@daringfireball “Most people have no idea that whatever-apple.com is totally different than whatever.apple.com”

Even Jamie, the guy explaining the scam in the video in the blog, messed it up! He said “audit.apple.com” and not “audit-apple.com”. (Dot vs dash)
That small mistake is what enabled the scam in the first place!