tiktoklog[.]vercel[.]app

This domain, tiktoklog.vercel.app, is actively engaged in brand impersonation targeting TikTok, a widely used social media platform. The threat type is credential theft through a fraudulent login interface, as evidenced by the page title 'Giriş yap | TikTok,' which translates to 'Log in | TikTok' in Turkish. The domain remains operational as of the latest verification, posing an ongoing risk to users. Analysis indicates the domain was registered on January 28, 2020, through Vercel Inc. and resolves to the IP address 216.198.79.195, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509) in the United States. The SSL certificate is issued by Google Trust Services under the WR1 root. Security vendors have flagged this domain as malicious, with 22 out of 95 VirusTotal engines detecting it as a phishing threat. It appears on one security blocklist, specifically PhishDestroy, and is also flagged by Google Safe Browsing for phishing activity. The current status of tiktoklog.vercel.app is active, and its infrastructure remains accessible. Organizations and users are advised to block the domain and its resolving IP address at the network level. Security teams should monitor for connections to 216.198.79.195 and alert on any attempts to access this domain. End-users should be educated to verify the legitimacy of login pages, particularly those requesting credentials for TikTok or other sensitive platforms. If credentials have been entered on this domain, immediate password resets and multi-factor authentication enforcement are recommended.