If we are already talking about the phishing .cc domain, one of the active links is on X (former Twitter). I assume that the X account was officially created when the .cc domain was under the original owner's control. I guess it would be good if someone from the exch team tried to access that account and delete all phishing links and posts with them.