Comment by goatsi

He ran a carding forum in the past, malkit.ws and then malkit.su.

Virustotal passive DNS shows that it was hosted for a time on the same server as his old irc, irc.voidptr.cz

https://www.virustotal.com/en/ip-address/188.190.99.148/info...