may not be related - and def a tiny little data point - I sent heroku an email about a week or bit more ago - complaining that I had gotten a very well crafted

may not be related - and def a tiny little data point - I sent heroku an email about a week or bit more ago - complaining that I had gotten a very well crafted phishing email - which was seriously very clever in it's timing (or just blind lucky for them, as I was changing servers and dns and things within 48 hours of this) - that made it look I needed to login and do something with server credentials or something similar.. and the link to click to fill info went to a heroku app with a name attached to it.. So I emailed them and asked them to look into it to see if it was overly obvious that user XY was getting clicks and if they had set up some sort of official looking form to phish server accounts or something like that - memory a bit foggy in the midst of so many changes past couple weeks. Never heard back from them, but maybe my email helped them realize some things were not being used as they should of been authorized to be used for. Maybe not.