Comment by ImPostingOnHN

this is done by some darknet sites running tor hidden services on generated onion domains, for similar reasons:

https://shufflingbytes.com/posts/ripping-off-professional-cr...