Criticalscore 63 · flagged Monday, September 21, 2026

walmartvaluewithdraw.pro

Appeared in the .pro zone on Monday, September 21, 2026; by the end of that day the census found active website about crypto web3. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: walmart
+30
brand name and brand-styled page
matched: walmart
+15
form on a brand-styled page
matched: has_form
+18
Registrar
Nameserver provider
Nameservers
ns1.dyna-ns.net, ns2.dyna-ns.net
First-day state
active website
HTTP status
200
Page title
WalmartValueWithdraw — Sell your Walmart Business Card for USDT, Bitcoin or USD
Has a form
yes
Brand echoed
walmart

Model opinions

Second opinionlooks like phishingtarget: Walmartconfidence 62%· claude-opus-5

Brand-new domain uses the Walmart name, blue/yellow palette and the Walmart spark watermark to front a 'sell your prepaid Walmart Business Card for USDT/BTC' service with register/login forms and an upload widget for card photos — i.e. capturing card credentials and payment data under an unauthorised Walmart identity, with Telegram/WhatsApp operator contacts as the only real channel. If not judged brand impersonation, it is at minimum a gift-card cash-out fraud front.

First passlooks like a scamconfidence 92%· claude-haiku-4-5

The site impersonates a Walmart-branded service to lure users into 'selling' prepaid business cards for cryptocurrency, a classic financial scam shape. While it uses 'Walmart' in the domain and page title, it is not impersonating Walmart itself (Walmart does not operate such a service); rather, it is a fraudulent card-liquidation scheme with cryptocurrency payouts and operator contact via Telegram/WhatsApp—hallmarks of theft or money-laundering infrastructure, not phishing of Walmart's credentia

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Monday, September 21, 2026

Screenshot of walmartvaluewithdraw.pro taken by the zone census on 2026-09-21

Same data as JSON: /api/zone/domain/walmartvaluewithdraw.pro. This page is not indexed by search engines and does not link to the site it describes.