Hi Noc,
How’s it going, hope your keeping well 
Mate, there were a spat of similar bogus emails being sent out a while ago. You’ll find info on this over at the GPWA. Like your site, this scam also added an extra “letter” to a newly registered domain, etc etc.
Given this was becoming a regular occurrence for a while there, I’m of the opinion it was much more than just an unknown scammer who came up with this idea. My take, I think it’s someone who’s got industry knowledge. I never made those observations public but I’ll send you a PM 