Domain
join.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of join.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
4
A/AAAA targets
Subdomains
18
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
21
in our scans
DNS Records
A
104.20.25.174, 172.66.155.68
AAAA
2606:4700:10::6814:19ae, 2606:4700:10::ac42:9b44
MX
1 aspmx.l.google.com, 10 aspmx2.googlemail.com, 10 aspmx3.googlemail.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
clayton.ns.cloudflare.com, journey.ns.cloudflare.com
TXT
MS=93EB2F9ED1D2406DFB1DCE7EC87538C0D338BAA4, detectify-verification=b83668654ea6d415c1f09675639f49f6, facebook-domain-verification=gdi7ron8li5j1p2y071i1dzm7x3ikn, google-site-verification=O2t9Hgx708PQvBYijkZnOZS0SW63D_R3YWaJPtkp6bk, google-site-verification=yqCwOIkEOc1329nzN_RE1G4h2cP8lK0ZDyJ-M7ovyhw, stripe-verification=36a9877e50d4e1c02e0c0b4c3c606f5ba70d87c5dddf07a5747d25f531e8fd3f, v=spf1 include:spf.mandrillapp.com include:servers.mcsv.net include:_spf.google.com include:_spf.salesforce.com ~all
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: koljoin.com
Issuer: YR1
SANs: koljoin.com, www.koljoin.com
Subject: tejoin.com
Issuer: Amazon RSA 2048 M01
SANs: tejoin.com, www.tejoin.com
Subject: simpjoin.com
Issuer: YR2
SANs: simpjoin.com, www.simpjoin.com
Subject: 91join.com
Issuer: YR2
SANs: 91join.com, www.91join.com
Subject: gllue.top-join.com
Issuer: Encryption Everywhere DV TLS CA - G1
SANs: gllue.top-join.com
Subject: light.net-join.com
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: light.net-join.com, www.light.net-join.com
Subject: cdn-public-assets.join.com
Issuer: WR3
SANs: cdn-public-assets.join.com
Subject: *.rejoin.com
Issuer: GeoTrust CN RSA CA G1
SANs: *.rejoin.com, rejoin.com
Subject: login.deskjoin.com
Issuer: YE1
SANs: login.deskjoin.com
Subject: www.purejoin.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: purejoin.com, www.purejoin.com
Subject: www.8ccafejoin.com.tw
Issuer: R12
SANs: www.8ccafejoin.com.tw
Subject: lmcis-id.e-join.com.tw
Issuer: E7
SANs: lmcis-id.e-join.com.tw
Subject: justjoin.com.br
Issuer: YR1
SANs: justjoin.com.br, www.justjoin.com.br
Subject: tejoin.com
Issuer: Amazon RSA 2048 M01
SANs: tejoin.com, www.tejoin.com
Subject: c2.click-to-join.com
Issuer: Amazon RSA 2048 M04
SANs: c2.click-to-join.com
Subject: mail1.onetouchjoin.com
Issuer: R12
SANs: mail1.onetouchjoin.com, onetouchjoin.com
Subject: *.linkjoin.com.tw
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.linkjoin.com.tw, linkjoin.com.tw
Subject: remotetaskjoin.com
Issuer: Amazon RSA 2048 M04
SANs: api.remotetaskjoin.com, remotetaskjoin.com, www.remotetaskjoin.com
Subject: 18join.com
Issuer: E8
SANs: *.18join.com, 18join.com
Subject: ergunajw.nmgjoin.com
Issuer: Encryption Everywhere DV TLS CA - G1
SANs: ergunajw.nmgjoin.com
Subject: e-join.com.tw
Issuer: Amazon RSA 2048 M01
SANs: *.e-join.com.tw, e-join.com.tw
Subject: qa-edu-vm01.rtjoin.com
Issuer: YR2
SANs: qa-edu-vm01.rtjoin.com
Subject: dify.cloudhis.nmgjoin.com
Issuer: LiteSSL RSA CA 2025
SANs: dify.cloudhis.lingji.vip, dify.cloudhis.nmgjoin.com
Subject: api.tooljoin.com
Issuer: Encryption Everywhere DV TLS CA - G1
SANs: api.tooljoin.com
Subject: www.tanjoin.com
Issuer: R11
SANs: tanjoin.com, www.tanjoin.com
Subject: *.picsjoin.com
Issuer: WoTrus DV Server CA [Run by the Issuer]
SANs: *.picsjoin.com, picsjoin.com
Subject: www.rtcjoin.com
Issuer: Starfield Secure Certificate Authority - G2
SANs: rtcjoin.com, www.rtcjoin.com
Subject: tejoin.com
Issuer: Amazon RSA 2048 M01
SANs: tejoin.com, www.tejoin.com
Subject: api.tooljoin.com
Issuer: Encryption Everywhere DV TLS CA - G1
SANs: api.tooljoin.com
Subject: secure-join.com
Issuer: WR1
SANs: *.secure-join.com, secure-join.com
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | MS=93EB2F9ED1D2406DFB1DCE7EC87538C0D338BAA4 | 2026-05-26 07:20:33.209 | 2026-07-23 03:16:45.249 |
| TXT | facebook-domain-verification=gdi7ron8li5j1p2y071i1dzm7x3ikn | 2026-05-26 07:20:33.209 | 2026-07-23 03:16:45.249 |
| TXT | detectify-verification=b83668654ea6d415c1f09675639f49f6 | 2026-05-26 07:20:33.209 | 2026-07-23 03:16:45.249 |
| MX | 10 aspmx3.googlemail.com | 2026-05-26 07:20:33.209 | 2026-07-23 03:16:45.249 |
| A | 172.66.155.68 | 2026-05-26 07:20:33.209 | 2026-07-23 03:16:45.249 |
| TXT | stripe-verification=36a9877e50d4e1c02e0c0b4c3c606f5ba70d87c5dddf07a5747d25f531e8fd3f | 2026-05-26 07:20:33.209 | 2026-07-23 03:16:45.249 |
| TXT | google-site-verification=O2t9Hgx708PQvBYijkZnOZS0SW63D_R3YWaJPtkp6bk | 2026-05-26 07:20:33.209 | 2026-07-23 03:16:45.249 |
| AAAA | 2606:4700:10::ac42:9b44 | 2026-05-26 07:20:33.209 | 2026-07-23 03:16:45.249 |
| NS | journey.ns.cloudflare.com | 2026-05-26 07:20:33.209 | 2026-07-23 03:16:45.249 |
| MX | 10 aspmx2.googlemail.com | 2026-05-26 07:20:33.209 | 2026-07-23 03:16:45.249 |
| TXT | google-site-verification=yqCwOIkEOc1329nzN_RE1G4h2cP8lK0ZDyJ-M7ovyhw | 2026-05-26 07:20:33.209 | 2026-07-23 03:16:45.249 |
| MX | 5 alt2.aspmx.l.google.com | 2026-05-26 07:20:33.209 | 2026-07-23 03:16:45.249 |
| MX | 1 aspmx.l.google.com | 2026-05-26 07:20:33.209 | 2026-07-23 03:16:45.249 |
| NS | clayton.ns.cloudflare.com | 2026-05-26 07:20:33.209 | 2026-07-23 03:16:45.249 |
| MX | 5 alt1.aspmx.l.google.com | 2026-05-26 07:20:33.209 | 2026-07-23 03:16:45.249 |
| TXT | v=spf1 include:spf.mandrillapp.com include:servers.mcsv.net include:_spf.google.com include:_spf.salesforce.com ~all | 2026-05-26 07:20:33.209 | 2026-07-23 03:16:45.249 |
| AAAA | 2606:4700:10::6814:19ae | 2026-05-26 07:20:33.209 | 2026-07-23 03:16:45.249 |
| A | 104.20.25.174 | 2026-05-26 07:20:33.209 | 2026-07-23 03:16:45.249 |