What's concerning here is that they could have easily bought a certificate and configured it to their site. Instead what they did as preventive measure is to b

What's concerning here is that they could have easily bought a certificate and configured it to their site. Instead what they did as preventive measure is to buy the domain name that Troy mentioned as one of the possible vector to spoof their site. Hate to say this, but whoever made that decision as a course of resolution should be axed.