pay[.]tiktokatcannes[.]com

This domain is flagged as a high-risk generic phishing threat and remains active as of July 12, 2026. The domain was registered on March 26, 2026 through GoDaddy.com, LLC, and its nameservers (ns03.domaincontrol.com, ns04.domaincontrol.com) are consistent with GoDaddy's standard infrastructure. The SSL certificate is issued by GoDaddy's own certificate authority, further aligning with the registrar. The domain resolves to IP address 100.49.0.246, which is hosted on Amazon Web Services EC2 in the US East (us-east-1) region. The page title is 'Online payment @ pay.tiktokatcannes.com', and the site employs Google Pay technology, indicating a payment-themed phishing lure likely targeting social media users. VirusTotal data shows 1 of 94 security vendors flagging this domain, and it appears on one security blocklist. The Gridinsoft trust score is 0/100, reinforcing the high-risk assessment. The threat type is classified as social media phishing, and the domain is currently blocked by PhishDestroy. Defenders should treat this domain as actively hostile, block all traffic to it at the network or DNS level, and monitor for related domains registered through the same registrar or hosted on the same IP range. The exact brand or service being impersonated is not specified in the available intelligence beyond the domain name referencing 'tiktok' and 'cannes', which may imply a tie to social media or event-related platforms, but this has not been confirmed. No further detail on the phishing kit or page content is available, so analysis should focus on the infrastructure indicators provided.