walmartfundholdings[.]com

walmartfundholdings.com is currently classified as a generic phishing site with a high risk rating. The domain resolves to the IPv4 address 45.87.42.74 and is hosted on infrastructure that uses the shared name servers shared1.qloudhost.com and shared2.qloudhost.com. Registration data show the domain was created on 9 October 2022 through NameSilo, LLC and remains active as of the report date 27 July 2026. The domain is listed on one public security blocklist and has been explicitly blocked by the PhishDestroy service.

VirusTotal analysis shows that three of ninety‑one scanning engines flagged the domain as malicious, reinforcing the suspicion of phishing activity. The IP address 45.87.42.74 does not resolve to a well‑known cloud provider and appears to be allocated to the hosting service associated with the shared Qloudhost name servers, suggesting the operator may be leveraging inexpensive shared hosting to serve malicious content. No additional public intelligence such as SSL certificate details, HTTP response codes, or page title information is available in the current feed, leaving the exact content and attack vector unconfirmed. The limited detection footprint—three detections on VirusTotal and a single blocklist entry—indicates the campaign may be in an early stage or employing low‑volume distribution, but the high‑risk classification warrants proactive mitigation.

Defenders should add 45.87.42.74 and walmartfundholdings.com to network‑level deny lists, enforce URL filtering, and monitor for any credential‑submission attempts that reference the domain. Because the domain is hosted on shared Qloudhost name servers, related subdomains may share the same infrastructure, suggesting a broader campaign footprint. Inspect outbound DNS queries for shared1.qloudhost.com or shared2.qloudhost.com as potential indicators of compromise, and log TLS handshake attempts to the domain to provide early warning of attempted connections.