An generated email address that I only use only at #namecheap has just been used in a #phishing attempt on me. The address isn't listed in #haveibeenpwnd, which leads me to believe that #namecheap has had an undisclosed hack.
@karabaic The emails I got were digitally signed by a namecheap.com SSL certificate. Like you, they're also coming to the email I only use at Namecheap. They were hacked pretty badly.

@jthompson mine was a DHL phishing attempt. Was yours namecheap?

I’m going to move all my certs over to someone else… tiis is ridiculous

@karabaic I got one phishing email pretending to be DHL, and two pretending to be from Metamask crypto wallet. They were from [email protected] and [email protected].

Time to move on for me, too. I've been bitten too many times by staying with a company after a hack. Not this time.