walmart500flarequickahl[.]pages[.]dev

The domain walmart500flarequickahl.pages.dev was created on 13 December 2025 and is hosted behind Cloudflare’s network (AS13335, United States). DNS resolution points to the IP address 172.66.47.175, which is owned by Cloudflare, Inc. The site served an HTTP 403 response at the time of analysis, indicating that the content is not publicly accessible. The SSL certificate presented is issued by Google Trust Services under the WE1 intermediate, confirming that TLS is correctly terminated via Cloudflare’s edge. Detected infrastructure technologies include HTTP/3 and enforced HSTS, both typical of Cloudflare‑protected sites. The page title returned from the server is “Walmart Gift Raffle,” matching a known lure used in giveaway‑type phishing campaigns targeting the Walmart brand.

Threat intelligence flags the domain on a single security blocklist and records a specific block by PhishDestroy. VirusTotal analysis shows that 13 of 95 scanning engines flagged the domain, reinforcing the suspicion of malicious intent. The domain is also listed with a Gridinsoft trust score of 0 / 100, the lowest possible rating. Registrant information lists Cloudflare, Inc. as the registrar, and the authoritative nameservers are aryanna.ns.cloudflare.com and harvey.ns.cloudflare.com.

While the site is currently offline, the combination of a brand‑related page title, multiple vendor detections, low trust scoring, and blocklist presence provides strong evidence that the domain was used for phishing. The exact payload, credential‑capture mechanisms, and user‑facing content have not been observed and remain uncertain. Defenders should continue to block the domain at perimeter defenses, update URL filtering lists with the observed indicators, and monitor for any re‑registration attempts. Incident response teams should also advise users to disregard any unsolicited communications referencing a Walmart raffle and to report suspicious emails to their security operations center.