ticksxde[.]info

This domain, ticksxde.info, is a confirmed phishing site designed to steal login credentials and potentially payment information from users of the legitimate ticketing platform Eventim. The site presents a fake login or purchase interface under the Eventim brand, tricking visitors into entering sensitive data. Such sites are often used in credential stuffing attacks or sold on dark web markets.

Analysis reveals several technical indicators confirming its malicious intent. VirusTotal reports 0 out of 95 security vendors detect the domain, indicating it has not yet been widely flagged. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar known for hosting low-reputation domains. The IP address 172.67.142.75 is associated with Cloudflare, which provides reverse proxy and DDoS protection, making takedown more complex. The Gridinsoft trust score of 0/100 further validates the high risk. The site is now offline, but its infrastructure remains active.

If you visited ticksxde.info and entered any credentials or payment details, immediately change your passwords for Eventim and any other accounts using the same credentials. Enable two-factor authentication where available. Monitor your bank and credit card statements for unauthorized transactions. Report the incident to Eventim’s security team. Even though the domain is offline, attackers may still attempt to reuse stolen information or host similar domains using the same infrastructure.