Nethouse in St. Petersburg housed a number of the suspect domains, including stalk.ru, majordomo.ru and mazafaka.ru. Nethouse, which brands its hosting unit as Majordomo.ru, is housed within the data center of Runnet, the third-largest Russian hosting provider with 11.5K hostnames.

Agava Software Network in Moscow hosted the “Russian Carder Clan” site at carderclan.net (195.161.118.168), which ran on a shared server at Agava.net. The site has recently been taken offline, as has Carderportal.org (81.176.64.102) at epolis.ru, which also resided at Agava.

Several other destination domains for the fraud hosting pitches are hosted in North America. Carderportal.com resolves to NetFirms,a hosting service based in Telus’ data center in Toronto. carder.org has recently dropped out of the DNS but was also hosted in North America.