News Feed
  • DrugHub has agreed to fully refund all users who lost money in the SuperMarket exit scam.  
  • Retro Market has gone offline. Circumstances of the closure unknown.  
  • SuperMarket has closed following an exit scam by one of the admins.  
  • The admin of Incognito Market, Pharoah, has been arrested by the FBI several months after exit scamming.  
  • Silk RoadTorhoo mini logo
  • darknet markets list
  • Popular P2P exchange LocalMonero has announced it is closing.  

IS RDP NEEDED : Carding | Torhoo darknet markets

My shitty laptop doesn't have enough RAM to run an RDP.

What is the point of the RDP if you have s5 + anti detect browser + TMAC? is it just for OPSEC or is it for bypassing anti fraud systems? and will i be able to just use s5 + anti detect + TMAC without any issues?
The point of socks is to get as close-as possible to your Cardholder... So say your RDP is in the city of Houston, TX .. but your cardholder lives in Austin , you may use the socks to get closer to vic , so you get a proxy that's in Austin City .. Sometimes may not be necessary to use proxy , but that's the general idea why

Be aware that for a RDP to work , a specific port has to be left open for the RDP to communicate with your PC .. Port # 3389
Some good anti-fraud systems can scan for open ports and when they see that certain ports are left open that's a big red flag..

IMO mac address changer is only useful when your concerned about OPSEC .
A website cannot DIRECTLY access your MAC address via. JavaScript as once thought . I use the word * directly ,as chrome(google) browser has access to your NIC (network interface card) to tell when the network is down. Would google analytics feed that info into anti-fraud systems ?? who knows ??

Read this article and you can draw your own conclusion :

https://www.riskified.com/blog/technologywebbeacon/
How the Tech Behind Google Analytics Helps Detect Fraud

Lastly, they are many other parameters anti-fraud systems can use to track you .. battery api , frequency analyzer , font fingerprinting, etc , and hence why some good anti-fraud systems can detect when you are using an anti-detect software ..

In carding there is theory and there is practical , No need to debate about all the technical and intricate details about carding , as this will get you so far ..
For example; someone might tell you to use dedicated rdp + socks + mobile device and a 414720 BIN from NY

When in reality , you might not even need to use a RDP , or a BIN from NY state, you see my point ? it's all theory , the best way to actually test it for yourself , what works for John may not work for you & vice versa..

The only sure way is to actually try it and note your results, as most modern-day anti-fraud systems use AI , they are smart , but with the right setup + info they can be tricked or at least bypassed ...

Good luck and stay safe !
/u/JasonWallace
1 points
9 months ago
High quality post, explained very well. Thank you
/u/[deleted] 📢
1 points
9 months ago
this mf is the founding father of carding
/u/DobbyIs
1 points
9 months ago
Its an extra important step (my opinion) for safety if you find a good rdp clean* residential rdp then use one or if you use a company rdp you will burn your cards .If you dont have ram as you say then better use phones, card and then go get a new one .This is a better alternative
/u/BreadalbeBoyWife
1 points
9 months ago
[removed]
/u/[deleted] 📢
1 points
9 months ago
so i can use proxy instead of RDP?
/u/BreadalbeBoyWife
2 points
9 months ago
[removed]
/u/[deleted] 📢
1 points
9 months ago
imma shoot you :3
/u/GTR420
1 points
9 months ago
fuck all that shit my bruv, just purchASE cc's from where u lay your head. Buy a burner phone and put into the cc owner info then purchase shit off the phone. Key info buy or spm for cc's in the area u lay your head. Then there is no need for all that extra shit.
/u/[deleted]
1 points
9 months ago
[removed]
Very true , risky IP on a mobile device is less scrutinized by AF systems
/u/[deleted] 📢
1 points
9 months ago
imma try the burner phones when i get my funds up, for now will a VM work instead of and RDP for OPSEC?
Hmm. kinda of a tricky question.. Yes and No , if the site uses a high quality anti-fraud system like Sift & Forter AF system , they can easily tell your using a VM and that's a big read flag ...On the other side , if the site is a low security site , then yes you may get away with using a VM ..
/u/[deleted] 📢
1 points
9 months ago
is there a way to tell what af system a website is using? maybe if its a small one then it wont have the budget for a high quality system? or maybe i can tell by the sites layout and look? + can an af system flag you if the website your hitting has a domestic domain, and your using a card from outside the domestic domain country?

example: i have an Italy cc and Italy residential s5 proxy, but im making a purchase on (for example) amazon.fr (a France domain) will high end systems flag this as suspicious? and will this slip past some low end systems?
I use an extension called FPMON - A real-time fingerprint monitor for Chrome" it displays JS scripts / Tracking objects that the site is pulling from your browser, along with the name of the AF system .. Much easier and human-readable

You could also use Chrome's developer Mode (F12) > go to network tab > and look for the name of anti-fraud systems (you will need to know what you are looking for) ex: cdn4Forter , Sift.science, beacon.Riskified , ravelin, etc

Question : can a AF system flag you if the website your hitting has a domestic domain, and your using a card from outside the domestic domain country?

Premise: I don't have much knowledge about how carding works in EUROPE , let me just make that clear

Answer : No they shouldn't flag it , but I could be wrong about this .. You gotta understand that certain questions I cant give a definite YES or NO answer to ...

Carding isn't written in stone, and every system varies ,...Too many variables to consider ; the card could already be under suspicion of fraud, the type of BIN used , your browsing behavior on the site, etc ..So I cant say 100% they wont flag it or not (((I hope you understand what am saying here ....))

But I have used Canada cards on US sites , and vice versa many times with success ..
AFAIK France and Italy are neighbor countries and has close ties , so I don't think that should be a problem , but I could be wrong ...

Good Luck !
/u/[deleted] 📢
1 points
9 months ago
im using a USA non VBV cc (apparently all EU cc legally are required to have 3DS) on an Irish domain website that looks like shit. so im feeling confident about this because it looks like it dont even have an anti system lmao

is FPMON a chrome extension? and does it have a free trial?
/u/greeneyes
1 points
9 months ago
hi, but can they also see if you using a vm if you use an anitidetect browser with a vm?