Most spam is not “black hat spam”. It is what I call “white-collar spam”: perfectly legitimate company, sending you emails from legitimate address.

Sounds like they’ve never used an email that’s been leaked… I use an old email address for things I know are going to spam me, and the volume of “black hat spam” it recieves is way more than the “white-collar spam”.