Well, after the exch[.]cash phishing domain was shut down, the scammer reacted very quickly. On two well-known fraud domains, eXch name has been pointing to a link replaced by the new exch[.]best domain


As far as I can see, it is almost the same scheme.
The domain exch[.]best is registered through Tucows partner easyDNS



I will send a new request to easyDNS, it seems to me that they were quite responsible last time.