UPDATE: 1/25/21 I just got scam texted a real-world example of this strategy. This is the fake link https://boa-secured014.myftp.org/6ba4f6ff4/signin?28bed8d6b28cdc5d989f7aefcd610922=cdd737d155e7a35b2515ed8b817c672e, which mimics Bank of America's login page. :-o