Skip to content
Scammers.com
PhishingReviewed

Researcher flags qutvb.com fake SMBC / Mitsui Sumitomo Card login page

Researcher @KesaGataMe0 flagged a fake SMBC / Mitsui Sumitomo Card login at qutvb.com/smbccard/jp. Sumitomo Mitsui Card is not involved.

First reported
Reports
1

Source: x.com · published

Screenshot of a fake Sumitomo Mitsui Card / Vpass login page on qutvb.com
Image: @KesaGataMe0 (via X)

What happened

On 9 November 2026 the phishing researcher @KesaGataMe0 posted on X that qutvb.com was hosting a phishing page impersonating Sumitomo Mitsui Card (SMBC / 三井住友カード). The post listed a phishing page at hxxps://qutvb[.]com/smbccard/jp, hosted on IP 43.165.135.79 (AS132203). The domain is not operated by Sumitomo Mitsui Card (SMBC / 三井住友カード), and Sumitomo Mitsui Card (SMBC / 三井住友カード) is not involved.

How the scam works

Phishing pages like this are usually reached through a text message, email or search ad that claims there is a problem with an account, a payment or a delivery. The link opens a copy of the Sumitomo Mitsui Card (SMBC / 三井住友カード) sign-in or checkout screen on an address that has nothing to do with Sumitomo Mitsui Card (SMBC / 三井住友カード). Anything typed into the form goes to whoever runs the page.

Criminals then use stolen logins to take over accounts, place orders or try the same password on other services, and card details can be used within minutes. Because the page can look almost identical to the real one, the safest check is the address bar: qutvb.com is not a Sumitomo Mitsui Card (SMBC / 三井住友カード) address.

Card holders should use the official Vpass app or type the card company's address themselves. Anyone who entered details on qutvb.com should change the password through the official Sumitomo Mitsui Card (SMBC / 三井住友カード) app or website, enable two-step verification and contact their card issuer if payment details were entered. The indicators come from the post and have not been independently checked by scammers.com.

Source

Post by @KesaGataMe0 on X, 9 November 2026, flagging qutvb.com. Not independently verified by scammers.com.

Red flags

  • A Sumitomo Mitsui Card (SMBC / 三井住友カード) login or payment page on an address that is not an official Sumitomo Mitsui Card (SMBC / 三井住友カード) domain.
  • A link to qutvb.com arriving by text, email or ad.
  • A message that creates urgency about an account problem or payment.
  • A request for your password, card number or one-time code after following a link.
  • A Vpass or Sumitomo Mitsui Card login on an unrelated domain such as qutvb.com.

If you were targeted

  1. 1Do not enter passwords, card numbers or one-time codes on a page reached from a text, email or ad.
  2. 2Open the company's official app or type its address yourself to check your account.
  3. 3If you entered details, change your password at once and contact the company through its official channels.
  4. 4Report the message and the link to the company and to your national phishing reporting service.
  5. 5Delete the message without replying or tapping any links.
ReportFraud.ftc.gov FBI IC3 More resources

Related reports

All phishing reports
PhishingReviewed

Fake Onet Poczta (Polish webmail) login page at xxvv435.weebly.com

PhishDestroy posted on Mastodon on 12 November 2026 that xxvv435[.]weebly[.]com is a phishing page. Its record describes an Onet Poczta login page with email and password fields, flagged by 19 of 92 VirusTotal engines…

  • xxvv435.weebly.com
  • Weebly subdomain; URLScan brand: onetpl; VirusTotal 19/92
Reported Nov 12, 20261 report
PhishingReviewed

GMX.net email login phishing page at xncok12.weebly.com

PhishDestroy posted on Mastodon on 12 November 2026 that xncok12[.]weebly[.]com is a phishing page. Its record describes a GMX.NET-branded email and password login form, flagged by 17 of 92 VirusTotal engines. GMX is…

  • xncok12.weebly.com
  • Weebly subdomain; VirusTotal 17/92
Reported Nov 12, 20261 report