CloudFlare just answered, now the access of exch[dot]cy, exch[dot]cc, and exch[dot]cash is leading to this:



These phishing copies are still online (unfortunately still waiting for a reaction from the companies contacted..), but at least people will be warned in the meantime...