https://passwordreset.venmo.website/

Impersonating Venmo

Intent: Data collection

• Domain is not operated by Venmo
• Domain name closely resembles Venmo's real domain
• TLS certificate has no organization information
• Domain was registered very recently
• Mail servers do not match Venmo's known infrastructure
• Domain not registered through Venmo's usual registrar
• SPF record does not reference Venmo's infrastructure

Venmo account recovery page asking for email, username, or phone number