The links from the illega content on the sites goes to an affiliate program, that looks like the NATS backend , and they call themselves XXXPass and here is the link they are using
http://www.celestefox.org/free.html
There are a lot of girls this is happening to, so any help would be great. I cannot find an email for the owners of the affiliate program to give them a heads up...thanks