Phishing domains impersonating X (Twitter). Stay alert: X (Twitter) never asks for your DigiD, PIN or login credentials via SMS or email.
Scammers register domains that look like x.com (with extra words, hyphens or a different extension) and build a fake login page. Victims typically receive an SMS, email or WhatsApp message linking to such a fake domain.
Check for unusual domain spellings, requests for personal data or PIN codes, and unusual payment or login requests. Real X (Twitter) never asks for your credentials or PIN via SMS or email.
Official organisations like X (Twitter) work with hosting providers and the Dutch Fraudehelpdesk to take phishing domains offline. Reporting a domain to Fraudehelpdesk speeds up the process.
We currently have 2 active dossiers in this category. The list updates hourly via URLhaus, OpenPhish and user reports.
FFCheck combines real-time threat feeds (URLhaus, Spamhaus DBL, Google Safe Browsing) with technical analysis of each domain and anonymous user reports.
Yes. Paste the domain into the search bar at the top. We generate a safety dossier instantly and you can share your experience anonymously below.