when doing a route trace (see below) the last hop before the actual domain is usually the domain/webhost. In this case it's birch.net Trace eqlov.com (216.212.68.100) ... 1 199.69.204.6 125ms 102ms 110ms TTL: 0 (No rDNS) 2 199.69.204.1 138ms 105ms 105ms TTL: 0 (No rDNS) 3 12.122.252.45 118ms 120ms 115ms TTL: 0 (No rDNS) 4 12.123.193.42 111ms 115ms 111ms TTL: 0 (gbr2-p21.cgcil.ip.att.net [authoritative]) 5 12.122.11.53 120ms 125ms 105ms TTL: 0 (tbr2-p013602.cgcil.ip.att.net [authoritative]) 6 12.122.10.46 125ms 129ms 113ms TTL: 0 (tbr2-cl7.sl9mo.ip.att.net [authoritative]) 7 12.122.10.90 140ms 140ms 140ms TTL: 0 (tbr2-cl6.dlstx.ip.att.net [authoritative]) 8 12.123.16.245 135ms 140ms 135ms TTL: 0 (ggr1-p370.dlstx.ip.att.net [authoritative]) 9 64.200.232.201 138ms 135ms 160ms TTL: 0 (IPP-dllstx9lce1-pos5-0.wcg.net [authoritative]) 10 64.200.232.13 139ms 130ms 140ms TTL: 0 (dllstx9lce1-pos2-0.wcg.net [authoritative]) 11 64.200.232.209 140ms 125ms 135ms TTL: 0 (dllstx1wcx3-pos12-0.wcg.net [authoritative]) 12 64.200.240.82 150ms 140ms 145ms TTL: 0 (tulsok6wcx3-oc48.wcg.net bogus [authoritative]) 13 64.200.183.34 135ms 135ms 140ms TTL: 0 (tulsok6wcx2-oc48.wcg.net [authoritative]) 14 64.200.240.49 135ms 130ms 130ms TTL: 0 (chcgil1wcx2-oc48.wcg.net [authoritative]) 15 64.200.103.58 135ms 125ms 140ms TTL: 0 (chcgil1wcx1-oc48.wcg.net [authoritative]) 16 64.200.247.14 150ms 145ms 146ms TTL: 0 (chcgil1wcx1-birch-pos.wcg.net [authoritative]) 17 216.212.127.34 147ms 145ms 145ms TTL: 0 (host127-34.birch.net ok) 18 65.16.60.169 153ms 159ms 150ms TTL: 0 (host60-169.discord.birch.net ok) 19 216.212.68.100 155ms 145ms 150ms TTL: 51 (eqlov.com ok)