Most of the sites at those domains borrow names and logos from established credit card fraud sites, including VaultMarket, T12Shop, BriansClub which uses the head of yours truly on a moving crab to advertise its stolen cards ; and the now defunct cybercrime forum Infraud.
Nor will anyone help the poor sucker who gets snookered by one of these fake carding sites. Have a look at the name next to the chatroom application Web site that was archived at xperiasol.
This potentially makes these domains much more difficult for law enforcement agencies to take down. And both are the same server: If you add to your shopping cart in Tor, it shows up instantly in the clearnet version of the site, and the same with removing cards.
The links have been redacted.
Ahmed also has a Facebook page going back more than seven years. Zalmi-TV zalmi. Regular DNS maps Internet addresses to domains by relying on a series of distributed, hierarchical lookups. Carding site domain names get seized all the time, but it is far harder to discover and seize a site or link hosted on Tor.
The top dogs at Xperia Sol. Click to enlarge. After all, nobody is going to call the cops on people who make a living ripping off cybercriminals. Signing up for an account at paysafehost. What else do we know about Mr.