Monero[.]forex change its registrars to 1api.net which was probably transfered yesterday. I just learned this when i asked namecheap for follow up.
While darknetbible is still the same registrar but i see some pending transfer status probably to the same registrar as well or anywhere else.
So i guess you will need to update your domain to something general instead of having the registrar name on it. But AFAIK it takes time at least 30 days or so before you can transfer domain to another registrar again. So scammer will stick to this registrar for a while.
Great, it means the campaign is doing its job.
To begin with, I will only update with new changes, certainly, all the relevant information is on the site, so it can also be used for the new registry. This is just one more reason for the new registry to grant the suspension. (I'm unsure why Namecheap dragged its feet so much and somehow protected this scammer.)
As for the domain name itself, it had to be something that would attract NC's attention. As for the domain name itself, it had to be like that to draw NC's attention. The scammer has already said that he also has a domain like moneronews[.]com, which I assume he will activate at some point, and it is also registered with Namecheap. So the current domain could be relevant in the future.
Good catch PX-Z