Phishing site nebuladialogue.top impersonates Sumitomo Mitsui Card
Researcher masaomi346 reported a phishing site at nebuladialogue.top impersonating Sumitomo Mitsui Card (SMBC Card) on October 13, 2026.
- First reported
- Reports
- 1
Source: x.com · published
What happened
In a post on X on October 13, 2026, security researcher masaomi346 reported a phishing site impersonating Sumitomo Mitsui Card (SMBC Card) at nebuladialogue.top/sQwlMszY/.
The domain name has no connection to the card company, which was impersonated rather than involved.
How the scam works
Card phishing usually arrives as a text or email about unusual card use, a suspended card or a points expiry. The link opens a page styled like the card company's login, hosted on an unrelated domain, often with a random path like the one here. It asks for login details and then card number, expiry date, security code and one-time passwords, which are used for fraudulent purchases.
Note: this report is based on a short public post on X. The "How the scam works" section describes how this type of scam generally operates; it does not add details about this specific site beyond what the post says.
Source
masaomi346 (@masaomi346) on X, October 13, 2026.
Red flags
- A card company login page on a domain with no link to the company (here, nebuladialogue.top).
- Random strings in the web address.
- Requests for your full card number and security code after you log in.
If you were targeted
- 1Do not enter a password, card number or one-time code on the page.
- 2If you already did, change that password right away (and anywhere you reused it), turn on two-step verification, and call your bank or card issuer if you entered payment details.
- 3Go to the real service by typing its address yourself or using its official app, not by following a link.
- 4If you entered card details, call Sumitomo Mitsui Card using the number on the back of your card to block it.