Hey, @brustulli .
Thanks for reaching out on this thread.
Looking into this, we do not have any internal access to store or account-specific information from the Community forums to provide a clarification. Typically, when you receive an order confirmation email the domain address from the email will end in the business name. With that being said, if you suspect that this email may be a phishing attempt - could you forward this email to our Trust and Safety team at Safety@Shopify.com? This will allow our team to carefully investigate the situation and look to put an end to the phishing campaign.
Let us know if you have any questions.