X (Twitter)

Social media United Statesx.comRank 163 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
1
1 on phishing hosts
Registered lookalikes
157
14 listed by a source or an address list
Official domains
5
verified from X (Twitter)'s own sites and records

Certificate findings for X (Twitter)

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to X (Twitter)'s name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 3 findings, grouped by hostname

  1. twitter-verification.apcollective.site NL · AS49981 · WorldStream WorldStream B.V.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 16 mo ago
    DetailsHide
    Hostname
    twitter-verification.apcollective.site
    First seen
    2026-10-30 14:57 UTC
    First published
    2026-10-30 15:59 UTC
    DNS
    Resolves · checked 2026-11-04 16:12 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.7.81.149.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 185.7.81.149
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-30 13:56 UTC to 2027-01-28 13:56 UTC
    Logged 2026-10-30 14:54 UTC in Google ParcelYard2027h1, entry 524,169,727
    SHA-256 251d21d0e4c454996086796d4a93e9f79e51755df319963f8cd28e5f241a599f
    Public key SHA-256 ab2579ae1dd9af95450f15d0d324d203ff5b83d1c43e6408246aa606cb655346
    Brand
    X (Twitter)
    Addresses
    185.7.81.149 · Netherlands · AS49981 WorldStream WorldStream B.V.
    Domain
    apcollective.site
    Registered
    2025-07-24 · NameCheap, Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  2. www.twitter.es.adr.com.ua NL · AS60781 · LEASEWEB-NL-AMS-01 LeaseWeb…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 12 y ago
    DetailsHide
    Hostname
    www.twitter.es.adr.com.ua
    First seen
    2026-10-27 11:26 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.79.66.145.
    1. Phishing-host list fetched with the address
    2. Resolved to 5.79.66.145
    3. Latest DNS check
    Certificate
    Logged in Google ParcelYard2027h1, entry 470,470,280
    SHA-256 17f55d6b5194cbd2955a6676e0e945eb932d8947753b67ea0305a86139f5773e
    Brand
    X (Twitter)
    Addresses
    5.79.66.145 · Netherlands · AS60781 LEASEWEB-NL-AMS-01 LeaseWeb Netherlands B.V.
    Domain
    adr.com.ua
    Registered
    2015-02-14 · Ukrainian internet names Center LLC
    MX
    Receives mail at mail.zzz.com.ua
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:30 UTC

    Suggest a correction

  3. twitter.es.adr.com.ua NL · AS60781 · LEASEWEB-NL-AMS-01 LeaseWeb…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 12 y ago
    DetailsHide
    Hostname
    twitter.es.adr.com.ua
    First seen
    2026-10-27 11:26 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.79.66.145.
    1. Phishing-host list fetched with the address
    2. Resolved to 5.79.66.145
    3. Latest DNS check
    Certificate
    Logged in Google ParcelYard2027h1, entry 470,470,280
    SHA-256 17f55d6b5194cbd2955a6676e0e945eb932d8947753b67ea0305a86139f5773e
    Brand
    X (Twitter)
    Addresses
    5.79.66.145 · Netherlands · AS60781 LEASEWEB-NL-AMS-01 LeaseWeb Netherlands B.V.
    Domain
    adr.com.ua
    Registered
    2015-02-14 · Ukrainian internet names Center LLC
    MX
    Receives mail at mail.zzz.com.ua
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:30 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches X (Twitter) when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Social media

All brands →