Are you receiving such as mail?
Yep, I keep getting the similar stuff ever since that Ledger database leak happened. Even though I don't get too many of those (like maybe one or two every few weeks) it is annoying af. It is quite obvious that is malicious file, I can imagine decent among of people falling for this trick as all you need is a few seconds of not paying attention and you get screwed.
I got the same email like this, and to the address, I registered at CMC. I am somehow convinced it has something to do with the last Coinmarketcap hack.
I guess both email bases (Ledger and CMC) contain mostly addresses that are actually used and are not fake.