I just messaged ripway that they have a phishing website on their domain... would that work?
Though, it keeps amazing me by how succesful these scams are, guess it's true that some people don't look up, though in this case it would be not looking at all.
Sidenote... the .co.gp address is hosted in germany, also sent them an alert message.