I want it to be a conspiracy. No one is intended to see the inside of the box and thus the website unless the box is compromised. So when an unauthorized person sees it and goes to that website, they see it as a spammy forgotten domain, but it's actually trying to install surveillance software to see who you are and later why you've been poking around in a box they never intended you to poke around in. (This of course includes the fact that they never intended on an internet rando finding unsecured boxes and sharing it with the world on the internet.)