trustedchase[.]com

This domain, trustedchase.com, operates as a high-risk banking phishing site specifically designed to impersonate Chase Bank's digital banking platform. The site presents a fraudulent login interface under the guise of "Trusted Chase - Dedicated to innovating, simplifying, and humanizing digital banking," aiming to deceive users into submitting sensitive financial credentials, including account numbers, passwords, and multifactor authentication codes. Infrastructure analysis reveals the site employs social engineering tactics typical of credential harvesting campaigns, with particular targeting of mobile and desktop banking users. Evidence confirms the domain's malicious nature through multiple technical indicators. VirusTotal detection shows 20 out of 95 security vendors flagging trustedchase.com as malicious, while the domain appears on one security blocklist. Registered on June 03, 2026, through Global Domain Group LLC, the site resolves to IP address 198.251.84.200, hosted on AS53667 FranTech Solutions infrastructure. The domain employs a Let's Encrypt SSL certificate (YR1), creating a false sense of security while facilitating encrypted credential transmission to threat actors. Users who have visited trustedchase.com or entered credentials should immediately take protective measures. First, change all Chase Bank account passwords and enable multifactor authentication if not already active. Second, contact Chase Bank's fraud department to report potential exposure and request account monitoring. Third, scan all devices used to access the site with updated security software to detect potential malware infections. Financial institutions and security teams should add this domain to blocklists and monitor for related infrastructure, particularly IP range 198.251.84.0/24 and domains registered through Global Domain Group LLC, as these indicators suggest broader campaign infrastructure.