A new variant of this attack seems to be using date-based domain names.
The message reads “EE: We were unable to process your latest bill. In order to avoid fees, update your billing information via https://ee.co.uk.billing-update-jan02.info” Reclaim the Net – Carl Sinclair | January 5, 2020