https://auth.id-venmo.store/

Impersonating Venmo

Intent: Credential collection

• Domain is not operated by Venmo
• TLS certificate has no organization information
• Mail servers do not match Venmo's known infrastructure
• Domain not registered through Venmo's usual registrar
• Domain was registered very recently
• SPF record does not reference Venmo's infrastructure

Venmo verification page requesting a texted code to confirm the account holder