whenareyouhitting[.]vercel[.]app

This domain, whenareyouhitting.vercel.app, is identified as an active brand impersonation phishing site targeting users of the Argent cryptocurrency wallet. The threat type is classified as brand impersonation with a high-risk level, specifically mimicking the Argent wallet interface under the guise of a Telegram Web environment. The domain remains operational as of the latest verification. Analysis indicates the domain was registered through Tucows Domains Inc. and is flagged by 17 out of 95 security vendors on VirusTotal. It resolves to the IP address 64.29.17.195, hosted on Amazon.com, Inc. infrastructure (AS16509) located in the United States. The SSL certificate is issued by Google Trust Services under the WR1 root. The domain creation date is listed as February 21, 2026, which may indicate an attempt to evade detection through future-dated registration. It appears on one security blocklist and is explicitly flagged for phishing by Google Safe Browsing. The page title, 'Telegram Web,' suggests an attempt to deceive users into believing they are interacting with a legitimate messaging platform while harvesting credentials or sensitive wallet information. Current infrastructure analysis reveals the domain is still active and poses an ongoing threat to users of the Argent wallet. Organizations and individuals are advised to block the domain and its associated IP address (64.29.17.195) at the network level. Users should be alerted to verify the authenticity of any communication or interface claiming to represent Argent, particularly those redirecting to Telegram-themed pages. Monitoring for similar domains using Vercel.app subdomains or Telegram-related branding is recommended to preempt further phishing attempts. Immediate reporting to relevant security teams and domain registrars is encouraged to facilitate takedown procedures.