Suspicious

Phishings targeting Venmo

Suspicious and active websites

Phishings targeting Venmo

Suspicious and active websites

Active
2
New (7d)
2
Trend (7d)
—
Website
venmo.com
About
AIP2P payments target (US). Same lure pattern as Cash App - fake 'fraud alert' or 'pending payment' notifications harvesting credentials and the linked bank-card balance.
Hosts
Telehouse EAD (2)
Countries
BulgariaBulgaria (2)
TLS certs
YR2 (2)

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) ▾ URL Screenshot Flags Details
2026-10-05 21:30 2026-10-05 17:25
https://mail.app.venmo-usr.my.id
Screenshot of mail.app.venmo-usr.my.id GSB Details
2026-10-05 21:30 2026-10-05 17:25
https://app.venmo-usr.my.id
Screenshot of app.venmo-usr.my.id GSB Details

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL Screenshot Details
https://mail.app.venmo-usr.my…
GSB 		Screenshot of mail.app.venmo-usr.my.id Details
https://app.venmo-usr.my.id
GSB 		Screenshot of app.venmo-usr.my.id Details

AIHow to verify a real Venmo URL

  • Legitimate Venmo URLs always end in venmo.com (e.g. www.venmo.com, account.venmo.com). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not Venmo.
  • The padlock icon proves TLS is active, not that the site is safe. Free DV certificates are issued to attackers in minutes; every active site listed above has a valid TLS certificate.
  • If you got the link from email, SMS, or social media, do not click it. Open venmo.com from your browser bookmark or type the domain manually.
  • Real Venmo pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.