One common thing about fake sites and links like this is that they often make use of cheap domains and majority of the time those kind of domains end up giving a warning of unsecure site when you try visiting unlike fit the original site that makes use of a valid domain.
That's why it's important to take note of things like this on sites you make use of especially frequently and also make sure to always view their announcement pages because they always update ways to spot their fakes.
It's not about scammers buying and using cheap or expensive domains. The scam in this case (in addition to losing the funds) is the use of domains that may appear similar to the original, without users noticing the difference at a glance. Scammers use this trick targeting less experienced users, as a user who has years of experience will perform certain checks before using the service.
This is not the first time scammers tried to trick people with fake eXch website and domain names similar to original.
Some scammers even clones their website with added new name and they advertised their scam to darknet forums.
Best way for protection is t obookmark website and don't use internet search to find websites.
Unfortunately, this is not something that everyone does, and many users sometimes use "their memory" to access exchanges. Bookmarks would be partly a solution, since there are also numerous vulnerabilities, although they are not very common to find.