What you see isn't always what you get
This phishing email is a classic illustration of how what you see isn't always what you get. The link that shows in the email is
https://chaseonline.chase.com/colappmgr/colportal/prospect?_nfpb=true&_pageLabel=page_logonform
but the real link that's hidden (that it would actually go to) is:
http://chase.com.update-user1881.info -- Note that it only looks like a Chase address at first glance. It's not. It is a dot info domain that just happens to have chase as one of the words within it. It has nothing to do with the real financial institution.
Here it is:
Dear Customer,
Chase OnlineSM does everything we can to protect your security.
By following the tips below, you can help us protect your account
against fraudulent activity.
Chase OnlineSM will be temporarily unavailable from 12:00 a.m. on Sunday,
October 30 to 8:00 a.m. on Monday, October 31 due to a system upgrade.
We apologize for any inconvenience.
Your most recent Personal/Business checking account profile is now available
for an update via Chase OnlineSM. Please click on the link below.
You will be asked to enter your ATM Credit Card information.
https://chaseonline.chase.com/colappmgr/colportal/prospect?_nfpb=true&_pageLabel=page_logonform
Thank you,
Chase.com
Chase OnlineSM Account Access
Message Center : CHASE27941
Message Date : 29-10-2005
Customer ID : 22193CBO85
Please do not reply to this message.
© 2005 JPMorgan Chase & Co.
https://chaseonline.chase.com/colappmgr/colportal/prospect?_nfpb=true&_pageLabel=page_logonform
but the real link that's hidden (that it would actually go to) is:
http://chase.com.update-user1881.info -- Note that it only looks like a Chase address at first glance. It's not. It is a dot info domain that just happens to have chase as one of the words within it. It has nothing to do with the real financial institution.
Here it is:
Dear Customer,
Chase OnlineSM does everything we can to protect your security.
By following the tips below, you can help us protect your account
against fraudulent activity.
Chase OnlineSM will be temporarily unavailable from 12:00 a.m. on Sunday,
October 30 to 8:00 a.m. on Monday, October 31 due to a system upgrade.
We apologize for any inconvenience.
Your most recent Personal/Business checking account profile is now available
for an update via Chase OnlineSM. Please click on the link below.
You will be asked to enter your ATM Credit Card information.
https://chaseonline.chase.com/colappmgr/colportal/prospect?_nfpb=true&_pageLabel=page_logonform
Thank you,
Chase.com
Chase OnlineSM Account Access
Message Center : CHASE27941
Message Date : 29-10-2005
Customer ID : 22193CBO85
Please do not reply to this message.
© 2005 JPMorgan Chase & Co.

