# OX Security finds expired domains behind publicly listed AI tool servers

_Published Tuesday, October 6, 2026 at 8:41 AM EDT · Security, AI · Latest · Tier 2 — Notable_

![OX Security finds expired domains behind publicly listed AI tool servers — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhd9ijWk9zlAlr4Ogzkb3OyeREM6GDYe0AZx5DQ-TmdUPN5ogFXFM0Z9Lh-qdG1CAIVdBX7cV7NSfgEk_yBtaTFCPdIjAo23ixCfHqa4j1m8FY2cRfmdcrd4GZNn-5QQScWonyO6GDRx6RA1ZRcuW9tAmCOFG9u7KQbWx3fftJ921w8rUqHx4ya_5CFuJM/s1700-nu-rw-lo-l85-e365/ox.png.jpg)

OX Security found six expired domains behind publicly listed Model Context Protocol servers that anyone could register for $4 to $12 a year. These servers connect AI agents to tools and data; a new domain owner could receive requests from agents still configured to use the old server identity.

The company analyzed 15,465 publicly indexed servers across 5 registries, deduplicating them to 5,095 unique hostnames. It found that 2.3% no longer resolved and 0.45% routed traffic through consumer tunneling services. OX also cautioned that remote servers can run code different from their public repositories.

## Sources

- [The Hacker News](https://thehackernews.com/2026/10/welcome-to-jungle-what-we-found-inside.html)

---
Canonical: https://techandbusiness.org/newswire/sMGs6GmAg4H7mDXpQ9TPDn
Published: 2026-10-06T12:41:42.064Z
Story chronology: 2026-10-06T11:02:30.000Z
Retrieved: 2026-10-06T14:21:02.714Z
Publisher: Tech & Business (techandbusiness.org)