If some good soul would compile a list of all the fake exch.net domains and list them one per line we could add them to the Domainsure Crypto Defender threat feed:

https://domainsure.com/rpz-threat-feeds/

That gets pushed out to resolver services (like Quad9) which can dampen the reach of known phishing domains before they get taken down.

https://exch.ac/
https://exch.cd/
https://excz.cx/
https://exclh.cx/  
https://excn.cx/
https://excj.cx/
https://exsch.cx/
https://exch.exchange/