Search FraudFYI

Wednesday, February 22, 2017

PHISHING ALERT! PHISHING scam with potential MALWARE email from Chase Bank

DO NOT CLICK ON THE LINK IN THIS EMAIL! THIS EMAIL IS NOT FROM CHASE AND THE LINK DOES NOT TAKE YOU TO THE CHASE WEBSITE!  The link takes you to which redirects to and is PHISHING for your Chase Bank account information!  There's also a potential of MALWARE!

Netcraft     Malicious site
Avira (no cloud)     Phishing site
ESET     Phishing site
Web site category
Websense ThreatSeeker
information technology
Final URL after redirects
IP address resolution
HTTP Response code
HTTP Response headers
transfer-encoding: chunked
expires: Thu, 01 Jan 1970 00:00:01 GMT
vary: Accept-Encoding
server: nginx
connection: keep-alive
cache-control: no-cache
date: Wed, 22 Feb 2017 01:12:15 GMT
content-type: text/html

Originating IP:
Originating ISP: Iquest Internet
City: Indianapolis
Country of Origin: United States

from: Chase <> via 
date: Tue, Feb 21, 2017 at 7:44 AM
subject: Unusual account activity detected
mailing list: <10960513_1254581.xt.local> Filter messages from this mailing list

Trouble viewing this email? See the Web version

Dear CHASE Member,

We detected Unusual activity on your CHASE bank account on 02/21/2017.
For your protection, we need you to review this activity immediately.

Please sign in to Mobile Banking or visit Online Banking at WWW.CHASE.COM
to review and verify your account activity:

If you do not contact us, certain limitations may be placed on your account.
please visit the following page:


Icon  Your last sign-in was 02/08/2017
To verify that this email is from CHASE BANK, confirm your last sign-in date is correct. To access Online or Mobile Banking, go directly to or use our Mobile Banking App.
Remember: We never ask for private information such as an account number, card PIN, or Social Security or Tax ID number in email messages. If you think an email is suspicious, don't click on any links. Instead, forward it to and delete it.

Customer Advisory
Copyright 2017 CHASE.
Read our Privacy Notice.
Please don't reply directly to this automatically generated email message.

This email was sent by Chase ( To ensure that you continue receiving our emails, please add us to your address book or safe list. Click here to remove yourself from this mailing list. 
Kevin Warren | 11509 Chatham Pl NE | Bainbridge Island | WA | 98110 

From the HTML of the email:
Please sign in to Mobile Banking or visit Online Banking at <a href="" class="userlink">WWW.CHASE.COM&#160;</a></div><div id="ctrl-9521045" style="width:100%">to review and verify your account activity:&#160;</div><div id="ctrl-9521046" style="width:100%"><br></div><div id="ctrl-9521048" style="width:100%">If you do not contact us, certain limitations may be placed on your account.&#160;</div><div id="ctrl-9521049" style="width:100%">please visit the following page:</div>
<div id="ctrl-9521050" style="width:100%"><a href="" class="userlink"></a>

No comments:

Post a Comment

Thank you for commenting! Your comment will be reviewed and posted shortly!