I was only trying to caution OP, given that he had exposed his email to the public earlier on and didn't even bother removing it after i advised. Any malicious actor would trick him to sign a message and later, copy and send it to you claiming he is the owner of the account. I hope you understand my angle of thought.
I definitely do !
And seems there's a long way from
warning users about phishing attempts with punycode to flashing his email address around ... hope you understand my angle

hold your horses mate, I don't want to be rude and start drama here but first you don't know nothing about me or my online experience with privacy and I think this is only my problem if i want to expose my email to public or not?
..."flashing his email around"...
I already treat it as lost one and will never use it again, after I will recover my account, additionally this never was my first email and will be changed/forgotten/used for spam anyways sooner or later if this hack wont happen
so I can now FLASH with it as you say, so hackers have great time writing me further on
when it comes to hack and if i know how to stay safe online - I was aware it could be a malware and my business partner warned me about this just before i downloaded it, this is why i use special device for such files, never click or download anything i can't verify not only in emails but everywhere
still is not sure how my account was breached and if the file was malicious...