There is this, but I am not sure how useful it is.
https://whoisfreaks.com/tools/whois/history/lookup/monero.forex
https://whois.domaintools.com/monero.forex also shows https://nicenic.net/ as reseller for monero(.)forex

Where did you get this exact email address from? Can you post a link to the website?

---

One of the phishing websites that monero(.)forex and darketbible point to was suspended - xchange(.)cx
They quickly replaced it with another one - xchange(.)cheap