Domain

22.to

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .to TLD

Run a live full scan of 22.to

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

—

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

—

seen in DNS

Observed Certs

—

in our scans

DNS Records

13.248.169.48, 76.223.54.146

AAAA

—

ns1.afternic.com, ns2.afternic.com

TXT

v=spf1 -all

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
0.22.to	13.248.169.48 76.223.54.146	2026-06-15 10:28:37.556
009.22.to	13.248.169.48 76.223.54.146	2026-06-16 20:37:17.243
010.22.to	13.248.169.48 76.223.54.146	2026-06-03 12:55:10.576
013.22.to	13.248.169.48 76.223.54.146	2026-06-03 10:31:58.730
017.22.to	76.223.54.146 13.248.169.48	2026-06-15 11:54:46.999
018.22.to	76.223.54.146 13.248.169.48	2026-06-03 04:04:18.538
021.22.to	76.223.54.146 13.248.169.48	2026-06-03 02:06:36.098
022.22.to	76.223.54.146 13.248.169.48	2026-06-03 10:41:44.417
026.22.to	13.248.169.48 76.223.54.146	2026-06-15 20:27:37.395
034.22.to	76.223.54.146 13.248.169.48	2026-06-03 16:38:57.637
036.22.to	13.248.169.48 76.223.54.146	2026-06-03 19:28:17.014
039.22.to	76.223.54.146 13.248.169.48	2026-06-03 18:52:20.367
045.22.to	76.223.54.146 13.248.169.48	2026-06-03 15:25:03.176
049.22.to	13.248.169.48 76.223.54.146	2026-06-16 04:55:04.632
059.22.to	13.248.169.48 76.223.54.146	2026-06-03 02:47:58.488
060.22.to	13.248.169.48 76.223.54.146	2026-06-16 19:16:02.627
061.22.to	76.223.54.146 13.248.169.48	2026-06-03 15:49:29.261
066.22.to	76.223.54.146 13.248.169.48	2026-06-03 15:04:32.317
067.22.to	76.223.54.146 13.248.169.48	2026-06-02 23:26:59.567
070.22.to	76.223.54.146 13.248.169.48	2026-06-16 01:08:06.862
081.22.to	76.223.54.146 13.248.169.48	2026-06-16 19:49:55.425
084.22.to	13.248.169.48 76.223.54.146	2026-06-18 18:08:42.755
086.22.to	76.223.54.146 13.248.169.48	2026-06-16 09:35:32.297
091.22.to	13.248.169.48 76.223.54.146	2026-06-03 11:42:33.754
092.22.to	13.248.169.48 76.223.54.146	2026-06-02 20:23:42.516
095.22.to	13.248.169.48 76.223.54.146	2026-06-02 23:23:33.520
098.22.to	13.248.169.48 76.223.54.146	2026-06-16 02:05:01.076
099.22.to	13.248.169.48 76.223.54.146	2026-06-03 11:32:56.109
1.1.22.to	13.248.169.48 76.223.54.146	2026-06-20 12:39:54.706
101.22.to	13.248.169.48 76.223.54.146	2026-06-16 04:29:57.703
112.22.to	76.223.54.146 13.248.169.48	2026-06-03 02:56:20.402
116.22.to	13.248.169.48 76.223.54.146	2026-06-02 23:06:51.359
123.22.to	13.248.169.48 76.223.54.146	2026-06-02 23:26:59.567
127.22.to	13.248.169.48 76.223.54.146	2026-06-02 17:22:16.902
128.22.to	13.248.169.48 76.223.54.146	2026-06-17 01:15:47.368
129.22.to	76.223.54.146 13.248.169.48	2026-06-03 12:55:10.576
134.22.to	76.223.54.146 13.248.169.48	2026-06-16 09:03:46.062
142.22.to	13.248.169.48 76.223.54.146	2026-06-16 12:56:09.414
145.22.to	13.248.169.48 76.223.54.146	2026-06-03 00:51:09.705
146.22.to	13.248.169.48 76.223.54.146	2026-06-16 06:23:03.127
148.22.to	76.223.54.146 13.248.169.48	2026-06-16 18:52:10.090
152.22.to	13.248.169.48 76.223.54.146	2026-06-03 04:46:18.727
154.22.to	13.248.169.48 76.223.54.146	2026-06-17 08:50:07.367
159.22.to	13.248.169.48 76.223.54.146	2026-06-17 08:54:24.147
162.22.to	76.223.54.146 13.248.169.48	2026-06-02 19:33:57.986
164.22.to	13.248.169.48 76.223.54.146	2026-06-16 19:06:15.096
169.22.to	13.248.169.48 76.223.54.146	2026-06-03 05:43:04.694
170.22.to	76.223.54.146 13.248.169.48	2026-06-02 21:33:30.314
178.22.to	76.223.54.146 13.248.169.48	2026-06-03 01:07:56.937
179.22.to	13.248.169.48 76.223.54.146	2026-06-16 01:43:05.096
183.22.to	13.248.169.48 76.223.54.146	2026-06-16 00:41:01.117
184.22.to	13.248.169.48 76.223.54.146	2026-06-17 03:50:29.895
188.22.to	76.223.54.146 13.248.169.48	2026-06-15 20:08:59.087
19.22.to	13.248.169.48 76.223.54.146	2026-06-15 14:00:23.844
191.22.to	13.248.169.48 76.223.54.146	2026-06-15 10:56:42.713
194.22.to	13.248.169.48 76.223.54.146	2026-06-03 11:45:28.162
196.22.to	13.248.169.48 76.223.54.146	2026-06-03 05:39:50.792
203.22.to	76.223.54.146 13.248.169.48	2026-06-15 12:25:39.564
205.22.to	76.223.54.146 13.248.169.48	2026-06-03 01:22:01.421
211.22.to	13.248.169.48 76.223.54.146	2026-06-16 18:55:54.417
213.22.to	13.248.169.48 76.223.54.146	2026-06-16 07:52:00.718
216.22.to	13.248.169.48 76.223.54.146	2026-06-03 18:00:22.712
218.22.to	13.248.169.48 76.223.54.146	2026-06-15 16:47:18.139
22.22.to	76.223.54.146 13.248.169.48	2026-06-03 12:49:24.408
22.to	76.223.54.146 13.248.169.48	2026-07-14 21:47:31.639
221.22.to	76.223.54.146 13.248.169.48	2026-06-03 02:03:22.531
222.22.to	76.223.54.146 13.248.169.48	2026-06-18 04:51:44.512
225.22.to	13.248.169.48 76.223.54.146	2026-06-03 00:11:59.261
231.22.to	13.248.169.48 76.223.54.146	2026-06-16 22:06:39.899
233.22.to	13.248.169.48 76.223.54.146	2026-06-03 16:22:37.862
237.22.to	76.223.54.146 13.248.169.48	2026-06-02 21:33:30.314
241.22.to	13.248.169.48 76.223.54.146	2026-06-15 12:25:39.564
247.22.to	76.223.54.146 13.248.169.48	2026-06-17 03:01:28.793
250.22.to	76.223.54.146 13.248.169.48	2026-06-03 16:00:22.917
251.22.to	13.248.169.48 76.223.54.146	2026-06-03 02:59:20.508
253.22.to	13.248.169.48 76.223.54.146	2026-06-02 17:10:19.055
256.22.to	76.223.54.146 13.248.169.48	2026-06-15 12:35:53.268
257.22.to	13.248.169.48 76.223.54.146	2026-06-17 17:28:53.373
26.22.to	76.223.54.146 13.248.169.48	2026-06-03 12:14:20.164
263.22.to	76.223.54.146 13.248.169.48	2026-06-02 21:33:30.314
264.22.to	13.248.169.48 76.223.54.146	2026-06-15 19:37:25.774
267.22.to	13.248.169.48 76.223.54.146	2026-06-15 23:53:40.445
269.22.to	13.248.169.48 76.223.54.146	2026-06-15 17:47:02.240
27.22.to	76.223.54.146 13.248.169.48	2026-06-22 16:49:07.810
271.22.to	13.248.169.48 76.223.54.146	2026-06-18 03:17:54.405
277.22.to	13.248.169.48 76.223.54.146	2026-06-16 05:08:32.852
280.22.to	13.248.169.48 76.223.54.146	2026-06-16 07:48:34.295
286.22.to	13.248.169.48 76.223.54.146	2026-06-15 19:17:05.102
287.22.to	13.248.169.48 76.223.54.146	2026-06-15 17:01:41.803
289.22.to	13.248.169.48 76.223.54.146	2026-06-16 08:29:54.896
29.22.to	13.248.169.48 76.223.54.146	2026-06-15 23:22:02.007
291.22.to	13.248.169.48 76.223.54.146	2026-06-17 22:35:03.090
293.22.to	13.248.169.48 76.223.54.146	2026-06-03 01:31:07.479
31.22.to	13.248.169.48 76.223.54.146	2026-06-16 06:48:47.951
312.22.to	13.248.169.48 76.223.54.146	2026-06-16 04:06:37.026
314.22.to	13.248.169.48 76.223.54.146	2026-06-19 03:49:46.111
319.22.to	13.248.169.48 76.223.54.146	2026-06-17 23:55:25.545
32.22.to	76.223.54.146 13.248.169.48	2026-06-15 23:22:02.007
320.22.to	76.223.54.146 13.248.169.48	2026-06-03 21:08:33.227
322.22.to	76.223.54.146 13.248.169.48	2026-06-19 17:20:13.244
33.22.to	76.223.54.146 13.248.169.48	2026-06-16 01:11:37.179
335.22.to	13.248.169.48 76.223.54.146	2026-06-03 01:31:07.479
337.22.to	76.223.54.146 13.248.169.48	2026-06-02 22:13:48.756
344.22.to	76.223.54.146 13.248.169.48	2026-06-15 21:07:40.182
345.22.to	13.248.169.48 76.223.54.146	2026-06-15 12:19:47.326
347.22.to	13.248.169.48 76.223.54.146	2026-06-03 17:21:07.098
351.22.to	76.223.54.146 13.248.169.48	2026-06-02 21:33:30.314
354.22.to	13.248.169.48 76.223.54.146	2026-06-17 08:23:44.410
360.22.to	13.248.169.48 76.223.54.146	2026-06-03 18:42:27.009
366.22.to	76.223.54.146 13.248.169.48	2026-06-03 04:10:14.866
37.22.to	76.223.54.146 13.248.169.48	2026-06-03 06:04:30.887
374.22.to	13.248.169.48 76.223.54.146	2026-06-17 09:57:04.105
378.22.to	76.223.54.146 13.248.169.48	2026-06-03 18:23:29.643
379.22.to	13.248.169.48 76.223.54.146	2026-06-03 02:53:45.704
38.22.to	76.223.54.146 13.248.169.48	2026-06-22 09:05:25.846
388.22.to	13.248.169.48 76.223.54.146	2026-06-17 08:13:25.551
397.22.to	76.223.54.146 13.248.169.48	2026-06-03 18:52:20.367
4.22.to	76.223.54.146 13.248.169.48	2026-06-16 14:30:52.210
403.22.to	76.223.54.146 13.248.169.48	2026-06-02 21:33:30.314
405.22.to	13.248.169.48 76.223.54.146	2026-06-17 04:35:11.170

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

160.124.222.205:443 ce9b00b41360…

Subject: hydb22.top

Issuer: YR1

SANs: hydb22.top, m.suifengparagliders.com, suifengparagliders.com, www.suifengparagliders.com

80.241.218.110:443 05cecf39efc8…

Subject: rem2222.top

Issuer: YE1

SANs: rem2222.top

154.39.79.180:443 67766af56133…

Subject: tldf1022.top

Issuer: E6

SANs: tldf1022.top

154.201.247.20:443 ce9b00b41360…

Subject: hydb22.top

Issuer: YR1

SANs: hydb22.top, m.suifengparagliders.com, suifengparagliders.com, www.suifengparagliders.com

160.124.222.222:443 ce9b00b41360…

Subject: hydb22.top

Issuer: YR1

SANs: hydb22.top, m.suifengparagliders.com, suifengparagliders.com, www.suifengparagliders.com

106.74.21.140:443 dddf270b7a3d…

Subject: xinyijia2022.top

Issuer: RapidSSL TLS RSA CA G1

SANs: www.xinyijia2022.top, xinyijia2022.top

129.80.158.36:8443 6059a7ade8df…

Subject: x.helloworld222.top

Issuer: E5

SANs: x.helloworld222.top

47.242.8.31:443 39eb09bbb0c9…

Subject: www.qsr22.top

Issuer: E7

SANs: www.qsr22.top

45.78.75.42:443 7ea5d66eea3c…

Subject: *.link322.top

Issuer: E7

SANs: *.link322.top, link322.top

186.241.105.210:443 365f1e0e0b4b…

Subject: wh.lw39222.top

Issuer: E7

SANs: wh.lw39222.top

118.145.235.149:443 4262be7d7bff…

Subject: admin.kyi2022.top

Issuer: Encryption Everywhere DV TLS CA - G2

SANs: admin.kyi2022.top

154.216.63.231:443 ce17f62f6009…

Subject: greewcc22.top

Issuer: R13

SANs: greewcc22.top, www.greewcc22.top

154.216.63.226:443 ce17f62f6009…

Subject: greewcc22.top

Issuer: R13

SANs: greewcc22.top, www.greewcc22.top

160.124.161.167:443 ce17f62f6009…

Subject: greewcc22.top

Issuer: R13

SANs: greewcc22.top, www.greewcc22.top

154.201.200.36:443 9bc4bcd85099…

Subject: www.yaseyase22.top

Issuer: LiteSSL RSA CA 2025

SANs: www.yaseyase2.top, www.yaseyase20.top, www.yaseyase21.top, www.yaseyase22.top, yaseyase1.top, yaseyase2.top, yaseyase20.top, yaseyase21.top, yaseyase22.top

154.213.56.87:443 ce17f62f6009…

Subject: greewcc22.top

Issuer: R13

SANs: greewcc22.top, www.greewcc22.top

154.201.235.111:443 9bc4bcd85099…

Subject: www.yaseyase22.top

Issuer: LiteSSL RSA CA 2025

SANs: www.yaseyase2.top, www.yaseyase20.top, www.yaseyase21.top, www.yaseyase22.top, yaseyase1.top, yaseyase2.top, yaseyase20.top, yaseyase21.top, yaseyase22.top

154.213.224.180:443 ce17f62f6009…

Subject: greewcc22.top

Issuer: R13

SANs: greewcc22.top, www.greewcc22.top

154.201.200.49:443 9bc4bcd85099…

Subject: www.yaseyase22.top

Issuer: LiteSSL RSA CA 2025

SANs: www.yaseyase2.top, www.yaseyase20.top, www.yaseyase21.top, www.yaseyase22.top, yaseyase1.top, yaseyase2.top, yaseyase20.top, yaseyase21.top, yaseyase22.top

154.201.200.34:443 9bc4bcd85099…

Subject: www.yaseyase22.top

Issuer: LiteSSL RSA CA 2025

SANs: www.yaseyase2.top, www.yaseyase20.top, www.yaseyase21.top, www.yaseyase22.top, yaseyase1.top, yaseyase2.top, yaseyase20.top, yaseyase21.top, yaseyase22.top

154.213.224.184:443 ce17f62f6009…

Subject: greewcc22.top

Issuer: R13

SANs: greewcc22.top, www.greewcc22.top

154.201.200.50:443 9bc4bcd85099…

Subject: www.yaseyase22.top

Issuer: LiteSSL RSA CA 2025

SANs: www.yaseyase2.top, www.yaseyase20.top, www.yaseyase21.top, www.yaseyase22.top, yaseyase1.top, yaseyase2.top, yaseyase20.top, yaseyase21.top, yaseyase22.top

154.213.56.69:443 ce17f62f6009…

Subject: greewcc22.top

Issuer: R13

SANs: greewcc22.top, www.greewcc22.top

119.28.119.13:443 1427d741fed5…

Subject: 911222.top

Issuer: TrustAsia DV TLS RSA CA 2024

SANs: 911222.top, www.911222.top

154.213.231.146:443 ce17f62f6009…

Subject: greewcc22.top

Issuer: R13

SANs: greewcc22.top, www.greewcc22.top

154.216.63.236:443 ce17f62f6009…

Subject: greewcc22.top

Issuer: R13

SANs: greewcc22.top, www.greewcc22.top

160.124.161.172:443 ce17f62f6009…

Subject: greewcc22.top

Issuer: R13

SANs: greewcc22.top, www.greewcc22.top

144.168.124.214:443 194b68a997e4…

Subject: lis.h6622.top

Issuer: YR2

SANs: lis.h6622.top

154.201.187.125:443 9bc4bcd85099…

Subject: www.yaseyase22.top

Issuer: LiteSSL RSA CA 2025

SANs: www.yaseyase2.top, www.yaseyase20.top, www.yaseyase21.top, www.yaseyase22.top, yaseyase1.top, yaseyase2.top, yaseyase20.top, yaseyase21.top, yaseyase22.top

154.201.203.88:443 9bc4bcd85099…

Subject: www.yaseyase22.top

Issuer: LiteSSL RSA CA 2025

SANs: www.yaseyase2.top, www.yaseyase20.top, www.yaseyase21.top, www.yaseyase22.top, yaseyase1.top, yaseyase2.top, yaseyase20.top, yaseyase21.top, yaseyase22.top

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

84fea367dbafc3f5… google · argon2026h1

Subject: 22.to

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: 22.to

Valid: 2025-05-20 07:04:32 → 2026-05-20 07:04:32

aab09b6d127af524… google · argon2026h1

Subject: 22.to

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: 22.to

Valid: 2025-05-20 07:04:32 → 2026-05-20 07:04:32

84fea367dbafc3f5… cloudflare · nimbus2026

Subject: 22.to

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: 22.to

Valid: 2025-05-20 07:04:32 → 2026-05-20 07:04:32

aab09b6d127af524… google · xenon2026h1

Subject: 22.to

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: 22.to

Valid: 2025-05-20 07:04:32 → 2026-05-20 07:04:32

aab09b6d127af524… sectigo · elephant2026h1

Subject: 22.to

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: 22.to

Valid: 2025-05-20 07:04:32 → 2026-05-20 07:04:32

78576e857629cb96… google · argon2026h1

Subject: 22.to

Issuer: Encryption Everywhere DV TLS CA - G2

SANs: 22.to

Valid: 2025-04-15 00:00:00 → 2026-04-14 23:59:59

a75e8ed52278d555… google · argon2026h1

Subject: 22.to

Issuer: Encryption Everywhere DV TLS CA - G2

SANs: 22.to

Valid: 2025-04-15 00:00:00 → 2026-04-14 23:59:59

78576e857629cb96… google · xenon2026h1

Subject: 22.to

Issuer: Encryption Everywhere DV TLS CA - G2

SANs: 22.to

Valid: 2025-04-15 00:00:00 → 2026-04-14 23:59:59

a75e8ed52278d555… google · xenon2026h1

Subject: 22.to

Issuer: Encryption Everywhere DV TLS CA - G2

SANs: 22.to

Valid: 2025-04-15 00:00:00 → 2026-04-14 23:59:59

78576e857629cb96… cloudflare · nimbus2026

Subject: 22.to

Issuer: Encryption Everywhere DV TLS CA - G2

SANs: 22.to

Valid: 2025-04-15 00:00:00 → 2026-04-14 23:59:59

a75e8ed52278d555… cloudflare · nimbus2026

Subject: 22.to

Issuer: Encryption Everywhere DV TLS CA - G2

SANs: 22.to

Valid: 2025-04-15 00:00:00 → 2026-04-14 23:59:59

78576e857629cb96… sectigo · elephant2026h1

Subject: 22.to

Issuer: Encryption Everywhere DV TLS CA - G2

SANs: 22.to

Valid: 2025-04-15 00:00:00 → 2026-04-14 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
NS	ns2.afternic.com	2026-07-14 21:43:18.853	2026-07-14 21:47:31.639
TXT	v=spf1 -all	2026-07-14 21:43:18.853	2026-07-14 21:47:31.639
A	76.223.54.146	2026-07-14 21:43:18.853	2026-07-14 21:47:31.639
A	13.248.169.48	2026-07-14 21:43:18.853	2026-07-14 21:47:31.639
NS	ns1.afternic.com	2026-07-14 21:43:18.853	2026-07-14 21:47:31.639