~
Well, I did some research and first connection looks suspicious. For second connection, I have found this thread:
My wallet on MEW is compromised. Someone stole all of my tokens from there. I think they hacked my desktop computer.
Now i expect to receive new tokens on this address and is too late to change with new address.
Is there any chance to change my private key, or to lock them wih password or any 2fa

IIRC few similar cases exist, one ring has been caught lying that their address was hacked, while after "hack" they used address somewhere. Not saying this is the case, but, it is very strange that hack happened to 2 users with various connections.
Account dradin posted this email:
That looks like a name from ex-yu space.
Perhaps, better connection between account pickupcoin and examplens is this:
https://bitcointalk.org/index.php?topic=1322698.msg13600183#msg13600183https://bitcointalk.org/index.php?topic=1756173.msg17627460#msg17627460@examplens can you sign message from this address 15QLwhoYgaVt7nMUm5NCV1Z13VCqD12x9f ?