Domain
element.io
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of element.io
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
20
A/AAAA targets
Subdomains
84
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
9
in our scans
DNS Records
A
104.20.39.237, 172.66.165.154
AAAA
2606:4700:10::6814:27ed, 2606:4700:10::ac42:a59a
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
derek.ns.cloudflare.com, laura.ns.cloudflare.com
TXT
MS=ms48931578, TAILSCALE-CAj9ARjuMKGQdly31vrm, anthropic-domain-verification-7kr39c=2POmP07Uzzrv1U187HWZjtVbB, atlassian-domain-verification=FDyPKzzoqeaEx8cvuTAwllsanySV9SKc9YZVOlu80hn7ImiyfqKj98nEgxM6cY1t, google-site-verification=_4L0yyc8otGZhq9OLcnzRxnwL972_wJFKtp1O45iJ5o, google-site-verification=fpRfUBXWmiUclXBF2wzij_YpOtA_AGih6hRtBKNk4fM, google-site-verification=s4SIqkOKNkes8VS7hlQPI5X8p4Ww2L943WEr_2UQ_l4, jetbrains-domain-verification=7xqyfh7v6d1gx3s50dupjlhje
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| app.element.io | 2026-07-28 19:22:00.900 | |
| element.io | 2026-07-26 18:31:11.571 | |
| packages.element.io | 2026-07-20 19:17:59.331 | |
| status.element.io | 2026-06-21 18:27:12.120 | |
| meet.element.io | 2026-07-26 04:05:32.050 | |
| bookstack.tools.element.io | 2026-06-17 10:46:46.736 | |
| calendar-bot.tools.element.io | 2026-07-23 02:58:29.266 | |
| chat.element.io | 2026-06-16 18:17:46.598 | |
| customer.element.io | 2026-06-18 05:21:10.923 | |
| ems-docs.element.io | 2026-06-16 10:17:30.558 | |
| ess-auth.staging.element.io | 2026-06-16 20:51:27.512 | |
| fosdem-schedule-element-widget.hss.element.io | 2026-06-16 19:06:15.096 | |
| id.element.io | 2026-06-15 15:24:46.796 | |
| jwt.call.element.io | 2026-07-26 06:32:20.502 | |
| kas.gitlab.element.io | 2026-07-26 18:56:30.993 | |
| registry.element.io | 2026-07-23 12:09:02.132 | |
| spa.pro.element.io | 2026-06-23 10:06:14.429 | |
| argocd.infra.element.io | 1970-01-01 00:00:00.000 | |
| bastion.element.io | 1970-01-01 00:00:00.000 | |
| call.element.io | 1970-01-01 00:00:00.000 | |
| call.pro.element.io | 1970-01-01 00:00:00.000 | |
| dk2-staging.element.io | 1970-01-01 00:00:00.000 | |
| download.onprem.element.io | 1970-01-01 00:00:00.000 | |
| element-staging.element.io | 1970-01-01 00:00:00.000 | |
| element-web-develop.element.io | 1970-01-01 00:00:00.000 | |
| element.element.io | 1970-01-01 00:00:00.000 | |
| ems.element.io | 1970-01-01 00:00:00.000 | |
| id.staging.element.io | 1970-01-01 00:00:00.000 | |
| inm7.element.io | 1970-01-01 00:00:00.000 | |
| jay21867-staging.element.io | 1970-01-01 00:00:00.000 | |
| mas.element.io | 1970-01-01 00:00:00.000 | |
| mobile.element.io | 1970-01-01 00:00:00.000 | |
| modularbuildtest-e5bv.element.io | 1970-01-01 00:00:00.000 | |
| mozilla.element.io | 1970-01-01 00:00:00.000 | |
| mrtc-spa.pro.element.io | 1970-01-01 00:00:00.000 | |
| posthog-metrics.element.io | 1970-01-01 00:00:00.000 | |
| rageshakes.element.io | 1970-01-01 00:00:00.000 | |
| sentry-metrics.tools.element.io | 1970-01-01 00:00:00.000 | |
| sso.element.io | 1970-01-01 00:00:00.000 | |
| staging.element.io | 1970-01-01 00:00:00.000 | |
| synapse-spa.pro.element.io | 1970-01-01 00:00:00.000 | |
| talk.element.io | 2026-07-28 12:13:49.425 | |
| turn-spa.pro.element.io | 1970-01-01 00:00:00.000 | |
| turn.call.element.io | 1970-01-01 00:00:00.000 | |
| turn.spa.pro.element.io | 1970-01-01 00:00:00.000 | |
| vault.infra.element.io | 1970-01-01 00:00:00.000 | |
| voip-sip-poc.element.io | 1970-01-01 00:00:00.000 | |
| vpn.infra.element.io | 1970-01-01 00:00:00.000 | |
| water-cooler.element.io | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: ssfs-ethan-oct16.exelement.io
Issuer: WR3
SANs: ssfs-ethan-oct16.exelement.io
Subject: ssfs-chatgpt.exelement.io
Issuer: WR3
SANs: ssfs-chatgpt.exelement.io
Subject: ssfs-perplexity.exelement.io
Issuer: WR3
SANs: ssfs-perplexity.exelement.io
Subject: element.io.ru.net
Issuer: E8
SANs: element.io.ru.net
Subject: *.element.io
Issuer: R12
SANs: *.element.io, *.ems.host, *.modular.im, *.riot.im
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
83.136.255.76:443
href · ×2
89.116.220.78:80
href · ×1
77.221.156.155:443
href · ×1
54.202.124.80:443
href · ×1
185.226.93.195:443
href · ×1
82.65.3.49:443
href · ×1
168.119.3.232:443
href · ×1
66.63.187.130:80
href · ×1
136.243.233.131:443
href · ×1
143.198.204.61:443
href · ×1
77.239.98.155:8443
href · ×1
91.219.238.101:80
href · ×1
45.79.182.8:443
href · ×1
159.195.149.217:80
href · ×1
92.252.241.248:443
href · ×1
151.245.136.214:443
href · ×1
149.56.241.130:443
href · ×1
95.173.179.236:443
href · ×1
65.108.54.176:443
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| A | 172.66.165.154 | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| NS | derek.ns.cloudflare.com | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| TXT | MS=ms48931578 | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| TXT | google-site-verification=fpRfUBXWmiUclXBF2wzij_YpOtA_AGih6hRtBKNk4fM | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| TXT | google-site-verification=s4SIqkOKNkes8VS7hlQPI5X8p4Ww2L943WEr_2UQ_l4 | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| TXT | stripe-verification=1f46d5bd78ed2269f7c450125f067adffdd7b21c78617e09863acfc5c7bc40e0 | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| TXT | jetbrains-domain-verification=7xqyfh7v6d1gx3s50dupjlhje | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| NS | laura.ns.cloudflare.com | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| TXT | v=spf1 include:_spf.google.com include:amazonses.com include:24880693.spf08.hubspotemail.net ip4:94.237.52.96 ip6:2a04:3541:1000:500:6866:a4ff:fe4c:7cce ip4:64.147.108.0/24 ip4:173.228.157.0/24 ~all | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| TXT | TAILSCALE-CAj9ARjuMKGQdly31vrm | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| TXT | anthropic-domain-verification-7kr39c=2POmP07Uzzrv1U187HWZjtVbB | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| MX | 5 alt2.aspmx.l.google.com | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| MX | 10 alt4.aspmx.l.google.com | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| MX | 1 aspmx.l.google.com | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| TXT | google-site-verification=_4L0yyc8otGZhq9OLcnzRxnwL972_wJFKtp1O45iJ5o | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| MX | 5 alt1.aspmx.l.google.com | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| AAAA | 2606:4700:10::ac42:a59a | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| A | 104.20.39.237 | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| MX | 10 alt3.aspmx.l.google.com | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| AAAA | 2606:4700:10::6814:27ed | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |
| TXT | atlassian-domain-verification=FDyPKzzoqeaEx8cvuTAwllsanySV9SKc9YZVOlu80hn7ImiyfqKj98nEgxM6cY1t | 2026-05-26 04:07:00.841 | 2026-07-26 18:31:11.571 |