The email address is such a big teller in this case, I wonder if there are actually people who can fall for a scam like this.
Sure they can, or they would not release new scams all the time.
They intentionally used this email address because they included the same words into trezor page as part of their service.
I saw scammers using punnycodes and making very similar domains and emails, so they are trying different things to scam people.