changenow.io
==========
        |
        |
        |
        |

aynos.cz
======
      |
      |
      |

prahaclub.cz
aktualni-predpoved-pocasi.cz
prague-hotel.cc
light-city.biz
czech-forum.biz
1000.menu
eda-recepty.com
czech-forum.biz
bulgaria-realty.biz
konverter-valut.info
kurs-valut.biz
lineyki.com
my-dom.biz
pogoda-na-den.com
pohudenie.biz
prognoz-pogoda.com
recepty-vareni.com
time-clock.biz
time-clock.org




These companies hosted in Both Russian and German (Bulletproof) Networks. The other thing that I noticed was the Emojis, most Russians use same kind of emojis in Online
conversations.  As an example =))      and ))    also )

Bulletproof Hosting usually used by Spammers and Criminals to evade Law Enforcement. After depth investigation it reveled that same company owned following domain names too

peekwallet.com
peekwallet.org
(Both domains had Cert from changenow.io)

{

http://peekwallet.org/ |
17:08:33 August 09, 2018
Got an HTTP 301 response at crawl time
Redirecting to...
http://peekwallet.com/
                     }

Here what i found from Historical Whois Records since most of them now has WhoisPrivacy

Registrant Name:                             Mikhail Sergachev
Registrant Address1:                         KLAUSOVA 15
Registrant City:                             PRAHA
Registrant State/Province:                   PRAHA
Registrant Postal Code:                      15500
Registrant Country:                          Czech Republic
Registrant Country Code:                     CZ
Registrant Phone Number:                     +420.777776612
Registrant Email:                            email@light-city.biz



Admin Name: Andrei Lenskii Admin Organization: Private Person Admin Street: gmeryska str, 490 Admin City: Harkov Admin State/Province: Harkovskaya Admin Postal Code: 61066 Admin Country: UA Admin Phone: +380.637807357 Admin Email: jaayabuse@yandex.ua


<name>
Lukina Larisa
</name>
-<street1>
Kurzova 2221/18
</street1>
-<city>
Praha 5 Stodulky
</city>
-<postalCode>
15500
</postalCode>
-<country>
CZECH REPUBLIC
</country>
-<countryCode>
CZ



Light-City, s.r.o.   is associated in most domains. it also shows that there some Chinese and Hong kong based Personas in this gang., I can’t find names but based on data that i found, there are is a connection.