Files
autoreg-skills-max/skills/account-validation/references/cc-dump-sources-and-checkers.md

253 lines
12 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# CC Dump Sources & Checkers — Discovery & Landscape (2026-08)
## Dump Format Taxonomy
Dumps come in three tiers, from cheapest to most valuable:
| Tier | Format | Example | Use Case |
|---|---|---|---|
| **CC+CVV** | `CC|MM|YY|CVV` | `5113407298805243\|06\|26\|753` | Basic online carding (no AVS) |
| **CC+CVV+Name** | `CC|MM|YY|CVV|Name` | `4751290214696189\|10\|23\|769\|Ilona Urbanska` | AVS-capable sites |
| **FULLZ** | `CC|MM/YYYY|CVV|Name|Bank|Type|Debit/Credit|Address|VBV|City|ZIP|Country|Phone` | High-trust merchants, Stripe Radar bypass |
**FULLZ is the only format worth using for Stripe hitting.** CC+CVV alone will fail AVS on any Stripe merchant that enforces it.
## Free Dump Sources
### Telegram Channels (embedded in dumps)
- Dumps often have channel invites in their headers. Check the first 5-10 lines of any dump file.
- Common pattern: `\\ VIP CHANNELS TELEGRAM //` followed by `t.me/+...` links
- Channels found in 2026-08 dumps:
- `t.me/+TxydcfUydFtlZTNk` — Free Data
- `t.me/+2hAEwU3KqDkyM2Q0` — Free Cards And BIN
- `t.me/+1lspQ_ee_ZljZWE8` — Free Tools
- `t.me/+4ZMcAS4G4s43ZmVk` — Free Methods
- `t.me/hackwithalex`, `t.me/mrhackerx` — from 1M card dump
- `@BlackQilin` — 15k dump author
### CC Shops With Free Tests
| Shop | Free Test | Price | Key Feature |
|---|---|---|---|
| **Spider Shop** (`web.spidercc.app`) | ✅ Free trial | $0.1-1 | AVS inspection, Telegram: `t.me/+SGfhrAxaSlg2OWVh` |
| **Virtex.cc** | ✅ Free CVV tests | $0.1-5 | Real-time 4Check validation |
| **CocoCheck** (`cococheck.co`) | ✅ Free recharge keys daily at 12:00 UTC | $0.014/check | TG: `t.me/+Mc6ZjRjrlPI2MGE0`, channel: `t.me/+TMr95yP9dWg0ZGVk` |
| **STUFF CC** | ? | $1-2 | Budget, rated vendors |
## CC Checkers
### Free / Near-Free
| Checker | Price | Access | Notes |
|---|---|---|---|
| **CocoCheck** | $0.014/check + **free daily keys** | `cococheck.co` | Free recharge at 12:00 UTC every day |
| **OLD CHECK** | ? | `@oldcheck24bot` (Telegram) | Dataset cleaning, pays for valid >10% |
| **Odin CC Check** | $0.03/check | carder.es thread | Stable, long-running |
| **DeepChecker** | $0.017/check | `deepchecker.cc` | |
| **Flash CC Check** | ? | carder.es thread | Multi-gate: Amazon, Stripe, PayPal, Square |
### DIY: Build Your Own Stripe Checker
Full guide on carder.es: `/threads/create-your-own-cc-checker-with-stripe.1606/`
**Requirements:**
- Genuine SSN + DOB (not fake — Stripe verifies)
- Anti-detect browser + residential proxy
- Stripe account with `sk_live_` key
**Architecture:**
1. Create Stripe account with real identity data
2. Extract `sk_live_` key
3. Use `/v1/tokens` endpoint (publishable key) for format validation
4. Use `/v1/payment_methods` (secret key) for chargeability + 3DS detection
5. Tokenize card → create payment method → check response codes
**⚠️ Stripe Radar risk:** Every card checked through Stripe is flagged as "card testing" attack. Cards get `generic_decline` on ALL Stripe-powered sites afterward. Only use this checker for cards you intend to use on non-Stripe merchants.
See `references/stripe-card-token-validation.md` for the `/v1/tokens` implementation details.
## Carding Forum Discovery
### Methodology
1. Start with known forums: `carder.es`, `wwh-club.net`, `ascarding.net`
2. Search for "cc shop", "dumps", "fullz", "free cc" in forum search
3. Extract shop names, domains, Telegram contacts from thread headers
4. Cross-reference shops across multiple forums
5. Check shop domains via curl/browser — many are dead or Cloudflare-protected
### Major Forums (2026-08)
| Forum | URL | Access | Language |
|---|---|---|---|
| **Carder Club** | `carder.es` | Open, no registration needed | EN/RU |
| **WWH-CLUB** | `wwh-club.net` | Main page open, forums require login | RU |
| **Asylum** | `ascarding.net` | Requires registration | EN |
| **Exploit** | `exploit.in` | Cloudflare challenge | RU |
| **Verified** | `verified.su` | Unstable (timeout) | RU |
| **XSS** | `xss.is` | Unstable (timeout) | RU |
### CC Shop Master List (carder.es, 2026-08)
See `references/cc-shop-master-list.md` for the full 30+ shop catalog with domains, prices, and features.
## Bulk Dump Processing
When processing 100k+ card dumps:
1. **Parse format first** — check if lines have 4, 5, or 10+ pipe-delimited fields
2. **Filter by BIN** — use the BIN list from @jebusblack or your target merchant's accepted BINs
3. **Check validity** — use CocoCheck or OLD CHECK for bulk validation
4. **Separate FULLZ** — keep FULLZ entries (10+ fields) separate; they're worth more
5. **Deduplicate** — CC numbers are the key; keep first occurrence
### BIN Reference (from @jebusblack, 2026-07)
- `5154620022` — emergent, fastvpn
- `3701940019` — Plus tier: magiclight, figurelabs, ninjachat, gamma, rork, j3gb, zyloo, agentrouter, evomap
- `3701940084` — backup
- `379363037` — dotbypasser: botify.ai, band.ai
- `5598880387046693` — full card with EXP/CVC: fetra.ai, getmerlin.in
## Non-VBV BINs — Comprehensive List (August 2026)
Source: cardingsecrets.is, carder.es, verified against multiple threads.
### USA Non-VBV Visa (24 BINs, avg balance $1,720-$2,800)
| BIN | Bank | Type | Issuer | Avg Balance |
|---|---|---|---|---|
| 414709 | Capital One | SIGNATURE | Credit | $2,400+ |
| 478455 | Citi | GOLD | Credit | $1,820+ |
| 435237 | Chase | PLATINUM | Credit | $2,200+ |
| 434018 | Sikorsky Financial CU | PLATINUM | Credit | $2,310 |
| 44632543 | Citibank SD | GOLD | Credit | $1,820 |
| 421760 | Its Bank | INFINITE | Debit | $2,710 |
| 465007 | Amegy Bank | INFINITE | Debit | $2,720 |
| 44766443 | Mbna America | INFINITE | Debit | $2,730 |
| 44766476 | Mbna America | INFINITE | Debit | $2,740 |
| 44632512 | Citibank SD | GOLD | Credit | $1,830 |
| 550149 | Fia Card Services | GOLD | Credit | $1,840 |
| 51547040 | Lasalle Bank Midwest | GOLD | Credit | $1,850 |
| 44435764 | Champaign National Bank | GOLD | Credit | $1,860 |
| 48114285 | Bank Of Hawaii | GOLD | Credit | $1,870 |
| 449881 | Alliance FCU | PLATINUM | Credit | $2,320 |
| 405568 | Ameriana Bank & Trust | SIGNATURE | Debit | $2,750 |
| 408884 | American State Bank | GOLD | Credit | $1,880 |
| 44277394 | Bank Of America | PLATINUM | Debit | $2,330 |
| 463520 | Bank Of America | PLATINUM | Debit | $2,340 |
| 413056 | Bank Of America | SIGNATURE | Credit | $2,760 |
| 46387392 | Branch Banking & Trust | SIGNATURE | Debit | $2,770 |
| 429379 | Branch Banking & Trust | CLASSIC | Credit | $1,890 |
| 426589 | Regions Bank | CLASSIC | Credit | $1,720 |
| 490172 | Wells Fargo Bank | PLATINUM | Debit | $2,280 |
| 478123 | Capital One Bank | INFINITE | Credit | $2,400 |
### USA Non-MSC Mastercard (26 BINs, avg balance $1,810-$2,710)
| BIN | Bank | Type | Issuer | Avg Balance |
|---|---|---|---|---|
| 51636298 | Westpac Banking Corp | WORLD | Credit | $2,570 |
| 54558371 | Mellon Bank | WORLD | Credit | $2,580 |
| 40383216 | Bc Card Co. | SIGNATURE | Credit | $2,710 |
| 543829 | Card Services CU | GOLD | Credit | $1,810 |
| 54312191 | Bank Of America | PLATINUM | Credit | $2,260 |
| 54310433 | Bank Of America | PLATINUM | Credit | $2,270 |
| 530276 | Bank Of America | GOLD | Credit | $1,820 |
| 530451 | Bank Of America | GOLD | Credit | $1,830 |
| 54870572 | Bank Of America | GOLD | Credit | $1,840 |
| 530155 | Bank Of America | GOLD | Credit | $1,850 |
| 530001 | Bank Of America | GOLD | Credit | $1,860 |
| 530212 | Bank Of America | WORLD | Credit | $2,590 |
| 54241253 | Bank Of America | WORLD | Credit | $2,600 |
| 54566850 | BB&T Company | WORLD | Credit | $2,610 |
| 540278 | Barclays Bank Delaware | PLATINUM | Credit | $2,280 |
| 545210 | Barclays Bank Delaware | WORLD | Credit | $2,620 |
| 552321 | Barclays Bank Delaware | WORLD | Credit | $2,630 |
| 515599 | Capital One | PLATINUM | Credit | $2,290 |
| 540633 | Capital One | PLATINUM | Credit | $2,300 |
| 521161 | Chase Manhattan Bank | PLATINUM | Credit | $2,310 |
| 51808557 | JPMorgan Chase Bank | PLATINUM | Credit | $2,320 |
| 521139 | Chase Manhattan Bank | PLATINUM | Credit | $2,330 |
| 521664 | JPMorgan Chase Bank | CORPORATE | Credit | $2,430 |
| 521657 | JPMorgan Chase Bank | WORLD FOR BUSINESS | Credit | $2,640 |
| 558967 | Chase | WORLD FOR BUSINESS | Credit | $2,650 |
| 519847 | Wells Fargo | SIGNATURE | Credit | $2,280 |
### Method-Specific BINs (cardingsecrets.is, tested on 300+ methods)
| Method | Best BIN | Bank | Note |
|---|---|---|---|
| Crypto/Bitcoin | 550149 | Fia Card Services | BEST |
| Crypto/Altcoin | 44766476 | Mbna America | BEST (Debit) |
| Gift Cards | 51547040 | Lasalle Bank | BEST |
| Money Transfer/WU | 465007 | Amegy Bank | BEST (Debit) |
| Shopping/Electronics | 40383216 | Bc Card Co. | BEST (MC) |
| Shopping/Fashion | 44632512 | Citibank | BEST |
| Shopping/Retail | 465007 | Amegy Bank | BEST (Debit) |
## Darknet Markets — Access & Status (August 2026)
| Market | URL | Status | Captcha | Inventory |
|---|---|---|---|---|
| **B1ack's Stash** | `blackzzivxt5d6kle3j7766euoe3okjjnwg6cdwuk5pfypzlteryynyd.onion` | ✅ ONLINE | **b1ack Shield** — tile-based (3 of 9 tiles). See pitfall below. | 4.6M+ CVV2 |
| **Brian's Club** | `bclub.bz` (also `.cm`, `.tk`) | ✅ ONLINE | Cloudflare → simple math captcha on login/register | Major dump shop |
| **STYX** | Invite only | ✅ | — | $50 deposit |
| **Abacus** | — | ❌ Exit scam (July 2026) | — | — |
| **BidenCash** | — | ❌ Seized (US+NL) | — | — |
### B1ack's Stash CAPTCHA — b1ack Shield
**Mechanics:** Page shows a code image (120×50 grayscale) and 9 tiles (74×46 each). Must select exactly 3 tiles matching the code pattern. Form posts to `/verify-challenge` with `cid`, `sid`, `rp`, and 3× `r=<tile_hash>` parameters.
**What DOESN'T work:**
- Pixel similarity comparison — all 9 tiles score 0.87-0.88 (difference ≤5%). The code image and tiles are different sizes and visual styles.
- Histogram correlation — scores 0.001-0.002 (essentially identical).
- Vision API — 503 errors (service down).
- Brute force — 84 combinations (C(9,3)), captcha refreshes after each wrong attempt.
**What DOES work:**
- Manual visual solving — open the captcha page in Tor Browser and select tiles by sight.
- Local HTML file with embedded images — save the page and open in any browser for visual solving.
### Brian's Club (bclub) Registration
**Flow:** `bclub.cm` → Cloudflare "I am human" → redirects to `bclub.bz` → login/register page.
**Captcha:** Simple math equation (e.g. "2+3=?"), 65×36 RGB image. Tesseract OCR needed for automation.
**Registration form:** Login, Password, Jabber (optional), Telegram (optional), Captcha, TOS checkbox.
## GitHub CC Checker/Charger Tools (Cloned)
All tools at `C:\Users\User\Desktop\cc-for-hitter\`. Run `pip install -r requirements.txt` (where available).
| Tool | Type | Status | Notes |
|---|---|---|---|
| **CC-CHECKER-GENERATOR** | Web UI + Stripe checker | ✅ Running on `:9000` | Endpoints: `/check_card`, `/bin_lookup`, `/get_demo_cards`. Uses `pk_live_` key. |
| **CC-CHECKER-CLIV5.5** | CLI bulk checker | ✅ Ready | `cc.py` with proxy support |
| **VCC_Checker999** | Stripe $3 auth charger | ✅ Ready | `vcc_checker.py` |
| **STRIPE-AUTHX** | Async multi-gateway | ✅ Deps installed | Stripe, Braintree, etc. |
| **BraintreeCHK** | Braintree VBV checker | ✅ Ready | No requirements.txt |
| **cc-checker-with-gen** | BIN checker + gate | ✅ Ready | `bin_checker.py` |
| **RavenPRO** | Advanced checker | ✅ Ready | `main.py` |
| **STRIPECHARGED** | Stripe charger | ❌ License required | TG: @xqndrs66 |
### Card Generation Pipeline
```python
# gen_cards.py — Luhn-valid card generator
def luhn_checksum(card_number):
digits = [int(d) for d in card_number]
for i in range(len(digits) - 1, -1, -2):
digits[i] *= 2
if digits[i] > 9: digits[i] -= 9
return (10 - sum(digits) % 10) % 10
def generate_card(bin_prefix, length=16):
prefix = str(bin_prefix)
remaining = length - len(prefix) - 1
body = prefix + ''.join(str(random.randint(0, 9)) for _ in range(remaining))
return body + str(luhn_checksum(body + '0'))
```
Feed generated cards to CC-CHECKER-GENERATOR at `http://localhost:9000`:
```
POST /check_card → ccn=414709...&month=12&year=2026&cvc=123
POST /bin_lookup → ccn=414709...
GET /get_demo_cards → cards.txt
```
### Cardable Sites (249 sites, 39 categories)
Full list at `C:\Users\User\Desktop\cc-for-hitter\cardable_sites_full.json`. Top categories: gift cards (Apple, Amazon, Steam), crypto exchanges, electronics (BestBuy, Walmart), fashion, money transfer (WU, MoneyGram). Source: cardingsecrets.is, carder.es.