Domain
x.ai
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of x.ai
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
7
A/AAAA targets
Subdomains
62
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
22
in our scans
DNS Records
A
104.18.18.80, 104.18.19.80
AAAA
2606:4700::6812:1250, 2606:4700::6812:1350
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
chelsea.ns.cloudflare.com, damon.ns.cloudflare.com
TXT
1password-site-verification=XXCARJREB5DQ7IGXMFLDJE5S3M, DBDA92E47D, MS=ms23879701, MS=ms73008255, MS=ms74258644, airtable-verification=5f7425f45c806ae8bbb6f16fb691a730, atlassian-domain-verification=j6u0o1PTkobCXC84uEF/sWpIPtaZURBVYqKzmTvT8wugLcHT1vvrzzA63iP1qSLN, bluebeam-verification=g79wdhqgospnrbnztf855e4l4y180e
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| api.x.ai | 2026-06-16 06:27:04.047 | |
| console.x.ai | 2026-07-25 22:03:17.061 | |
| data.x.ai | 2026-06-18 00:03:50.129 | |
| deferred-chat.x.ai | 2026-06-20 09:28:28.272 | |
| docs.x.ai | 2026-07-27 05:00:22.431 | |
| grok.x.ai | 2026-07-23 08:11:42.939 | |
| imagine-public.x.ai | 2026-07-26 14:11:12.026 | |
| status.x.ai | 2026-07-17 11:40:08.859 | |
| us-east-1.api.x.ai | 2026-06-19 16:31:18.746 | |
| x.ai | 2026-07-27 05:00:22.431 | |
| jf.x.ai | 2026-05-26 05:22:44.503 | |
| ap-northeast-1-cm.api.x.ai | 1970-01-01 00:00:00.000 | |
| asia-south1.livekit.x.ai | 1970-01-01 00:00:00.000 | |
| cloud9-cm.api.x.ai | 1970-01-01 00:00:00.000 | |
| imgen.x.ai | 1970-01-01 00:00:00.000 | |
| max-raw.api.x.ai | 1970-01-01 00:00:00.000 | |
| privacy.x.ai | 1970-01-01 00:00:00.000 | |
| research-models-cm.api.x.ai | 1970-01-01 00:00:00.000 | |
| research-vendors-cm.api.x.ai | 1970-01-01 00:00:00.000 | |
| transcription.grok-v2.x.ai | 1970-01-01 00:00:00.000 | |
| trust.x.ai | 1970-01-01 00:00:00.000 | |
| typeahead.grok-v2.x.ai | 1970-01-01 00:00:00.000 | |
| us-east-1-raw.api.x.ai | 1970-01-01 00:00:00.000 | |
| us-east-4-comfyui-raw.api.x.ai | 1970-01-01 00:00:00.000 | |
| us-east-4-raw.api.x.ai | 1970-01-01 00:00:00.000 | |
| us-saltlake-2-raw.api.x.ai | 2026-07-19 11:50:05.475 | |
| us-south-1-pltr.api.x.ai | 1970-01-01 00:00:00.000 | |
| us-west-1-raw.api.x.ai | 1970-01-01 00:00:00.000 | |
| us-west-1.api.x.ai | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: cdn.droidx.ai
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: cdn.droidx.ai, www.cdn.droidx.ai
Subject: backend.acc.paperbox.ai
Issuer: WR3
SANs: analytics.acc.paperbox.ai, backend.acc.paperbox.ai, image-cdn.acc.paperbox.ai, integration.acc.paperbox.ai, internal.acc.paperbox.ai, login.acc.paperbox.ai, masterdata.acc.paperbox.ai
Subject: sdd-demo.clearbox.ai
Issuer: YE1
SANs: sdd-demo.clearbox.ai
Subject: *.blackbox.ai
Issuer: ZeroSSL RSA Domain Secure Site CA
SANs: *.blackbox.ai, blackbox.ai
Subject: cognilogix.ai
Issuer: YR1
SANs: cognilogix.ai, www.cognilogix.ai
Subject: *.giroux.ai
Issuer: GlobalSign GCC R3 DV TLS CA 2020
SANs: *.giroux.ai, giroux.ai
Subject: mail.hixx.ai
Issuer: YE2
SANs: mail.hixx.ai
Subject: wx.aicjr.com
Issuer: Encryption Everywhere DV TLS CA - G1
SANs: wx.aicjr.com
Subject: *.unidex.ai
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.unidex.ai, unidex.ai
Subject: sk.staging.2025.hubblehox.ai
Issuer: R13
SANs: sk.staging.2025.hubblehox.ai
Subject: *.aurex.ai
Issuer: GoDaddy TLS Intermediate CA DV - R1v1
SANs: *.aurex.ai, aurex.ai
Subject: *.sewcx.ai
Issuer: GeoTrust TLS RSA CA G1
SANs: *.sewcx.ai, sewcx.ai
Subject: demo.braincx.ai
Issuer: YE2
SANs: demo.braincx.ai
Subject: relay.viewer.pictoblox.ai
Issuer: YE1
SANs: relay.viewer.pictoblox.ai
Subject: *.aurex.ai
Issuer: GoDaddy TLS Intermediate CA DV - R1v1
SANs: *.aurex.ai, aurex.ai
Subject: mx.airliquide.com
Issuer: Sectigo Public Server Authentication CA OV E36
SANs: ar.airliquide.com, au.airliquide.com, cn.airliquide.com, eg.airliquide.com, ma.airliquide.com, mx.airliquide.com, nz.airliquide.com, tn.airliquide.com, tw.airliquide.com, za.airliquide.com
Subject: geni-student-vapt.hubblehox.ai
Issuer: YR1
SANs: geni-student-vapt.hubblehox.ai
Subject: *.computrix.ai
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.computrix.ai, computrix.ai
Subject: n8n.felex.ai
Issuer: YE1
SANs: n8n.felex.ai
Subject: baran-accept.normavix.ai
Issuer: YE1
SANs: baran-accept.normavix.ai
Subject: saasdemo.hackbox.ai
Issuer: LiteSSL ECC CA 2025
SANs: saasdemo.hackbox.ai
Subject: meeting.waresix.ai
Issuer: YE1
SANs: meeting.waresix.ai
Subject: 28262a96-796e-82f7-bec0-dec22d287cf1.dev-frm-gke2.us-central1.fedflex.ai
Issuer: 28262a96-796e-82f7-bec0-dec22d287cf1.dev-frm-gke2.us-central1.fedflex.ai
SANs: 28262a96-796e-82f7-bec0-dec22d287cf1.dev-frm-gke2.us-central1.fedflex.ai
Subject: app.allex.ai
Issuer: R10
SANs: api.allex.ai, app.allex.ai, embedded.allex.ai, langfuse.allex.ai, public.api.allex.ai, teams.allex.ai
Subject: *.liveworx.ai.kr
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.liveworx.ai.kr, liveworx.ai.kr
Subject: stg-cs-gcmp.hydrox.ai
Issuer: WR3
SANs: stg-cs-gcmp.hydrox.ai, stg-platform-gcmp.hydrox.ai
Subject: apartment-page-stage.sparx.ai
Issuer: WR3
SANs: apartment-page-stage.sparx.ai
Subject: *.mobex.ai
Issuer: R13
SANs: *.mobex.ai
Subject: addin.ezylex.ai
Issuer: R12
SANs: addin.ezylex.ai
Subject: komex.ai
Issuer: YE2
SANs: komex.ai, www.komex.ai
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | domain-verification=c559e5fdf93f472dec4f38ad4e775600dccc142ea307a32ef32ccb6d34aee04a | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | tiktok-developers-site-verification=J10J0JzjeDFvGKlID1gmK0vwvqgneoAg | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| AAAA | 2606:4700::6812:1350 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | slack-domain-verification=944ujyvyuOXK3xywSLMXwmrA9PvnAnOzVEEMghIQ | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | 1password-site-verification=XXCARJREB5DQ7IGXMFLDJE5S3M | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| AAAA | 2606:4700::6812:1250 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | google-site-verification=o1aMECO7AN1vlMP5eT69LYNCn_5AoQTp5BleqyndQXY | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | domain-verification=758ae9fe63bf0d570e392114a75470f7128da791398234889e2e3095b8db6e9e | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | hubspot-developer-verification=YTE2ZWE4NTAtZDBmYS00ZjkxLWI2NzgtMThiZjA4MDM4NDIx | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | stripe-verification=1E214CE588837E638F2D46AB2A2790B0A51F74D94E1DA8BA6758E32F1D7457BD | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | google-site-verification=J2wJLbzBUbrulTW8cGnT3FQoE0oG1GG_JN2YXPPKPKU | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | MS=ms73008255 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | google-site-verification=d_drIQKVj1Kh1zsx2VWXsATBTOqh2wk7ZiTp78JJg_0 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| NS | chelsea.ns.cloudflare.com | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| A | 104.18.18.80 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | linear-domain-verification=h9s2f35wx2w4 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | domain-verification=1d19309503d487b30040eed1d0798113990fc86a80835797ffe7525df0260648 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | notion-domain-verification=iFrjf9Wrfrd4awoIlG7zoq9fNYvEXIaZLfa1vn3y71C | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | domain-verification=018bb2468fac36dcbd6e65dca960eb4ef1054007aac8d5e779d563f7226951e0 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | domain-verification=4a554596db731b2a31dc139c42078fa092770d053da2c503fd2705be40ceb0f3 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | h1-domain-verification=wuy3jUyaY8UKFkqa3caCNMZYMNbxhLU2EkTag3DURaBhUStq | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | domain-verification=9d6cf471fb5f836d3a0e29d1064b6589bcc1e5aa9c9e10f8f0b67f85957fcea9 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | google-site-verification=AnoF81FojwHGc7YKC78Ngg1BX9vqukYwMN_G6nB1Bds | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | wiz-domain-verification=4bd9ff154ff824aa08f89c4b28bddd181420f40a2478837127aa9dcc79550998 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | google-site-verification=GAukSPy9mU7HOfcodI70g4-jwhhjUS5yKwJpRxQRpuo | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | cursor-domain-verification-rw9f23=NLChVOOuvSb8HPu2vVRSlK6yu | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | google-site-verification=b5mwXEC3oBncPlFyG506czf_xawn0jqU9TIl7W8S-vs | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | google-site-verification=FJ_F8optikvldwN854KcKxHABL913pj82hvs7dMVtWY | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | bluebeam-verification=g79wdhqgospnrbnztf855e4l4y180e | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | domain-verification=294032f842d027814ffc21433e5b1f4b294b23f72f2b77bd9a58edb54d0a659a | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | domain-verification=70182e7df8ca11d6c1a47691ee384b9ba59fc3728a0cc130bbbf1ff830fb8dff | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | tiktok-developers-site-verification=gn2Me1w0kjngm51tdetN6Ywow0j6oscR | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | domain-verification=669c988dd52afb52813312e691201cb2bf2678cd2a4764485c40828d03d3ba03 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | docusign=ecc2daad-5820-4994-8010-a6cb30b8aa33 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | zapier-domain-verification-challenge=428380e8-5f9b-4707-a570-ee7200994dd5 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | domain-verification=65653d2d4a668eea2b2c7ac391eb3581491a3a51731d817bb72abec51da86680 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | atlassian-domain-verification=j6u0o1PTkobCXC84uEF/sWpIPtaZURBVYqKzmTvT8wugLcHT1vvrzzA63iP1qSLN | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | v=spf1 include:_spf.google.com -all | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | airtable-verification=5f7425f45c806ae8bbb6f16fb691a730 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | domain-verification=8d4756448a37802ea6e25195368df03a6f4f5e8d5532366e3cb629d3f3dfc4d8 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| A | 104.18.19.80 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | MS=ms23879701 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| MX | 5 alt2.aspmx.l.google.com | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | MS=ms74258644 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| MX | 10 alt4.aspmx.l.google.com | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| MX | 1 aspmx.l.google.com | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| MX | 5 alt1.aspmx.l.google.com | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | mixpanel-domain-verify=1ec8fc6c-d691-4c8d-b744-d535533b4bcd | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | mongodb-site-verification=Oq4NHbeZ0Bl9HJByGDJx6z7xLJYWUQ4D | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | figma-domain-verification=4ed4e48a2193523b7d4a6faae60a97612fbe3f91ce159ea55236f162f6b173bd-1769562240 | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | mixpanel-domain-verify=f92ab2db-b811-4ab7-80af-dd03fb59c5fb | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| MX | 10 alt3.aspmx.l.google.com | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | DBDA92E47D | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| NS | damon.ns.cloudflare.com | 2026-05-26 03:41:45.201 | 2026-07-27 05:00:22.431 |
| TXT | google-site-verification=QIBwZlVWwCBHr5V97uOcupZWPkpOzi99rSdZK5Yp4s0 | 2026-06-23 21:05:35.853 | 2026-07-27 05:00:22.431 |
| TXT | google-site-verification=H1XMy72xn_NQCWvs_3bTBoPVayftnHcf1wwKHOvPUI8 | 2026-07-15 20:04:13.980 | 2026-07-27 05:00:22.431 |
| TXT | twilio-domain-verification=44fd244da4b5e6e19863eb638d88132c | 2026-07-17 03:43:32.590 | 2026-07-27 05:00:22.431 |