exch should consider buying the major TLD out there to avoid giving scammers an opportunity to clone their business!
I guess they’re already doing it, though this is just an assumption based on my own research. When I searched for "exch" on domain registrars like Namecheap to check which TLDs were still available, I found that some were already taken but not accessible, unlike the phishing sites that were mentioned.