Language / Data reference

HITCHHIKERSuspicious Domains Database / Threat Intelligence

Tracks the domains and network paths contacted by a browser while visiting illegal sites.

Trace an unfamiliar domain to originating sites and observation dates

Match

Partial matching requires at least 3 characters. Exact matches appear first.

Observation period · UTC
Filters
Search term

paypal[.]com

All 57 observations included · All time

Likely originating sites

Entries matching the selected domain appear first. Other entry sites have a path to it within the same observation, ordered by observed traffic support.

  1. 1
    Recorded as entry · 2
    Observed on · UTC
    View supporting observations
    • paypal[.]com
    • paypal[.]com
  2. 2
    Observed traffic · 2
    Observed on · UTC
    View supporting observations
    • paypalobjects[.]com → paypal[.]com
    • paypalobjects[.]com → paypal[.]com
  3. 3
    Observed traffic · 1Link path only · 1
    Observed on · UTC
    View supporting observations
    • retromags[.]com → paypal[.]com
    • retromags[.]com → paypal[.]com
Included dates2026-09-052026-09-09 UTC57 typed relationships · 54 unique domains

Related domains and connections

One public row per source, target, relationship type and basis. Repeats update only the count and first/last observation times; raw observations remain in Core.

Drag to move · Arrow keys when focused
100%
Direct observationInferred, external, or analystPage link (not visited)Contradictory record