Yes... we agree on parts and I know that phishing emails happens all the time. But I've never seen anything like that... I never received a fraudulent email with the sender showing up as 'contact@paypal.com' or 'noreply@paypal.com'... is always 'contact@playpal.com', 'roreply@pay-pal.com' or something like that...
In last email from the real Bitmain they wrote:
There are many different types of software that are able to spoof and edit the sender's email address. The user is able to configure the domain name to send out emails to appear as webmaster@bitmaintech.com.
These scammers act very "professionally"
