Probably websites with most traffic, but it's their own business.
I speculated that someone will fork bitcointalk forum and move it on different domain, maybe even onion link.
That doesn't mean that anyone should ever use same login details like in bitcointalk forum if that ever happens.

Have you ever seen something like this advertised on google ads?
I almost never see any ads when I browser internet because I use uBlockOrigin and/or DNS blocker, but I saw fake scam mixers being pushed on top of search before.