Let's be direct: chase.com-onlinebanking.com is not a real banking website. The domain name itself is designed to look like Chase's official online banking portal, but the resemblance stops at the name. The site doesn't load a functional homepage — visitors get a 404 error page instead — and there is no contact information, no privacy policy, and no way to identify who owns the domain. The domain registration is completely hidden from public records, which is not what legitimate financial institutions do. You should not enter any personal, login, or financial details on this site. If you're looking for Chase online banking, use the official Chase website directly. This domain has no place in a legitimate banking session, and the safest move is to steer clear entirely.
No — chase.com-onlinebanking.com doesn't look safe
In plain English
This site is not safe to use. The domain chase.com-onlinebanking.com is an obvious imitation of a major bank, and whoever registered it has hidden their identity completely. The site doesn't even load a real homepage — just a 404 error — so there's nothing here to evaluate as a legitimate service. Avoid entering any personal or financial information.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The HTTPS setup is solid: modern encryption, a valid certificate from a major cloud provider, and browser protections that enforce secure connections. No malware or phishing flags from Google. What's missing are standard browser hardening protections that block things like clickjacking and code injection — the site only has one of six common safeguards in place.
The WHOIS record shows no match for this domain at all, meaning the registrant's identity is completely hidden. The domain name itself — chase.com-onlinebanking.com — is a textbook impersonation pattern designed to mimic a well-known bank. There is no legitimate business behind this address.
The domain hasn't been flagged on blacklists and Google hasn't detected malicious content, which keeps it out of immediate danger territory. But it's not ranked in any traffic lists and the Wayback Machine blocked our lookup — we can't see any history. For a site borrowing Chase's brand, the absence of negative flags doesn't carry much weight.
There is no contact information anywhere on the site, no about page, no social media links, and no way to identify who runs it. The only page that loads is a 404 error. A site that won't tell you who they are and won't even load a functional homepage is actively avoiding identification.
No privacy policy, no terms of service, no legal disclosures of any kind. For a site that mimics a financial institution — even if it doesn't process payments itself — the total absence of legal pages is a red flag. EU law would require these, and any legitimate banking or financial service would have them by default.
The site is hosted on Amazon's cloud infrastructure, which is perfectly normal. But it blocks all search engine crawlers via robots.txt, does not handle email at all (no mail exchanger configured), and its DNS isn't signed. Most damaging: the only functional page returns a 404 status code — the site isn't even serving content.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.