99walletcrypto[.]kred

The domain 99walletcrypto.kred is currently active and was registered on February 21, 2026 through TLD Registrar Pty Ltd. It resolves to the IP address 13.57.142.102, which belongs to Amazon.com, Inc. (AS16509) and is hosted in the United States. The authoritative nameserver is ns.peoplebrowsr.com. The site returns an HTTP 308 status code and lacks an SSL certificate, exposing all traffic to clear‑text interception. The page title observed is "Abdullah Jutt - CEO," but no further content has been analyzed. Classification from threat intelligence marks the site as a high‑risk cryptocurrency drainer. It is listed on three security blocklists, has a Gridinsoft trust score of 0/100, and three of ninety‑three VirusTotal scanners flagged it as malicious. Defenders should immediately block connections to this domain and its resolved IP, add the domain to internal deny‑lists, and monitor for any outbound traffic attempting to reach the host. Given the absence of TLS, network‑level TLS inspection can be used to detect the redirect. Continuous watch for new domains using the same nameserver or similar lexical patterns is advised, as the infrastructure suggests a low‑cost, disposable hosting approach typical of crypto‑draining campaigns.