[xref]

It was sent from “@gocladdy.com” and tried to trick users with the kerning between “d” and “cl”, where are you seeing it was an internal address?

[tsimionescu]

Unless the pictured email client has an absolutely horrible kerning implementation, it is sent from @Godaddy.com. Where did you get the "@gocladdy.com" information from?

[musingsole]

From xref's other post: https://www.wfaa.com/mobile/article/news/godaddyunderfirefor...

https://imgur.com/a/eqrijWx

[tsimionescu]

The photo from the original article is different:

https://imgur.com/a/anfsAsa

I can't access wfaa.com ("Access denied" errors even on /), perhaps they are blocking European traffic?

[llacb47]

That's Tegna for you.

[permo-w]

the second line of the article says it is from [e-mail]. So that’s where