vip1-ttuex[.]com

The domain vip1-ttuex.com is a generic phishing site designed to deceive users through social media phishing tactics. It does not impersonate a specific brand or use a known drainer kit. As of the latest verification, vip1-ttuex.com has been taken offline, but it previously posed an elevated risk to users by attempting to harvest credentials or personal information through fraudulent means.

Technical indicators confirm the malicious nature of vip1-ttuex.com. The domain was flagged by 1 of 95 VirusTotal security vendors, including Fortinet, and appears on 1 security blocklist (PhishDestroy). It was registered through GMO Internet Group, Inc. d/b/a Onamae.com on February 21, 2026, and resolved to the IP address 104.21.48.1, hosted by Cloudflare, Inc. in the US. The SSL certificate was issued by WE1, and the observed page title was 'Attention Required! | Cloudflare'. The domain used Cloudflare nameservers (demi.ns.cloudflare.com and jerry.ns.cloudflare.com) and had a Gridinsoft trust score of 0/100.

Users who may have interacted with vip1-ttuex.com should take immediate safety steps. If credentials were entered, change passwords for all affected accounts and enable two-factor authentication (2FA) where possible. Monitor accounts for unauthorized activity and report any suspected fraud to financial institutions. To report the phishing domain, submit it to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities. Victims can also file complaints with organizations such as the FBI’s Internet Crime Complaint Center (IC3) or the Anti-Phishing Working Group (APWG).