Interesting, I visited Thailand earlier this year and today got email that my Thailand Pass request is registered and also got new personal key code.

I checked the email headers and it's actually from tp.consular.go.th and all links point to actual site, not to some scam (unless whole tp.consular.go.th is taken over..)

Maybe just a hick-up in the system

edit: the warnings in red are included in the message I received