Attacker-controlled sender domain spoofing a cryptocurrency trading company; also hosted a fake company website