Highscore 56 · flagged Friday, November 13, 2026

wallmart.cloud

Appeared in the .cloud zone on Friday, November 13, 2026; by the end of that day the census found active website about real estate. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

one-letter brand typo
matched: wallmart≈walmart
+28
brand name at a retail registrar
matched: IONOS SE
+8
brand in page title, not in the name
matched: walmart
+20
Registrar
IONOS SE
Nameserver provider
Nameservers
ns1045.ui-dns.de, ns1086.ui-dns.biz, ns1088.ui-dns.com, ns1088.ui-dns.org
First-day state
active website
HTTP status
200
Page title
Wallmart.cloud — Walmart Marketplace seller workspace
Has a form
no
Brand echoed
walmart

Model opinions

Second opinionlooks like abusetarget: Walmartconfidence 70%· claude-opus-5-5

The name wallmart.cloud is a typosquat of Walmart, and the page uses Walmart's 'Seller Center' and 'Walmart sync' language for a third-party-style seller workspace with Sign in / Start free buttons. No credential form or offsite collection is visible yet, so this is a brand-squat rather than a confirmed phish, but it could be harvesting Walmart seller logins.

First passlooks like phishingtarget: Walmartconfidence 92%· claude-haiku-4-5

The domain wallmart.cloud is a deliberate typosquat of Walmart, and the page impersonates Walmart's seller workspace by using Walmart branding language ('Walmart Marketplace sellers', 'Seller Center'), displaying a mock seller dashboard with Walmart-style inventory management, and presenting a 'Sign in' button to capture credentials. The page has no legitimate affiliation with Walmart and uses the typo domain to deceive sellers into providing login credentials.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Friday, November 13, 2026

Screenshot of wallmart.cloud taken by the zone census on 2026-11-13

Same data as JSON: /api/zone/domain/wallmart.cloud. This page is not indexed by search engines and does not link to the site it describes.