I actually don't see how the date in the domain name is integral to this scam? Maybe someone can clarify it for me.
Why not just https://ee.co.uk.billing.info/jan-02 ? I mean if someone does not notice it is a domain name and not path would they really notice where the info part is?