The hosting layer.
Mapped at the wire.

Pivot across IPs, ASNs, registrars, nameservers and SSL issuers: the shared infrastructure that ties scam operations together.