The domain is the name of a somewhat known exchange/wallet plus some random characters and .com.
This alone is reason enough not to trust that site. There is no legitimate business that would do that.
I think it's reason enough not to disclose it. I'll continue to provide updates as things go on. If everything finish without major issues, I'll share the domain, but I want to ensure my mate is out of danger first.
I dont fully buy the reasons for keeping the site private. It does nothing for your buddy but hides a potential threat from others. Places that out scams exist so people can share what they know and help each other avoid shady situations and seems better to put it out there.