twitterfav.com - phishunt.io

Twitter / X

https://twitterfav.com Access site

Screenshot

Investigate

Domain twitterfav.com1 CT host on apex

urlscan

page.domain

VirusTotal

Whois

See every phishunt record for this domain

IP 104.21.78.121

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://twitterfav.com

urlscan

Wayback

archive.today

Cert Let's Encrypt

crt.sh

Censys

Google CT

Phishunt analysis Beta

28 low suspicionheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+5.1 urlscan.io
+3.7 Brand in domain label
+2.0 Young domain
+1.8 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+0.7 Brand in cert SAN
+0.6 Login text in screenshot
+0.6 Registrar reputation
+0.5 Young certificate
+0.3 Free CA
+0.3 Long domain
+0.2 Suspicious TLD

16 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Site uses the Twitter brand name in its domain and presents login functionality, likely to harvest Twitter credentials under the guise of a social media engagement service. The TLS certificate SAN directly includes the brand name; flagged malicious by urlscan.

Brand in domain labelLogin text in screenshoturlscan.io

AI-generated from stored detector signals - the AI never visited the site. · 2026-09-11 · confidence 82%

Domain & Network

Whois

Registrar Dynadot11 LLC

Network

IP 104.21.78.121

Country