ttuex[.]info

The domain ttuex.info is a phishing site engaged in brand impersonation, specifically targeting users of the cryptocurrency platform 1inch. This scam operates as a fake exchange, presenting itself under the page title 'TTU Exchange' to deceive victims into believing it is a legitimate trading platform. As of the latest verification, ttuex.info has been taken offline, but it previously posed an elevated risk of credential theft or financial fraud through its fraudulent interface.

Technical indicators confirm the malicious nature of ttuex.info. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and Gridinsoft, which assigned it a trust score of 0 out of 100. It appears on one security blocklist, PhishDestroy, and was registered through GNAME.COM PTE. LTD. on February 21, 2026. The site resolved to the IP address 188.114.96.3, hosted by Cloudflare in the US, and used an SSL certificate issued by WE1. Nameservers for the domain were expire1.gname-dns.com and expire2.gname-dns.com, and it returned an HTTP 503 status at the time of assessment.

Individuals who interacted with ttuex.info should take immediate safety steps to mitigate potential harm. If login credentials were entered, change passwords for all associated accounts, enable two-factor authentication, and monitor for unauthorized transactions or account activity. Since this was a fake exchange rather than a crypto drainer, revoking token approvals is not necessary, but users should remain vigilant for follow-up phishing attempts. Report the domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand (1inch) to assist in broader takedown efforts.