reidasnfa[.]store

PhishDestroy identifies the domain reidasnfa.store as an active phishing scam impersonating the REI brand. The site is currently operational and poses as a legitimate REI-related portal titled 'REI DAS NFA,' misleading visitors into believing it is affiliated with the outdoor retailer. This deceptive practice aims to harvest sensitive user data, including login credentials, payment details, and personal information, under false pretenses.

This domain was flagged by 0 of 95 VirusTotal vendors as of the latest scan, indicating a lack of immediate detection by traditional security tools. The site resolves to the IP address 63.176.8.218 and utilizes a Let's Encrypt SSL certificate to appear legitimate. The domain is registered with an anonymized registrar, and further investigation into its creation date and historical trust scores is currently under review. The absence of detections highlights the sophistication of this campaign, which may evade initial scrutiny by leveraging newly registered domains and reputable SSL certificates.

The domain reidasnfa.store remains active and represents a significant threat to unsuspecting users who may mistake it for an official REI platform. Users are strongly advised to avoid interacting with this site, refrain from entering any personal or financial information, and report the domain to relevant authorities or security platforms. To verify the authenticity of REI-related communications, users should cross-reference official REI domains and utilize trusted channels for any transactions or account management. Enhanced vigilance and the use of reputable security tools are recommended to mitigate the risk of falling victim to this phishing scam.