http://xxkdkmhcyqumtbtvpeml6gzmcr6n7hn3zzx33dtprvrbyloyz42iz6qd.onion
Also at the footer there is a mix of legitimate links mixed with his own projects like dark[dot]taxi to confuse people and search engines
royalmarket[.]org - anir0y's another "tutorial" (registered via Njalla/Sarek and IP behind Cloudflare) on how to use darknet with a "friendly" recommendation of eXch linking to the phishing What is also specially interesting and common for all the malicious websites above (including 2 Github repos) is that they list a valid .onion link for the Infinity...