Conspiracy theory suggests that this is probably not the phishing guy's billing address, but rather a loophole discovered by a certain exchange that happens to have opened positions on both sides and killed DEX on the chain. The exchange can quickly detect this billing amount, so if the phishing guy were to launder money, wouldn't it be in vain