Notice the lack of a login screen, too.
And to make the things even more convincing, the site checks the credit card number using a commonly available algorhytm. This does not require or reveal any information about the bank account behind the CC, but it would reject a random bogus number, which could make the potential victim trust the site.
After the data is phished, the site will just redirect to the legitimate usa.visa.com, as if nothing has happened. |