Safety
It will not charge a card on the website. It will not ask for a seed phrase, a one-time password, remote-access software, or a payment in email, Telegram, or WhatsApp.
It will not send you a wallet address before your order status is “Waiting for payment”.
The address in the browser is the real Exwallets domain. You are signed in. The order code on the page is the one you opened. The payment account is in that order, and the chat shows when the desk posted or replaced it.
If someone sends a different account from outside the order, do not pay it.
Your account, the locked rate, the amount you send, the amount you receive, the account you want funds sent to, the reference for the payment you make, and the reference for the payment the desk sends.
Registration can require a Cloudflare check so scripts cannot open accounts. That check is configured on the server, not typed by customers.