I agree that they could have used this domain name, I'm not that well averse on domain flipping, but a .com and SpaceX? might be good if they just re-sell it. Anyhow, this are criminals, and I'm sure that the thought didn't crossed their mind. It seems that the Ethereum address has been flag already as phishing, so that's good at least when some noobs try to check it, they will see the notifications and might not deposit at all. Sadly, both addresses have funds already, so some beginners are not regretting being greedy because they have been scammed already.
Or maybe, the funds come from them to bait naive users.
Because these scammers will do their strategies to catch the attention of these gullible users.
They added xrp on their list of coins. Maybe, they will add more in the coming days to get as much as potential buyers.
But the site itself is giving impression that they are fake. No security protocol.