# Phishing sites impersonating Twitter/X PhishDestroy has recorded 23 phishing domains impersonating Twitter/X since 2026-01-26, 2 of them in the last 30 days. The most used registrars are GoDaddy.com and NameCheap; the most common TLDs are .com and .pro. Open Twitter/X only from its official app or a saved bookmark. 23Domains, all time 2Last 30 days 14Online at last check 1Confirmed takedowns ## New domains in the last 90 days Twitter/X phishing domains detected per day: 6 from 2026-07-25 to 2026-10-22; peak 1. ## How to tell a fake Twitter/X site Words most often added to the brand in reported domains: dmca, accesses, suspicious, account, authentiq, noticedirect, privacy, tweetdownloader, admission, dmcaobject. - Type the address yourself or use a bookmark; phishing links for Twitter/X arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Twitter/X does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Twitter/X phishing domains The 23 most recently detected domains impersonating Twitter/X Domain | First detected | Status at last check | Registrar | [elontwitter777.xyz](https://phishdestroy.io/domain/elontwitter777.xyz/) | 2026-10-10 | Online | Global Domain | [koltools.io](https://phishdestroy.io/domain/koltools.io/) | 2026-09-25 | Offline | Immaterialism | [checked-x.com](https://phishdestroy.io/domain/checked-x.com/) | 2026-09-07 | Online | Dynadot | [breezetracker.pro](https://phishdestroy.io/domain/breezetracker.pro/) | 2026-08-10 | Online | Spaceship | [twittxrtracker.com](https://phishdestroy.io/domain/twittxrtracker.com/) | 2026-08-09 | Online | NameCheap | [bloomtracking.com](https://phishdestroy.io/domain/bloomtracking.com/) | 2026-08-04 | Online | REGISTER S.P.A | [privacyxcases-x.com](https://phishdestroy.io/domain/privacyxcases-x.com/) | 2026-07-18 | Offline | NAMECHEAP | [privacyxcase-x.com](https://phishdestroy.io/domain/privacyxcase-x.com/) | 2026-07-18 | Offline | NameCheap | [dmca-appeal-x.com](https://phishdestroy.io/domain/dmca-appeal-x.com/) | 2026-07-17 | Offline | NAMECHEAP | [dmca-ticket-x.com](https://phishdestroy.io/domain/dmca-ticket-x.com/) | 2026-07-16 | Offline | NAMECHEAP | [profileissuesx-x.com](https://phishdestroy.io/domain/profileissuesx-x.com/) | 2026-07-10 | Offline | NameCheap | [contentlab-x.com](https://phishdestroy.io/domain/contentlab-x.com/) | 2026-06-15 | Online | GoDaddy.com | [testimonials-x.com](https://phishdestroy.io/domain/testimonials-x.com/) | 2026-06-15 | Offline | Dynadot | [login-notificaiton-x.com](https://phishdestroy.io/domain/login-notificaiton-x.com/) | 2026-06-03 | Offline | GoDaddy.com | [twitterbanservice.pro](https://phishdestroy.io/domain/twitterbanservice.pro/) | 2026-06-01 | Online | NICENIC | [dmcaobject-x.com](https://phishdestroy.io/domain/dmcaobject-x.com/) | 2026-04-16 | Online | Dynadot | [admission-x.com](https://phishdestroy.io/domain/admission-x.com/) | 2026-04-16 | Online | Dynadot | [tweetdownloader.site](https://phishdestroy.io/domain/tweetdownloader.site/) | 2026-03-21 | Online | GoDaddy.com | [privacy-x.com](https://phishdestroy.io/domain/privacy-x.com/) | 2026-02-26 | Taken down | Nerd Names | [noticedirect-x.com](https://phishdestroy.io/domain/noticedirect-x.com/) | 2026-02-23 | Online | Dynadot | [authentiq-x.com](https://phishdestroy.io/domain/authentiq-x.com/) | 2026-02-23 | Online | GoDaddy.com | [suspicious-account-x.com](https://phishdestroy.io/domain/suspicious-account-x.com/) | 2026-02-13 | Offline | GoDaddy.com | [accesses-x.com](https://phishdestroy.io/domain/accesses-x.com/) | 2026-01-26 | Online | NameCheap | [All 23 Twitter/X reports](https://phishdestroy.io/domain/?brand=Twitter/X) ## Where they are registered and hosted ### Registrars - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)5 - [NameCheap](https://phishdestroy.io/registrar/namecheap/)4 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)4 - [NAMECHEAP](https://phishdestroy.io/registrar/namecheap/)3 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)1 - Nerd Names1 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)1 - REGISTER S.P.A1 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)18 - [.pro](https://phishdestroy.io/tld/pro/)2 - [.site](https://phishdestroy.io/tld/site/)1 - [.io](https://phishdestroy.io/tld/io/)1 - [.xyz](https://phishdestroy.io/tld/xyz/)1 ### Hosting networks - Cloudflare, Inc.9 - Amazon.com, Inc.3 - CLOUDFLARENET - Cloudflare, Inc., US2 - FDCSERVERS - FDCservers.net, US2 - OVH SAS1 - CLOUDFLARENET, US1 - AMAZON-02 - Amazon.com, Inc., US1 - Combell NV1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Twitter/X; share of all PhishDestroy reports: 0.01%. Canonical: https://phishdestroy.io/brand/twitter-x/