For those having received the email, you should list the sites you have previously registered with that particular email address. With enough people doing the same, we should be able to determine the site.
Correct. You should compare pages where this email is registered. Someone sold your address to scammers.