ASK HN: I encountered an online scam operation. What can I do?

A family member got sent a link in this format https://bazaraki.to-dispatch.ink/83923676746

and they were asking them to do some payment verification to receive a payment. They usually target victims that are selling on Facebook, Ebay and other websites. They then craft a specific website for your item and pretend to have paid and send you a link to collect the payment. Because you are a "first time user" they have a specific verification page that you need to input your card details.

For example if you sell a piano on hackernews, they then make a website called

  hackernews.3ds-order.online/123123

123123 is the unique identifier of the piano, with a correct image, and on the top left they will also put the logo of HN. To sell the fake page even more.

I did some reverse lookups on their webapp IP (185.106.93.21) and I got more than 40 pages with scammy names.

Examples:

  3ds-order.online, payl.online, processing.tel, qhdns.net, rentcars.store, toptyler.com, transferz.online, deal-express.icu, dealy.ink, fast-deal.live  

NS servers:

  ns1.qhdns.net, ns2.qhdns.net

I contacted some registrars like NameCheap, but they say I don't have enough evidence. I have screenshots similar to this other person that also blogged about this scam [1]

So my question to HN is, what do we do in such cases?

[1] https://osint.fans/gumtree-australia-post-credit-card-scam