viabestbuys[.]com

PhishDestroy identifies viabestbuys.com as an active credential-stealing phishing domain designed to impersonate Best Buy’s online storefront, tricking users into entering payment details on fraudulent checkout pages.

This domain was flagged by just 1 out of 95 VirusTotal security vendors, increasing the risk of undetected phishing attacks reaching potential victims. Registered through Fewmoretaps OU (operating as Trustname.com) on November 28, 2016, viabestbuys.com resolves to IP address 190.115.31.153 and holds a valid SSL certificate issued by Sectigo Limited—tactics commonly abused by threat actors to appear legitimate. The domain’s age and seemingly innocuous registration details mask its malicious purpose, making it particularly dangerous for unsuspecting shoppers.

Users who visited viabestbuys.com should immediately review their online accounts for unauthorized transactions and reset any passwords entered on the site. Avoid clicking links in unsolicited emails or messages referencing 'Best Buy' promotions. Report the domain to your security team or use tools like browser-based blocklists. If sensitive data was entered, consider freezing credit reports and monitoring financial statements closely. Proactive scanning of endpoint devices is recommended to detect potential malware downloaded during the visit.