94.to
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of 94.to
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
DNS Records
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| 0.94.to | 1970-01-01 00:00:00.000 | |
| 002.94.to | 2026-07-20 22:56:57.614 | |
| 005.94.to | 1970-01-01 00:00:00.000 | |
| 006.94.to | 2026-06-22 00:25:29.551 | |
| 011.94.to | 1970-01-01 00:00:00.000 | |
| 015.94.to | 1970-01-01 00:00:00.000 | |
| 037.94.to | 2026-06-22 11:43:32.217 | |
| 045.94.to | 1970-01-01 00:00:00.000 | |
| 055.94.to | 2026-06-21 05:01:31.142 | |
| 063.94.to | 1970-01-01 00:00:00.000 | |
| 067.94.to | 2026-05-31 21:09:46.744 | |
| 069.94.to | 1970-01-01 00:00:00.000 | |
| 073.94.to | 1970-01-01 00:00:00.000 | |
| 088.94.to | 1970-01-01 00:00:00.000 | |
| 1.94.to | 1970-01-01 00:00:00.000 | |
| 101.94.to | 2026-07-22 10:59:27.042 | |
| 105.94.to | 1970-01-01 00:00:00.000 | |
| 108.94.to | 1970-01-01 00:00:00.000 | |
| 109.94.to | 2026-07-16 09:31:14.890 | |
| 111.94.to | 2026-06-16 23:09:42.088 | |
| 112.94.to | 2026-06-18 13:13:39.732 | |
| 117.94.to | 2026-07-21 22:02:31.192 | |
| 12.94.to | 2026-06-22 09:35:30.664 | |
| 121.94.to | 1970-01-01 00:00:00.000 | |
| 124.94.to | 2026-07-21 22:02:31.192 | |
| 127.94.to | 2026-05-31 04:11:40.822 | |
| 138.94.to | 1970-01-01 00:00:00.000 | |
| 14.94.to | 1970-01-01 00:00:00.000 | |
| 149.94.to | 2026-07-17 20:57:13.438 | |
| 150.94.to | 1970-01-01 00:00:00.000 | |
| 153.94.to | 1970-01-01 00:00:00.000 | |
| 158.94.to | 1970-01-01 00:00:00.000 | |
| 161.94.to | 2026-07-16 16:09:53.171 | |
| 17.94.to | 2026-06-20 15:49:26.512 | |
| 170.94.to | 1970-01-01 00:00:00.000 | |
| 172.94.to | 1970-01-01 00:00:00.000 | |
| 177.94.to | 2026-05-31 04:11:40.822 | |
| 181.94.to | 2026-06-18 19:25:12.328 | |
| 183.94.to | 2026-07-17 01:30:08.422 | |
| 185.94.to | 1970-01-01 00:00:00.000 | |
| 188.94.to | 2026-05-31 09:59:40.839 | |
| 2.94.to | 2026-06-22 13:27:08.836 | |
| 20.94.to | 1970-01-01 00:00:00.000 | |
| 203.94.to | 2026-07-16 12:05:52.796 | |
| 205.94.to | 2026-06-22 13:27:08.836 | |
| 212.94.to | 2026-06-22 00:04:36.859 | |
| 22.94.to | 2026-06-04 03:51:51.481 | |
| 224.94.to | 2026-07-16 20:59:43.461 | |
| 227.94.to | 2026-05-31 10:43:40.778 | |
| 234.94.to | 2026-06-01 10:34:02.151 | |
| 242.94.to | 1970-01-01 00:00:00.000 | |
| 25.94.to | 1970-01-01 00:00:00.000 | |
| 253.94.to | 2026-06-19 00:44:11.069 | |
| 255.94.to | 1970-01-01 00:00:00.000 | |
| 27.94.to | 2026-06-15 19:41:27.284 | |
| 272.94.to | 1970-01-01 00:00:00.000 | |
| 274.94.to | 1970-01-01 00:00:00.000 | |
| 280.94.to | 1970-01-01 00:00:00.000 | |
| 281.94.to | 1970-01-01 00:00:00.000 | |
| 283.94.to | 2026-07-16 02:54:11.137 | |
| 287.94.to | 2026-07-18 00:34:37.529 | |
| 288.94.to | 2026-07-23 22:44:05.318 | |
| 300.94.to | 1970-01-01 00:00:00.000 | |
| 31.94.to | 2026-07-17 18:53:41.038 | |
| 316.94.to | 2026-05-31 03:53:40.877 | |
| 319.94.to | 1970-01-01 00:00:00.000 | |
| 320.94.to | 1970-01-01 00:00:00.000 | |
| 321.94.to | 2026-06-20 11:30:44.397 | |
| 327.94.to | 1970-01-01 00:00:00.000 | |
| 332.94.to | 2026-07-21 22:30:13.273 | |
| 34.94.to | 1970-01-01 00:00:00.000 | |
| 348.94.to | 1970-01-01 00:00:00.000 | |
| 350.94.to | 1970-01-01 00:00:00.000 | |
| 352.94.to | 1970-01-01 00:00:00.000 | |
| 355.94.to | 1970-01-01 00:00:00.000 | |
| 359.94.to | 2026-06-15 22:30:24.390 | |
| 361.94.to | 2026-06-03 08:48:52.483 | |
| 362.94.to | 2026-06-19 16:05:56.761 | |
| 364.94.to | 1970-01-01 00:00:00.000 | |
| 366.94.to | 1970-01-01 00:00:00.000 | |
| 371.94.to | 2026-07-16 12:46:09.352 | |
| 375.94.to | 1970-01-01 00:00:00.000 | |
| 378.94.to | 1970-01-01 00:00:00.000 | |
| 38.94.to | 1970-01-01 00:00:00.000 | |
| 384.94.to | 1970-01-01 00:00:00.000 | |
| 396.94.to | 2026-06-21 11:34:52.125 | |
| 399.94.to | 2026-07-21 18:12:00.601 | |
| 4.94.to | 1970-01-01 00:00:00.000 | |
| 408.94.to | 1970-01-01 00:00:00.000 | |
| 41.94.to | 2026-06-21 14:12:21.927 | |
| 42.94.to | 1970-01-01 00:00:00.000 | |
| 425.94.to | 1970-01-01 00:00:00.000 | |
| 428.94.to | 2026-07-15 23:48:16.543 | |
| 43.94.to | 2026-06-04 14:07:30.474 | |
| 433.94.to | 2026-06-18 02:19:05.069 | |
| 435.94.to | 2026-07-18 04:53:39.875 | |
| 441.94.to | 2026-06-19 20:33:49.118 | |
| 443.94.to | 1970-01-01 00:00:00.000 | |
| 444.94.to | 1970-01-01 00:00:00.000 | |
| 450.94.to | 1970-01-01 00:00:00.000 | |
| 460.94.to | 1970-01-01 00:00:00.000 | |
| 463.94.to | 1970-01-01 00:00:00.000 | |
| 464.94.to | 2026-07-16 03:10:13.562 | |
| 467.94.to | 1970-01-01 00:00:00.000 | |
| 470.94.to | 2026-06-18 20:28:33.236 | |
| 475.94.to | 2026-06-15 01:35:41.658 | |
| 479.94.to | 2026-06-16 00:19:26.905 | |
| 48.94.to | 1970-01-01 00:00:00.000 | |
| 480.94.to | 1970-01-01 00:00:00.000 | |
| 481.94.to | 2026-06-01 00:18:51.505 | |
| 485.94.to | 2026-06-19 15:22:39.779 | |
| 489.94.to | 2026-06-22 03:27:02.991 | |
| 49.94.to | 2026-06-02 16:44:56.058 | |
| 492.94.to | 2026-07-14 23:45:58.680 | |
| 496.94.to | 2026-06-02 20:51:01.024 | |
| 498.94.to | 1970-01-01 00:00:00.000 | |
| 5.94.to | 2026-06-18 06:49:52.426 | |
| 501.94.to | 1970-01-01 00:00:00.000 | |
| 506.94.to | 1970-01-01 00:00:00.000 | |
| 508.94.to | 2026-06-15 04:26:52.435 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.