Is it really X (Twitter)?
Official X (Twitter) domains, how well they block forged email, lookalike domains we found, and the scams currently using the X (Twitter) name. The first automated check is queued.
Official X (Twitter) domains
x.comtwitter.comReal X (Twitter) emails and websites use these domains or a subdomain of them. Anything else, including addresses that contain the X (Twitter) name, is not X (Twitter).
Paste the sender's email address, the link, or the website from the message.
Measured from public DNS
Can someone fake a X (Twitter) email?
The first email security check for X (Twitter) is queued and will appear here shortly.
Lookalike domain watch
Domains that imitate X (Twitter)
The first lookalike scan for X (Twitter) is queued and will appear here shortly.
Know the pattern
Scams using the X (Twitter) name
Social scams spread through accounts people already trust, which is why a message from a friend is not proof of anything.
Your page will be deleted
Page and account owners get messages claiming a copyright or policy violation, with a link to appeal that steals the login.
Verified badge offer
You are offered a verified badge in exchange for logging in through a link or paying a fee.
A hijacked friend
A message from a friend's real account asks for money or a code. Their account was taken over first.
From people who received them
Reported X (Twitter) scam messages
No reports published for X (Twitter) yet. If you received one, sharing it helps the next person recognise it.
Step by step
How to check a message that claims to be from X (Twitter)
- 1
Look at the actual sender address, not just the name. Tap or hover over the name to reveal it. It must end in @x.com or @twitter.com, or a subdomain of one.
- 2
Do not use links or phone numbers from the message. Type x.com into your browser or open the official X (Twitter) app, and check your account there.
- 3
Slow down when you see urgency, small fees, gift cards, crypto, or requests for codes and passwords. Those are the levers every scam pulls.
- 4
Still unsure? Paste the sender address or link into the checker above.
Questions
X (Twitter) scam FAQ
What email address does X (Twitter) use?
Genuine X (Twitter) email comes from addresses ending in @x.com, @twitter.com, or a subdomain of those (for example something@mail.x.com). An address on any other domain, even one containing "x (twitter)", is not X (Twitter).
Can scammers fake an @x.com email address?
We are running the first check on x.com. Until then, assume a sender address alone proves nothing and verify by visiting x.com yourself.
Are there websites pretending to be X (Twitter)?
Our first lookalike scan for X (Twitter) is queued. Check back shortly.
What should I do if I clicked a link in a fake X (Twitter) message?
Do not enter anything else. If you typed a password, change it at x.com straight away and turn on two-step sign-in. If you entered card or bank details, call your bank using the number on your card. Then report the message using the guide below.
Help stop it
Where to report a fake X (Twitter) message
United Kingdom
- Forward suspicious emails to report@phishing.gov.uk
- Forward scam texts to 7726
United States
- Report to the FTC at reportfraud.ftc.gov
- Forward phishing emails to reportphishing@apwg.org
- Forward scam texts to 7726 (SPAM)
Canada
- Report to the Canadian Anti-Fraud Centre at antifraudcentre-centreantifraude.ca
- Forward scam texts to 7726
Australia
- Report to Scamwatch at scamwatch.gov.au
- Report cybercrime through ReportCyber at cyber.gov.au
India
- Report at cybercrime.gov.in or call the 1930 helpline
Germany
- Forward phishing emails to the Phishing-Radar at phishing@verbraucherzentrale.nrw
Switzerland
- Report phishing websites at antiphishing.ch
Anywhere
- Report phishing websites to Google Safe Browsing at safebrowsing.google.com
- Tell the company through its official website or app
Social Media & Messaging
Check other companies
Orbiplot is not affiliated with X (Twitter). This page is generated automatically from public data: DNS records, domain registration data (RDAP) and the Internet Archive. Lookalike domains are listed because they resemble X (Twitter)'s name, not because we have confirmed any wrongdoing. If you own a domain listed here and believe it is misclassified, contact us through the site and we will review it.