Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

grok.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of grok.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans

DNS Records

A
104.18.28.234, 104.18.29.234
AAAA
2606:4700::6812:1cea, 2606:4700::6812:1dea
MX
1 smtp.google.com
NS
cartman.ns.cloudflare.com, robin.ns.cloudflare.com
TXT
google-gws-recovery-domain-verification=68908035, google-site-verification=LUrbvedWB08Lr6Eo7bSkjmxhFbMA73AEPUICgtIay4o, google-site-verification=N5d00H9pSs2bM_8iBn_HE0dphOgKgEM482P9kFDw7vA, google-site-verification=dCnWUzaCYYMvk2nroNDkzoOBvFbIxvv-9oXpJJwu7JE, google-site-verification=xk73X0o9k-eoZFSzC1ZYHstsPe6vzhNjdduqD_c48f4, tiktok-developers-site-verification=t1AQw6I3nx1EagxdItHwZrz3wMgS5sCZ
CNAME
—
CAA
0 iodef "mailto:caa-reports@x.ai", 0 issue "comodoca.com", 0 issue "digicert.com; cansignhttpexchanges=yes", 0 issue "letsencrypt.org", 0 issue "pki.goog; cansignhttpexchanges=yes", 0 issue "ssl.com", 0 issuewild "comodoca.com", 0 issuewild "digicert.com; cansignhttpexchanges=yes"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
assets.grok.com
104.18.29.234 104.18.28.234 2606:4700::6812:1cea 2606:4700::6812:1dea
2026-05-26 20:28:03.075
grok.com
104.18.29.234 2606:4700::6812:1cea 2606:4700::6812:1dea 104.18.28.234
2026-07-25 03:56:35.795
www.grok.com
104.18.29.234 2606:4700::6812:1dea 104.18.28.234 2606:4700::6812:1cea
2026-06-23 13:57:30.766
asia-south1-livekit.grok.com
34.13.75.26
2026-05-26 17:33:41.148
livekit-enterprise.grok.com
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

100.27.71.98:443 cb166a2dda40…
Subject: NrocServerProxy
Issuer: NrocProxy
SANs: *.1min.ai, *.chatbotapp.ai, *.oaiusercontent.com, *.sharepoint.com, 1min.ai, account.topazlabs.com, account.voicemod.net, af.articleforge.com, ai-writer.com, ai.egain.cloud, ai.invideo.io, aichatapp.ai, aihumanize.io, ailessonplan.com, aipoemgenerator.org, aiwritingpal.com, allenai.org, api.anthropic.com, api.business.githubcopilot.com, api2.cursor.sh, app-eu1.hubspot.com, app-na1.hubspotdocuments.com, app.attio.com, app.beehiiv.com, app.boords.com, app.botpress.cloud, app.chat360.io, app.chatbot.com, app.chatling.ai, app.copilotly.com, app.copy.ai, app.fastbots.ai, app.fireflies.ai, app.fyxer.com, app.glean.com, app.gokite.ai, app.grammarly.com, app.heygen.com, app.hubspot.com, app.instantly.ai, app.iokoo.co, app.jasper.ai, app.jinnify.ai, app.klingai.com, app.koah.ai, app.leonardo.ai, app.manychat.com, app.napkin.ai, app.neuroflash.com, app.otterly.ai, app.quickchat.ai, app.raffle.ai, app.read.ai, app.snoooz.ai, app.speechify.com, app.synthesia.io, app.taplio.com, app.transpond.io, app.uizard.io, app.wonderchat.io, app.wordplay.ai, app.wordtune.com, app.writecream.com, app.writeme.ai, app.writer.com, app.writerx.co, app.writesonic.com, app.zomani.ai, archie-app.8base.com, archie.8base.com, arena.ai, articlefiesta.com, artlist.io, askaichat.app, async.com, attio.com, bearly.ai, beyondwords.io, bolt.new, boords.com, botpress.com, bottalk.io, brainly.com, bubble.io, build.fillout.com, character.ai, chat.aichatapp.ai, chat.chatbot.app, chat.chaton.ai, chat.deepseek.com, chat.mistral.ai, chat.qwen.ai, chat.webllm.ai, chatbot.app, chatbotapp.ai, chatgpt.com, chatjimmy.ai, chatling.ai, chaton.ai, chatty.net, chatx.ai, claude.ai, clawbot.ai, clip.opus.pro, cloud.yellow.ai, coda.grammarly.com, codepal.ai, console.groq.com, copilot.cloud.microsoft, copilot.microsoft.com, copymonkey.ai, creator.voiceflow.com, dashboard.browse.ai, dashboard.gptforwork.com, dashboard.mintlify.com, dashboard.scale.com, dashboard.searchatlas.com, decisioninsights.ai, deevid.ai, deliciousai.com, designer.microsoft.com, docs.gokite.ai, docsbot.ai, dream-machine.lumalabs.ai, duck.ai, durable.com, edgeservices.bing.com, eightfold.ai, elevenlabs.io, eu.smith.langchain.com, eu1-app.outplayhq.com, fastbots.ai, fellow.ai, files.oaiusercontent.com, filmora.wondershare.com, fireflies.ai, firefly.adobe.com, forethought.ai, framer.com, gamma.app, gemini.google.com, gencraft.com, genny.lovo.ai, gliacloud.com, go.anyword.com, go.socrates.im, gokite.ai, gptexcel.uk, gptforwork.com, graph.microsoft.com, grok.com, grokipedia.com, groq.com, heygpt.chat, hpanel.hostinger.com, hub.yarnit.app, huggingface.co, imglarger.com, imgupscaler.com, instantly.ai, invideo.io, ivy.ai, jules.google.com, julius.ai, justdone.com, kaiber.ai, labs.google, leonardo.ai, lovable.dev, lovo.ai, lumalabs.ai, lumo.proton.me, m365.cloud.microsoft, manychat.com, meetami.ai, meetbetty.ai, mermaid.ai, metadata.io, mindtrip.ai, monica.im, my.writefull.com, nexverse.ai, notebooklm.google, notebooklm.google.com, notegpt.io, numerous.ai, ollama.com, openart.ai, openclaw.ai, openrouter.ai, otter.ai, otterly.ai, outlook.office.com, outplay.ai, panel.ai-writer.com, panel.tiledesk.com, picsart.com, platform.claude.com, platform.metadata.io, platform.thrads.ai, play.aidungeon.com, playground.allenai.org, push.clients6.google.com, quickchat.ai, quillbot.com, quiq.com, quizlet.com, raffle.ai, readalong.ai, replit.com, sales.meetami.ai, scale.com, scite.ai, searchatlas.com, sharepoint.com, shopcircle.co, sider.ai, slidebazaar.com, smilee.io, smith.langchain.com, smodin.io, snoooz.ai, socrates.im, solvely.ai, sourcegraph.com, sparkbase.ai, speechify.com, stablediffusionweb.com, studio.ai21.com, studio.wellsaidlabs.com, substrate.office.com, suno.ai, suno.com, sync.beatoven.ai, tactiq.io, taplio.com, tiledesk.com, toolkit.artlist.io, transpond.io, uizard.io, undetectable.ai, use.ai, vsco.co, warmer.ai, web.descript.com, webllm.mlc.ai, windsurf.com, wonderchat.io, wordplay.ai, workflos.ai, woxo.tech, writeme.ai, writer.com, writersbrew.app, writerx.co, writesonic.com, writier.io, ws.chatgpt.com, ws.readspeaker.com, www.3daistudio.com, www.acrolinx.com, www.admaster.cc, www.adventuregen.ai, www.ai21.com, www.aiisajoke.com, www.ailessonplan.com, www.aipoemgenerator.org, www.aiwritingpal.com, www.anyword.com, www.articleforge.com, www.ashbyhq.com, www.baidu.com, www.bearly.ai, www.beatoven.ai, www.beautiful.ai, www.beehiiv.com, www.beforesunset.ai, www.bettersynonyms.com, www.bingapis.com, www.bridged.media, www.browse.ai, www.cadent.com, www.canva.com, www.capcut.com, www.chat360.io, www.chatai.com, www.chatbot.com, www.chegg.com, www.cm.com, www.coframe.com, www.coloringbook.ai, www.commoninja.com, www.copilotly.com, www.copy.ai, www.coursehero.com, www.deepl.com, www.descript.com, www.digitalgenius.com, www.dola.com, www.doubao.com, www.egain.com, www.fillout.com, www.fotor.com, www.framer.com, www.freeconvert.com, www.freepik.com, www.fyxer.com, www.genspark.ai, www.getmerlin.in, www.getvera.ai, www.gokite.ai, www.grammarly.com, www.granola.ai, www.hostinger.com, www.humanizeai.pro, www.imglarger.com, www.jasper.ai, www.kaiber.ai, www.kimi.com, www.klaviyo.com, www.koahlabs.com, www.krikey.ai, www.labs.google, www.langchain.com, www.learnwise.ai, www.maxai.co, www.mermaidchart.com, www.midjourney.com, www.mintlify.com, www.monica.im, www.moonshot.ai, www.moonshot.cn, www.nexverse.ai, www.notion.so, www.octaneai.com, www.octocom.ai, www.ollama.com, www.opus.pro, www.otterly.ai, www.outrank.so, www.paradox.ai, www.pisano.com, www.pixa.com, www.quinta.im, www.rabbitholes.ai, www.read.ai, www.readspeaker.com, www.roomgpt.io, www.semrush.com, www.sharpennotes.com, www.shopbox.ai, www.smartling.com, www.suno.ai, www.synthesia.io, www.thrad.ai, www.tidio.com, www.topazlabs.com, www.veed.io, www.voiceflow.com, www.voicemod.net, www.vsco.co, www.wellsaid.io, www.wordtune.com, www.workmagic.io, www.writecream.com, www.writefull.com, www.yarnit.app, www.yeschat.ai, www.zeg.ai, www.zerogpt.com, www.zoovu.com, x.writefull.com, yellow.ai, zevbot.com, zomani.ai, zoovu.com
13.126.75.34:443 ce2c308efce1…
Subject: fitgrok.com
Issuer: YE2
SANs: *.fitgrok.com, fitgrok.com
168.144.103.36:443 404c8e5808b9…
Subject: data.techuniongrok.com
Issuer: E8
SANs: data.techuniongrok.com
121.78.190.61:443 4624cd76b868…
Subject: www.kyungrok.com
Issuer: GoGetSSL RSA DV CA
SANs: kyungrok.com, m.kyungrok.com, www.kyungrok.com
35.213.236.143:443 718accda4716…
Subject: plotter.shopgrok.com
Issuer: E8
SANs: plotter.shopgrok.com
35.213.242.40:443 e570be7ebf72…
Subject: productmatch.shopgrok.com
Issuer: R13
SANs: productmatch.shopgrok.com
43.204.177.231:443 1f5eb78bf797…
Subject: api.algrok.com
Issuer: E7
SANs: api.algrok.com
34.13.75.26:443 4f6d1192324b…
Subject: asia-south1-livekit.grok.com
Issuer: WR3
SANs: asia-south1-livekit.grok.com
121.78.190.61:443 4624cd76b868…
Subject: www.kyungrok.com
Issuer: GoGetSSL RSA DV CA
SANs: kyungrok.com, m.kyungrok.com, www.kyungrok.com
64.225.73.175:443 fdc7eb6ce068…
Subject: outcropsgrok.com
Issuer: R10
SANs: outcropsgrok.com

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

43.134.1.9:443 href · ×5
106.14.16.106:443 href · ×4
192.236.143.217:443 href · ×4
182.61.36.42:443 href · ×4
182.92.221.242:80 href · ×3
39.106.87.214:80 href · ×3
47.79.226.18:443 href · ×3
89.110.105.152:80 href · ×2
1.116.140.187:443 href · ×2
154.0.163.133:443 href · ×2
123.57.144.128:443 href · ×2
43.156.45.181:80 href · ×2
43.249.192.204:443 href · ×2
77.42.126.89:80 href · ×2
8.152.192.115:80 href · ×2
69.163.143.61:443 href · ×2
52.31.207.43:443 href · ×2
167.71.170.226:443 href · ×1
20.191.87.189:443 href · ×1
39.99.148.125:80 href · ×1
59.110.214.108:80 href · ×1
199.180.114.27:443 href · ×1
121.40.88.193:443 href · ×1
8.219.86.227:443 href · ×1
91.99.194.18:443 href · ×1
37.123.193.59:80 href · ×1
47.237.15.112:80 href · ×1
47.93.42.201:443 href · ×1
38.244.51.61:443 href · ×1
64.110.70.224:80 href · ×1
121.41.93.19:443 href · ×1
109.94.170.9:443 href · ×1
34.8.118.48:443 href · ×1
104.249.10.72:80 href · ×1
38.190.210.123:443 href · ×1
217.142.146.146:443 href · ×1
39.96.189.189:80 href · ×1
45.83.241.21:443 href · ×1
139.224.230.114:443 href · ×1
96.244.222.115:443 href · ×1
139.59.200.41:443 href · ×1
91.98.117.32:80 href · ×1
47.253.241.20:443 href · ×1
47.94.147.227:80 href · ×1
122.51.92.94:80 href · ×1
49.234.182.248:443 href · ×1
170.106.137.207:443 href · ×1
112.185.234.73:80 href · ×1
8.217.6.27:80 href · ×1
39.105.186.182:80 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

1ee7e50c9de81a39… sectigo · elephant2026h1
Subject: grok.com
Issuer: WE1
SANs: grok.com, typeahead.grok.com
Valid: 2026-01-21 19:42:30 → 2026-04-21 20:42:28
24afcee6a62a5be8… sectigo · elephant2026h1
Subject: grok.com
Issuer: E8
SANs: *.grok.com, grok.com
Valid: 2026-01-16 15:57:27 → 2026-04-16 15:57:26
9266c19907741a9a… sectigo · elephant2026h1
Subject: grok.com
Issuer: R12
SANs: *.grok.com, grok.com
Valid: 2026-01-16 15:57:20 → 2026-04-16 15:57:19
c328cb498f18ab0d… sectigo · elephant2026h1
Subject: grok.com
Issuer: R12
SANs: *.grok.com, grok.com
Valid: 2026-01-16 15:57:20 → 2026-04-16 15:57:19
bce7ce556846f118… sectigo · elephant2026h1
Subject: grok.com
Issuer: WE1
SANs: grok.com, *.grok.com
Valid: 2026-01-11 06:42:23 → 2026-04-11 07:42:15
ee696544a2ecd4cd… sectigo · elephant2026h1
Subject: grok.com
Issuer: WE1
SANs: grok.com, ssff.grok.com
Valid: 2026-01-08 01:25:21 → 2026-04-08 02:25:11
76f3b649700b07de… cloudflare · nimbus2026
Subject: grok.com
Issuer: WE1
SANs: grok.com, typeahead.grok.com
Valid: 2025-11-23 19:29:04 → 2026-02-21 20:29:01
76f3b649700b07de… sectigo · elephant2026h1
Subject: grok.com
Issuer: WE1
SANs: grok.com, typeahead.grok.com
Valid: 2025-11-23 19:29:04 → 2026-02-21 20:29:01
57dc8e97cbda16a6… cloudflare · nimbus2026
Subject: grok.com
Issuer: WR1
SANs: grok.com, typeahead.grok.com
Valid: 2025-11-23 19:28:54 → 2026-02-21 20:25:34
386e12a3b0947055… cloudflare · nimbus2026
Subject: grok.com
Issuer: E8
SANs: *.grok.com, grok.com
Valid: 2025-11-18 21:42:23 → 2026-02-16 21:42:22
386e12a3b0947055… sectigo · elephant2026h1
Subject: grok.com
Issuer: E8
SANs: *.grok.com, grok.com
Valid: 2025-11-18 21:42:23 → 2026-02-16 21:42:22
eb61e91cae9c0aa9… cloudflare · nimbus2026
Subject: grok.com
Issuer: R12
SANs: *.grok.com, grok.com
Valid: 2025-11-18 15:28:18 → 2026-02-16 15:28:17
eb61e91cae9c0aa9… sectigo · elephant2026h1
Subject: grok.com
Issuer: R12
SANs: *.grok.com, grok.com
Valid: 2025-11-18 15:28:18 → 2026-02-16 15:28:17
92c5f4b8bc5c8645… sectigo · elephant2026h1
Subject: grok.com
Issuer: WR1
SANs: grok.com, *.grok.com
Valid: 2025-11-13 06:26:37 → 2026-02-11 07:25:10

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 104.18.28.234 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
A 104.18.29.234 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
TXT google-site-verification=xk73X0o9k-eoZFSzC1ZYHstsPe6vzhNjdduqD_c48f4 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
NS robin.ns.cloudflare.com 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
NS cartman.ns.cloudflare.com 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
CAA 0 iodef "mailto:caa-reports@x.ai" 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
MX 1 smtp.google.com 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
CAA 0 issue "ssl.com" 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
TXT tiktok-developers-site-verification=t1AQw6I3nx1EagxdItHwZrz3wMgS5sCZ 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
CAA 0 issuewild "digicert.com; cansignhttpexchanges=yes" 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
AAAA 2606:4700::6812:1cea 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
TXT google-site-verification=N5d00H9pSs2bM_8iBn_HE0dphOgKgEM482P9kFDw7vA 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
CAA 0 issuewild "ssl.com" 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
CAA 0 issue "digicert.com; cansignhttpexchanges=yes" 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
TXT google-site-verification=LUrbvedWB08Lr6Eo7bSkjmxhFbMA73AEPUICgtIay4o 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
CAA 0 issuewild "comodoca.com" 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
CAA 0 issuewild "letsencrypt.org" 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
CAA 0 issuewild "pki.goog; cansignhttpexchanges=yes" 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
CAA 0 issue "letsencrypt.org" 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
TXT google-site-verification=dCnWUzaCYYMvk2nroNDkzoOBvFbIxvv-9oXpJJwu7JE 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
CAA 0 issue "comodoca.com" 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
TXT google-gws-recovery-domain-verification=68908035 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
CAA 0 issue "pki.goog; cansignhttpexchanges=yes" 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795
AAAA 2606:4700::6812:1dea 2026-05-26 03:11:26.075 2026-07-25 03:56:35.795