I recently had similar experience where a legitimate text from my insurance company was 100% indistinguishable from a scam text, directing me to a link on allstate.yem.bo. You would think it would be in an insurance company's interest not to train their users to click on scam links but what do I know.