[jwally]

This is what I had in mind.

Bank.com hires pen-testers to trick people to go to Bank.evil, spill their ID/Password/OTP.