xtwitter.sale
Appeared in the .sale zone on Friday, August 28, 2026; by the end of that day the census found active website about e-commerce & retail. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Site is a bulk marketplace selling 'aged/verified' Twitter/X accounts for crypto (USDT/BTC via Cryptomus) with Telegram-only support, using the X logo and 'XTwitter' name it does not own — illicit trade in platform accounts and unauthorised brand use, not a legitimate business or a credential-harvesting phish.
This is a marketplace selling stolen or fraudulently obtained Twitter/X accounts with login credentials, presented under a brand-typosquat domain (xtwitter.sale). While the page uses the Twitter/X brand name and logo, it is not impersonating Twitter as an organization to steal credentials; rather, it is a standalone fraudulent service selling account takeover commodities via cryptocurrency payment and Telegram support—a classic account-trafficking scam without credential harvesting impersonation
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Friday, August 28, 2026
Same data as JSON: /api/zone/domain/xtwitter.sale. This page is not indexed by search engines and does not link to the site it describes.