We've been detecting these sites for months. So far I know of around 720 active sites offering passwords obtained through stolen credit card number purchases on pay sites.
Some of these also have PlugRush ads on them, however PlugRush seem to think that having their ads is good as it will steer people to buy porn honestly
https://gfy.com/showpost.php?p=19862417&postcount=178