Support for this new form of inspect link has been added to globaloffensive v3.3.0. While it's not actually required to connect to the GC to decode these, if you want to avoid making code changes (and support older styles of inspect links) then this will work as a drop-in upgrade.
My guess is that they changed it when they made listed items on the Community Market remain in your inventory. Since there were previously two inspect link structures, one for the market and one for the inventory, they seem to have merged them into one general inspect link structure ("masked" inspect link)
You can extract the asset ID from it (itemid), but I do not think the steamid ("ownerid") can be extracted from it.
You can decode from the "Item certificate" (here being: 92826859045B28938A6E91B20991BA94A291AA016F546091D24895FAE5E29A90E5B003)
To the protobuf (CEconItemPreviewDataBlock) and from there also the item details:
{
"defindex": 508,
"inventory": 119,
"itemid": "50082457082",
"origin": 8,
"paintindex": 411,
"paintseed": 986,
"paintwear": 1045544595,
"paintwear_float": 0.20482854545116425,
"quality": 3,
"rarity": 6
}
I "vibe-coded" also a repo for this: Repository
So in short the repo does this:
Hex-decodes the certificate.
Uses the first byte as the XOR key.
XORs every byte with that key.
Drops the leading `00` byte.
Drops the trailing 4-byte trailer/checksum.
Returns the remaining bytes as the protobuf payload.
Also i saw that, with this change, the market history (and trade history) no longer expose valid inspect links anymore only references to , at least for "skins"/non-common items.
Josiox reacted to Dr. McKay in New CS2 inspect links
Josiox got a reaction from Dr. McKay in Cant run example: Steam login fail: The "data" argument must be of type string or an instance of Buffer, TypedArray, or DataView. Received undefined