Walmart Food Box Scam Email Leads to Fake Surveys and a Phishing Checkout Page

A new phishing campaign is impersonating Walmart and claiming recipients have been selected to receive a free Walmart Food Box. The scam begins with an email sent from an address made of random characters routed through unrelated domains, including qkiorvfedvoporxbk.org.uk and blockchainafrica.io. The message congratulates the recipient and urges them to “claim reward now,” leading to a chain of fraudulent survey pages and a final phishing checkout form. None of the pages are associated with Walmart.

The email pretends to personalize the message by inserting the recipient’s name and email, but this information is automatically scraped and inserted into mass phishing templates. The goal is to convince users to click without verifying whether the offer is legitimate.

The Scam Email

The message typically includes:

• A claim that the recipient was selected to receive a Walmart Food Box
• Fake account information such as “Customer: Botcrawl Com”
• Urgency language such as “hurry up”

The email contains formatted branding meant to resemble a Walmart reward notice. The sender address and routing domains have no connection to Walmart and indicate that the message is part of a large scale phishing operation.

The Fake Walmart Survey Page

Clicking the email link directs victims to a fraudulent Walmart themed survey. The page displays the Walmart logo, a date, and a series of simple questions designed only to move victims deeper into the scam funnel. The survey claims the user’s feedback is “extremely valuable” and uses countdown timers to increase pressure.

The Fake Walmart Reward Page

After the survey is completed, victims land on a page advertising the Walmart Food Box. The page falsely claims the box is free and that the user must “pay only for shipping.” It uses fabricated scarcity with notices such as “4 in stock” and timers that reset on every visit.

The Phishing Checkout Page

The final redirect leads to a payment page hosted on extraordinarydiscountedoffer.com, a recently registered domain with no connection to Walmart. The page displays a detailed product mockup and requests full personal and financial information, including:

• First and last name
• Email and phone number
• Billing address
• Credit card information

Fake security badges from McAfee, Norton, TRUSTe, and VeriSign are placed at the bottom to make the form appear legitimate. These badges are not real and are copied from unrelated sites.

The Scam Domain

The phishing checkout form is hosted on extraordinarydiscountedoffer.com.

WHOIS data shows that:

• The domain was created on June 24, 2025
• It is registered through NameCheap
• It uses privacy shielding from Withheld for Privacy ehf
• It is configured on NSOne name servers

These details are typical of short lived phishing domains designed to collect credit card details and then disappear. None of the registration information is linked to Walmart or any official partner.

Why This Scam Works

Scammers use Walmart’s recognizable branding and the popularity of low cost reward boxes to increase engagement. The funnel is designed to feel legitimate by mimicking corporate surveys, exclusive offers, and limited stock notices. Once victims complete the survey steps, they are more likely to continue into the checkout page.

Red Flags in This Scam

• Sender domain has no affiliation with Walmart
• Walmart does not offer Food Box reward giveaways via unsolicited email
• Countdown timers and stock numbers reset on every visit
• The checkout domain is newly registered and unrelated to Walmart

What To Do If You Receive This Email

• Do not click any links in the message
• Delete the email immediately

Walmart does not give away free Food Boxes through survey emails. Any message offering one is part of a phishing campaign attempting to steal personal and financial information. For more scam alerts, visit the Botcrawl Scams section.