The more I look into that company's emails, one of the email address pointed to a no-longer hosted domain, and the second points to a website saying "Congratulations! Your website is now complete!" and was set up three days ago.

Yeah, no. Nightmarish number of red flags.