I also suspect a bit about xchange[dot]cx. There is an exchange called xchange.me linked also on kycnot.me [2] but it seems the "cx" exchange is the first google entry now.
Here we are clearly faced with a phishing site.
The xchange[dot]cx website is clearly copying the official xchange.me website.
Below are links that may help prove that both domains are not related.
https://whoisfreaks.com/tools/whois/history/lookup/xchange.cx - Copy/phishing site. Registered later and with another NS.
https://whoisfreaks.com/tools/whois/history/lookup/xchange.me - Genuine site, with older registration and correct Name Server.