# Phishing sites impersonating X.com PhishDestroy has recorded 1,559 phishing domains impersonating X.com since 2025-02-04, 10 of them in the last 30 days. The most used registrars are Gname.com and NiceNIC; the most common TLDs are .com and .cc. The official X.com domain is x.com: any other site asking for your login or wallet is not X.com. 1,559Domains, all time 10Last 30 days 248Online at last check 339Confirmed takedowns ## New domains in the last 90 days X.com phishing domains detected per day: 122 from 2026-07-25 to 2026-10-22; peak 40. ## How to tell a fake X.com site Official domain: x.com. Words most often added to the brand in reported domains: mobile, att, verizon, beefy, play, airsdropalert, hubs, asterdex, wallet, darb. - Type the address yourself or use a bookmark; phishing links for X.com arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - X.com does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest X.com phishing domains The 50 most recently detected domains impersonating X.com Domain | First detected | Status at last check | Registrar | [aurvenix.com](https://phishdestroy.io/domain/aurvenix.com/) | 2026-10-22 | Online | Dynadot | [zuosex.com](https://phishdestroy.io/domain/zuosex.com/) | 2026-10-21 | Online | PublicDomainRegistry.com | [ai-bot-iplex.com](https://phishdestroy.io/domain/ai-bot-iplex.com/) | 2026-10-20 | Online | Internet Domain Service BS | [grid-okx.com.cn](https://phishdestroy.io/domain/grid-okx.com.cn/) | 2026-10-20 | Online | Dynadot | [sollexx.com](https://phishdestroy.io/domain/sollexx.com/) | 2026-10-19 | Online | Global Domain | [wuldex.com](https://phishdestroy.io/domain/wuldex.com/) | 2026-10-19 | Offline | NICENIC | [rupdex.com](https://phishdestroy.io/domain/rupdex.com/) | 2026-10-19 | Online | NICENIC | [weumax.com](https://phishdestroy.io/domain/weumax.com/) | 2026-10-17 | Online | PublicDomainRegistry.com | [formlyx.net](https://phishdestroy.io/domain/formlyx.net/) | 2026-10-17 | Online | Onamae.com | [zeazux.com](https://phishdestroy.io/domain/zeazux.com/) | 2026-10-10 | Online | Trustname.com | [mercado-x.com](https://phishdestroy.io/domain/mercado-x.com/) | 2026-09-20 | Online | Spaceship | [zapas-fundrelix.com](https://phishdestroy.io/domain/zapas-fundrelix.com/) | 2026-09-19 | Offline | NETIM | [fortnovax.com](https://phishdestroy.io/domain/fortnovax.com/) | 2026-09-19 | Online | PublicDomainRegistry.com | [frameprokapidex.com](https://phishdestroy.io/domain/frameprokapidex.com/) | 2026-09-09 | Online | Dynadot | [dsdss-x.com](https://phishdestroy.io/domain/dsdss-x.com/) | 2026-09-08 | Offline | NICENIC | [direct-ayuda-atencion-client-bb73786va.fotoschneble.com](https://phishdestroy.io/domain/direct-ayuda-atencion-client-bb73786va.fotoschneble.com/) | 2026-09-07 | Online | InterNetX | [noupox.com](https://phishdestroy.io/domain/noupox.com/) | 2026-09-05 | Offline | Trustname.com | [ceacax.com](https://phishdestroy.io/domain/ceacax.com/) | 2026-09-05 | Offline | Trustname.com | [doakux.com](https://phishdestroy.io/domain/doakux.com/) | 2026-09-05 | Offline | Trustname.com | [sawadex.com](https://phishdestroy.io/domain/sawadex.com/) | 2026-09-05 | Offline | Trustname.com | [menawex.com](https://phishdestroy.io/domain/menawex.com/) | 2026-09-05 | Online | Trustname.com | [mellehdwx.com](https://phishdestroy.io/domain/mellehdwx.com/) | 2026-09-05 | Online | Trustname.com | [waowax.com](https://phishdestroy.io/domain/waowax.com/) | 2026-09-05 | Offline | Trustname.com | [puogax.com](https://phishdestroy.io/domain/puogax.com/) | 2026-09-05 | Offline | Trustname.com | [veminex.com](https://phishdestroy.io/domain/veminex.com/) | 2026-09-05 | Online | Trustname.com | [penetex.com](https://phishdestroy.io/domain/penetex.com/) | 2026-09-05 | Offline | Trustname.com | [derewex.com](https://phishdestroy.io/domain/derewex.com/) | 2026-09-05 | Online | Trustname.com | [kupidex.com](https://phishdestroy.io/domain/kupidex.com/) | 2026-09-05 | Online | Trustname.com | [netorex.com](https://phishdestroy.io/domain/netorex.com/) | 2026-09-05 | Offline | Trustname.com | [krunox.com](https://phishdestroy.io/domain/krunox.com/) | 2026-09-03 | Online | Trustname.com | [vegastars-casino-au.co](https://phishdestroy.io/domain/vegastars-casino-au.co/) | 2026-08-31 | Online | NAMECHEAP | [booking.jctzzx.com](https://phishdestroy.io/domain/booking.jctzzx.com/) | 2026-08-28 | Online | Gname.com | [chemcervice.biz](https://phishdestroy.io/domain/chemcervice.biz/) | 2026-08-24 | Online | NameSilo | [meorux.com](https://phishdestroy.io/domain/meorux.com/) | 2026-08-24 | Offline | Trustname.com | [zaegox.com](https://phishdestroy.io/domain/zaegox.com/) | 2026-08-22 | Online | Trustname.com | [potrushx.com](https://phishdestroy.io/domain/potrushx.com/) | 2026-08-22 | Online | Dynadot | [zougox.com](https://phishdestroy.io/domain/zougox.com/) | 2026-08-20 | Online | Trustname.com | [beobex.com](https://phishdestroy.io/domain/beobex.com/) | 2026-08-18 | Online | Trustname.com | [stockprofitmax.com](https://phishdestroy.io/domain/stockprofitmax.com/) | 2026-08-10 | Offline | OwnRegistrar | [xlt.fhn-okcx.com.cn](https://phishdestroy.io/domain/xlt.fhn-okcx.com.cn/) | 2026-08-09 | Offline | 北京新网数码信息技术有限公司 | [beodux.com](https://phishdestroy.io/domain/beodux.com/) | 2026-08-07 | Offline | Trustname.com | [haohux.com](https://phishdestroy.io/domain/haohux.com/) | 2026-08-07 | Offline | Trustname.com | [wouzex.com](https://phishdestroy.io/domain/wouzex.com/) | 2026-08-07 | Offline | Trustname.com | [naerux.com](https://phishdestroy.io/domain/naerux.com/) | 2026-08-07 | Offline | Trustname.com | [meofux.com](https://phishdestroy.io/domain/meofux.com/) | 2026-08-07 | Offline | Trustname.com | [noepox.com](https://phishdestroy.io/domain/noepox.com/) | 2026-08-07 | Offline | Trustname.com | [vip.vuahox.com](https://phishdestroy.io/domain/vip.vuahox.com/) | 2026-08-07 | Offline | Trustname.com | [play.zeopox.com](https://phishdestroy.io/domain/play.zeopox.com/) | 2026-08-07 | Online | Trustname.com | [play.tuabax.com](https://phishdestroy.io/domain/play.tuabax.com/) | 2026-08-07 | Offline | Trustname.com | [app.duarax.com](https://phishdestroy.io/domain/app.duarax.com/) | 2026-08-07 | Offline | Trustname.com | [All 1,559 X.com reports](https://phishdestroy.io/domain/?brand=X.com) ## Where they are registered and hosted ### Registrars - [Gname.com](https://phishdestroy.io/registrar/name-com/)613 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)295 - [Trustname.com](https://phishdestroy.io/registrar/trustname/)113 - [Dominet (HK)](https://phishdestroy.io/registrar/dominet/)96 - [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)42 - [Hello Internet](https://phishdestroy.io/registrar/hello-internet/)40 - [MAT BAO](https://phishdestroy.io/registrar/mat-bao/)31 - [NameSilo](https://phishdestroy.io/registrar/namesilo/)27 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)700 - [.cc](https://phishdestroy.io/tld/cc/)541 - [.icu](https://phishdestroy.io/tld/icu/)154 - [.top](https://phishdestroy.io/tld/top/)58 - [.sbs](https://phishdestroy.io/tld/sbs/)13 - [.click](https://phishdestroy.io/tld/click/)11 - [.help](https://phishdestroy.io/tld/help/)10 - [.pro](https://phishdestroy.io/tld/pro/)10 ### Hosting networks - CLOUDFLARENET, US750 - CLOUDFLARENET - Cloudflare, Inc., US506 - Cloudflare, Inc.154 - ALIBABA-CN-NET Alibaba US Technology Co., Ltd., 35 - BL Networks15 - BLNWX, US9 - AS-COLOCROSSING, US7 - Alibaba (US) Technology Co., Ltd.6 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is X.com; share of all PhishDestroy reports: 0.69%. Canonical: https://phishdestroy.io/brand/x-com/