Was that the Adam Pisces scam that was going on? (Can't tell since NYT is paywalled). There's a great non-paywalled ReplyAll podcast about that (episode #141)
I think that the 'checking stolen CC numbers' is the most convincing theory about Adam Pisces but ultimately the ReplyAll host concluded that it was an attacker looking for vulnerabilities in the Domino's online ordering system.