These websites are known to have been using envoyfinancialservices.sharepoint.com as their DNS nameserver.