This is currently working as designed! The website_URL is used as a 2nd identifier should the email value not be passed (or in some cases be a generic domain such as Gmail.com)
However, if the primary identifier, in this case email, is passed we will see that the record created comes for the domain of the email i.e In your example, we see the company ‘depositfix.com’ created.
I hope this helps!