web-user-woad[.]vercel[.]app

This domain, web-user-woad.vercel.app, is flagged as a high-risk brand impersonation site targeting TikTok users. Registered on April 11, 2026, through Vercel, it remains active as of July 12, 2026, with a page title explicitly labeled 'Tiktok Task,' suggesting an attempt to mimic TikTok-related services or campaigns. The domain resolves to IP address 216.198.79.67 and uses an SSL certificate issued by Google Trust Services, which does not indicate legitimacy due to the domain's malicious context. Analysis indicates the domain is blocked by at least one security vendor (PhishDestroy) and appears on one security blocklist. A Gridinsoft trust score of 0/100 further supports its classification as malicious. VirusTotal reports 15 of 95 security vendors flagging the domain, though this detection rate should be interpreted as corroborating evidence rather than definitive proof of compromise. The exact nature of the phishing content or payload remains unconfirmed, as the site's specific mechanics have not been analyzed. Defenders should treat this domain as actively malicious and prioritize blocking it at the network and endpoint levels. Given its hosting on Vercel, a platform commonly abused for phishing due to its low-cost and ephemeral nature, monitoring for similar patterns (e.g., 'web-user-*' subdomains) may help identify related threats. No evidence currently links this domain to a known phishing kit or broader campaign, but its persistence and targeting of a high-profile social media brand warrant immediate mitigation.