http://qwvc2z45vmo7rovydz4gj3dc7bjgzmbvlgq3vggykah7cohdt3ys5ryd.onion/faq.php
Mostly we get our wallets through spy software which is checking and saving browser activities as well as with the help of cloned security emails from the most known online shopping sites like Amazon, EBay, Walmart, AT&T, Kroger etc. Android phones and iPhones with jailbreak are another big source.