Got a response to my report from Identity Digital about Monero.forex. Just like Namecheap, they stated that the evidence provided is not sufficient. I literally showed them the link between exch.best and exch.net. Incompetent morons!
I got one to. It's probably the same response. I pointed out exactly where the phishing site is advertised on Monero.forex, gave them an archived version showing that the website was pointing to a different phishing site in the past, and included a link to VirusTotal tagging the website as malicious and this is what they replied:
Many thanks for your notification regarding the domain monero[.]forex. As a registry operator, we take all reports of abuse in our top-level domains very seriously. In this instance, however, having reviewed your email, we must conclude that, at this point, we are not the appropriate party to intervene.
Primarily, as a registry operator for the .forex top level domain, we are not a competent party to assess legality of content associated with any website that may be reached via the domain in question. On a more practical and technical level, we can confirm that we are not the webhost for the website in question and the content noted neither resides, nor passes through our servers. As registry operator, we simply do not have the technical ability to remove or disable specific items of objectionable content, such as those instances which form the basis of your report.
If you believe a criminal act has occurred, we must direct you to raise this with the relevant authorities. We will always work with appropriate law enforcement agencies and will be happy to assist them in this matter, should they see fit to raise it with us. Similarly, should we be in receipt of a court order of suitable jurisdiction that requires us to suspend the domain name, we shall take action and comply as is appropriate.
Due therefore to the limited technical sphere in which we operate, we are not the correct party to contact in relation to this matter. For more information relating to the role of a registry operator in such matters we would urge you to consider the Framework to Address Abuse. We are sorry that we cannot be of more direct aid at this juncture.
Warm regards,
The Identity Digital Safety Team
In other words, they can but don't want to suspend the domain because they don't believe it's malicious enough. They want a legal entity (law enforcement, court,...) to get involved for them to act.
@eXch Support any suggestions?