I think this combination, in the approach, helped in the decision making.
Sometimes when domains are registered by "smaller" companies it helps, as they have more time to analyze the cases in more detail.

---

In the case of monero[.]forex I think the approach now has to be to the other phishing site that they are indicating: xchange[.]cx

@examplens you should include this on your website.
I think we have entered a phase where we cannot concentrate information around eXch, we have to approach the subject in a more comprehensive way.