securetickethub[.]space

Analysis of securetickethub.space as of July 24 2026 indicates that the domain was registered on February 21 2026 and is currently hosted by Namecheap, Inc. (AS22612) with the A‑record pointing to 198.54.126.112, an IP address geolocated to the United States. The TLS certificate presented is issued by Sectigo RSA Domain Validation Secure Server CA, which is a standard domain‑validated certificate and does not provide any indication of malicious intent beyond the fact that the domain can serve HTTPS traffic. The domain was submitted to VirusTotal and examined by 93 AV and URL scanning engines; none of the engines reported a detection at the time of the scan. The same domain appears on two external phishing blocklists, PhishDestroy and ScamSniffer, both of which have classified it as a credential‑phishing site.

The blocklist entries, combined with the declared scam type of “Crypto Scam,” suggest that the domain is being used to harvest login credentials or private keys related to cryptocurrency services, although the exact payload or victim‑targeted brand has not been observed. The site is presently taken offline, which limits immediate exposure but does not guarantee that the infrastructure will not be re‑activated. No Safe Browsing, Open Threat Exchange, or additional reputation services have published data on this domain, and no page title or content snapshots have been captured, leaving the visual or functional characteristics of the site unknown. Consequently, the primary observable indicators are the registration date, hosting details, SSL certificate, blocklist listings, and the VirusTotal scan result.

Defenders should add the domain and its resolving IP address to network‑level deny lists, monitor for any future DNS resolution to 198.54.126.112, and continue to track updates from PhishDestroy and ScamSniffer.