I figure that people who are gullible enough to believe spam like "Triple your investment at our new exchange: cryptomatron.xyz" wouldn't be stopped by having to type the URL in manually.