# pay.tiktokatcannes.com — SUSPICIOUS

> Domain pay.tiktokatcannes.com detected hosting a TikTok prize scam. Reported 0/95 detections on VirusTotal. Check the full report.

## Summary
PhishDestroy identifies pay.tiktokatcannes.com as a recently activated domain hosting a fraudulent TikTok prize scam. This site masquerades as an official TikTok campaign from Cannes, tricking users into believing they have won a cash prize or luxury reward. The attackers leverage TikTok's brand recognition to harvest credentials, payment details, and personal information from unsuspecting visitors. Social engineering tactics, such as urgency and fake prize notifications, are commonly used to coerce victims into entering sensitive data on counterfeit login or payment portals. Users are urged to treat any unsolicited prize claims with extreme caution, especially those involving high-profile platforms like TikTok, as legitimate prize distributions do not require upfront payments or personal information submission.


This domain was flagged during routine monitoring, showing zero detections out of 95 engines on VirusTotal as of the latest scan. The domain was registered on April 24, 2024, through GoDaddy.com, LLC, and resolves to the IP address 100.49.0.246. A GoDaddy-issued SSL certificate (CN=pay.tiktokatcannes.com) suggests an attempt to appear legitimate, as HTTPS is often mistaken for safety by users. The recent creation date and low detection rate indicate this threat is still in its early stages, with potential for rapid expansion if unchecked. Monitoring of this domain is ongoing, but the lack of current detections highlights the importance of proactive threat hunting rather than relying solely on automated detection systems.


If you or someone in your network has visited pay.tiktokatcannes.com, immediately cease all interactions with the site and disconnect from any active sessions. Do not input any credentials, payment details, or personal information, as these may be transmitted to attacker-controlled servers. Check your accounts for suspicious activity, particularly on social media and financial platforms, and consider enabling two-factor authentication where possible. Run a full antivirus scan on all devices that accessed the domain. Report the domain to your IT security team or relevant authorities, such as the Federal Trade Commission (FTC) in the U.S. or local cybercrime units, providing any relevant logs or screenshots. Stay vigilant for follow-up phishing attempts, as scammers often reuse compromised data for further attacks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2024-04-24 22:16:25
- Registrar: GoDaddy.com, LLC
- IP: 100.49.0.246

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9f101ac5-9b1c-4cdd-8dcf-e75e7217d45c
- PhishDestroy: https://phishdestroy.io/domain/pay.tiktokatcannes.com/
- LLM endpoint: https://phishdestroy.io/domain/pay.tiktokatcannes.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/pay.tiktokatcannes.com/
Last updated: 2026-03-26