TRENCHCOAT Check a coin
$ACT2new$61.7K+51.2%$GITLABnew$10.2K-0.1%$NFAFnew$119K+1.9%$XOTnew$2.7B+51.3%$RUNNERnew$27.5K+53.8%$INFLUENCnew$503K+17.4%EL$ELON2028new$9.5M-0.1%$UREnew$168K+0.8%AI$AIMnew$38.2KSI$SInew$50.3K+30.9%$梁文锋new$31.5K+85.7%SC$SCSFnew$50.1K+214.0%MU$MUDDnew$23.2K-0.1%$MBAPPEnew$146K+219.0%$Ainew$16.7K+83.0%$SInew$10.9K-74.2%$Ainew$27.8K+206.0%$UERnew$167K+2.0%$TRENCHORSnew$10.3K+0.4%$Ainew$11.7K+28.4%$BRNTSHKnew$78.3K-99.7%$‮YORVnew$2.0M+17.2%$大Anew$20.0K+204.0%$MESHnew$113K+428.0%$Omarchynew$10.2K-8.0%$TRUMP2028new$698M+3166149.0%$USOEnew$7.1M+16912.0%$MESHnew$53.4K+306.0%OV$OVERnew$14.0K+19.4%AI$AInew$50.1K+30.4%$USOEnew$113K+1.4%AX$AXISnew$146K+1144.0%$VEIL$718K-45.5%$PAID$2.6M+1.4%$BATON$5.5M-7.6%$DARK$876K-14.8%$XTO$13.7M+5.5%$MISTAKE$10.1K-98.7%$HOOKED$1.0M+7.6%$E/ACC$436K+7.0%
Website blueprint · 18 Oct 2026

grok.com

“Grok”

Template-written 84 evidence items REA analysed 9 scripts
What this means for you

Grok talked to 7 outside services on a first visit, including 2 that measure visits or show ads.E9E8

  • Before you click anything, the page loads analytics or ad services: Cloudflare Web Analytics and Google Analytics / Tag Manager.E9E8
  • 10 cookies were set in your browser, 1 of them by other companies' domains.E20
  • Payments go through Stripe.E11E12E13

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

The page doesn't make tech claims we check for (AI, on-chain, wallets, trading, own chain, staking, live data, an app).

Calls its own backend /monitoring, /api/auth/sessionE42E43
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections keeps a live two-way connection open to a serverE39

What it is

  • The site describes itself as: “Grok is an AI assistant built by SpaceXSI. Chat, create images, write code, and get real-time answers from the web and X.”E2
  • It's built with Next.js and React (common tools for building web apps).E25E26
  • Notable building blocks in its code: ProseMirror / Tiptap editor.E27
  • In your browser it can ask for your location, can ask to use your camera or microphone, can ask to send you notifications, can copy text to your clipboard and 3 more.E33E34E35E36E37E38
  • It has sections such as /imagine, /sign-in and /sign-up.E84
  • While loading, it called 2 endpoints on its own servers, such as /monitoring and /api/auth/session.E42E43

Where your data goes

Analytics & trackingCount visits and record what you do on the page. 2
static.cloudflareinsights.comCloudflare Web Analytics: page-view counter 1×E9
www.googletagmanager.comGoogle Analytics / Tag Manager: Google's visitor analytics and tag loader 1×E8
PaymentsHandle card or wallet payments. 3
js.stripe.comStripe: card payments 3×E11
m.stripe.networkStripe: card payments 2×E12
m.stripe.comStripe: card payments 1×E13
Consent & bot protectionCookie banners, CAPTCHAs and bot checks. 2
cdn.cookielaw.orgOneTrust: cookie consent banner 10×E7
geolocation.onetrust.comOneTrust: cookie consent banner 1×E10

How key features work

Payments

Payments are handled by Stripe and Stripe.js, so card or payment details go to them, not only to this site.E11E12E13E31

StripeStripe.js

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/api/auth/session, /api/auth/continue-sso and /rest/mcp/oauth-credentials/set).E43E48E77

/api/auth/session/api/auth/continue-sso/rest/mcp/oauth-credentials/set

Live updates

It keeps live connections open (WebSockets) so content updates without reloading.E39

websocket

Loading its content

Its content loads from its own API while you browse (/monitoring and /api/auth/session).E42E43

/monitoring/api/auth/session

Drawing and editing in the browser

The page draws and edits graphics in your browser using ProseMirror / Tiptap editor and the canvas.E27E41

ProseMirror / Tiptap editorcanvas

Measuring what you do

Visits and clicks are measured with Cloudflare Web Analytics, Google Analytics / Tag Manager, Google tag (gtag.js) and Mixpanel (found in its traffic or its code).E9E8E28E29

Cloudflare Web AnalyticsGoogle Analytics / Tag ManagerGoogle tag (gtag.js)Mixpanel

Saving data on your device

It saves data in your browser (IndexedDB (a browser database), localStorage and sessionStorage), so some things persist between visits.E37E38E23E24

indexeddblocal_storagelocalStoragesessionStorage

Cookies and storage

Names only. We never store the values.

CookieSet forKeptWhose
grok_device_idE14grok.com about 400 daysthe site
i18nextLngE15grok.com about 365 daysthe site
cf_clearanceE16grok.com about 365 daysthe site
__cf_bmE17grok.com about 0 daysthe site
__cuidE18grok.com about 400 daysthe site
__cuidE18grok.com about 400 daysthe site
OptanonConsentE19grok.com about 365 daysthe site
mE20m.stripe.com about 400 daysother company
__stripe_midE21grok.com about 365 daysthe site
__stripe_sidE22grok.com about 0 daysthe site

localStorageE23: i18nextLng, chat-preferences, useImagineModeStore, __cuid, grok-main-thread-watch:391e127b-22f3-44df-922e-f263f372a366, ot_anonymous_id, modes-selected-id, xai-ff-bu

sessionStorageE24: grok-main-thread-watch-tab, sentryReplaySession, useMediaStore

Pages and API calls

Pages it links to

//imagine/sign-in/sign-up

Endpoints

Called while loading (seen) or named in the code (code).

grok.com/monitoringseenE42
grok.com/api/auth/sessionseenE43
/api/log_metriccodeE44
/apicodeE45
/api/update-team-cookiecodeE46
/api/clear-team-cookiecodeE47
/api/auth/continue-ssocodeE48
/api/last-logged-incodeE49
/api/sso/select-candidatescodeE50
/api/hightouch/signed-upcodeE51
/rest/connectors/createcodeE52
/rest/connectors/listcodeE53
/rest/catalog-connectors/listcodeE54
/rest/connectors/getcodeE55
/rest/connectors/removecodeE56
/rest/connectors/updatecodeE57
/rest/connectors/list-for-usercodeE58
/rest/connectors/list-v2codeE59
/rest/connectors/list-v2-admincodeE60
/rest/connectors/list-available-v2codeE61
/rest/connectors/list-available-v2-admincodeE62
/rest/shared-connectors/catalog-admincodeE63
/rest/shared-connectors/tools/listcodeE64
/rest/shared-connectors/tools/setcodeE65
/rest/connectors/sync-logscodeE66
/rest/team/historycodeE67
/rest/team/connector-settings/getcodeE68
/rest/team/connector-settings/setcodeE69
/rest/connectors/assets/listcodeE70
/rest/mcp/discovered-tools/listcodeE71

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Grok
page title · https://grok.com/
E2
Page description: Grok is an AI assistant built by SpaceXSI. Chat, create images, write code, and get real-time answers from the web and X.
page description · https://grok.com/
E3
Site name: Grok
page site_name · https://grok.com/
E4
Main heading: What should we explore?
page h1 · https://grok.com/
E5
15 request(s) to grok.com
types: 3 other, 3 script, 3 fetch
GET https://grok.com/ · other · 15 requests · network recording
E6
245 request(s) to cdn.grok.com
types: 230 script, 13 stylesheet, 2 font
GET https://cdn.grok.com/_next/static/chunks/04fx73_34obf_.css · script · 245 requests · network recording
E7
10 request(s) to cdn.cookielaw.org
types: 5 fetch, 2 script, 2 image
GET https://cdn.cookielaw.org/scripttemplates/otSDKStub.js · fetch · 10 requests · network recording
E8
1 request(s) to www.googletagmanager.com
types: 1 script
GET https://www.googletagmanager.com/gtm.js · script · network recording
E9
1 request(s) to static.cloudflareinsights.com
types: 1 script
GET https://static.cloudflareinsights.com/beacon.min.js/vce701823e78c4301a35b7e07294d87301792088814092 · script · network recording
E10
1 request(s) to geolocation.onetrust.com
types: 1 xhr
GET https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location · xhr · network recording
E11
3 request(s) to js.stripe.com
types: 2 script, 1 document
GET https://js.stripe.com/dahlia/stripe.js · script · 3 requests · network recording
E12
2 request(s) to m.stripe.network
types: 1 document, 1 script
GET https://m.stripe.network/inner.html · document · 2 requests · network recording
E13
1 request(s) to m.stripe.com
types: 1 xhr
GET https://m.stripe.com/6 · xhr · network recording
E14
Cookie 'grok_device_id' set for grok.com
kept for about 400 days
cookie grok_device_id on grok.com · value not stored
E15
Cookie 'i18nextLng' set for grok.com
kept for about 365 days
cookie i18nextLng on grok.com · value not stored
E16
Cookie 'cf_clearance' set for grok.com
kept for about 365 days
cookie cf_clearance on grok.com · value not stored
E17
Cookie '__cf_bm' set for grok.com
kept for about 0 days
cookie __cf_bm on grok.com · value not stored
E18
Cookie '__cuid' set for grok.com
kept for about 400 days
cookie __cuid on grok.com · value not stored
E19
Cookie 'OptanonConsent' set for grok.com
kept for about 365 days
cookie OptanonConsent on grok.com · value not stored
E20
Cookie 'm' set for m.stripe.com
kept for about 400 days
cookie m on m.stripe.com · value not stored
E21
Cookie '__stripe_mid' set for grok.com
kept for about 365 days
cookie __stripe_mid on grok.com · value not stored
E22
Cookie '__stripe_sid' set for grok.com
kept for about 0 days
cookie __stripe_sid on grok.com · value not stored
E23
localStorage: 8 key(s) saved in your browser
localStorage keys: i18nextLng, chat-preferences, useImagineModeStore, __cuid, grok-main-thread-watch:391e127b-22f3-44d, ot_anonymous_id, modes-selected-id, xai-ff-bu · values not stored
E24
sessionStorage: 3 key(s) saved in your browser
sessionStorage keys: grok-main-thread-watch-tab, sentryReplaySession, useMediaStore · values not stored
E25
Next.js detected by REA (next-runtime)
confidence: high
grok.com/ · “next-runtime” · REA analyze-web-bundle 6.4.0
E26
React found in the code
cdn.grok.com/_next/static/chunks/2sybljs-n4abi.js @ 51:2831 · “react.element” · pattern scan
E27
ProseMirror / Tiptap editor found in the code
grok.com/ (page HTML) @ 26:14 · “ProseMirror” · pattern scan
E28
Google tag (gtag.js) found in the code
grok.com/ (page HTML) @ 16:101 · “gtag(” · pattern scan
E29
Mixpanel found in the code
cdn.grok.com/_next/static/chunks/16hj1_92s7x9n.js @ 2:434270 · “api-js.mixpanel.com” · pattern scan
E30
Sentry found in the code
cdn.grok.com/_next/static/chunks/2sybljs-n4abi.js @ 2:432 · “@sentry/” · pattern scan
E31
Stripe.js found in the code
grok.com/ (page HTML) @ 132:243 · “js.stripe.com” · pattern scan
E32
Cloudflare Turnstile found in the code
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:225316 · “challenges.cloudflare.com/turnstile” · pattern scan
E33
Uses the browser ability: geolocation
can ask for your location
cdn.grok.com/_next/static/chunks/1nina2n46pgtw.js @ 2:152209 · “navigator.geolocation.getCurrentPosition” · pattern scan
E34
Uses the browser ability: camera_mic
can ask to use your camera or microphone
cdn.grok.com/_next/static/chunks/1nina2n46pgtw.js @ 2:283498 · “getUserMedia(” · pattern scan
E35
Uses the browser ability: notifications
can ask to send you notifications
cdn.grok.com/_next/static/chunks/1nina2n46pgtw.js @ 2:144986 · “Notification.requestPermission” · pattern scan
E36
Uses the browser ability: clipboard_write
can copy text to your clipboard
cdn.grok.com/_next/static/chunks/2u-4q_6dh_lou.js @ 12:20900 · “clipboard.writeText(” · pattern scan
E37
Uses the browser ability: indexeddb
stores data in your browser's built-in database
cdn.grok.com/_next/static/chunks/16hj1_92s7x9n.js @ 2:353608 · “indexedDB.open(” · pattern scan
E38
Uses the browser ability: local_storage
saves small bits of data in your browser
cdn.grok.com/_next/static/chunks/1nina2n46pgtw.js @ 2:142910 · “localStorage.setItem(” · pattern scan
E39
Uses the browser ability: websocket
keeps a live two-way connection open to a server
cdn.grok.com/_next/static/chunks/1nina2n46pgtw.js @ 3:16215 · “new WebSocket(” · pattern scan
E40
Uses the browser ability: web_worker
runs work in a background thread
cdn.grok.com/_next/static/chunks/2sybljs-n4abi.js @ 17:22787 · “new Worker(” · pattern scan
E41
Uses the browser ability: canvas
draws graphics on a canvas
cdn.grok.com/_next/static/chunks/2sybljs-n4abi.js @ 16:26153 · “getContext("2d"” · pattern scan
E42
The page called /monitoring on grok.com (POST)
POST https://grok.com/monitoring · fetch · network recording
E43
The page called /api/auth/session on grok.com (GET)
GET https://grok.com/api/auth/session · fetch · network recording
E44
The code names the endpoint /api/log_metric
cdn.grok.com/_next/static/chunks/2sybljs-n4abi.js @ 17:35309 · “/api/log_metric” · pattern scan
E45
The code names the endpoint /api
cdn.grok.com/_next/static/chunks/2sybljs-n4abi.js @ 51:209470 · “/api” · pattern scan
E46
The code names the endpoint /api/update-team-cookie
cdn.grok.com/_next/static/chunks/1nina2n46pgtw.js @ 5:4286 · “/api/update-team-cookie” · pattern scan
E47
The code names the endpoint /api/clear-team-cookie
cdn.grok.com/_next/static/chunks/1nina2n46pgtw.js @ 5:4495 · “/api/clear-team-cookie” · pattern scan
E48
The code names the endpoint /api/auth/continue-sso
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:240046 · “/api/auth/continue-sso” · pattern scan
E49
The code names the endpoint /api/last-logged-in
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:276355 · “/api/last-logged-in” · pattern scan
E50
The code names the endpoint /api/sso/select-candidates
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:276704 · “/api/sso/select-candidates” · pattern scan
E51
The code names the endpoint /api/hightouch/signed-up
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:360573 · “/api/hightouch/signed-up” · pattern scan
E52
The code names the endpoint /rest/connectors/create
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:388374 · “/rest/connectors/create” · pattern scan
E53
The code names the endpoint /rest/connectors/list
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:388415 · “/rest/connectors/list” · pattern scan
E54
The code names the endpoint /rest/catalog-connectors/list
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:388461 · “/rest/catalog-connectors/list” · pattern scan
E55
The code names the endpoint /rest/connectors/get
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:388506 · “/rest/connectors/get” · pattern scan
E56
The code names the endpoint /rest/connectors/remove
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:388545 · “/rest/connectors/remove” · pattern scan
E57
The code names the endpoint /rest/connectors/update
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:388587 · “/rest/connectors/update” · pattern scan
E58
The code names the endpoint /rest/connectors/list-for-user
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:388635 · “/rest/connectors/list-for-user” · pattern scan
E59
The code names the endpoint /rest/connectors/list-v2
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:388685 · “/rest/connectors/list-v2” · pattern scan
E60
The code names the endpoint /rest/connectors/list-v2-admin
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:388737 · “/rest/connectors/list-v2-admin” · pattern scan
E61
The code names the endpoint /rest/connectors/list-available-v2
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:388796 · “/rest/connectors/list-available-v2” · pattern scan
E62
The code names the endpoint /rest/connectors/list-available-v2-admin
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:388867 · “/rest/connectors/list-available-v2-admin” · pattern scan
E63
The code names the endpoint /rest/shared-connectors/catalog-admin
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:388945 · “/rest/shared-connectors/catalog-admin” · pattern scan
E64
The code names the endpoint /rest/shared-connectors/tools/list
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:389010 · “/rest/shared-connectors/tools/list” · pattern scan
E65
The code names the endpoint /rest/shared-connectors/tools/set
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:389071 · “/rest/shared-connectors/tools/set” · pattern scan
E66
The code names the endpoint /rest/connectors/sync-logs
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:389128 · “/rest/connectors/sync-logs” · pattern scan
E67
The code names the endpoint /rest/team/history
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:389172 · “/rest/team/history” · pattern scan
E68
The code names the endpoint /rest/team/connector-settings/get
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:389218 · “/rest/team/connector-settings/get” · pattern scan
E69
The code names the endpoint /rest/team/connector-settings/set
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:389279 · “/rest/team/connector-settings/set” · pattern scan
E70
The code names the endpoint /rest/connectors/assets/list
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:389338 · “/rest/connectors/assets/list” · pattern scan
E71
The code names the endpoint /rest/mcp/discovered-tools/list
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:389392 · “/rest/mcp/discovered-tools/list” · pattern scan
E72
The code names the endpoint /rest/mcp/server-configs/build
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:389448 · “/rest/mcp/server-configs/build” · pattern scan
E73
The code names the endpoint /rest/connectors/google-drive/access-token
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:389513 · “/rest/connectors/google-drive/access-token” · pattern scan
E74
The code names the endpoint /rest/connectors/onedrive/access-token
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:389587 · “/rest/connectors/onedrive/access-token” · pattern scan
E75
The code names the endpoint /rest/connectors/box/access-token
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:389652 · “/rest/connectors/box/access-token” · pattern scan
E76
The code names the endpoint /rest/mcp/validate-url
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:389709 · “/rest/mcp/validate-url” · pattern scan
E77
The code names the endpoint /rest/mcp/oauth-credentials/set
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:389757 · “/rest/mcp/oauth-credentials/set” · pattern scan
E78
The code names the endpoint /rest/datasource-credentials/set
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:389816 · “/rest/datasource-credentials/set” · pattern scan
E79
The code names the endpoint /rest/datasource-credentials/get
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:389876 · “/rest/datasource-credentials/get” · pattern scan
E80
The code names the endpoint /rest/datasource-credentials/delete
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:389939 · “/rest/datasource-credentials/delete” · pattern scan
E81
The code names the endpoint /rest/connectors/sync/trigger
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:389998 · “/rest/connectors/sync/trigger” · pattern scan
E82
The code names the endpoint /rest/sharepoint/sites/list
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:390050 · “/rest/sharepoint/sites/list” · pattern scan
E83
The code names the endpoint /rest/sharepoint/sites/set-allowed
cdn.grok.com/_next/static/chunks/2e1k5ylqyum4x.js @ 2:390106 · “/rest/sharepoint/sites/set-allowed” · pattern scan
E84
4 links to pages on the same site
page links · https://grok.com/ · /, /imagine, /sign-in, /sign-up

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id SBg4vOlZ.