SP$SpaceXSInew$81.1K+848.0%$Echonew$65.3K+53.9%$🙏new$391M+2981942.0%OF$OFFCHAINnew$34.8K$SpaceXSInew$133K+988.0%$SUIT Pennew$27.3K+44.3%$250new$253K+190.0%$Starmannew$248K+184.0%$ROBBIEnew$17.4K+72.8%$TPnew$11.3K-43.8%PE$PEPEnew$15.9K+83.6%$TRUMP2028new$34.7K+57.9%$TPnew$17.5K-13.1%$BACKEDnew$316K+263.0%EC$Echonew$15.8K+81.9%DA$Darlanew$36.0K+353.0%EC$Echonew$56.4K+515.0%$TPnew$20.9K+14.8%EC$Echonew$27.1K+199.0%$SEEDnew$129K+217.0%$TPnew$20.3K+11.7%$MESHnew$52.9K+149.0%PE$PEPEnew$12.5K+44.1%DI$DICTATORnew$19.9K-64.9%$FAIRnew$471M+5414208.0%$Windlenew$11.2K-72.6%$STARLINKnew$296K+238.0%FA$fairnew$60.6K+16.3%$ILVOTEnew$95.2K+35.9%$fairnew$15.0K-62.8%$meowknightnew$293K+235.0%KO$Koyuri-konew$14.4K+50.6%$VEIL$780K-39.9%$PAID$2.5M-10.7%$BATON$5.4M-4.0%$DARK$796K-17.5%$XTO$13.6M+11.6%$MISTAKE$20.2K-97.2%$HOOKED$1.1M-8.9%$E/ACC$408K-8.5%
Website blueprint · 8 h ago

grok.com

“Grok”

Template-written 90 evidence items REA analysed 10 scripts
What this means for you

Grok talked to 9 outside services on a first visit, including 2 that measure visits or show ads.E9E8

  • Before you click anything, the page loads analytics or ad services: Cloudflare Web Analytics and Google Analytics / Tag Manager.E9E8
  • 12 cookies were set in your browser, 1 of them by other companies' domains.E24
  • Payments go through Stripe.E12E14E15

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

The page doesn't make tech claims we check for (AI, on-chain, wallets, trading, own chain, staking, live data, an app).

Calls its own backend /monitoring, /api/auth/session, /api/auth/oauth/id-token/nonceE47E48E49
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections keeps a live two-way connection open to a serverE44

What it is

  • The site describes itself as: “Grok is an AI assistant built by SpaceXSI. Chat, create images, write code, and get real-time answers from the web and X.”E2
  • It's built with Next.js and React (common tools for building web apps).E29E30
  • Notable building blocks in its code: ProseMirror / Tiptap editor.E31
  • In your browser it can ask for your location, can ask to use your camera or microphone, can ask to send you notifications, can copy text to your clipboard and 3 more.E38E39E40E41E42E43
  • It has sections such as /imagine, /sign-in and /sign-up.E90
  • While loading, it called 3 endpoints on its own servers, such as /monitoring, /api/auth/session and /api/auth/oauth/id-token/nonce.E47E48E49

Where your data goes

Analytics & trackingCount visits and record what you do on the page. 2
static.cloudflareinsights.comCloudflare Web Analytics: page-view counter 1×E9
www.googletagmanager.comGoogle Analytics / Tag Manager: Google's visitor analytics and tag loader 1×E8
PaymentsHandle card or wallet payments. 3
js.stripe.comStripe: card payments 3×E12
m.stripe.networkStripe: card payments 2×E14
m.stripe.comStripe: card payments 1×E15
Sign-in & accountsLog you in or manage accounts. 1
accounts.google.comGoogle Sign-In: log in with Google 2×E13
Consent & bot protectionCookie banners, CAPTCHAs and bot checks. 3
challenges.cloudflare.comCloudflare Turnstile / challenge: bot check 2×E10
cdn.cookielaw.orgOneTrust: cookie consent banner 10×E7
geolocation.onetrust.comOneTrust: cookie consent banner 1×E11

How key features work

Payments

Payments are handled by Stripe and Stripe.js, so card or payment details go to them, not only to this site.E12E14E15E35

StripeStripe.js

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/api/auth/session, /api/auth/oauth/id-token/nonce and accounts.google.com).E48E49E13E36

/api/auth/session/api/auth/oauth/id-token/nonceaccounts.google.com

Live updates

It keeps live connections open (WebSockets) so content updates without reloading.E44

websocket

Loading its content

Its content loads from its own API while you browse (/monitoring, /api/auth/session and /api/auth/oauth/id-token/nonce).E47E48E49

/monitoring/api/auth/session/api/auth/oauth/id-token/nonce

Drawing and editing in the browser

The page draws and edits graphics in your browser using ProseMirror / Tiptap editor and the canvas.E31E46

ProseMirror / Tiptap editorcanvas

Measuring what you do

Visits and clicks are measured with Cloudflare Web Analytics, Google Analytics / Tag Manager, Google tag (gtag.js) and Mixpanel (found in its traffic or its code).E9E8E32E33

Cloudflare Web AnalyticsGoogle Analytics / Tag ManagerGoogle tag (gtag.js)Mixpanel

Saving data on your device

It saves data in your browser (IndexedDB (a browser database), localStorage and sessionStorage), so some things persist between visits.E42E43E27E28

indexeddblocal_storagelocalStoragesessionStorage

Cookies and storage

Names only. We never store the values.

CookieSet forKeptWhose
grok_device_idE16grok.com about 400 daysthe site
i18nextLngE17grok.com about 365 daysthe site
cf_clearanceE18grok.com about 365 daysthe site
__cf_bmE19grok.com about 0 daysthe site
__cuidE20grok.com about 400 daysthe site
__cuidE20grok.com about 400 daysthe site
__Host-id-token-nonceE21grok.com about 0 daysthe site
OptanonConsentE22grok.com about 365 daysthe site
g_stateE23grok.com about 180 daysthe site
mE24m.stripe.com about 400 daysother company
__stripe_midE25grok.com about 365 daysthe site
__stripe_sidE26grok.com about 0 daysthe site

localStorageE27: i18nextLng, chat-preferences, useImagineModeStore, __cuid, ot_anonymous_id, grok-main-thread-watch:7bbd362f-aa89-4604-9f14-f27bac7aaf26, modes-selected-id, xai-ff-bu

sessionStorageE28: grok-main-thread-watch-tab, sentryReplaySession, useMediaStore

Pages and API calls

Pages it links to

//imagine/sign-in/sign-up

Endpoints

Called while loading (seen) or named in the code (code).

grok.com/monitoringseenE47
grok.com/api/auth/sessionseenE48
grok.com/api/auth/oauth/id-token/nonceseenE49
/api/update-team-cookiecodeE50
/api/clear-team-cookiecodeE51
/rest/app-deployer/v1/projects/{project_id}/custom-domainscodeE52
/rest/app-deployer/v1/moderation-reportscodeE53
/rest/app-deployer/v1/deployments/{deployment_id}/statuscodeE54
/rest/app-deployer/v1/custom-domains/{domain_id}codeE55
/rest/app-deployer/v1/deployments/{deployment_id}/build-logscodeE56
/rest/app-deployer/v1/deployments:latestcodeE57
/rest/app-deployer/v1/projects/{project_id}/remix-eligibilitycodeE58
/rest/app-deployer/v1/x-shares/{share_id}codeE59
/rest/app-deployer/v1/projects:initcodeE60
/rest/app-deployer/v1/projects/{project_id}/x-share:initiatecodeE61
/rest/app-deployer/v1/projects/{project_id}/sharescodeE62
/rest/app-deployer/v1/projects/{project_id}/env-varscodeE63
/rest/app-deployer/v1/projectscodeE64
/rest/app-deployer/v1/pingcodeE65
/rest/app-deployer/v1/deployments/{deployment_id}codeE66
/rest/app-deployer/v1/custom-domains/{domain_id}:removecodeE67
/rest/app-deployer/v1/projects/{project_id}/env-vars:batchDeletecodeE68
/rest/app-deployer/v1/projects/{project_id}/shares:removecodeE69
/rest/app-deployer/v1/projects/{project_id}/visibilitycodeE70
/rest/app-deployer/v1/projects/{project_id}/env-vars:batchSetcodeE71
/rest/app-deployer/v1/projects/{project_id}/forkingcodeE72
/rest/app-deployer/v1/projects/{project_id}/xai-api-keycodeE73
/rest/app-deployer/v1/projects/{project_id}/shares:addcodeE74
/rest/app-deployer/v1/projects/{project_id}:unpublishcodeE75
/rest/automationscodeE76

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Grok
page title · https://grok.com/
E2
Page description: Grok is an AI assistant built by SpaceXSI. Chat, create images, write code, and get real-time answers from the web and X.
page description · https://grok.com/
E3
Site name: Grok
page site_name · https://grok.com/
E4
Main heading: What should we explore?
page h1 · https://grok.com/
E5
19 request(s) to grok.com
types: 4 other, 4 fetch, 4 ping
GET https://grok.com/download · other · 19 requests · network recording
E6
265 request(s) to cdn.grok.com
types: 247 script, 14 stylesheet, 4 font
GET https://cdn.grok.com/_next/static/chunks/04fx73_34obf_.css · script · 265 requests · network recording
E7
10 request(s) to cdn.cookielaw.org
types: 5 fetch, 2 script, 2 image
GET https://cdn.cookielaw.org/scripttemplates/otSDKStub.js · fetch · 10 requests · network recording
E8
1 request(s) to www.googletagmanager.com
types: 1 script
GET https://www.googletagmanager.com/gtm.js · script · network recording
E9
1 request(s) to static.cloudflareinsights.com
types: 1 script
GET https://static.cloudflareinsights.com/beacon.min.js/vce701823e78c4301a35b7e07294d87301792088814092 · script · network recording
E10
2 request(s) to challenges.cloudflare.com
types: 2 script
GET https://challenges.cloudflare.com/turnstile/v0/api.js · script · 2 requests · network recording
E11
1 request(s) to geolocation.onetrust.com
types: 1 xhr
GET https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location · xhr · network recording
E12
3 request(s) to js.stripe.com
types: 2 script, 1 document
GET https://js.stripe.com/dahlia/stripe.js · script · 3 requests · network recording
E13
2 request(s) to accounts.google.com
types: 1 script, 1 stylesheet
GET https://accounts.google.com/gsi/client · script · 2 requests · network recording
E14
2 request(s) to m.stripe.network
types: 1 document, 1 script
GET https://m.stripe.network/inner.html · document · 2 requests · network recording
E15
1 request(s) to m.stripe.com
types: 1 xhr
GET https://m.stripe.com/6 · xhr · network recording
E16
Cookie 'grok_device_id' set for grok.com
kept for about 400 days
cookie grok_device_id on grok.com · value not stored
E17
Cookie 'i18nextLng' set for grok.com
kept for about 365 days
cookie i18nextLng on grok.com · value not stored
E18
Cookie 'cf_clearance' set for grok.com
kept for about 365 days
cookie cf_clearance on grok.com · value not stored
E19
Cookie '__cf_bm' set for grok.com
kept for about 0 days
cookie __cf_bm on grok.com · value not stored
E20
Cookie '__cuid' set for grok.com
kept for about 400 days
cookie __cuid on grok.com · value not stored
E21
Cookie '__Host-id-token-nonce' set for grok.com
kept for about 0 days
cookie __Host-id-token-nonce on grok.com · value not stored
E22
Cookie 'OptanonConsent' set for grok.com
kept for about 365 days
cookie OptanonConsent on grok.com · value not stored
E23
Cookie 'g_state' set for grok.com
kept for about 180 days
cookie g_state on grok.com · value not stored
E24
Cookie 'm' set for m.stripe.com
kept for about 400 days
cookie m on m.stripe.com · value not stored
E25
Cookie '__stripe_mid' set for grok.com
kept for about 365 days
cookie __stripe_mid on grok.com · value not stored
E26
Cookie '__stripe_sid' set for grok.com
kept for about 0 days
cookie __stripe_sid on grok.com · value not stored
E27
localStorage: 8 key(s) saved in your browser
localStorage keys: i18nextLng, chat-preferences, useImagineModeStore, __cuid, ot_anonymous_id, grok-main-thread-watch:7bbd362f-aa89-460, modes-selected-id, xai-ff-bu · values not stored
E28
sessionStorage: 3 key(s) saved in your browser
sessionStorage keys: grok-main-thread-watch-tab, sentryReplaySession, useMediaStore · values not stored
E29
Next.js detected by REA (next-runtime)
confidence: high
grok.com/ · “next-runtime” · REA analyze-web-bundle 6.4.0
E30
React found in the code
cdn.grok.com/_next/static/chunks/033mxyh5piuw-.js @ 47:11119 · “react.element” · pattern scan
E31
ProseMirror / Tiptap editor found in the code
grok.com/ (page HTML) @ 28:14 · “ProseMirror” · pattern scan
E32
Google tag (gtag.js) found in the code
grok.com/ (page HTML) @ 18:101 · “gtag(” · pattern scan
E33
Mixpanel found in the code
cdn.grok.com/_next/static/chunks/3rz_3bqgquh7g.js @ 2:480315 · “api-js.mixpanel.com” · pattern scan
E34
Sentry found in the code
cdn.grok.com/_next/static/chunks/033mxyh5piuw-.js @ 2:420 · “@sentry/” · pattern scan
E35
Stripe.js found in the code
grok.com/ (page HTML) @ 134:31 · “js.stripe.com” · pattern scan
E36
NextAuth / Auth.js found in the code
cdn.grok.com/_next/static/chunks/3-g58ya4o9bnd.js @ 2:299797 · “/api/auth/session” · pattern scan
E37
Cloudflare Turnstile found in the code
grok.com/ (page HTML) @ 34:10088 · “challenges.cloudflare.com/turnstile” · pattern scan
E38
Uses the browser ability: geolocation
can ask for your location
cdn.grok.com/_next/static/chunks/3rp-wg3hnqi-k.js @ 6:6121 · “navigator.geolocation.getCurrentPosition” · pattern scan
E39
Uses the browser ability: camera_mic
can ask to use your camera or microphone
cdn.grok.com/_next/static/chunks/3rp-wg3hnqi-k.js @ 6:130849 · “getUserMedia(” · pattern scan
E40
Uses the browser ability: notifications
can ask to send you notifications
cdn.grok.com/_next/static/chunks/3rp-wg3hnqi-k.js @ 6:608 · “Notification.requestPermission” · pattern scan
E41
Uses the browser ability: clipboard_write
can copy text to your clipboard
cdn.grok.com/_next/static/chunks/1-vwv8-lk5rlb.js @ 2:6928 · “clipboard.writeText(” · pattern scan
E42
Uses the browser ability: indexeddb
stores data in your browser's built-in database
cdn.grok.com/_next/static/chunks/3rz_3bqgquh7g.js @ 2:399664 · “indexedDB.open(” · pattern scan
E43
Uses the browser ability: local_storage
saves small bits of data in your browser
cdn.grok.com/_next/static/chunks/3rp-wg3hnqi-k.js @ 7:73779 · “localStorage.setItem(” · pattern scan
E44
Uses the browser ability: websocket
keeps a live two-way connection open to a server
cdn.grok.com/_next/static/chunks/3rp-wg3hnqi-k.js @ 7:6189 · “new WebSocket(” · pattern scan
E45
Uses the browser ability: web_worker
runs work in a background thread
cdn.grok.com/_next/static/chunks/033mxyh5piuw-.js @ 17:22646 · “new Worker(” · pattern scan
E46
Uses the browser ability: canvas
draws graphics on a canvas
cdn.grok.com/_next/static/chunks/3rp-wg3hnqi-k.js @ 7:3020 · “getContext("2d"” · pattern scan
E47
The page called /monitoring on grok.com (POST)
POST https://grok.com/monitoring · fetch · network recording
E48
The page called /api/auth/session on grok.com (GET)
GET https://grok.com/api/auth/session · fetch · network recording
E49
The page called /api/auth/oauth/id-token/nonce on grok.com (POST)
POST https://grok.com/api/auth/oauth/id-token/nonce · fetch · network recording
E50
The code names the endpoint /api/update-team-cookie
cdn.grok.com/_next/static/chunks/3rp-wg3hnqi-k.js @ 6:68396 · “/api/update-team-cookie” · pattern scan
E51
The code names the endpoint /api/clear-team-cookie
cdn.grok.com/_next/static/chunks/3rp-wg3hnqi-k.js @ 6:68601 · “/api/clear-team-cookie” · pattern scan
E52
The code names the endpoint /rest/app-deployer/v1/projects/{project_id}/custom-domains
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:15246 · “/rest/app-deployer/v1/projects/{project_id}/custom-domains” · pattern scan
E53
The code names the endpoint /rest/app-deployer/v1/moderation-reports
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:16095 · “/rest/app-deployer/v1/moderation-reports” · pattern scan
E54
The code names the endpoint /rest/app-deployer/v1/deployments/{deployment_id}/status
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:16953 · “/rest/app-deployer/v1/deployments/{deployment_id}/status” · pattern scan
E55
The code names the endpoint /rest/app-deployer/v1/custom-domains/{domain_id}
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:18116 · “/rest/app-deployer/v1/custom-domains/{domain_id}” · pattern scan
E56
The code names the endpoint /rest/app-deployer/v1/deployments/{deployment_id}/build-logs
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:18780 · “/rest/app-deployer/v1/deployments/{deployment_id}/build-logs” · pattern scan
E57
The code names the endpoint /rest/app-deployer/v1/deployments:latest
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:19460 · “/rest/app-deployer/v1/deployments:latest” · pattern scan
E58
The code names the endpoint /rest/app-deployer/v1/projects/{project_id}/remix-eligibility
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:19942 · “/rest/app-deployer/v1/projects/{project_id}/remix-eligibility” · pattern scan
E59
The code names the endpoint /rest/app-deployer/v1/x-shares/{share_id}
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:20613 · “/rest/app-deployer/v1/x-shares/{share_id}” · pattern scan
E60
The code names the endpoint /rest/app-deployer/v1/projects:init
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:21595 · “/rest/app-deployer/v1/projects:init” · pattern scan
E61
The code names the endpoint /rest/app-deployer/v1/projects/{project_id}/x-share:initiate
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:22567 · “/rest/app-deployer/v1/projects/{project_id}/x-share:initiate” · pattern scan
E62
The code names the endpoint /rest/app-deployer/v1/projects/{project_id}/shares
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:23446 · “/rest/app-deployer/v1/projects/{project_id}/shares” · pattern scan
E63
The code names the endpoint /rest/app-deployer/v1/projects/{project_id}/env-vars
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:25240 · “/rest/app-deployer/v1/projects/{project_id}/env-vars” · pattern scan
E64
The code names the endpoint /rest/app-deployer/v1/projects
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:25849 · “/rest/app-deployer/v1/projects” · pattern scan
E65
The code names the endpoint /rest/app-deployer/v1/ping
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:26270 · “/rest/app-deployer/v1/ping” · pattern scan
E66
The code names the endpoint /rest/app-deployer/v1/deployments/{deployment_id}
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:26764 · “/rest/app-deployer/v1/deployments/{deployment_id}” · pattern scan
E67
The code names the endpoint /rest/app-deployer/v1/custom-domains/{domain_id}:remove
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:27495 · “/rest/app-deployer/v1/custom-domains/{domain_id}:remove” · pattern scan
E68
The code names the endpoint /rest/app-deployer/v1/projects/{project_id}/env-vars:batchDelete
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:28221 · “/rest/app-deployer/v1/projects/{project_id}/env-vars:batchDelete” · pattern scan
E69
The code names the endpoint /rest/app-deployer/v1/projects/{project_id}/shares:remove
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:29112 · “/rest/app-deployer/v1/projects/{project_id}/shares:remove” · pattern scan
E70
The code names the endpoint /rest/app-deployer/v1/projects/{project_id}/visibility
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:29965 · “/rest/app-deployer/v1/projects/{project_id}/visibility” · pattern scan
E71
The code names the endpoint /rest/app-deployer/v1/projects/{project_id}/env-vars:batchSet
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:30867 · “/rest/app-deployer/v1/projects/{project_id}/env-vars:batchSet” · pattern scan
E72
The code names the endpoint /rest/app-deployer/v1/projects/{project_id}/forking
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:31847 · “/rest/app-deployer/v1/projects/{project_id}/forking” · pattern scan
E73
The code names the endpoint /rest/app-deployer/v1/projects/{project_id}/xai-api-key
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:32689 · “/rest/app-deployer/v1/projects/{project_id}/xai-api-key” · pattern scan
E74
The code names the endpoint /rest/app-deployer/v1/projects/{project_id}/shares:add
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:33509 · “/rest/app-deployer/v1/projects/{project_id}/shares:add” · pattern scan
E75
The code names the endpoint /rest/app-deployer/v1/projects/{project_id}:unpublish
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:34324 · “/rest/app-deployer/v1/projects/{project_id}:unpublish” · pattern scan
E76
The code names the endpoint /rest/automations
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:85603 · “/rest/automations” · pattern scan
E77
The code names the endpoint /rest/automations/{taskId}
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:86216 · “/rest/automations/{taskId}” · pattern scan
E78
The code names the endpoint /v1/automations/runs/{runId}
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:87258 · “/v1/automations/runs/{runId}” · pattern scan
E79
The code names the endpoint /rest/automations/{taskId}/runs
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:88779 · “/rest/automations/{taskId}/runs” · pattern scan
E80
The code names the endpoint /rest/automations/catalog
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:89735 · “/rest/automations/catalog” · pattern scan
E81
The code names the endpoint /rest/automations/trigger-resources
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:90290 · “/rest/automations/trigger-resources” · pattern scan
E82
The code names the endpoint /rest/automations/{taskId}/enabled
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:91255 · “/rest/automations/{taskId}/enabled” · pattern scan
E83
The code names the endpoint /rest/automations/webhook/rotate-secret
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:91897 · “/rest/automations/webhook/rotate-secret” · pattern scan
E84
The code names the endpoint /rest/automations/{taskId}/run
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:92808 · “/rest/automations/{taskId}/run” · pattern scan
E85
The code names the endpoint /v1/automations/{taskId}/trigger
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:93505 · “/v1/automations/{taskId}/trigger” · pattern scan
E86
The code names the endpoint /rest/conversations/files/imagine-asset
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:100158 · “/rest/conversations/files/imagine-asset” · pattern scan
E87
The code names the endpoint /rest/conversations/files/download-zip
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:100799 · “/rest/conversations/files/download-zip” · pattern scan
E88
The code names the endpoint /rest/conversations/{conversationId}/files/content
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:101560 · “/rest/conversations/{conversationId}/files/content” · pattern scan
E89
The code names the endpoint /rest/conversations/files/content
cdn.grok.com/_next/static/chunks/2m7ow25bnkwhx.js @ 2:102128 · “/rest/conversations/files/content” · pattern scan
E90
4 links to pages on the same site
page links · https://grok.com/ · /, /imagine, /sign-in, /sign-up

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id sccqRDgf.