Activating a card, the bank prints domain A in large letters on the card for activating. Land there and it immediately redirects to another domain B. WHY? You're making it harder for customers to know if they're in the right place! Self-phishing.