The IP addresses that are hosting the sites were previously under the radar for similar kind of shady domains, and with some more digging, Bleeping Computers discovered another email account was also being used for the same purpose.