Researchers Uncover 28 Unique IPs and 85 Domains Hosting Carding Markets
ID: 6e114dff-c240-5cc7-b4d7-582ab3bce367
STIX ID: report--6e114dff-c240-5cc7-b4d7-582ab3bce367
Feed Name: GBHackers
Threat Score
Team Cymru’s July–December 2025 analysis mapped 28 IPs and 85 domains hosting carding markets and forums, using internet-wide scanning, passive DNS, NetFlow, and X.509 certificate indexing to identify origin servers before CDN obfuscation; the research highlights offshore/“privacy-minded” hosting (notably Privex ASNs) and a heavy use of .su, .cc, and .ru TLDs, offering early indicators and methods to support takedowns and fraud investigations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.