protruvesto[.]net

The domain protruvesto.net is a confirmed phishing site engaged in brand impersonation targeting Chase customers. It presented itself as a legitimate investment or partnership portal but was designed to harvest login credentials or financial details under false pretenses. No crypto drainer kit was detected, and the site is currently taken offline, though it previously posed an elevated risk due to its convincing impersonation of a major financial institution.

Technical indicators show protruvesto.net was flagged by 3 of 95 VirusTotal security vendors, including Gridinsoft, Netcraft, and Seclookup, with a Gridinsoft trust score of 0/100. It appeared on one security blocklist, PhishDestroy, and was registered through Global Domain Group LLC on August 25, 2025. The domain resolved to IP address 163.61.188.92, hosted on AS153568 NEW DHAKA HARDWARE in the US, with no SSL certificate issued. Nameservers were dns1.cupisweb.com and dns2.cupisweb.com, and the observed page title was 'Invest in Future Opportunities | Government & Private Sector Partnership'.

Individuals who interacted with protruvesto.net should immediately change any passwords entered on the site, particularly for Chase or other financial accounts, and enable two-factor authentication if not already active. Monitor bank statements and credit reports for unauthorized transactions or signs of fraud. Report the phishing domain to the Federal Trade Commission at reportfraud.ftc.gov, to Chase’s fraud team via their official website, and to Google Safe Browsing at safebrowsing.google.com/report_phish. If credentials were reused on other platforms, update those passwords as well to prevent further compromise.