Because legitimate traffic for specific legacy codes is low but highly intent-driven, bad actors create fake landing pages optimized for these exact strings.