I’m very careful with privacy and security so I was surprised I got an obvious phishing email from “American Express”. I reported the email and moved on only to get another one today. I checked haveibeenpwned and it came back clear. I have never gotten a phishing email before the other day. As for the senders, they all came from generic IT sounding email addresses. They obviously weren’t American Express.
This is gonna sound silly but check here:
https://haveibeenpwned.com/
Might have some info if you’ve had creds leak or get exposed somewhere.
Nvm, just re-read your post and saw you already did. Leaving this up for the link for others. Sorry to bother!