runwexo.
runwexo.com presents a Walmart-branded reward page that asks visitors to submit email and personal details then complete 4-5 required deals before any payout.
At a glance
Antivirus · registration · identity- 2 engines classified the URL as malicious and 0 as suspicious; 57 returned harmless, 33 returned undetected, and 0 returned no usable result.
- Operator identity: Missing. No independently verifiable operator identity
- The domain was registered Jul 31, 2025 and was 11 months old at scan time.
- Google Safe Browsing returned no listed threat categories for this address at scan time.
- The isolated page observation recorded 0 requests and did not mark the page as malicious.
Intelligence
The site presents itself as an official Walmart reward offer that promises a $750 balance. Visitors are instructed to enter email and basic information, then finish multiple third-party deals before any reward is released. The page carries no verifiable operator identity, no contact channels, and no corporate domain branding.
Evidence Map
One or more reputation sources recorded a concern
No independently verifiable operator identity
Only partial behavior evidence was available
The domain was registered Jul 31, 2025 and was 11 months old at scan time.
- 1Uses Walmart branding to solicit personal information under false reward pretext
- 2Requires completion of 4-5 required deals to claim reward, typical survey scam pattern
- 3Collects email and basic personal information with no legitimate corporate contact details
- 4High visual risk score (95/100) indicating deceptive reward lure
- 5Hosting IP has 40/100 abuse-confidence score from 53 reports
Walmart-branded reward claim page
The captured page title reads "Walmart Reward – Claim Now" and displays a $750 reward balance marked ACTIVE. The visible instructions list four numbered steps: click the button, enter email and basic info, complete 4 to 5 required deals, then receive the reward once verified.
Visitor journey and data collection
After the initial claim button, the page solicits an email address and basic personal information. No domain email, phone number, postal address, or social links appear anywhere on the page. The only call-to-action is a generic "Claim Reward" button.
Observed visual and textual indicators
- Uses Walmart branding to solicit personal information under a false reward pretext
- Requires completion of 4-5 required deals to claim reward, typical survey scam pattern
- Unsolicited reward offer for a high-value gift card
- Lack of legitimate corporate context or official domain branding
- Generic "Claim Reward" call-to-action button typical of phishing campaigns
Technical and registration details
The domain runwexo.com was registered on 31 July 2025 and is 11 months old. Registration privacy protection was not observed. The site presented a valid TLSv1.3 certificate, yet the hosting IP carries an abuse-confidence score of 40/100 from 53 reports. The redirect path contained a single hop with no cross-domain, homoglyph, or internationalized-domain characteristics.
Security vendor signals
Two antivirus engines classified the URL as malicious; Google Safe Browsing returned no listed threat categories at scan time. The isolated page observation recorded zero requests and did not mark the page as malicious.
Website Preview
This page uses the Walmart logo to lure users into a reward-based survey scam, characterized by the requirement to complete 'deals' to claim a prize.
- 1Uses Walmart branding to solicit personal information under the guise of a reward
- 2Instructional list requires completing 'required deals' to receive a reward, a common pattern in survey scams
- 3Unsolicited reward offer for a high-value gift card
- 4Lack of legitimate corporate context or official domain branding
- 5Generic 'Claim Reward' call-to-action button typical of phishing campaigns
Web Research
Threat Detection
Antivirus results, browser warnings, isolated page observations, and the threat pattern identified in this report.
Antivirus engine results
Evidence behind this threat profile
- 1Uses Walmart branding to solicit personal information under false reward pretext
- 2Requires completion of 4-5 required deals to claim reward, typical survey scam pattern
- 3Collects email and basic personal information with no legitimate corporate contact details
- 4High visual risk score (95/100) indicating deceptive reward lure
- 5Hosting IP has 40/100 abuse-confidence score from 53 reports
2 of 22 categories showed signals
This profile separates the site's primary threat from other patterns supported by the saved page evidence, public research, and security findings.
- Page title 'Walmart Reward – Claim Now' with $750 reward balance
- Instructional steps require entering email and completing deals to receive reward
- No contact email, phone, or address found on page
- Visual analysis confirms reward-based survey scam pattern
- Gridinsoft flagged as phishing
- Netcraft flagged as malicious
- Uses Walmart branding to solicit personal information
- Generic 'Claim Reward' CTA typical of phishing campaigns
Technical Details
Identity, domain, infrastructure, and connection facts saved with this scan.
July 21, 2026 at 7:03 AM UTCIdentity
6 facts- Operator
- Missing
- On-domain email
- Not observed
- Other email
- Not observed
- Phone
- Not observed
- Postal address
- Not observed
- Social profiles
- Not observed
Domain
8 facts- Domain age
- 11 months old
- Registered
- Jul 31, 2025
- Registrar
- NameCheap, Inc.
- Expires
- Jul 31, 2026
- WHOIS updated
- Apr 29, 2026
- Registrant
- Unavailable
- Registration country
- Unavailable
- WHOIS privacy
- Not observed
Infrastructure
14 facts- HTTPS
- Valid certificate
- TLS protocol
- TLSv1.3
- Certificate issuer
- Let's Encrypt · YR2
- Certificate subject
- runwexo.com
- Certificate valid from
- Jun 29, 2026
- Certificate valid to
- Sep 27, 2026
- Network address
- 185.199.111.153
- ASN
- AS54113
- Hosting organization
- FASTLY - Fastly, Inc., US
- Country
- US
- Server
- GitHub.com
- Site platform
- Unavailable
- IP reputation
- 40% confidence · 53 reports
- Tor exit node
- No
Connections
13 facts- Scan scope
- Domain
- Destination host
- runwexo.com
- Redirects
- 1
- Cross-domain redirect
- No
- Redirect status codes
- 301 → 200
- Lookalike characters
- Not observed
- Internationalized domain
- No
- Page response
- 200
- Observation coverage
- Complete
- Extracted links
- 0
- Unique IPs contacted
- 0
- Countries contacted
- 1
- Referenced domains
- 3
What to do
Do not enter email or personal information. The page shows no verifiable operator identity and no corporate contact channels.
Stop the offer or task. If you shared a password, change it through the official service and enable two-factor authentication. If you shared identity, banking, or payment details, contact the relevant institution and monitor the affected accounts.
Final Verdict
Why this verdict
The verdict is malicious because the page uses Walmart branding to solicit personal information under a false reward pretext, requires completion of 4-5 deals to claim the reward, and shows no legitimate corporate contact details.
Do not enter email or personal information. The page shows no verifiable operator identity and no corporate contact channels.
Key evidence
- 1Uses Walmart branding to solicit personal information under false reward pretext
- 2Requires completion of 4-5 required deals to claim reward, typical survey scam pattern
- 3Collects email and basic personal information with no legitimate corporate contact details
Safety FAQ
Is runwexo.com safe to use?+
The verdict is malicious because the page uses Walmart branding to solicit personal information under a false reward pretext, requires completion of 4-5 deals to claim the reward, and shows no legitimate corporate contact details.
What should I do about runwexo.com?+
Do not enter email or personal information. The page shows no verifiable operator identity and no corporate contact channels.
How old is runwexo.com?+
runwexo.com is 11 months old and was registered jul 31, 2025.
What if I already interacted with runwexo.com?+
Stop the offer or task. If you shared a password, change it through the official service and enable two-factor authentication. If you shared identity, banking, or payment details, contact the relevant institution and monitor the affected accounts.
When was this report updated?+
This report reflects the scan completed July 21, 2026 at 7:03 AM UTC.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.