Web Properties
Last reviewed on September 26, 2026This page lists the domains and other internet addresses that are operated by Cardinal Apps Inc.
A machine-readable list is available here.
Operated by Cardinal Apps Inc.
Domains
Cardinal Apps Inc. operates every subdomain of these domains, except the Media Server addresses under connect.cardinalapps.host.
Cardinal's scraper-friendly pages.
Cardinal's cloud platform.
Remote Access: the relay and the addresses assigned to Media Servers.
The community forums.
The Freehold License.
IP Addresses
Cardinal Apps Inc. holds these static addresses. Most other hostnames resolve to Cloudflare's addresses.
The Remote Access tunnel. A Media Server with Remote Access turned on keeps a connection open to this address.
Nameserver for connect.cardinalapps.host.
Nameserver for connect.cardinalapps.host.
These addresses are reserved and do not change in normal operation. If one ever changes, this page will be updated.
Email from Cardinal Apps Inc., including account email, comes from @cardinalapps.io addresses. Forum notifications come from itsasmall.world.
Allowlisting
A Media Server connects out over HTTPS on port 443 to cardinalapps.io to check for updates, and to cardinalapps.cloud and cardinalapps.host when Cardinal Cloud features are on. Older versions use cardinalcloud.io in place of cardinalapps.cloud.
Your Traffic
Media Server Addresses
When a server owner turns on Remote Access, Cardinal Apps Inc. assigns their Media Server a name under connect.cardinalapps.host, such as abc123.connect.cardinalapps.host or a custom one the owner picks, and issues a certificate for it. The name belongs to Cardinal Apps Inc. The server behind it is run by its owner.
A valid certificate on one of these names proves that Cardinal Apps Inc. assigned the name, not that Cardinal Apps Inc. runs the server. Names that impersonate Cardinal are refused, but treat a link to one of these addresses as coming from whoever sent it.
DNS Rebinding Protection
Names for a server on your own network resolve to its private address: 192-168-1-40.abc123.connect.cardinalapps.host resolves to 192.168.1.40. Routers and DNS filters with rebinding protection block those answers. Allow connect.cardinalapps.host to resolve to private addresses so apps can reach your Media Server directly. See the instructions for common routers.
Third-Party Platforms
Accounts
Source code for the self-hosted apps.
Official container images, such as cardinalapps/media-server.
Cloudflare
Most Cardinal Apps Inc. domains are served through Cloudflare and resolve to Cloudflare's addresses, which Cloudflare publishes at cloudflare.com/ips.
Connections from Cardinal Cloud
Cardinal Cloud has no fixed outbound IP addresses. Requests it sends out, such as the Remote Access check that confirms a Media Server's port forward works, come from a shared Microsoft Azure address pool that changes without notice. Allowlisting Cardinal Apps Inc. by source address is not possible.
The Remote Access check identifies itself with the user agent cardinal-remote-access-prober/1 and carries a signature that the Media Server verifies.