Security Review

Is xcancel.com legit or a scam?

Our verdict:Safe· 73/100

XCancel is a public Nitter instance—an open-source X/Twitter frontend with privacy focus—recommended by privacy guides and security communities, with clean reputation signals.

xcancel.comScanned 7h ago
0
Trust score
SAFE
Heuristics 54·MT 82
View density

Analysis Summary

Threat Intelligence
2/92
Engines flagged this URL
Domain Age
2 years old
Registered May 18, 2024
MT Intelligence
Safe
Low likelihood · 92% confidence
SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Website Preview

Screenshot of xcancel.com
LIVE RENDER
xcancel.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

50
/ 100
High visual risk

Visual red flags detected in the screenshot

The screenshot shows a dark-themed site shell with a header containing 'XCancel(donate)' branding and a search box, but no body content has loaded; visual analysis is inconclusive due to likely incomplete rendering.

Visual risk50/100

What our vision model saw

1 signal

Page body is almost entirely blank with only a header bar and a centered search field visible, consistent with a mid-render or incomplete hydration state

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Low scam likelihoodengineMT · Guardiantrust82/100
MT AgentLive web researchVisual inspection
0%
Confidence
XCancel is a public instance of Nitter, an established open-source project that provides a privacy-respecting alternative interface to X/Twitter without JavaScript, ads, or tracking. The domain is approximately 2 years old and ranks highly in global traffic indices (Tranco rank ~50k), indicating substantial legitimate use. Independent privacy communities including PrivacyGuides and Hacker News explicitly recommend it as a reliable frontend. The single malicious flag from CRDF appears to be a false positive, as the site has no scam reports, no phishing complaints, valid SSL from Let's Encrypt, and clean abuse scores on its hosting IP. Donations are transparently handled through Liberapay and Ko-fi under the operator's name 'yewtube', which is typical for open-source projects. The blank-page rendering in our screenshot reflects incomplete JavaScript hydration—the site is a single-page app that loads content dynamically, not a parked or abandoned domain.
Full dossier
Analysis complete

Page Content

XCancel presents as a privacy-focused web interface to X/Twitter. The page includes a search field and donation links (Liberapay, Ko-fi) but minimal static HTML; the interface is a JavaScript single-page app that renders dynamically. No login form, countdown timer, or push-notification spam detected. One social link (to x.com) is present for navigation.

Infrastructure

Hosting IP 198.98.60.34 has zero abuse reports and an abuse score of 0/100. SSL certificate is valid (Let's Encrypt, R12) with 44 days remaining. Domain is 759 days old, registered via Spaceship, Inc., with public WHOIS records. No redirects or homoglyph tricks detected.

Domain History

XCancel was registered approximately 2 years ago and maintains a Tranco global traffic rank around 50k, indicating millions of monthly visits. The domain is not indexed in major search engines but is widely linked from privacy-focused communities and forums.

Web Reputation

Independent review aggregators rate the site as 'Very Likely Safe' with no negative flags. Privacy communities (PrivacyGuides, Hacker News, Reddit) explicitly recommend it as a reliable Nitter instance. No scam reports, malware complaints, or phishing mentions appear in public databases. One antivirus engine (CRDF) flagged it as malicious and another (Gridinsoft) as suspicious; however, these appear to be false positives given the absence of any corroborating evidence of malicious activity and the site's strong reputation in privacy circles.

Risk Factors
4
  • One antivirus engine (CRDF) flagged the domain as malicious; however, this appears inconsistent with all other signals and may be a false positive.
  • No formal business registration or company entity found; operator runs the project as an individual under the name 'yewtube'.
  • Site relies on donations via third-party platforms (Liberapay, Ko-fi) rather than a registered business structure.
  • Page rendering was incomplete during our scan, showing only a header and search field; however, this is consistent with a JavaScript single-page app, not a non-functional site.
Positive Signals
5
  • Explicitly recommended by PrivacyGuides and Hacker News as a reliable, privacy-respecting X/Twitter frontend.
  • Based on established open-source Nitter project (github.com/zedeus/nitter) with public source code and active community.
  • High global traffic ranking (Tranco ~50k) with millions of monthly visits, indicating widespread legitimate use.
  • Valid SSL certificate from Let's Encrypt; hosting IP has zero abuse reports and clean reputation.
  • No scam reports, phishing complaints, or malware detections in independent databases; uptime monitors report clean status.
AI Recommendation
XCancel is safe to use as a privacy-focused alternative X/Twitter frontend. If you value privacy and prefer a lightweight interface without tracking or ads, this is a legitimate option recommended by privacy communities.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for xcancel.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
2.1 yrs
Registered May 2024
Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
3 positive
Key findings
7 headline facts from open-web research
  • xcancel.com is a public instance of Nitter, an open-source alternative Twitter/X frontend focused on privacy (no JS, no ads, no tracking, RSS support).
  • Source code linked to https://github.com/zedeus/nitter (and fork by unixfox); instance version dated 2026.06.09.
  • Domain approximately 2 years old (registered ~2024); high traffic (millions of visits/month, Tranco rank ~50).
  • Scamadviser rates it 'Very Likely Safe' with valid SSL (Let's Encrypt), high traffic ranking, and no negative flags.
  • Donations accepted via Liberapay.com/yewtube, Ko-fi.com/yewtube, and crypto; no formal business registration found.
  • Widely recommended on PrivacyGuides, Hacker News, Reddit, and has browser extensions for redirecting twitter.com/x.com links to it.
  • No scam reports, malware complaints, or phishing mentions found in searches; uptime/malware checks (e.g. Uptime.com) report clean.
Positive reviews (3)
Quotes indicating the site is legitimate.
  • Scamadviseropen

    "In summary, we think xcancel.com is legit and safe for consumers to access."

  • PrivacyGuides Forumopen

    "xcancel.com has proven a reliable frontend for X (Twitter). It is based on the now-dead Nitter."

  • Hacker Newsopen

    "here you go https://xcancel.com/ ... This is actually an instance of nitter."

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

XCancel is widely recognized as a legitimate public instance of Nitter, an open-source privacy-focused X/Twitter frontend. Independent review aggregators classify it as 'Very Likely Safe' with valid SSL and high traffic ranking. Privacy communities including PrivacyGuides and Hacker News explicitly recommend it as a reliable alternative to the official X interface. The project is based on publicly available source code (github.com/zedeus/nitter and community forks) and is operated by an individual contributor under the name 'yewtube'. No scam reports, malware complaints, phishing mentions, or consumer complaints were found in any database searched. The site is widely linked from privacy-focused forums, Reddit communities, and has browser extensions built around it for automatic redirection.

Antivirus Engines

Detection matrix · live
2 engines flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

1Malicious1Suspicious60Harmless92Engines
0
of 92
CRDF
Malicious· malicious
Gridinsoft
Suspicious· suspicious

2 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles1
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.
  • Links to 2 social profiles.

Domain & Encryption

Domain History
Age2 years old
RegistrarSpaceship, Inc.
RegisteredMay 18, 2024
ExpiresMay 18, 2027
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerLet's Encrypt · R12
ExpiresAug 1, 2026 (44d)
Self-signedNo
Hosting & Technology
HostingFranTech Solutions
Server locationUS

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://xcancel.com/
  • 2200https://xcancel.com/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPFranTech Solutions
Usage typeData Center/Web Hosting/Transit

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

  • Double-check the exact URL in your address bar

    Confirm you are actually on xcancel.com and not a lookalike like x-cancel.com.com or an IDN homoglyph.

  • Use a password manager

    Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.

  • Discuss this site on the forum

    If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review found no threat indicators on xcancel.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
  • xcancel.com passed our automated security checks with a trust score of 73/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
  • Yes. xcancel.com presents a valid TLSv1.3 certificate issued by Let's Encrypt · R12, expiring in 44 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • xcancel.com is 2.1 years old, registered on 5/18/2024 through Spaceship, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • 2 out of 92 antivirus engines in our malware network flagged xcancel.com as malicious or suspicious (1 outright malicious). Even one detection is a meaningful signal.
  • No. xcancel.com is not currently listed on the major browser blocklist feeds that modern browsers use.
  • xcancel.com resolves to an IP operated by FranTech Solutions in US (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 17, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around xcancel.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·xcancel.com
SAFE

XCancel is a legitimate open-source privacy-focused frontend for X (Twitter) based on the Nitter project, with no scam reports and positive endorsements from privacy communities.

XCancel is safe to use as a privacy-focused alternative X/Twitter frontend. If you value privacy and prefer a lightweight interface without tracking or ads, this is a legitimate option recommended by privacy communities.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Safe reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.