Need help? Ask the community or hire an expert.
Go to Avira Answers
Target:ePassporte
Date discovered:05/09/2007

 General The goal is to get the following information:
     Bank account


Phishing method:
     URL link

 Email Details From: supports@epassporte.com
Subject: First Notice - Temporarily Account Suspend

Visible link: https://www.epassporte.com/secure/epassporte.cgi?req=login&uid=ver
Actual link: http://www.quppy.com/babelogger_images/c99/index.htm
IP address: 194.79.31.97


The email is designed to avoid detection from Antispam and Antiphishing. The technique is:
     The Body of the email contains HTML content.



This screenshot is how the phishing email looks like:


 Page Details Visible URL: http://www.quppy.com/babelogger_images/c99/index.htm
Actual URL: http://www.quppy.com/babelogger_images/c99/index.htm
IP address: 194.79.31.97


The phishing page will look like the following:



Description inserted by Dominik Auerbach on Thursday, September 6, 2007

Back . . . .