Language / Data reference

HITCHHIKERSuspicious Domains Database / Threat Intelligence

Tracks the domains and network paths contacted by a browser while visiting illegal sites.

Trace an unfamiliar domain to originating sites and observation dates

Match

Partial matching requires at least 3 characters. Exact matches appear first.

Observation period · UTC
Filters
Search term

onetag-sys[.]com

All 30 observations included · All time

Likely originating sites

Entries matching the selected domain appear first. Other entry sites have a path to it within the same observation, ordered by observed traffic support.

  1. 1
    Recorded as entry · 16
    Observed on · UTC
    View supporting observations
    • onetag-sys[.]com
    • onetag-sys[.]com
    • onetag-sys[.]com
    • onetag-sys[.]com
    • onetag-sys[.]com
    • onetag-sys[.]com
    • onetag-sys[.]com
    • onetag-sys[.]com
    • onetag-sys[.]com
    • onetag-sys[.]com
    • onetag-sys[.]com
    • onetag-sys[.]com
    • onetag-sys[.]com
    • onetag-sys[.]com
    • onetag-sys[.]com
    • onetag-sys[.]com
  2. 2
    Observed traffic · 2
    Observed on · UTC
    View supporting observations
    • geniee[.]jp → onetag-sys[.]com
    • geniee[.]jp → onetag-sys[.]com
  3. 3
    Observed traffic · 1
    Observed on · UTC
    View supporting observations
    • dova-s[.]jp → onetag-sys[.]com
Included dates2026-09-052026-09-09 UTC30 typed relationships · 25 unique domains

Related domains and connections

One public row per source, target, relationship type and basis. Repeats update only the count and first/last observation times; raw observations remain in Core.

Drag to move · Arrow keys when focused
100%
Direct observationInferred, external, or analystPage link (not visited)Contradictory record