The phish site uses a cunning trick to make the deception deeper - a Java program that 'overwrites' the address bar of your browser with another window, which has the legitimate URL in it. This window is placed on a fixed location, so if your browser is unusually cusomized - you have some stuff that makes the address bar shorter, puts it higher or lower or at the bottom of the page, the scam will become obvious. But with the majority of users having their browsers the default way, the scam will work as intended on most people's machines.
There are some other clues of phishing, too: the errors in HTML rendering indicated by the browser (would VISA have errors on their official site? I doubt it - somebody would lose his/her job too quickly :) ), and the missing 'lock' icon at the lower right corner of the browser window (although the URL starts with https://): |
email.jpg)
site1.jpg)
site2.jpg)