Guaranteed enough, I found that Yalishanda was actively advertising on cybercrime boards, Which his infrastructure was being used to host countless dodgy sites. All those contain a lot of cybercrime community forums and stolen bank card stores, ransomware download websites, Magecart-similar infrastructure, and a metric boatload of phishing Web sites https://xuid.ru/