There's an important meta-lesson here. You should check all your expired domains to make sure any email address using them wasn't involved in a data breach! And review your backup email addresses on everything.