Highscore 44 · flagged Friday, October 16, 2026

woermart.com

Appeared in the .com zone on Friday, October 16, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in page title, not in the name
matched: walmart
+20
form on a brand-styled page
matched: has_form
+18
form submits over plain HTTP
matched: http://woermart.com/
+6
Registrar
Realtime Register B.V.
Nameserver provider
Nameservers
a3.share-dns.com, b3.share-dns.net
First-day state
active website
HTTP status
200
Page title
沃尔玛购物卡/礼品卡余额查询入口-官网
Has a form
yes
Brand echoed
—

Model opinions

Second opinionlooks like phishingtarget: Walmartconfidence 95%· claude-opus-5-5

The typosquat domain woermart.com hosts a fake "Walmart card balance check official site" (沃尔玛卡余额查询官网). It asks for the gift card number and the 6-digit scratch-off payment PIN, and the form posts offsite to samuka.cn over plain HTTP, which is classic gift-card credential theft.

First passlooks like phishingtarget: Walmartconfidence 98%· claude-haiku-4-5

The domain woermart.com impersonates Walmart's gift card balance checker, with a page title claiming to be the 'official website' (官网) for Walmart card inquiries in Chinese. The form requests card number and password, posting to samuka.cn (an external server), which is the classic sealed-room phishing pattern: credential harvesting on a spoofed brand page with no legitimate offsite links and form submission to an attacker-controlled third party.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Friday, October 16, 2026

Screenshot of woermart.com taken by the zone census on 2026-10-16

Same data as JSON: /api/zone/domain/woermart.com. This page is not indexed by search engines and does not link to the site it describes.