Infoblox traced Hidden Hawk's gambling SEO across school and government domains. Researchers contacted the group using a fake casino persona. https://www.infoblox.com/blog/threat-intelligence/borrowed-reputation-domain-shadowing-and-gambling-seo/
Infoblox BlogDomain Shadowing: Attackers Abuse Institutional DomainsRead how threat actors have gained access to high reputation domains, including ones from government and schools, to steal reputation for illegal gambling SEO.