“Among its users was a website run by a ring of cybercriminals operating under the name “EGodly,” according to digital records preserved by the internet intelligence firm DomainTools and the online cybersecurity tool Any.Run.”