View attachment 51543
d0c's Carding Setup for 2025
A lot of you newcomers keep blowing up my inbox asking the same old shit: 'd0ctrine whats your setup? What proxy provider do you use? What anti-detect do you use?' You know what? Im sick of it. So I said 'Fuck it' and wrote this guide. This is the shit I personally use and why I use it. Hopefully this will
fatten your wallets as you navigate the
tough times of carding this coming 2025.
Understanding the Setup
If youve been paying any attention to my guides you know Im a huge fucking proponent of the
iPhone as a
carding device. Ive talked about why its the tits extensively on here:
The iPhone: A Carder's Ultimate Tool
So it should be no surprise that 60% of all my carding is done with an
iPhone. But telling you to just buy an
iPhone would be a massive letdown right? So for the remaining 40% where I use my laptop this guide will break down my setup. Most of the tools and services here are
cross-platform meaning you can use them on any OS but to get the best results and highest success rate I recommend sticking with
Apple devices. They give you
low entropy since most devices look the same so you get a large margin of error when carding.
Proxy Provider
I switch up proxy providers like a paranoid dealer changes burner phones. There are plenty of reasons to do this but for the longest damn time Ive been riding with
SmartProxy.
LINK TO SMARTPROXY
Why? Because it hits four of my must-have criteria:
- Large Pool of Proxies: The bigger the pool the better. This pool is shared among all users so a larger pool means less chance of running into some other jackass using the same IP raising red flags.
- Fast and Reliable: Ive had other proxy providers shit the bed mid-carding session forcing me to switch IPs and basically waving a giant red flag at the transaction. SmartProxy has been solid keeping me in the game without those fuck-ups.
- ZIP Targeting: Lets be real ZIP codes are the bread and butter of any successful carding operation. The fact that SmartProxy lets you laser-focus on specific ZIPs? Thats a fucking game-changer.
- High Percentage of Unique IPs: Its not just about having the biggest pool. PIA for example has a huge pool but you often end up with the same damn IP multiple times. SmartProxy has a solid percentage of unique IPs which is what you need to stay under the radar.
- Blocks a Shitload of Financial Sites: This is pure fucking gold. If you read my guide on
Strategic Carding: Getting the Cleanest Possible IPs youd know that to get the cleanest proxies you need providers that block financial and banking sites. Then you work around that block. SmartProxy is a fucking champ at this blocking everything from Shopify to Stripe to banking sites.
Unique IPs
View attachment 51545
Alright lets cut through the 'unique IP' marketing crap.
Proxyway did a nice
experiment to expose the truth about residential proxy pools. They didnt just take these providers inflated claims at face value. They put them to the test hammering them with hundreds of thousands of requests and cross-referencing the IPs with
MaxMind and
IP2Location.
They wanted to find out how many unique IPs each provider actually delivered how many were on different C-level subnets (important to avoid getting your ass blocked) and whether they were legit residential addresses.
SMARTPROXY
View attachment 51546
Smartproxy came out on top boasting
57% unique IPs with
37% on unique C-class subnetworks. They claim 10 million IPs and these numbers suggest theyre not entirely full of shit.
Oxylabs was a close second but the rest? Fucking embarrassing.
Luminati the supposed king of the hill only managed a
pathetic 15% unique IPs.
RSocks and
PacketStream fared even worse.
NetNut had a decent number of unique IPs but almost all were on the same subnet. Most other proxy fuckers just resell from these larger pools, so they are more or less the same shit.
OXYLABS
View attachment 51547
NETNUT
View attachment 51548
The bottom line? Most of these providers are
inflating their numbers. Theyre probably counting IPs over weeks or months not whats available at any given moment.
Smartproxy seems to be the least deceptive but always grill these providers on how they calculate their pool size before you hand over your hard-earned cash.
Smartproxy Script
Look Im all about efficiency. Aint nobody got time to manually configure proxies every damn time. So to make my life easier I whipped up a little script that I run in my terminal. I just punch in the ZIP code I want and boom I get a fresh IP.
View attachment 51552
Usually
Smartproxy uses this format:
Code:
user-${username}-session-${session}-sessionduration-60-country-us-zip-${zipcode}:${password}@gate.smartproxy.com:7000
But Im a genius so I made a script that automates this. Heres the code:
Bash Script (Mac/Linux)
View attachment 51551
Code:
#!/bin/bash
# Your Smartproxy username and password
username='YOUR_USERNAME'
password='YOUR_PASSWORD'
# Check if ZIP code argument is provided
if [ $# -ne 1 ]; then
echo 'Error: Please provide a ZIP code as argument'
echo 'Usage: $0 <zipcode>'
exit 1
fi
# Store ZIP code from command line argument
zipcode=$1
# Generate random 8-digit session number
session=$(printf '%08d' $(($RANDOM % 100000000)))
# Generate proxy string
proxy_str='user-${username}-session-${session}-sessionduration-60-country-us-zip-${zipcode}:${password}@gate.smartproxy.com:7000'
# Test the proxy
echo '=== Proxy IP Information ==='
curl -s --proxy 'https://${proxy_str}' ip-api.com/json | jq .
echo
echo '=== Proxy Configuration ==='
echo '${proxy_str}'
How to Use It (Mac):
- Save this script as `prox.sh` somewhere on your Mac.
- Open Terminal and navigate to where you saved the script.
- Make it executable: `chmod +x prox.sh`
- Run it: `bash prox.sh 90210` (replace 90210 with your desired ZIP).
For the Windows Gang:
You can use PowerShell for a similar script:
*** Hidden text: cannot be quoted. ***
How to Use It (Windows):
- Save this as `prox.ps1`.
- Open PowerShell as an administrator.
- Navigate to the scripts location.
- Run it: `.\prox.ps1 10001` (replace 10001 with your ZIP).
Important: Dont forget to replace `'YOUR_USERNAME'` and `'YOUR_PASSWORD'` with your actual
Smartproxy credentials in both scripts. Also make sure you have `curl` installed on your Mac and that PowerShell has the necessary permissions to make web requests.
Antidetects
Ive burned through more antidetect browsers than I care to count but only two have proven their worth:
GoLogin and
Linken Sphere. Dont worry Ill drop a detailed analysis of every antidetect browser Ive tested soon but for now lets focus on what actually works especially if youre running a
Mac setup.
LINK TO LINKEN SPHERE
These days I exclusively roll with
Linken Sphere. Why? Simple - its the only one that consistently plays nice with custom
DNS settings which you absolutely need when dealing with
SmartProxy's blocked sites. Their
hybrid fingerprinting option keeps my entropy stable and lets me blend in with the normies without raising any red flags.
View attachment 51554
Otra característica destacada de
Linken Sphere es
el calentamiento de perfiles . Antes de acceder a los sitios de destino, especialmente los que tienen registros, puedes generar confianza automatizando los patrones de navegación normales (búsquedas de productos, listas de deseos, lectura de reseñas). Cambia los sitios que visitas y deja que los perfiles se envejezcan durante unos días.
Los perfiles nuevos son una señal de fraude, pero los que tienen un historial de navegación establecido se mezclan perfectamente con el tráfico legítimo.
View attachment 51553
Los resultados hablan por sí solos: mi tasa de éxito ha sido sólida y apuesto a que esta configuración solo se volverá más efectiva a medida que avancemos en 2025. Cuando se trata de
sistemas antifraude sofisticados , tener un antidetección confiable no solo es bueno, es jodidamente esencial.
Otras herramientas
Por supuesto, mi sistema de cardado no estaría completo sin estos malos chicos.
Análisis del sitio:
- Caido : tu mejor amigo para analizar sitios web. Cuando necesitas entender cómo funciona un sitio y cómo funciona su seguridad.
- Burp Suite : el campeón de peso pesado de las pruebas web. Esta bestia hace de todo: intercepta, reconoce y todo lo que se te ocurra.
Comprobaciones de huellas dactilares:
- demo.fingerprint.com : simple pero eficaz. Te muestra exactamente lo que ven los sitios cuando los visitas.
- Creepjs : analiza en profundidad la huella digital de tu navegador. Te sorprenderá la cantidad de datos que revelas.
- fv.pro : un sólido verificador de huellas dactilares que desglosa su firma digital pieza por pieza.
- browserleaks : el paquete completo para ver qué información filtra tu navegador. Créeme, es más de lo que crees.
Comprobaciones de IP:
- IPQS (IPQualityScore) : tu primera línea de defensa. Si tu IP está quemada, IPQS te lo dirá antes de que pierdas el tiempo probando cartas.
- Scamalytics : una copia de seguridad decente para la comprobación de IP. No llega al nivel de IPQS, pero vale la pena tenerla en tu kit de herramientas.
Consejo profesional: conecte su clave API
de IPQS a
Linken Sphere . Vigilará su reputación de IP automáticamente, lo que le ahorrará muchos dolores de cabeza y verificaciones manuales.
VPN
Utilizo
ProtonVPN junto con todo lo demás. No tanto por cuestiones de seguridad operativa, sino por cómo gestiona
las fugas de DNS . Solo tienes que hacer coincidir la ubicación de tu VPN con el país de tu proxy. De esa manera, incluso si algo se filtra, todo el tráfico parece provenir del mismo lugar. Limpio y consistente.
Ejemplo de una fuga de DNS expuesta si no hace coincidir la VPN del país con su proxy:
Conclusión
Esa es mi configuración personal de tarjetas para 2025: navegadores y servidores proxy antidetección y las herramientas para integrarse y realizar sus transacciones. Con el aumento
de la detección de fraudes mediante inteligencia artificial , los comerciantes están mejorando su desempeño, pero eso significa mayores puntajes para aquellos que se adapten.
Esta configuración es solo un punto de partida. Encontrarás tu propio ritmo, tal vez con un navegador diferente o una nueva herramienta. Este juego se basa en una evolución constante. Por lo tanto, es de esperar que actualice este artículo a medida que cambie mi propia configuración de vez en cuando.
Como siempre: manténgase a la vanguardia.
La autocomplacencia lo llevará a la ruina . Mantenga sus herramientas afiladas, mantenga su seguridad operacional estricta y nunca deje de aprender. Cada error es una lección, cada golpe es una experiencia.
El mundo digital es una maldita jungla, pero con la preparación adecuada y una buena dosis de paranoia, puedes desenvolverte en él. En 2025, los mayores premios los obtendrán quienes se adapten.
Mantente peligroso, sé inteligente y que tus cartas salgan limpias. Aquí va un 2025 rentable, malditos degenerados. Doctrina fuera.
![d0ctrine](https://pic-cc.com/data/avatars/m/139/139804.jpg?1703720680"){kind=avatar}
