Language / Data reference

HITCHHIKERSuspicious Domains Database / Threat Intelligence

Typed domain relationships aggregated from bounded browser observations.

Trace an unfamiliar domain to related domains and aggregate observation dates

Match

Partial matching requires at least 3 characters. Exact matches appear first.

Aggregate observation period · UTC
Filters

By using this service, you agree to the and .

Search term

nordvpn[.]com

All 3 aggregate relationships included · All time

Relationship source domains

Source domains of retained relationships involving the selected domain, ordered by aggregate observation count. They are not original entry sites and do not reconstruct a path.

  1. 1
    Page-link relations · 1
    Aggregate observation dates · UTC
    View contributing relationships
    • betadomainoffline[.]vip → nordvpn[.]com
  2. 2
    Page-link relations · 1
    Aggregate observation dates · UTC
    View contributing relationships
    • filmai[.]tv → nordvpn[.]com
  3. 3
    Page-link relations · 1
    Aggregate observation dates · UTC
    View contributing relationships
    • flixhop[.]com → nordvpn[.]com
Aggregate observation range2026-09-06 – 2026-09-08 UTC3 typed relationships · 4 unique domains

Related domains and typed relationships

One public row per source, target, relationship type and basis. Repeats update observation and occurrence counts, hop range, completion counts, and first/last times; raw observations remain in Core.

Drag to move · Arrow keys when focused
100%
Direct observationInferred, external, or analystPage link (not visited)Contradictory record