How privacy works
Private lookups are not added to public searches, stored reports or change history. This does not remove a report that was already public. Your choice lasts for this browser session.
Who hosts x.com?
Answer
x.com sits behind Fastly, which hides the server that really hosts it.
Checked yesterday from Cloudflare MRS in 286 ms. This is a saved result.
The site is behind a proxy and its pages do not reveal the platform underneath.
What needs attention
Prioritized observations from this check. Review changes with whoever manages the website.
- Improve
Review browser security headers
Content-Security-Policy, Permissions-Policy did not meet the conservative header checks. This is not a complete security audit.
Next step: Review these headers with the site developer and test policy changes before enforcing them.
Evidence by layer
The company operating a network and the company selling the hosting can be different.
- CDN / proxy
- FastlyInferred
Network operators
Fastly
Network ownership alone does not confirm the retail hosting provider.
How we know
- 151.101.130.146 belongs to AS54113 (Fastly)
Servers
The addresses the name points to and the networks that own them.
- 151.101.130.146Fastly
No IPv6 address.
Website
What the site answered when we visited its home page.
- Status
- 200 OK
- Address
- https://x.com/
- Page title
- X. It’s what’s happening / X
- HTTPS
- Yes
- HTTP/3
- Not advertised
- Response time
- 199 ms from Cloudflare MRS
Security headers
- Strict-Transport-Security
- Content-Security-Policy (too weak)
- Clickjacking protection
- X-Content-Type-Options
- Referrer-Policy
- Permissions-Policy
DNS
Who answers for the domain name, and its records.
- DNS provider
- twtrdns.net
- Name servers
- a.r10.twtrdns.net
a.u10.twtrdns.net
b.r10.twtrdns.net
b.u10.twtrdns.net
c.r10.twtrdns.net
c.u10.twtrdns.net
d.r10.twtrdns.net
d.u10.twtrdns.net - Zone
- x.com
- DNSSEC
- Not signed
- Certificates
- Any certificate authority (no CAA record)
All DNS records (38)
| Type | Name | Value | TTL |
|---|---|---|---|
| A | x.com | 151.101.130.146 | 289 |
| NS | x.com | a.r10.twtrdns.net | 10884 |
| NS | x.com | a.u10.twtrdns.net | 10884 |
| NS | x.com | b.r10.twtrdns.net | 10884 |
| NS | x.com | b.u10.twtrdns.net | 10884 |
| NS | x.com | c.r10.twtrdns.net | 10884 |
| NS | x.com | c.u10.twtrdns.net | 10884 |
| NS | x.com | d.r10.twtrdns.net | 10884 |
| NS | x.com | d.u10.twtrdns.net | 10884 |
| MX | x.com | 1 aspmx.l.google.com | 64 |
| MX | x.com | 10 alt3.aspmx.l.google.com | 64 |
| MX | x.com | 10 alt4.aspmx.l.google.com | 64 |
| MX | x.com | 5 alt1.aspmx.l.google.com | 64 |
| MX | x.com | 5 alt2.aspmx.l.google.com | 64 |
| TXT | x.com | 3089463 | 300 |
| TXT | x.com | central-10416 | 300 |
| TXT | x.com | _w548xs1kfxtlqk3jyx19bzwk34c473i | 300 |
| TXT | x.com | kkdl3qb3tcrmdhfsm803p67r0my0svs8 | 300 |
| TXT | x.com | apple-domain-verification=sEij6tJOW11fVNrG | 300 |
| TXT | x.com | adobe-sign-verification=c693a744ee2d282a36a43e6e724c5ea | 300 |
| TXT | x.com | shopify-verification-code=cUZazKrqCWgcshrcGvgfFR1lieuhRF | 300 |
| TXT | x.com | slack-domain-verification=Csk4bjCPFnJaDLLaKFUwCTFuUpCVvnYlAm2Tba0i | 300 |
| TXT | x.com | google-site-verification=6Xapa1BbHGcpSKAIcPHcZsxuKK2yK9FCn3OpZDgUBSs | 300 |
| TXT | x.com | google-site-verification=8yQmoVhQedzlt36RPeQP41ytrEFk9aHEnde_xm0626g | 300 |
| TXT | x.com | google-site-verification=BT51mebIp7CbI7Qy_5Qg6LJLSBrLuCGQ_oznVAgfgKA | 300 |
| TXT | x.com | google-site-verification=F6u9mGL--d2lbLljvH3b1UUgXtevQPdcamKr9c8914A | 300 |
| TXT | x.com | google-site-verification=isX7U92-gLht5aKvjaPvQ9tWaxoqREy8agpAOcqlfIE | 300 |
| TXT | x.com | google-site-verification=lEZNYWieV7-UbDJafAm0u_RvNFb7GGqIYWAP4JmG5qs | 300 |
| TXT | x.com | google-site-verification=rbRGYlOADDbtUYJTGd8GEDm0PwPZExviDSaSH4JLR8Q | 300 |
| TXT | x.com | google-site-verification=reUF-TgZq93ZGtzImw42sfYglI2hY0QiGRmfc4jeKbs | 300 |
| TXT | x.com | notion-domain-verification=BnCKbWESk142VKiGKHQ8PZkBfVoWYpsZxzl8Z95k0jB | 300 |
| TXT | x.com | atlassian-sending-domain-verification=bd424180-8645-4de5-bd6a-285479c7577a | 300 |
| TXT | x.com | stripe-verification=11AE5005048CF2B40BD2AC26DA89C512596CF727581C499E240549D95C37CEE0 | 300 |
| TXT | x.com | stripe-verification=46F7B88485621DC18923B43D12E90E6CDBCE232F2FEBCF084E6EFA91F6BA707D | 300 |
| TXT | x.com | adobe-idp-site-verification=ab4d9ce3473a73e81f46238da34ea4967fd5ac80e5c43fbfa8dff46d06a5321c | 300 |
| TXT | x.com | atlassian-domain-verification=j6u0o1PTkobCXC84uEF/sWpIPtaZURBVYqKzmTvT8wugLcHT1vvrzzA63iP1qSLN | 300 |
| TXT | x.com | figma-domain-verification=ee8420edd01965ba297f3438c907cfc6fbbaa1ee90a07b28f28bcfca8e6017bb-1729630998 | 300 |
| TXT | x.com | v=spf1 ip4:199.16.156.0/22 ip4:199.59.148.0/22 include:_spf.google.com include:_spf.salesforce.com include:_oerp.x.com include:phx1.rp.oracleemaildelivery.com include:iad1.rp.oracleemaildelivery.com -all | 300 |
Well protected against spoofing: SPF plus an enforced DMARC policy.
- Mailbox provider
- Google Workspace
- Mail servers
- 1 aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com - Allowed senders
- Google WorkspaceSalesforce
- SPF
- Mail from any other server is rejected.
- DMARC
- Spoofed mail is rejected.
- MTA-STS
- Not enabled
SPF and DMARC records
v=spf1 ip4:199.16.156.0/22 ip4:199.59.148.0/22 include:_spf.google.com include:_spf.salesforce.com include:_oerp.x.com include:phx1.rp.oracleemaildelivery.com include:iad1.rp.oracleemaildelivery.com -all
v=DMARC1; p=reject; rua=mailto:caf935f12c8645b2921b0749d1fcd49e@dmarc-reports.cloudflare.net
Domain registration
- Registrar
- GoDaddy.com, LLC
- Registered
- 2 Apr 1993 (33 years ago)
- Paid until
- 20 Oct 2034 (in 2914 days)
- Last changed
- 3 Dec 2024
- Status
- Deletion lock (registrar)Renewal lock (registrar)Transfer lock (registrar)Update lock (registrar)
- DNSSEC at registry
- No
- Source
- rdap.verisign.com
Connected services
Verification records in DNS show the domain is linked to these accounts.
AppleGoogle Search ConsoleStripeAdobeAtlassian
Observed changes
A compact record of what changed between public checks. Rechecks happen only when someone requests them.
History starts with saved public observations. No earlier changes are inferred.
Something look wrong? Report an incorrect result
Tell us which result needs a second look. Reports are reviewed privately and do not change detection automatically. Please do not include personal or confidential information.
Last 10 searches
| Domain Name | Host |
|---|---|
| byd.com | Unknown |
| tesla.com | Akamai (host hidden) |
| apple.com | Akamai (host hidden) |
| news.ycombinator.com | Unknown |
| hackernews.com | Unknown |
| seo.com | Kinsta |
| claude.ai | Unknown |
| dominom.com | Unknown |
| divinative.com | Cloudflare (host hidden) |