If you see a email address whose domains end in .shop .top or .xyz among other generic top-level domains (gTLDs), you should try to block them by domain as it's likely a phish and a scam.
Here's a explanation into why phishers and scammers love these domains.
https://krebsonsecurity.com/2024/12/why-phishers-love-new-tlds-like-shop-top-and-xyz/