Bank Phish

This is phish email for ICICI (submitted to phishtank)

hosted to

hxxp://ayitipeyipam.org/css/data/onlineverification.do/

from here it redirects to

hxxp:/ayitipeyipam.org/css/data/onlineverification.do/index2.html

there is twist here

See it

 

this page is very same to paypal ,confirmed with the script

   1: // This is an ugly hack until there is a reliable ondomready function

   2:                            if(typeof PAYPAL != 'undefined'){

   3:                                PAYPAL.core.Navigation.init();

   4:                           }</scr

Then it lands on to a page where it asks for card information.

after that it shows thank you message,

and finally lands to Original site ,so user will never know that he has been phished.

   1: <META HTTP-EQUIV="Refresh" CONTENT="5;URL=https://infinity.icicibank.co.in/Login.jsp" ></body>