforcement authorities under §§ 100g, 100j StPO, § 174 TKG, and Regulation (EU) 2022/2065 (Digital Services Act), subject to applicable legal requirements including judicial authorization where required.
Connection metadata generated by the proxy service is processed and retained by our processor iProxy Online Solutions LLC (United States, servers in the European Union) for a period of two (2) years pursuant to a Data Processing Agreement under Art. 28 GDPR. Full details are set out in our Privacy Policy at https://germanproxy.io/privacy-policy, Section 3.
For authority requests, contact: [email protected]
Legal Framework
- § 8 DDG (Digital Services Act implementation, formerly § 8 TMG) — Mere Conduit safe harbor
- § 27 StGB — Jurisprudence on neutral professional conduct and the threshold for criminal complicity (BGH 5 StR 624/99 and successor decisions)
- § 261 StGB — All-Crimes Approach to money laundering (effective 18.03.2021)
- Regulation (EU) 2023/1113 — Transfer of Funds Regulation (AML)
- Regulation (EU) 2022/2065 — Digital Services Act
- Art. 28 GDPR — Optional Data Processing Agreement for enterprise customers
Questions
General questions about this policy: [email protected] Law-enforcement requests: [email protected]
This page is part of the GermanProxy.io General Terms and Conditions and is updated as required to reflect current threat intelligence and operational practice.