tss71[.]top

This domain, tss71.top, is flagged for brand_impersonation, specifically targeting argent, a cryptocurrency wallet service. Analysis indicates the site mimics legitimate argent interfaces to deceive users into disclosing credentials or transferring assets. The page title, "WhatsApp," suggests an attempt to mislead users into believing the domain is associated with a trusted communication platform, further obscuring its malicious intent.

Technical indicators reveal the domain was registered on August 03, 2025, through Gname.com Pte. Ltd., and resolves to the IP address 43.160.249.32, hosted on AS132203 in Singapore. VirusTotal reports 17 out of 95 security vendors detecting the domain as malicious, while it appears on 2 security blocklists. The domain lacks an SSL certificate, increasing the likelihood of interception or manipulation of transmitted data. No Google Safe Browsing (GSB) status is recorded, indicating limited visibility in mainstream threat intelligence feeds.

As of the latest assessment, tss71.top has been taken offline, likely due to enforcement actions or infrastructure takedowns. The domain is blocked by PhishDestroy and PhishingDB, reducing immediate exposure. However, the elevated risk level persists due to the domain's recent creation, lack of encryption, and association with a known brand impersonation campaign. Organizations are advised to monitor for residual DNS resolution attempts and update blocklists to prevent potential re-emergence or similar threats from the same registrar or IP range.