Fascinating - iMessage phishing now includes specific instructions to get around iOS Lockdown Mode restrictions.

The replies about how people "should" notice the funky URL are distressing. Why should they?

If you expect people to become experts on esoteric naming conventions in order to use technology safely and securely, you're the problem, not them.

@mattblaze Specially because so many genuine links are pretty much undistinguishable from phishing URLs (typically due to either vanity short domains and/or insane link tracking).
And also many legitimate websites tell people to disable safety measures, most of those being horribly uninformative about what's going on (when they're not full on FUD like browsers certificate errors).