walmart[.]survey-code[.]com

The domain walmart.survey-code.com was registered on June 01 2026 through Webcentral Group Ltd and uses Verpex nameservers (ns1‑ns4.verpex.com). DNS resolution points to the IPv4 address 69.72.244.153, which remains active as of the report date. VirusTotal has recorded 12 detections out of 91 scanned security vendors, indicating that a notable minority of scanners flag the domain as malicious. The domain appears on a single public security blocklist and is specifically blocked by the PhishDestroy feed, reinforcing its classification as a phishing‑related resource. The threat type is listed as generic phishing and the risk level is high, with the operational status marked as active.

Analysis of the available indicators suggests that the infrastructure is hosted on a shared hosting provider (Verpex) that is often leveraged by malicious actors for rapid deployment. The presence of multiple nameservers and recent creation date point to a deliberately short‑lived campaign. No SSL certificate details, HTTP response codes, page titles, or additional content metadata are currently published, leaving the surface‑web characteristics of the site unverified. Consequently, the exact content displayed to victims cannot be confirmed, but the existing threat intelligence aligns with a typical credential‑harvesting or information‑stealing scheme targeting users who might be lured by the “survey‑code” sub‑domain.

Defenders should continue to block resolution to 69.72.244.153 at the network perimeter and add walmart.survey-code.com to endpoint and DNS filtering policies. Monitoring for any new detections on additional scanning platforms is advised, as the detection count may increase. Because the domain is newly created, threat‑intel feeds may surface further indicators such as phishing page snapshots or malicious payload hashes; security teams should ingest updates from PhishDestroy and other anti‑phishing feeds.