New Research Uncovers 28 Unique IP Addresses and 85 Domains Hosting Carding Markets

This investigation exposed 28 IPs and 85 domains associated with underground carding marketplaces selling stolen credit card data ($5–$150 per card). Researchers used internet-wide HTTP/HTTPS banner scanning and X.509 certificate analysis to identify hosting infrastructure and cluster related assets, revealing common offshore TLDs (e.g., .su, .cc, .ru) and providers (notably Privex) that facilitate these illicit operations; the report also describes theft methods (web skimming, database breaches, physical skimming) and the criminal supply chain.