A couple years ago there was a theme of numbers advertised as (fake) tech support connecting to (fake) Amtrak/passenger rail scammers. See this series of posts documenting them:
888-362-4066 Amtrak impersonators
Similar practice of multiple cookie-cutter websites on a single IP address. I wonder if there is any more connection beyond these similarities.