Skip to content

Domains and IP addresses

This document contains a list of all domains users of your EMS hosted cloud server needs permission to connect to. The list may include content delivery or telemetry endpoints which may not be required, but not allowing them may have unintended effects. Blocking any endpoints is not a supported environment.

This page was last updated on January 30, 2024. Subject to change at any time without notice.

We do not guarantee any IP addresses or CNAME values for EMS services. Both can change at any time without notice. We also cannot make any guarantees about external services, for example api.github.com.

Dependencies for services hosted by third parties, for example status.element.io, are outside our control and may change at any time without notice.

Domains

Base Domains

  • https://sentry.tools.element.io:443/tcp

Homeserver

This is the endpoint where your clients connect to the EMS Matrix homeserver. It is required for all services

  • https://ems-hostname.ems.host:443/tcp

If your EMS server was set up before mid-2020, you also need https://ems-hostname.modular.im:443/tcp

Element

This is where your Element Web client is hosted. It is required for most services.

  • https://ems-hostname.element.io:443/tcp

If your EMS server was set up before mid-2020, you also need https://ems-hostname.riot.im:443/tcp

Custom Element Web DNS

If you have Custom DNS configured for your Element Web client, https://custom-dns-element-web.com:443/tcp will be required in addition to https://ems-hostname.element.io:443/tcp for all services accessed through Element.

Element Desktop

For Element Desktop, neither https://ems-hostname.element.io:443/tcp or https://custom-dns-element-web.com:443/tcp are required when accessing any service through Element.

Identity Server

See What is an Identity Server, and how does it work? in the FAQ.

  • https://vector.im:443/tcp

Element Call

https://call.element.io/

  • https://call.element.io:443/tcp
  • https://call.ems.host:443/tcp
  • https://livekit-jwt.call.element.io:443/tcp
  • https://posthog-element-call.element.io:443/tcp

SFU

  • wss://sfu.call.element.io

Google STUN

  • stun.l.google.com:19302/udp
  • stun1.l.google.com:19302/udp

Element Web

https://ems-hostname.element.io

Base domains only

EMS Control Panel

https://ems.element.io/user/hosting

  • https://custom-dns-homeserver.com:443/tcp
  • https://ems.element.io:443/tcp
  • https://id.element.io:443/tcp
  • https://js.stripe.com:443/tcp
  • https://m.stripe.com:443/tcp
  • https://m.stripe.network:443/tcp
  • https://matomo.riot.im:443/tcp
  • https://pay.stripe.com:443/tcp
  • https://sentry.matrix.org:443/tcp

EMS Documentation

https://element-hq.github.io/synapse/latest/ https://element-hq.github.io/synapse/latest/ https://ems-docs.element.io/ https://matrix-org.github.io/matrix-hookshot/latest/index.html

  • https://api.github.com:443/tcp
  • https://element-hq.github.io:443/tcp
  • https://ems-docs.element.io:443/tcp
  • https://fonts.googleapis.com:443/tcp
  • https://github.com:443/tcp
  • https://img.shields.io:443/tcp
  • https://matrix-org.github.io:443/tcp
  • https://sonarcloud.io:443/tcp
  • https://user-images.githubusercontent.com:443/tcp
  • https://web-docs.element.dev:443/tcp

EMS Status page

https://status.element.io/

  • https://dka575ofm4ao0.cloudfront.net:443/tcp, possibly *.cloudfront.net
  • https://fonts.gstatic.com:443/tcp
  • https://polyfill.io:443/tcp
  • https://status.element.io:443/tcp
  • https://www.google.com:443/tcp
  • https://www.gstatic.com:443/tcp
  • https://www.recaptcha.net:443/tcp

Hookshot (Dedicated)

Base domains only

Identity Server

  • https://matrix.org:443/tcp, for loading a logo/image on email verification page, not required

Integration Server

  • https://integrations.element.io:443/tcp
  • https://integrations.ems.host:443/tcp
  • https://scalar.vector.im:443/tcp

Integration Widgets

The integration Server is required for all widgets

Ethercalc

  • https://ethercalc.net:443/tcp
  • wss://ethercalc.net

Etherpad

  • https://etherpad.integrations.element.io:443/tcp
  • wss://etherpad.integrations.element.io

Feeds

Base domains and Integration Server domains only

GitHub

Base domains and Integration Server domains only

Connect/Authenticate
  • https://api.github.com:443/tcp
  • https://avatars.githubusercontent.com:443/tcp
  • https://collector.github.com:443/tcp
  • https://github.com:443/tcp
  • https://github.githubassets.com:443/tcp

Google Calendar

Base domains and Integration Server domains only

Grafana

Base domains and Integration Server domains only

Jitsi

https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-docker/#external-ports

  • https://meet.element.io:10000/udp
  • https://meet.element.io:20000-20050/udp
  • https://meet.element.io:443/tcp
  • https://meet.element.io:80/tcp
  • https://www.gravatar.com:443/tcp
  • wss://meet.element.io

Spotify

  • https://apresolve.spotify.com:443/tcp
  • https://embed-cdn.spotifycdn.com:443/tcp
  • https://encore.scdn.co:443/tcp
  • https://gew1-spclient.spotify.com:443/tcp
  • https://i.scdn.co:443/tcp
  • https://open.spotify.com:443/tcp
  • https://p.scdn.co:443/tcp
  • https://spclient.wg.spotify.com:443/tcp
  • https://web-sdk-assets.spotifycdn.com:443/tcp

Sticker packs

  • https://matrix.org:443/tcp

TradingView

  • https://economic-calendar.tradingview.com:443/tcp
  • https://s.tradingview.com:443/tcp
  • https://s3-symbol-logo.tradingview.com:443/tcp
  • https://s3.tradingview.com:443/tcp
  • https://static.tradingview.com:443/tcp
  • https://www.tradingview-widget.com:443/tcp
  • wss://pushstream.tradingview.com
  • wss://widgetdata.tradingview.com

YouTube

  • https://fonts.gstatic.com:443/tcp
  • https://googleads.g.doubleclick.net:443/tcp
  • https://i.ytimg.com:443/tcp
  • https://jnn-pa.googleapis.com:443/tcp
  • https://rr5---sn-aigzrn7e.googlevideo.com:443/tcp, possibly *.googlevideo.com
  • https://static.doubleclick.net:443/tcp
  • https://www.google.com:443/tcp
  • https://www.gstatic.com:443/tcp
  • https://www.youtube.com:443/tcp
  • https://youtube.com:443/tcp
  • https://yt3.ggpht.com:443/tcp

Legacy call in Element client

Base domains only

Location Service (Maptiler)

  • https://api.maptiler.com:443/tcp

Open in OpenStreetMap

  • https://matomo.openstreetmap.org:443/tcp
  • https://tile.openstreetmap.org:443/tcp
  • https://www.openstreetmap.org:443/tcp

Sliding Sync

Base domains only

Synapse

Base domains only

Well-Known

If you have Custom DNS for your homeserver:

  • https://custom-dns-homeserver.com:443/tcp

Notification Service Element Proxy

Other

IP Addresses

We do not guarantee any IP addresses or CNAME values for EMS services. Both can change at any time without notice. We also cannot make any guarantees about external services, for example api.github.com.

But for your convenience, here are the IP addresses and CNAME values as seen on January 30, 2024.

Click to expand
dig +noall +answer all api.github.com
api.github.com.    9    IN    A    140.82.121.5

dig +noall +answer all api.maptiler.com
api.maptiler.com.    140    IN    A    104.17.88.87
api.maptiler.com.    140    IN    A    104.17.91.87
api.maptiler.com.    140    IN    A    104.17.90.87
api.maptiler.com.    140    IN    A    104.17.87.87
api.maptiler.com.    140    IN    A    104.17.89.87

dig +noall +answer all apresolve.spotify.com
apresolve.spotify.com.    293    IN    A    35.186.224.25

dig +noall +answer all avatars.githubusercontent.com
avatars.githubusercontent.com. 2561 IN    A    185.199.108.133
avatars.githubusercontent.com. 2561 IN    A    185.199.109.133
avatars.githubusercontent.com. 2561 IN    A    185.199.111.133
avatars.githubusercontent.com. 2561 IN    A    185.199.110.133

dig +noall +answer all call.element.io
call.element.io.    279    IN    A    172.67.12.112
call.element.io.    279    IN    A    104.22.49.198
call.element.io.    279    IN    A    104.22.48.198

dig +noall +answer all call.ems.host
call.ems.host.    263    IN    CNAME    k8s-core-coreingr-23262e92df-35e512c9110f05c6.elb.eu-north-1.amazonaws.com.
k8s-core-coreingr-23262e92df-35e512c9110f05c6.elb.eu-north-1.amazonaws.com. 23 IN A 13.48.142.24

dig +noall +answer all collector.github.com
collector.github.com.    3588    IN    CNAME    glb-db52c2cf8be544.github.com.
glb-db52c2cf8be544.github.com. 48 IN    A    140.82.113.22

dig +noall +answer all dka575ofm4ao0.cloudfront.net
dka575ofm4ao0.cloudfront.net. 23 IN    A    13.225.20.102
dka575ofm4ao0.cloudfront.net. 23 IN    A    13.225.20.200
dka575ofm4ao0.cloudfront.net. 23 IN    A    13.225.20.12
dka575ofm4ao0.cloudfront.net. 23 IN    A    13.225.20.70

dig +noall +answer all economic-calendar.tradingview.com
economic-calendar.tradingview.com. 20 IN A    89.43.104.119

dig +noall +answer all element-hq.github.io
element-hq.github.io.    3579    IN    A    185.199.108.153
element-hq.github.io.    3579    IN    A    185.199.110.153
element-hq.github.io.    3579    IN    A    185.199.109.153
element-hq.github.io.    3579    IN    A    185.199.111.153

dig +noall +answer all embed-cdn.spotifycdn.com
embed-cdn.spotifycdn.com. 286    IN    CNAME    tls13.spotifycdn.map.fastly.net.
tls13.spotifycdn.map.fastly.net. 16 IN    A    199.232.150.250

dig +noall +answer all ems-docs.element.io
ems-docs.element.io.    280    IN    CNAME    k8s-core-coreingr-b3bd03665a-d205ac2886bcb3d3.elb.eu-central-1.amazonaws.com.
k8s-core-coreingr-b3bd03665a-d205ac2886bcb3d3.elb.eu-central-1.amazonaws.com. 40 IN A 3.72.129.101

dig +noall +answer all ems.element.io
ems.element.io.    280    IN    CNAME    k8s-core-coreingr-baea756bc1-7748860684099c0d.elb.eu-central-1.amazonaws.com.
k8s-core-coreingr-baea756bc1-7748860684099c0d.elb.eu-central-1.amazonaws.com. 40 IN A 3.64.237.143

dig +noall +answer all encore.scdn.co
encore.scdn.co.    287    IN    CNAME    encore.spotifycdn.com.
encore.spotifycdn.com.    287    IN    CNAME    default.cdn-gslb.spotify.com.
default.cdn-gslb.spotify.com. 47 IN    CNAME    common-eipb-ak.spotifycdn.com.edgesuite.net.
common-eipb-ak.spotifycdn.com.edgesuite.net. 21587 IN CNAME squadcdn.scdn.co.splitter-eip.akadns.net.
squadcdn.scdn.co.splitter-eip.akadns.net. 47 IN    CNAME i.scdn.co-noeip.akamaized.net.
i.scdn.co-noeip.akamaized.net. 347 IN    CNAME    a1520.dscc.akamai.net.
a1520.dscc.akamai.net.    7    IN    A    2.18.121.83
a1520.dscc.akamai.net.    7    IN    A    2.18.121.91

dig +noall +answer all ethercalc.net
ethercalc.net.    280    IN    A    172.67.129.164
ethercalc.net.    280    IN    A    104.21.1.167

dig +noall +answer all etherpad.integrations.element.io
etherpad.integrations.element.io. 280 IN CNAME    k8s-core-coreingr-baea756bc1-7748860684099c0d.elb.eu-central-1.amazonaws.com.
k8s-core-coreingr-baea756bc1-7748860684099c0d.elb.eu-central-1.amazonaws.com. 40 IN A 3.64.237.143

dig +noall +answer all fonts.googleapis.com
fonts.googleapis.com.    23    IN    A    64.233.167.95

dig +noall +answer all fonts.gstatic.com
fonts.gstatic.com.    245    IN    A    108.177.15.94

dig +noall +answer all gew1-spclient.spotify.com
gew1-spclient.spotify.com. 236    IN    CNAME    edge-web-gew1.dual-gslb.spotify.com.
edge-web-gew1.dual-gslb.spotify.com. 86    IN A    35.186.224.18

dig +noall +answer all github.com
github.com.    6    IN    A    140.82.121.4

dig +noall +answer all github.githubassets.com
github.githubassets.com. 767    IN    A    185.199.108.154
github.githubassets.com. 767    IN    A    185.199.109.154
github.githubassets.com. 767    IN    A    185.199.110.154
github.githubassets.com. 767    IN    A    185.199.111.154

dig +noall +answer all googleads.g.doubleclick.net
googleads.g.doubleclick.net. 224 IN    A    173.194.76.156
googleads.g.doubleclick.net. 224 IN    A    173.194.76.157
googleads.g.doubleclick.net. 224 IN    A    173.194.76.155
googleads.g.doubleclick.net. 224 IN    A    173.194.76.154

dig +noall +answer all i.scdn.co
i.scdn.co.    287    IN    CNAME    image-scdn.cdn-gslb.spotify.com.
image-scdn.cdn-gslb.spotify.com. 47 IN    CNAME    scdnco.spotify.map.fastly.net.
scdnco.spotify.map.fastly.net. 17 IN    A    199.232.150.248

dig +noall +answer all i.ytimg.com
i.ytimg.com.    132    IN    A    173.194.76.119
i.ytimg.com.    132    IN    A    142.251.168.119
i.ytimg.com.    132    IN    A    64.233.167.119
i.ytimg.com.    132    IN    A    64.233.184.119
i.ytimg.com.    132    IN    A    66.102.1.119
i.ytimg.com.    132    IN    A    74.125.71.119
i.ytimg.com.    132    IN    A    74.125.206.119
i.ytimg.com.    132    IN    A    142.250.110.119
i.ytimg.com.    132    IN    A    64.233.166.119
i.ytimg.com.    132    IN    A    108.177.15.119
i.ytimg.com.    132    IN    A    74.125.133.119

dig +noall +answer all id.element.io
id.element.io.    279    IN    CNAME    k8s-core-coreingr-baea756bc1-7748860684099c0d.elb.eu-central-1.amazonaws.com.
k8s-core-coreingr-baea756bc1-7748860684099c0d.elb.eu-central-1.amazonaws.com. 39 IN A 3.64.237.143

dig +noall +answer all img.shields.io
img.shields.io.    285    IN    A    172.64.195.2
img.shields.io.    285    IN    A    172.64.194.2

dig +noall +answer all integrations.element.io
integrations.element.io. 279    IN    CNAME    k8s-core-coreingr-baea756bc1-7748860684099c0d.elb.eu-central-1.amazonaws.com.
k8s-core-coreingr-baea756bc1-7748860684099c0d.elb.eu-central-1.amazonaws.com. 39 IN A 3.64.237.143

dig +noall +answer all integrations.ems.host
integrations.ems.host.    263    IN    CNAME    k8s-core-coreingr-b3a4d5441e-11aa9fe745bc6bd9.elb.eu-central-1.amazonaws.com.
k8s-core-coreingr-b3a4d5441e-11aa9fe745bc6bd9.elb.eu-central-1.amazonaws.com. 23 IN A 3.73.156.240

dig +noall +answer all jnn-pa.googleapis.com
jnn-pa.googleapis.com.    260    IN    A    142.250.110.95
jnn-pa.googleapis.com.    260    IN    A    64.233.184.95
jnn-pa.googleapis.com.    260    IN    A    74.125.71.95
jnn-pa.googleapis.com.    260    IN    A    66.102.1.95
jnn-pa.googleapis.com.    260    IN    A    64.233.167.95
jnn-pa.googleapis.com.    260    IN    A    108.177.15.95
jnn-pa.googleapis.com.    260    IN    A    142.251.168.95
jnn-pa.googleapis.com.    260    IN    A    173.194.76.95
jnn-pa.googleapis.com.    260    IN    A    64.233.166.95
jnn-pa.googleapis.com.    260    IN    A    142.251.173.95
jnn-pa.googleapis.com.    260    IN    A    74.125.133.95
jnn-pa.googleapis.com.    260    IN    A    74.125.206.95

dig +noall +answer all js.stripe.com
js.stripe.com.    13    IN    CNAME    dexeqbeb7giwr.cloudfront.net.
dexeqbeb7giwr.cloudfront.net. 43 IN    A    13.227.219.58
dexeqbeb7giwr.cloudfront.net. 43 IN    A    13.227.219.97
dexeqbeb7giwr.cloudfront.net. 43 IN    A    13.227.219.101
dexeqbeb7giwr.cloudfront.net. 43 IN    A    13.227.219.27

dig +noall +answer all livekit-jwt.call.element.io
livekit-jwt.call.element.io. 279 IN    CNAME    k8s-core-coreingr-b3bd03665a-d205ac2886bcb3d3.elb.eu-central-1.amazonaws.com.
k8s-core-coreingr-b3bd03665a-d205ac2886bcb3d3.elb.eu-central-1.amazonaws.com. 39 IN A 3.72.129.101

dig +noall +answer all m.stripe.com
m.stripe.com.    48    IN    A    44.238.119.32
m.stripe.com.    48    IN    A    35.155.200.145
m.stripe.com.    48    IN    A    44.225.16.159
m.stripe.com.    48    IN    A    34.215.148.109
m.stripe.com.    48    IN    A    44.241.18.241
m.stripe.com.    48    IN    A    34.213.37.126
m.stripe.com.    48    IN    A    34.208.13.71
m.stripe.com.    48    IN    A    34.214.18.208

dig +noall +answer all m.stripe.network
m.stripe.network.    41    IN    CNAME    stripecdn.map.fastly.net.
stripecdn.map.fastly.net. 11    IN    A    151.101.128.176
stripecdn.map.fastly.net. 11    IN    A    151.101.64.176
stripecdn.map.fastly.net. 11    IN    A    151.101.192.176
stripecdn.map.fastly.net. 11    IN    A    151.101.0.176

dig +noall +answer all matomo.openstreetmap.org
matomo.openstreetmap.org. 107    IN    A    184.104.226.110

dig +noall +answer all matomo.riot.im
matomo.riot.im.    280    IN    A    104.26.5.138
matomo.riot.im.    280    IN    A    104.26.4.138
matomo.riot.im.    280    IN    A    172.67.70.226

dig +noall +answer all matrix-org.github.io
matrix-org.github.io.    3600    IN    A    185.199.110.153
matrix-org.github.io.    3600    IN    A    185.199.108.153
matrix-org.github.io.    3600    IN    A    185.199.109.153
matrix-org.github.io.    3600    IN    A    185.199.111.153

dig +noall +answer all matrix.org
matrix.org.    215    IN    A    172.67.19.90
matrix.org.    215    IN    A    104.20.201.37
matrix.org.    215    IN    A    104.20.200.37

dig +noall +answer all meet.element.io
meet.element.io.    580    IN    CNAME    k8s-global-88e07f8a34-1957068544.eu-central-1.elb.amazonaws.com.
k8s-global-88e07f8a34-1957068544.eu-central-1.elb.amazonaws.com. 40 IN A 54.93.211.59
k8s-global-88e07f8a34-1957068544.eu-central-1.elb.amazonaws.com. 40 IN A 3.124.80.226
k8s-global-88e07f8a34-1957068544.eu-central-1.elb.amazonaws.com. 40 IN A 3.121.134.149

dig +noall +answer all modular.im
modular.im.    280    IN    A    104.26.15.131
modular.im.    280    IN    A    104.26.14.131
modular.im.    280    IN    A    172.67.68.192

dig +noall +answer all open.spotify.com
open.spotify.com.    297    IN    CNAME    open.spotify.com.edgesuite.net.
open.spotify.com.edgesuite.net.    21597 IN CNAME    a1676.dscb.akamai.net.
a1676.dscb.akamai.net.    17    IN    A    104.97.14.88
a1676.dscb.akamai.net.    17    IN    A    104.97.14.106

dig +noall +answer all p.scdn.co
p.scdn.co.    266    IN    CNAME    scdnco.spotify.map.fastly.net.
scdnco.spotify.map.fastly.net. 30 IN    A    199.232.150.248

dig +noall +answer all pay.stripe.com
pay.stripe.com.    30    IN    A    198.202.176.141

dig +noall +answer all polyfill.io
polyfill.io.    201    IN    A    151.101.1.26
polyfill.io.    201    IN    A    151.101.129.26
polyfill.io.    201    IN    A    151.101.65.26
polyfill.io.    201    IN    A    151.101.193.26

dig +noall +answer all posthog-element-call.element.io
posthog-element-call.element.io. 280 IN    CNAME    k8s-core-coreingr-b3bd03665a-d205ac2886bcb3d3.elb.eu-central-1.amazonaws.com.
k8s-core-coreingr-b3bd03665a-d205ac2886bcb3d3.elb.eu-central-1.amazonaws.com. 40 IN A 3.72.129.101

dig +noall +answer all pushstream.tradingview.com
pushstream.tradingview.com. 56    IN    CNAME    pushstream-eu.tradingview.com.
pushstream-eu.tradingview.com. 56 IN    A    93.123.102.208

dig +noall +answer all riot.im
riot.im.    104    IN    A    172.67.70.226
riot.im.    104    IN    A    104.26.4.138
riot.im.    104    IN    A    104.26.5.138


dig +noall +answer all rr5---sn-aigzrn7e.googlevideo.com
rr5---sn-aigzrn7e.googlevideo.com. 1660    IN CNAME rr5.sn-aigzrn7e.googlevideo.com.
rr5.sn-aigzrn7e.googlevideo.com. 1660 IN A    173.194.5.42

dig +noall +answer all s.tradingview.com
s.tradingview.com.    24    IN    A    52.222.139.19
s.tradingview.com.    24    IN    A    52.222.139.111
s.tradingview.com.    24    IN    A    52.222.139.34
s.tradingview.com.    24    IN    A    52.222.139.36

dig +noall +answer all s3-symbol-logo.tradingview.com
s3-symbol-logo.tradingview.com.    193 IN    CNAME    s3-symbol-logo.b-cdn.net.
s3-symbol-logo.b-cdn.net. 35    IN    A    207.211.214.145

dig +noall +answer all s3.tradingview.com
s3.tradingview.com.    39    IN    A    52.222.139.42
s3.tradingview.com.    39    IN    A    52.222.139.40
s3.tradingview.com.    39    IN    A    52.222.139.55
s3.tradingview.com.    39    IN    A    52.222.139.94

dig +noall +answer all scalar.vector.im
scalar.vector.im.    280    IN    CNAME    k8s-core-coreingr-baea756bc1-7748860684099c0d.elb.eu-central-1.amazonaws.com.
k8s-core-coreingr-baea756bc1-7748860684099c0d.elb.eu-central-1.amazonaws.com. 40 IN A 3.64.237.143

dig +noall +answer all sentry.matrix.org
sentry.matrix.org.    580    IN    CNAME    k8s-global-88e07f8a34-1957068544.eu-central-1.elb.amazonaws.com.
k8s-global-88e07f8a34-1957068544.eu-central-1.elb.amazonaws.com. 40 IN A 3.124.80.226
k8s-global-88e07f8a34-1957068544.eu-central-1.elb.amazonaws.com. 40 IN A 3.121.134.149
k8s-global-88e07f8a34-1957068544.eu-central-1.elb.amazonaws.com. 40 IN A 54.93.211.59

dig +noall +answer all sentry.tools.element.io
sentry.tools.element.io. 165    IN    CNAME    k8s-core-coreingr-b3bd03665a-d205ac2886bcb3d3.elb.eu-central-1.amazonaws.com.
k8s-core-coreingr-b3bd03665a-d205ac2886bcb3d3.elb.eu-central-1.amazonaws.com. 25 IN A 3.72.129.101

dig +noall +answer all sfu.call.element.io
sfu.call.element.io.    280    IN    CNAME    k8s-core-coreingr-b3bd03665a-d205ac2886bcb3d3.elb.eu-central-1.amazonaws.com.
k8s-core-coreingr-b3bd03665a-d205ac2886bcb3d3.elb.eu-central-1.amazonaws.com. 40 IN A 3.72.129.101

dig +noall +answer all sonarcloud.io
sonarcloud.io.    29    IN    A    54.192.137.29
sonarcloud.io.    29    IN    A    54.192.137.113
sonarcloud.io.    29    IN    A    54.192.137.14
sonarcloud.io.    29    IN    A    54.192.137.16

dig +noall +answer all spclient.wg.spotify.com
spclient.wg.spotify.com. 298    IN    CNAME    edge-web.dual-gslb.spotify.com.
edge-web.dual-gslb.spotify.com.    148 IN    A    35.186.224.25

dig +noall +answer all static.doubleclick.net
static.doubleclick.net.    250    IN    A    173.194.76.149
static.doubleclick.net.    250    IN    A    173.194.76.148

dig +noall +answer all static.tradingview.com
static.tradingview.com.    277    IN    CNAME    d34vo3dglcgqwn.cloudfront.net.
d34vo3dglcgqwn.cloudfront.net. 37 IN    A    65.9.86.55
d34vo3dglcgqwn.cloudfront.net. 37 IN    A    65.9.86.43
d34vo3dglcgqwn.cloudfront.net. 37 IN    A    65.9.86.54
d34vo3dglcgqwn.cloudfront.net. 37 IN    A    65.9.86.53

dig +noall +answer all status.element.io
status.element.io.    280    IN    CNAME    lkh3j7gmv7x4.stspg-customer.com.
lkh3j7gmv7x4.stspg-customer.com. 40 IN    CNAME    status-element-io-ba0b601b-1586-41ca-9c10-db2237fdc2ed.saas.atlassian.com.
status-element-io-ba0b601b-1586-41ca-9c10-db2237fdc2ed.saas.atlassian.com. 40 IN A 18.239.83.57
status-element-io-ba0b601b-1586-41ca-9c10-db2237fdc2ed.saas.atlassian.com. 40 IN A 18.239.83.106
status-element-io-ba0b601b-1586-41ca-9c10-db2237fdc2ed.saas.atlassian.com. 40 IN A 18.239.83.90
status-element-io-ba0b601b-1586-41ca-9c10-db2237fdc2ed.saas.atlassian.com. 40 IN A 18.239.83.101

dig +noall +answer all tile.openstreetmap.org
tile.openstreetmap.org.    285    IN    CNAME    dualstack.n.sni.global.fastly.net.
dualstack.n.sni.global.fastly.net. 15 IN A    151.101.1.91
dualstack.n.sni.global.fastly.net. 15 IN A    151.101.129.91
dualstack.n.sni.global.fastly.net. 15 IN A    151.101.65.91
dualstack.n.sni.global.fastly.net. 15 IN A    151.101.193.91

dig +noall +answer all user-images.githubusercontent.com
user-images.githubusercontent.com. 1389    IN A    185.199.109.133
user-images.githubusercontent.com. 1389    IN A    185.199.111.133
user-images.githubusercontent.com. 1389    IN A    185.199.108.133
user-images.githubusercontent.com. 1389    IN A    185.199.110.133

dig +noall +answer all vector.im
vector.im.    31    IN    A    104.21.28.52
vector.im.    31    IN    A    172.67.144.66

dig +noall +answer all web-docs.element.dev
web-docs.element.dev.    300    IN    CNAME    vector-im.github.io.
vector-im.github.io.    3600    IN    A    185.199.110.153
vector-im.github.io.    3600    IN    A    185.199.111.153
vector-im.github.io.    3600    IN    A    185.199.109.153
vector-im.github.io.    3600    IN    A    185.199.108.153

dig +noall +answer all web-sdk-assets.spotifycdn.com
web-sdk-assets.spotifycdn.com. 268 IN    CNAME    tls13.spotifycdn.map.fastly.net.
tls13.spotifycdn.map.fastly.net. 24 IN    A    199.232.150.250

dig +noall +answer all widgetdata.tradingview.com
widgetdata.tradingview.com. 60    IN    CNAME    widgetdata-eu.tradingview.com.
widgetdata-eu.tradingview.com. 60 IN    A    92.223.127.141

dig +noall +answer all www.google.com
www.google.com.    271    IN    A    66.102.1.106
www.google.com.    271    IN    A    66.102.1.147
www.google.com.    271    IN    A    66.102.1.99
www.google.com.    271    IN    A    66.102.1.103
www.google.com.    271    IN    A    66.102.1.105
www.google.com.    271    IN    A    66.102.1.104

dig +noall +answer all www.gravatar.com
www.gravatar.com.    288    IN    A    192.0.73.2

dig +noall +answer all www.gstatic.com
www.gstatic.com.    24    IN    A    108.177.15.94

dig +noall +answer all www.openstreetmap.org
www.openstreetmap.org.    94    IN    A    184.104.179.139
www.openstreetmap.org.    94    IN    A    184.104.179.140
www.openstreetmap.org.    94    IN    A    184.104.179.141

dig +noall +answer all www.recaptcha.net
www.recaptcha.net.    272    IN    A    74.125.206.94

dig +noall +answer all www.tradingview-widget.com
www.tradingview-widget.com. 60    IN    A    52.222.139.32
www.tradingview-widget.com. 60    IN    A    52.222.139.106
www.tradingview-widget.com. 60    IN    A    52.222.139.108
www.tradingview-widget.com. 60    IN    A    52.222.139.128

dig +noall +answer all www.youtube.com
www.youtube.com.    252    IN    CNAME    youtube-ui.l.google.com.
youtube-ui.l.google.com. 252    IN    A    74.125.206.190
youtube-ui.l.google.com. 252    IN    A    64.233.166.136
youtube-ui.l.google.com. 252    IN    A    74.125.71.93
youtube-ui.l.google.com. 252    IN    A    74.125.206.136
youtube-ui.l.google.com. 252    IN    A    64.233.167.91
youtube-ui.l.google.com. 252    IN    A    74.125.71.91
youtube-ui.l.google.com. 252    IN    A    64.233.166.190
youtube-ui.l.google.com. 252    IN    A    64.233.166.93
youtube-ui.l.google.com. 252    IN    A    64.233.167.136
youtube-ui.l.google.com. 252    IN    A    64.233.167.190
youtube-ui.l.google.com. 252    IN    A    74.125.71.190
youtube-ui.l.google.com. 252    IN    A    74.125.71.136
youtube-ui.l.google.com. 252    IN    A    74.125.206.91
youtube-ui.l.google.com. 252    IN    A    64.233.166.91
youtube-ui.l.google.com. 252    IN    A    74.125.206.93
youtube-ui.l.google.com. 252    IN    A    64.233.167.93

dig +noall +answer all youtube.com
youtube.com.    198    IN    A    74.125.133.136
youtube.com.    198    IN    A    74.125.133.93
youtube.com.    198    IN    A    74.125.133.190
youtube.com.    198    IN    A    74.125.133.91

dig +noall +answer all yt3.ggpht.com
yt3.ggpht.com.    253    IN    CNAME    photos-ugc.l.googleusercontent.com.
photos-ugc.l.googleusercontent.com. 253    IN A    64.233.166.132

The values for your base domains will depend on your region and custom domain, here are the values for our Element.io EMS server with the EMS domain element.ems.host, Custom homeserver domain element.io, and custom Element Web domain chat.element.io:

dig +noall +answer all chat.element.io
chat.element.io.    300    IN    A    104.22.49.198
chat.element.io.    300    IN    A    172.67.12.112
chat.element.io.    300    IN    A    104.22.48.198

dig +noall +answer all element.element.io
element.element.io.    300    IN    CNAME    k8s-core-coreingr-b3a4d5441e-11aa9fe745bc6bd9.elb.eu-central-1.amazonaws.com.
k8s-core-coreingr-b3a4d5441e-11aa9fe745bc6bd9.elb.eu-central-1.amazonaws.com. 60 IN A 3.73.156.240

dig +noall +answer all element.ems.host
element.ems.host.    242    IN    CNAME    k8s-core-coreingr-b3a4d5441e-11aa9fe745bc6bd9.elb.eu-central-1.amazonaws.com.
k8s-core-coreingr-b3a4d5441e-11aa9fe745bc6bd9.elb.eu-central-1.amazonaws.com. 60 IN A 3.73.156.240

dig +noall +answer all element.io
element.io.    300    IN    A    104.22.48.198
element.io.    300    IN    A    104.22.49.198
element.io.    300    IN    A    172.67.12.112

Your .element.io and .ems.host IP will be in AWS' IP ranges in your hosting region (Frankfurt/eu-central-1, Stockholm/eu-north-1, London/eu-west-2, or Ohio/us-east-2).