[secure]

It is worth pointing out that Chrome requests randomly generated nonsense, while bogusapple.com is always the same.

[mrng]

Absolutely right - I forgot to mention that in my initial comment.

Chrome's behaviour makes much more sense than Apple's -- who hadn't even secured the bogusapple.com domains for themselves (as Microsoft did with Contoso, for example).