- Joined
- 26.12.23
- Messages
- 250
- Reaction score
- 9,402
- Points
- 93

? LCD: Live Carding Demo - Withings ?

Introduction
Hey, you lazy bums. This is another LCD. Were reviewing Withings. Yeah, that company that makes fancy health gadgets for people who actually care about their health. For those of you whose idea of exercise is reaching for another bag of Cheetos, this might actually do you some good. Unlike most of you, who probably consider reaching for the TV remote your daily workout.

What this means is were not just getting rich here; were saving your sorry asses from an early grave. Withings makes health tech that might just keep you alive long enough to spend all that carded cash. Whats the point of all these $$$ if you will just die from heart attack like a retard?
Withings is the shit when it comes to health and fitness. Not only are they easy to resell, maybe by some miracle, youll end up using one of these gadgets and add a few years to your life. Wouldnt that be something?
“But d0ctrine,” I hear you whine, “I dont need no fancy gadgets to tell me Im a fat piece of shit.” Well, tough titties, princess. These aint just step counters for soccer moms. Were talking high-end health tech thats gonna make you some serious bank if you played it right. So put down that family-size pizza and pay attention.

Why Withings?
Lets get into why Withings is worth our time:
- Health Tech Craze: Face it, everyone and their dog is obsessed with tracking every fucking heartbeat and calorie. Withings is cashing in on this madness, and so should we.
- Fat Profit Margins: These arent your bargain bin gadgets. Withings gear costs $$$, which means more dough for us when we flip them.
- Hot Resale Market: Unlike the useless crap you usually buy, people actually want this stuff. Fitness freaks, tech nerds, and middle-aged dads trying to outrun their midlife crisis are all potential customers.
- Product Range: Withings has shit for every budget. Start small with basic trackers or go big with their fancy watches. Its like a buffet of fraud opportunities.
- International Appeal: These bastards ship worldwide. Thats a global market of health-obsessed suckers just waiting to buy our carded goods.
- Under the Radar: Withings isnt as high-profile as Apple or Samsung. Fewer eyes on it means smoother sailing for us.
Recon
Okay, now that weve established Withings is the shit, lets get into it.
Firing up our trusty HTTP sniffer Caido, were met with a familiar sight. At first glance, its the same old shit - no obvious anti-fraud JavaScript being injected into our session. Just the usual parade of analytics and marketing crap that every site seems to spew out these days.

But relax: remember what Ive been telling you? Its never just what you see. Your HTTP logs can be very misleading. Most of the anti-fraud magic happens on their own analytics endpoints, with the decision making hidden away in the backend.
This is where your brain and some open-source intelligence comes in. A quick Google search reveals something interesting - Withings isnt doing antifraud alone, these guys are in bed with Signifyd:
WITHINGS SUBCONTRACTORS

See what I mean? This is why you need to be thorough and test every target youre planning to hit. Its not just Withings; this applies to everything youll do in your entire career as a digital degenerate.
Now, Signifyd isnt some small time operation. But weve had our time with them, with Wayfair and Ive explained it all in my magnum opus:
?️

Signifyd
Lets review: If youve been paying attention to our previous hits, especially Wayfair, youll remember that Signifyd has a hard-on for email reputation. And if youve read my magnum opus on bypassing modern AI anti-fraud systems (which you should have by now), you know thats our ticket in.
Heres the deal with Signifyd on Withings: Theyre not injecting much into our session, which means your fancy antidetect fingerprint isnt worth shit here. What really matters is having a fresh drop (or knowing how to jig it like a pro) and an email that looks legit.
Remember, Signifyds whole schtick is using big data to spot patterns. Theyre looking at your emails purchase history across all the sites they protect. So if your burner email has only been used to sign up for porn sites and Nigerian prince scams, youll stand out.
But heres where it gets interesting: Withings, in all their infinite wisdom, doesnt verify email addresses during checkout. Sound familiar? It should, because weve exploited this before. This means we can use our email trick without breaking a sweat.
Requirements:
Before you go off half-cocked like a retard, heres what youll need:
- Fresh US/UK cards - The fresher the better. If your cards been passed around like a hoe, forget about it.
- Virgin drops or god-tier jigging skills - Signifyd remembers addresses like an ex with a grudge. One whiff of previous fraud, and youre toast.
- Residential proxies - None of that data center bullshit. Your IP needs to be clean.
- Decent antidetect browser - Even though Signifyd isnt leaning heavily on fingerprinting, dont slack off here. Antidetect is cheap.
- Email bombing tool - For when its time to bury that confirmation email six feet under spam.
- Patience - Signifyd doesnt make instant decisions. Sometimes theyll let an order through initially, then cancel it later. So dont start celebrating until that package is in your greasy hands.
- A working brain - This should go without saying, but given some of the questions I sometimes get, I feel the need to spell it out.

Flow
Withings and Signifyds flow isnt reinventing the wheel here. Its pretty much the standard playbook for sites with AI antifraud: they will charge your card during checokut with minimal checks then Signifyd will take a few hours to decide whether to cancel your order or let it slide.
This delay is a blessing and a curse. On one hand you cant just rapid-fire orders and expect them all to go through. On the other hand it gives us a window of opportunity.
Remember that email trick we talked about? This is where it pays off. Once you place the order, you've got a small window to bury that confirmation email under a mountain of spam. By the time Signifyd makes its decision, the cardholder will be none the wiser.
On this part is also where most noobs screw up: they get impatient. They see that initial confirmation and think theyre in the clear. Next thing you know, theyre trying to card ten more orders before the first ones even been approved. Or theyre reusing the card on multiple different sites which also use Signifyd, guaranteeing none of their orders ever get shipped. Dont be this dumbass.
The key here is patience and precision. You need to time your email flood perfectly, and then sit on your hands until that order ships. No touching the card and no messing with the email, no trying your luck with another order. Just wait it out like youre on a stakeout but instead of donuts and coffee youve got Red Bull and the anticipation of scoring some overpriced health shit.
Closing

Alright, fucks, thats Withings. Fresh drops, trusted emails, perfect timing. Dont get cocky and dont get greedy. This game always changes, so stay sharp.
Now go card some fancy health shit. Maybe youll even use it and live long enough to enjoy your money from carding.
Keep learning, stay frosty. d0ctrine out.