Confirmed scam — delete it
Fake Walmart email pushes a survey scam for a $100 gift card using fake urgency and date inconsistencies to lure clicks.
MalwareTips analyst · message material
credential_theftFake Walmart email pushes a survey scam for a $100 gift card using fake urgency and date inconsistencies to lure clicks.
- Screenshot analysis identifies fake Walmart sun logo, generic phishing design, and prominent suspicious buttons like 'CLAIM REWARD'.
- Inconsistent dates show 'April 21, 2026' with a 6:30 timer remaining yet 'Hurry, offer ends today!' to create artificial pressure.
- Sender uses unrelated random domain fdw.chvdbkyrbxwgp.us masquerading as 'walmart rewards nooreply'.
- Visual red flags include survey scam for gift card and urgency timer with future date.
- Detected Walmart logo in screenshot but no legitimate sender indicators.
- Obvious phishing per screenshot assessment mimicking Walmart rewards.
Do not click any buttons or interact; delete the email immediately. Forward to reportphishing@apwg.org and Walmart's abuse team if possible.
Every scoring adjustment, in dominance order. Shows exactly how we got from 100 to the final trust number.
Why this verdict
skippedThis report was generated before the per-signal breakdown was available. Rescan this address to see the full score log.
Screenshot vision analysis
VISUAL · 100/100Obvious phishing email mimicking Walmart with a fake $100 gift card offer via survey, using artificial urgency and date inconsistencies to pressure clicks. Ignore and delete without interacting.
- Urgency timer with future date
- Inconsistent dates (2026 vs ends today)
- Fake Walmart sun logo
- Survey scam for gift card
- Prominent suspicious button
- Generic phishing design
Paste the sender to unlock identity + infrastructure analysis
This scan analysed the message body only. Adding the sender address, a Gmail Name <a@b.com> line, or full headers unlocks:
- Display-name impersonationSpot mismatched names like "PayPal Support" on a random Gmail.
- SPF · DKIM · DMARCSee whether the sending server is authorised to use that domain.
- Domain age + registrarBrand-new domains are one of the strongest phish signals.
- Breach exposureHow many known data breaches this specific address appears in.
- MX + DNSBL reputationWhether the domain can even receive mail and if it's on any blocklists.
Your previous paste won't be sent — you'll start a fresh scan with both fields.