Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/twitter
Generated: Tue, 20 Oct 2026 11:38:03 GMT
Target Website: twitter.com
Overall Trust Score: 96/100 (Trusted)
twitter.com
Trusted
Scanned: Oct 20, 11:38 AMTRUST SCORE
96
CONFIDENT
Low Risk
96/100
TRUST SCORE
CONFIDENT
Low Risk
SAFETY
100/100
100/100
TRANSPARENCY
80/100
80/100
DOMAIN RISK
LowLow Tier
LowRisk
SSL SECURITY
100/100
100/100
PAYMENT RISK
NoNo Risk
NoRisk
VERDICT
Trusted
Trusted
AI Security Summary
96/100 — trusted. Long-established domain (26.7 years old), clean threat reputation, no impersonation patterns. Verdict driven by: redirects to a different domain (x.com); no contact page found — worth extra caution before trusting.
No malware/phishing on feedsGood reputationHTTPS enabled
HTTPS & SSL
SecureSecure
C=US, O=Let's Encrypt, CN=YR1
Threat Status
CleanClean
No blacklists or malware
Domain Age
26.7 years26.7 years
Registered 1/21/2000
Reputation
High TrustHigh Trust
Based on 65+ verified signals
IP & Server
162.159.140.229162.159.140.229
cloudflare envoy
Email Security
ProtectedProtected
SPF, DMARC, MX active
Performance
100 / 100100 / 100
Fast response time
Redirects
1 Hop1 Hop
Redirect chain analyzed
Top Priority RecommendationAction Needed
No contact page found
Reputable sites usually publish a contact page.
Why it matters
Addressing this signal prevents trust downgrades and potential security risks.
View Glossary GuidePositive Signals
- Site responded with 200
- HTTPS is enforced
- Fast response (312ms)
- Served through Cloudflare
- 1 address record(s) resolved
- 8 authoritative nameservers
- Domain registered 27+ years ago
- Owner information disclosed
Warnings
- No contact page found
- Redirects to a different domain (x.com)
Critical Issues
No critical issues found
Domain passes all high-risk checks
- Registrar Name
- CSC Corporate Domains, Inc.
- Creation Date
- January 21, 2000 (26.7 years ago)
- Last Updated
- January 17, 2026
- Registry Expiry Date
- January 21, 2027
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
ICANN Status Badges
client transfer prohibitedserver delete prohibitedserver transfer prohibitedserver update prohibited
Domain registered 27+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via CSC Corporate Domains, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-Options Present
X-Content-Type-Options Present
Referrer-PolicyMissing
Permissions-PolicyMissing
Recommended Missing Headers
missing: Permissions Policy
All Response Headers (28)
HSTS is set
Tells browsers to only use HTTPS for this domain.
+6
Content Security Policy is set
Restricts which scripts and resources the page can load.
+5
X-Frame-Options is set
Prevents clickjacking by disallowing framing.
+3
X-Content-Type-Options is set
Blocks MIME-sniffing browser attacks.
+2
Referrer Policy is set
Controls what referrer information is sent with requests.
+2
Missing Permissions Policy
Restricts access to powerful browser features (camera, mic, etc.).
-2
- IPv4 Addresses (A)
- 162.159.140.229
- IPv6 Addresses (AAAA)
- None
- Mail Servers (MX)
- aspmx.l.google.com (Priority: 1), alt1.aspmx.l.google.com (Priority: 5), alt2.aspmx.l.google.com (Priority: 5), alt3.aspmx.l.google.com (Priority: 10), alt4.aspmx.l.google.com (Priority: 10)
- Authoritative Nameservers (NS)
- a.r06.twtrdns.net, a.u06.twtrdns.net, b.r06.twtrdns.net, b.u06.twtrdns.net, c.r06.twtrdns.net, c.u06.twtrdns.net, d.r06.twtrdns.net, d.u06.twtrdns.net
- TXT Records Found
- 24 TXT verification records
A Records (IPv4)
162.159.140.229
TXT Verification Records
0a8c0fc6-bfa5-4ea7-b09b-87f2989022d6
MS=BEE202D20C326867290BDEFA2DDDF4594B5D6860
adobe-idp-site-verification=a2ff8fc40c434d1d6f02f68b0b1a683e400572ab8c1f2c180c71c3d985b9270a
apple-domain-verification=zd1iHoEO9LILEQIq
atlassian-domain-verification=j6u0o1PTkobCXC84uEF/sWpIPtaZURBVYqKzmTvT8wugLcHT1vvrzzA63iP1qSLN
bj6sbt5xqs9hw9jrfvz7hplrg0l680sb
canva-site-verification=lMnZ3wMh7c1uqZqa-cxZTg
google-site-verification=600dQ0pZYsH2xOFt4hYmf5f5NpjCbWE_qk5Y04dErYM
google-site-verification=F2uUiLUsD6kQlpUVQzxUM3PHa0uPo5GBS84SCG8QwXI
google-site-verification=P9-NRZ0gaRKRGNDOXOjct5XETPtr3P9D-XA8HnlbAy4
google-site-verification=TNhAkfLUeIbzzzSgPNxS5aEkKMf3aUcpPmCK1_kmIvU
google-site-verification=h6dJIv0HXjLOkGAotLAWEzvoi9SxqP4vjpx98vrCvvQ
google-site-verification=q1ghWjGLX9Ba-Gy_B4n_pAgC_mQYzWmQpOD8CMWl_Hw
linear-domain-verification=t5iq7e7nbw5w
loom-site-verification=638c6bc173b9458997f64d305bf42499
miro-verification=6e1ca9ad6d0c2cd2e4186141265f23ed618cfe37
mixpanel-domain-verify=164dda91-31f4-41e8-a816-0f59b38fea30
notion-domain-verification=uKi5TAGxlhWMHG9uHKHkDY3cVc6zraAE1I44bILENlB
slack-domain-verification=9oO8P4Glf4252QJDOg4rHGs6KlSkBuI5ZVmWRO8d
stripe-verification=46F7B88485621DC18923B43D12E90E6CDBCE232F2FEBCF084E6EFA91F6BA707D
traction-guest=6882b04e-4188-4ff9-8bb4-bff5a3d358e6
traction-guest=a4d0248d-fe01-4222-8fcc-33f68323e667
v=spf1 ip4:199.16.156.0/22 ip4:199.59.148.0/22 ip4:8.25.194.0/23 ip4:8.25.196.0/23 ip4:204.92.114.203 ip4:204.92.114.204/31 include:_spf.google.com include:_thirdparty.twitter.com -all
wrike-verification=MjU4MTA5MjoyN2UzNDc1MjU3MDZiZTY4NjBiNzliNDQ2OTUwNWY3NmM5NDgyMTBlYzFkNTcwYTE2YWNmZDdkNTY2ZmE4Yzlh
1 address record(s) resolved
+4
8 authoritative nameservers
+2
- Registrable Domain
- twitter.com
- Registrar Organization
- CSC Corporate Domains, Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- Delegated Authoritative Nameservers
- a.r06.twtrdns.net, a.u06.twtrdns.net, b.r06.twtrdns.net, b.u06.twtrdns.net, c.r06.twtrdns.net, c.u06.twtrdns.net, d.r06.twtrdns.net, d.u06.twtrdns.net
- Registration Lifecycle
- Registered: 2000 → Expires: 2027
Nameservers (NS)
a.r06.twtrdns.neta.u06.twtrdns.netb.r06.twtrdns.netb.u06.twtrdns.netc.r06.twtrdns.netc.u06.twtrdns.netd.r06.twtrdns.netd.u06.twtrdns.net
Domain registered 27+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via CSC Corporate Domains, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
- SPF Record
- v=spf1 ip4:199.16.156.0/22 ip4:199.59.148.0/22 ip4:8.25.194.0/23 ip4:8.25.196.0/23 ip4:204.92.114.203 ip4:204.92.114.204/31 include:_spf.google.com include:_thirdparty.twitter.com -all
- DMARC Policy Mode
- Policy: REJECT
- DMARC Raw Record
- v=DMARC1; p=reject; rua=mailto:d3omt-8484@rua.dmarc.emailanalyst.com; ruf=mailto:d3omt-8484@ruf.dmarc.emailanalyst.com; fo=1
- DKIM Selectors Detected
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (reject)
+6
DKIM configured (google)
+3
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Not checked
- Root Domain Label
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- Official Domain (twitter)
- Typosquatting Risk
- Clean
twitter is the real brand's registered domain
The root label matches the brand exactly — this IS the brand's own domain.
+10
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Detected Technologies by Category
js
Svelte
css
Tailwind CSSBootstrap
analytics
Google Analytics
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- X. It’s what’s happening / X
- Meta Description
- From breaking news and entertainment to sports and politics, get the full story with all the live commentary.
- Document Language
- en
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width,initial-scale=1,maximum-scale=1,user-scalable=0,viewport-fit=cover
- Generator Software
- —
5 technologies detected
Svelte, Tailwind CSS, Bootstrap, Google Analytics, Cloudflare
Mobile viewport configured
+2
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 312 ms
- Payload Body Size
- 40.4 KB
- Compression Status
- Uncompressed
- Cache Directives
- no-cache, no-store, max-age=0
No findings.
AI Content Evaluation
96/100 — trusted. Long-established domain (26.7 years old), clean threat reputation, no impersonation patterns. Verdict driven by: redirects to a different domain (x.com); no contact page found — worth extra caution before trusting.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 438 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
- Primary Web Server
- cloudflare envoy
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 162.159.140.229
- HTTP Status Code
- 200 OK
- Final Landing Destination
- https://x.com/
- Redirect Hop Count
- 1 hop
Redirect Hop Chain
- 1.https://twitter.com/ → https://x.com/
Site responded with 200
Final URL: https://x.com/. Response time 312ms.
+8
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Fast response (312ms)
+6
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
- Certificate Authority (Issuer)
- C=US, O=Let's Encrypt, CN=YR1
- Subject Common Name (CN)
- api.tweetdeck.com
- Validity Period
- 21 days remaining (Expires: 2026-11-10T13:51:42Z)
- Subject Alternative Names (SANs)
- 40 domains protected
- Certificates Logged (CT)
- 100 certs recorded
Subject Alternative Names (Sample)
api.tweetdeck.comblog.tweetdeck.comdownloads.tweetdeck.compro.twitter.compro.x.comtd.twitter.comtd.x.comtdapi.twitter.comtdapi.x.comtdweb.twitter.comtdweb.x.comtweetdeck.comtweetdeck.twitter.comtweetdeck.x.comweb.tweetdeck.comwww.tweetdeck.comartifactory-ci.local.twitter.comartifactory-ci.twitter.bizartifactory.local.twitter.comartifactory.twitter.biz+20 more
Valid SSL / TLS certificate active
Issued by C=US, O=Let's Encrypt, CN=YR1, valid for 21 remaining days.
+10
Key Legal & Transparency Pages
Verified Social Channels
- Published Phone Numbers
- 2231777543, 333903271, 0-4.42 3.584-8 8.005-8, 4.432 4.14-1.364 1.46, 0 1.1.896 2 2 2, 2.209 0-4-1.79-4-4
Privacy policy linked from home page
+6
Terms of service linked from home page
+5
No contact page found
Reputable sites usually publish a contact page.
-4
About page linked from home page
+3
No refund/return policy found
Reputable sites usually publish a refund/return policy.
-3
No cookie policy found
Reputable sites usually publish a cookie policy.
-2
1 social profile(s) linked
twitter
+3
Phone number published
+2
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://x.com/sitemap.xml
- Disallow Rules Count
- 45 rules
View Raw robots.txt
# Google / Bing Search Engine Robots # ================================== # Shared group so Googlebot and Bingbot always get the same rules. User-agent: Googlebot User-agent: Bingbot Allow: /*?s= Allow: /*?t= Allow: /*?ref_src= Allow: /hashtag/*?src= Allow: /search?q=%23 Allow: /i/api/ # Same length as the /*/likes and /*/media rules; RFC 9309 breaks the tie in # favor of Allow, so /i/api/ fetches stay crawlable. Allow: /i/api/* Disallow: /*?lang=en-ss Allow: /*?lang= Disallow: /search/realtime Disallow: /search/users Disallow: /search/*/grid Disallow: /*/analytics Disallow: /*/followers Disallow: /*/following Disallow: /*/verified_followers Disallow: /account/deactivated Disallow: /settings/deactivated # Only `*` and `$` are metacharacters here (RFC 9309); regex classes match # literally. /photo is anchored so /status/*/photo/1 media pages stay open. Disallow: /*/likes Disallow: /*/likes? Disallow: /*/retweets Disallow: /*/retweets? Disallow: /*/media Disallow: /*/media? Disallow: /*/photo$ Disallow: /*/photo? Allow: /*? User-agent: facebookexternalhit Allow: /*?lang= Allow: /*?s= Allow: /*?t= Allow: /*?ref_src= Allow: /hashtag/*?src= Allow: /search?*cashtagRestId= Allow: /i/api/ Allow: /i/api/* Disallow: /search?q= Disallow: /search/realtime Disallow: /search/users Disallow: /search/*/grid Disallow: /*? Disallow: /*/followers Disallow: /*/following Disallow: /*/verified_followers Disallow: /account/deactivated Disallow: /settings/deactivated Disallow: /*/likes Disallow: /*/likes? Disallow: /*/retweets Disallow: /*/retweets? Disallow: /*/media Disallow: /*/media? Disallow: /*/photo$ Disallow: /*/photo? User-Agent: Google-Extended Disallow: * User-Agent: FacebookBot Disallow: * User-agent: Discordbot Disallow: * # Meta AI / product crawlers (product tokens; versions like /1.1 are ignored # under RFC 9309 token matching). User-agent: meta-webindexer Disallow: * User-agent: meta-externalagent Disallow: * User-agent: meta-externalads Disallow: * User-agent: meta-externalfetcher Disallow: * # Every bot that might possibly read and respect this file # ======================================================== User-agent: * Disallow: / # WHAT-4882 - Keep notification-email links (/i/u) out of search results. # Named crawlers stay un-blocked on purpose: they must crawl /i/u to see its # X-Robots-Tag noindex (the robots.txt Noindex directive died in 2019). Disallow: /i/u # Wait 1 second between successive requests. See ONBOARD-2698 for details. Crawl-delay: 1 # Independent of user agent. Links in the sitemap are full URLs using https:// # and need to match the protocol of the sitemap. Sitemap: https://x.com/sitemap.xml
robots.txt published
+2
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
38
This scan
Sources Checked
18
Live security feeds
Scan Duration
3.98s
Ultra-fast
Last Scan
10/20/2026
Live timestamp
Overall Risk
Low Risk