Domain
cursor.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of cursor.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
76.76.21.21
AAAA
—
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
ns-1366.awsdns-42.org, ns-1758.awsdns-27.co.uk, ns-265.awsdns-33.com, ns-682.awsdns-21.net
TXT
MS=ms66950797, afternic-verification-hyPeMFwWREkaDpMSPT6FPJ, anthropic-domain-verification-1er2cj=fcUJsdJ7kfq2Lp6XgYABnKuOo, apple-domain-verification=6WmKH1DQgWyhoqQT, docusign=cf0819bc-9ccb-4b86-8fb2-587d8f103d9b, doordash-verification=9ZAkHrNetG2LEg7f8Tuq2jU64bEmjT, figma-domain-verification=d7a81001ff0da28fcf26c182906e70d4adcc3860d2208054b56adeb46f57fb7c-1778743381, google-site-verification=9UChtu6OmXW-_O3sToc8Cl5kIhXjYRBpx_o1M6XlBlA
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: crazycursor.com
Issuer: YE1
SANs: crazycursor.com, www.crazycursor.com
Subject: cpcalendars.clickcursor.com
Issuer: R10
SANs: autodiscover.clickcursor.com, clickcursor.com, cpanel.clickcursor.com, cpcalendars.clickcursor.com, cpcontacts.clickcursor.com, mail.clickcursor.com, webdisk.clickcursor.com, webmail.clickcursor.com, www.clickcursor.com
Subject: cluster-controller.internal.cursor.com
Issuer: Amazon RSA 2048 M01
SANs: cluster-controller.internal.cursor.com
Subject: origin.cursor.com
Issuer: Amazon RSA 2048 M04
SANs: origin.cursor.com
Subject: origin.cursor.com
Issuer: Amazon RSA 2048 M04
SANs: origin.cursor.com
Subject: cursor.com
Issuer: cursor.com
SANs: cursor.com
Subject: ss-gtm.cursor.com
Issuer: Amazon RSA 2048 M01
SANs: ss-gtm.cursor.com
Subject: ss-gtm.cursor.com
Issuer: Amazon RSA 2048 M01
SANs: ss-gtm.cursor.com
Subject: origin.cursor.com
Issuer: Amazon RSA 2048 M04
SANs: origin.cursor.com
Subject: origin.cursor.com
Issuer: Amazon RSA 2048 M04
SANs: origin.cursor.com
Subject: origin.cursor.com
Issuer: Amazon RSA 2048 M04
SANs: origin.cursor.com
Subject: origin.cursor.com
Issuer: Amazon RSA 2048 M04
SANs: origin.cursor.com
Subject: origin-staging.cursor.com
Issuer: Amazon RSA 2048 M04
SANs: origin-staging.cursor.com
Subject: www.aikefucursor.com
Issuer: R12
SANs: aikefucursor.com, www.aikefucursor.com
Subject: crazycursor.com
Issuer: E7
SANs: crazycursor.com, www.crazycursor.com
Subject: blucursor.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: blucursor.com, www.blucursor.com
Subject: origin.cursor.com
Issuer: Amazon RSA 2048 M04
SANs: origin.cursor.com
Subject: api.cursor.com
Issuer: Amazon RSA 2048 M01
SANs: *.api.cursor.com, api.cursor.com
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
45.32.124.148:443
href · ×9
182.92.221.242:80
href · ×6
121.41.105.109:80
href · ×4
64.90.0.203:443
href · ×2
8.152.192.115:80
href · ×2
34.126.174.82:443
href · ×2
42.192.39.170:443
href · ×2
186.241.76.86:80
href · ×2
124.222.208.232:8080
href · ×2
8.138.102.141:443
href · ×2
158.101.12.126:80
href · ×2
45.207.212.17:443
href · ×1
167.71.161.196:80
href · ×1
95.169.6.107:80
href · ×1
101.34.249.107:443
href · ×1
109.224.229.158:80
href · ×1
213.199.34.90:443
href · ×1
162.251.165.181:443
href · ×1
43.167.176.207:443
href · ×1
47.115.91.87:443
href · ×1
116.203.80.32:443
href · ×1
43.163.92.65:80
href · ×1
51.83.122.131:443
href · ×1
155.212.167.197:443
href · ×1
109.123.240.151:80
href · ×1
188.255.118.111:443
href · ×1
121.40.54.69:443
href · ×1
47.237.200.84:993
href · ×1
152.67.62.100:443
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 91.107.250.13 | AS24940 | AS16509 | 95% | cert 807f0501… served by 91.107.250.13 (AS24940) carries SAN cursor.com which currently resolves through Amazon (AS16509) at 76.76.21.21 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| NS | ns-265.awsdns-33.com | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | google-site-verification=p0mgu1Q9aaBWxi6VA-ZLmy0hD0fpjJcGcc-85fN1I5Y | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | google-site-verification=SuWrNWVELfhz1BqkMA_vjQsc9UgxN45anv_IbuYEgrs | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| NS | ns-1366.awsdns-42.org | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | apple-domain-verification=6WmKH1DQgWyhoqQT | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| NS | ns-682.awsdns-21.net | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | v=spf1 include:_spf.google.com include:stspg-customer.com ~all | 2026-05-26 00:03:35.658 | 2026-05-27 17:53:26.325 |
| TXT | slack-domain-verification=4Sf7wlouKi1sD9xYl9EpiJ4aodbUvAUKk9DaSbhM | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| A | 76.76.21.21 | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | status-page-domain-verification=35154jm3n03g | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | qa-wolf-domain-verification-6h5xrg=dQu6gFedE39PvjusH3m942jfj | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| MX | 5 alt1.aspmx.l.google.com | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | figma-domain-verification=d7a81001ff0da28fcf26c182906e70d4adcc3860d2208054b56adeb46f57fb7c-1778743381 | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| MX | 10 alt3.aspmx.l.google.com | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | docusign=cf0819bc-9ccb-4b86-8fb2-587d8f103d9b | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | afternic-verification-hyPeMFwWREkaDpMSPT6FPJ | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| MX | 5 alt2.aspmx.l.google.com | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | google-site-verification=WKZ3eIhRdWCd3HfP2ta6r0UpB9UquBrSIDDlBH5cIfg | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| MX | 10 alt4.aspmx.l.google.com | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| MX | 1 aspmx.l.google.com | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | google-site-verification=9UChtu6OmXW-_O3sToc8Cl5kIhXjYRBpx_o1M6XlBlA | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | anthropic-domain-verification-1er2cj=fcUJsdJ7kfq2Lp6XgYABnKuOo | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | MS=ms66950797 | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| NS | ns-1758.awsdns-27.co.uk | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | doordash-verification=9ZAkHrNetG2LEg7f8Tuq2jU64bEmjT | 2026-06-01 23:09:42.711 | 2026-07-28 19:02:52.609 |
| TXT | v=spf1 include:_spf.google.com include:stspg-customer.com include:spf.mtasv.net ~all | 2026-06-01 23:09:42.711 | 2026-07-28 19:02:52.609 |
| TXT | google-site-verification=RIBekzSG62DswbquPtJvqhmMb1eqMR9ZaLraPx5POh0 | 2026-06-01 23:09:42.711 | 2026-07-28 19:02:52.609 |
| TXT | google-site-verification=F5bnStEi35Uh-OdvzB2MiRUIeTwUV1xev2ro3cP2gzs | 2026-07-21 14:42:12.780 | 2026-07-28 19:02:52.609 |