https://mail.etwalmart.com/login

Impersonating Walmart

Intent: Credential collection

• Domain is not operated by Walmart
• Domain name closely resembles Walmart's real domain
• DNS nameservers do not match Walmart's known infrastructure
• TLS certificate has no organization information
• Domain not registered through Walmart's usual registrar
• SPF record does not reference Walmart's infrastructure

Walmart-branded login form with phone number and password fields