I've gotten it 2 times. Different places each time.

One I think went to secverify.wamu-online-bank.com/ which redirects to the real site after logging your email.