Url: https://xcheckx.pages.dev/

Phishing targeting X users. It steals credentials and takes over accounts. After taking over, it shares page URLs using that account to lure followers. It deceives users by claiming it can show who has blocked their X account. The stolen credentials are sent to Cloudflare Workers. I'm not fluent in English, so I'm using DeepL. I apologize for any unclear points.