Since the article doesn't seem to address it, the email was sent from “happyholiday@gocladdy.com” and tried to trick users with the kerning between “d” and “cl”

Since the article doesn't seem to address it, the email was sent from “happyholiday@gocladdy.com” and tried to trick users with the kerning between “d” and “cl”, here's a screencap where the address is shown in a different font https://imgur.com/a/eqrijWx https://imgur.com/a/eqrijWx source: https://www.wfaa.com/article/news/godaddyunderfireforfakebonusemail/75-d6ab6d6e-e8bb-4269-a7ad-6d08bbc35ff2 https://www.wfaa.com/article/news/godaddyunderfireforfakebon...