Report - winmeter.nl/grumpie/

Report Overview

Submitted URL
winmeter.nl/grumpie/
IP
185.135.241.21
ASN
#208332 Hosting 2 GO B.V.
Submitted
2024-05-04 10:47:23
Access
public
Website Title
Grumpie gokkasten minotaurus en wild stars
Final URL
winmeter.nl/grumpie/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
assets.powerjackpot.com	unknown	unknown	No data	No data	750 B	0 B	0.0.0.0
assets.vippowerlounge.com	unknown	unknown	No data	No data	378 B	0 B	0.0.0.0
winmeter.nl	unknown	unknown	No data	No data	4.5 kB	183 kB	185.135.241.21
www.winmeter.nl	unknown	unknown	No data	No data	1.4 kB	2.2 kB	185.135.241.21
daks2k3a4ib2z.cloudfront.net	unknown	2008-04-25	2014-05-01	2024-04-30	434 B	5.4 kB	54.230.241.103
ads.quasaraffiliates.com	unknown	unknown	No data	No data	454 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	quasaraffiliates.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (22)

URL IP Response Size

winmeter.nl/grumpie/

185.135.241.21

3.9 kB

URL User Request GET
winmeter.nl/grumpie/
IP
185.135.241.21:0
ASN
#208332 Hosting 2 GO B.V.

File type
HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (10300), with no line terminators
Size
3.9 kB (3856 bytes)
Hash
0caffe64b6c1e2ee31d0ef3ab9291591
9077d99cdadeb82e1b76eaed7386d858842d882f
f24388a87fc86b7c2e54df3a513f33bffc02fec5d1121ad2e49b2f56dbe184d5

HTTP Headers

GET /grumpie/ HTTP/1.1
Host: winmeter.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 10:46:57 GMT
Content-Type: text/html; charset=utf-8
Last-Modified: Sat, 14 Jan 2017 20:14:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=2592000, private, must-revalidate
Expires: Mon, 03 Jun 2024 10:46:57 GMT
ETag: W/"587a86a9-2843"
Content-Encoding: gzip

winmeter.nl/css/winflow.css

185.135.241.21

200 OK

3.6 kB

URL GET HTTP/1.1
winmeter.nl/css/winflow.css
IP
185.135.241.21:80
ASN
#208332 Hosting 2 GO B.V.

Requested by
http://winmeter.nl/grumpie/

File type
Unicode text, UTF-8 (with BOM) text
Size
3.6 kB (3643 bytes)
Hash
ee64908ff9bfa9690cc2b97553679f4d
42bb5d0dfac118eaf6fb2bb9d595e66cf4efe7b7
1168bcc053b4bab0fc96b33034df6a7e2e73a1b419d979a0004577bcc069e9f5

HTTP Headers

GET /css/winflow.css HTTP/1.1
Host: winmeter.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://winmeter.nl/grumpie/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 10:46:57 GMT
Content-Type: text/css
Last-Modified: Sun, 15 Jan 2017 13:31:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=2592000, private, must-revalidate
Expires: Mon, 03 Jun 2024 10:46:57 GMT
ETag: W/"587b79cf-3aa4"
Content-Encoding: gzip

winmeter.nl/media/alienattack.gif

185.135.241.21

200 OK

7.0 kB

URL GET HTTP/1.1
winmeter.nl/media/alienattack.gif
IP
185.135.241.21:80
ASN
#208332 Hosting 2 GO B.V.

Requested by
http://winmeter.nl/grumpie/

File type
GIF image data, version 89a, 103 x 136
Size
7.0 kB (6964 bytes)
Hash
bc36e326ab6bb75b156888bad643ed64
7135f4ed5531d9d9a84ba972fda773550929c088
ed1bf3e9623d627d9848d1b8e48abe7d21abe98e09dcf6c805d2b9183bf17d8b

HTTP Headers

GET /media/alienattack.gif HTTP/1.1
Host: winmeter.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://winmeter.nl/grumpie/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 10:46:58 GMT
Content-Type: image/gif
Content-Length: 6964
Last-Modified: Sun, 15 Jan 2017 13:30:54 GMT
Connection: keep-alive
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 10:46:58 GMT
ETag: "587b798e-1b34"
Accept-Ranges: bytes

winmeter.nl/media/crown.gif

185.135.241.21

200 OK

2.2 kB

URL GET HTTP/1.1
winmeter.nl/media/crown.gif
IP
185.135.241.21:80
ASN
#208332 Hosting 2 GO B.V.

Requested by
http://winmeter.nl/grumpie/

File type
GIF image data, version 89a, 62 x 33
Size
2.2 kB (2190 bytes)
Hash
5aff88a0891750a8802e2a2899a7ed31
eb2b852f637c632e4ca0c8a8ee451383f9b5a84b
398f7090327cf78b30063d4a7d30f0a1f7d80ebed93077e65e7f5d3db7622fbd

HTTP Headers

GET /media/crown.gif HTTP/1.1
Host: winmeter.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://winmeter.nl/grumpie/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 10:46:58 GMT
Content-Type: image/gif
Content-Length: 2190
Last-Modified: Sun, 15 Jan 2017 13:30:55 GMT
Connection: keep-alive
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 10:46:58 GMT
ETag: "587b798f-88e"
Accept-Ranges: bytes

winmeter.nl/media/slot.png

185.135.241.21

200 OK

6.9 kB

URL GET HTTP/1.1
winmeter.nl/media/slot.png
IP
185.135.241.21:80
ASN
#208332 Hosting 2 GO B.V.

Requested by
http://winmeter.nl/grumpie/

File type
PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Size
6.9 kB (6942 bytes)
Hash
9563d7044e4238f218f3e9f86cad1607
eba3cf3334a4a7605b1f3e799d2226c7ef56fecb
1e551dda088195777969d9cbd3fee379392901fd43df9db9856f704153024535

HTTP Headers

GET /media/slot.png HTTP/1.1
Host: winmeter.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://winmeter.nl/grumpie/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 10:46:58 GMT
Content-Type: image/png
Content-Length: 6942
Last-Modified: Sun, 15 Jan 2017 13:31:07 GMT
Connection: keep-alive
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 10:46:58 GMT
ETag: "587b799b-1b1e"
Accept-Ranges: bytes

winmeter.nl/media/header.jpg

185.135.241.21

200 OK

66 kB

URL GET HTTP/1.1
winmeter.nl/media/header.jpg
IP
185.135.241.21:80
ASN
#208332 Hosting 2 GO B.V.

Requested by
http://winmeter.nl/grumpie/

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 940x283, components 3
Size
66 kB (65806 bytes)
Hash
ce494b676afb4622201a160c0c9b4ed0
7267b1458ff64606cc35068d621cc406cf499eb1
70290e13ccc292a198a22c525335cc0939e36172f34518d19d504d589bdc151b

HTTP Headers

GET /media/header.jpg HTTP/1.1
Host: winmeter.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://winmeter.nl/grumpie/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 10:46:58 GMT
Content-Type: image/jpeg
Content-Length: 65806
Last-Modified: Sun, 15 Jan 2017 13:30:57 GMT
Connection: keep-alive
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 10:46:58 GMT
ETag: "587b7991-1010e"
Accept-Ranges: bytes

winmeter.nl/media/big-money.gif

185.135.241.21

200 OK

9.5 kB

URL GET HTTP/1.1
winmeter.nl/media/big-money.gif
IP
185.135.241.21:80
ASN
#208332 Hosting 2 GO B.V.

Requested by
http://winmeter.nl/grumpie/

File type
GIF image data, version 89a, 119 x 184
Size
9.5 kB (9496 bytes)
Hash
6c624dee2a085d91b23ff03fcc34c0bc
b3a49479cecae2cf8cbfd9e84c5a3eefd11755f8
45a273d387239330d46c8b4eb34943faa1ad2c36dc5138fc6e03e4701ae8bae7

HTTP Headers

GET /media/big-money.gif HTTP/1.1
Host: winmeter.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://winmeter.nl/grumpie/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 10:46:58 GMT
Content-Type: image/gif
Content-Length: 9496
Last-Modified: Sun, 15 Jan 2017 13:30:55 GMT
Connection: keep-alive
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 10:46:58 GMT
ETag: "587b798f-2518"
Accept-Ranges: bytes

winmeter.nl/media/bar7.png

185.135.241.21

200 OK

64 kB

URL GET HTTP/1.1
winmeter.nl/media/bar7.png
IP
185.135.241.21:80
ASN
#208332 Hosting 2 GO B.V.

Requested by
http://winmeter.nl/grumpie/

File type
PNG image data, 240 x 200, 8-bit/color RGBA, non-interlaced
Size
64 kB (64451 bytes)
Hash
8e71d1930cb02438532d31cb3afdf85a
a56ee93f214211a24a6a70576c120057d4d1238f
08d6e09c690b7873db0bca0a2655fc087ed55851c946bd637c0b8a5d93c16aca

HTTP Headers

GET /media/bar7.png HTTP/1.1
Host: winmeter.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://winmeter.nl/grumpie/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 10:46:58 GMT
Content-Type: image/png
Content-Length: 64451
Last-Modified: Sun, 15 Jan 2017 13:31:02 GMT
Connection: keep-alive
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 10:46:58 GMT
ETag: "587b7996-fbc3"
Accept-Ranges: bytes

www.winmeter.nl/media/youtube.png

185.135.241.21

301 Moved Permanently

244 B

URL GET HTTP/1.1
www.winmeter.nl/media/youtube.png
IP
185.135.241.21:80
ASN
#208332 Hosting 2 GO B.V.

Requested by
http://winmeter.nl/grumpie/

File type
HTML document, ASCII text
Size
244 B (244 bytes)
Hash
171aba1616e4ae003081869b82983bc1
bd8d3bba492b8e3914bd37413db9a737979b1ed0
406f8a3e135165e64f5b610069fd4903e23327465f44a1bc3590e991d2404e4e

HTTP Headers

GET /media/youtube.png HTTP/1.1
Host: www.winmeter.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://winmeter.nl/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 May 2024 10:46:58 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 244
Connection: keep-alive
Location: http://winmeter.nl/media/youtube.png
Cache-Control: max-age=2592000
Expires: Mon, 03 Jun 2024 10:46:58 GMT

www.winmeter.nl/media/googleplus.png

185.135.241.21

301 Moved Permanently

247 B

URL GET HTTP/1.1
www.winmeter.nl/media/googleplus.png
IP
185.135.241.21:80
ASN
#208332 Hosting 2 GO B.V.

Requested by
http://winmeter.nl/grumpie/

File type
HTML document, ASCII text
Size
247 B (247 bytes)
Hash
178d30982c9e461ff280801986fd4c61
7f7863779ae93e440120c3d4c5f77abb099fd000
4a213d912feedde8d69a4c1df661f98ba5142eb75c58f74a4db399445d773681

HTTP Headers

GET /media/googleplus.png HTTP/1.1
Host: www.winmeter.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://winmeter.nl/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 May 2024 10:46:58 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 247
Connection: keep-alive
Location: http://winmeter.nl/media/googleplus.png
Cache-Control: max-age=2592000
Expires: Mon, 03 Jun 2024 10:46:58 GMT

www.winmeter.nl/media/facebook.png

185.135.241.21

301 Moved Permanently

245 B

URL GET HTTP/1.1
www.winmeter.nl/media/facebook.png
IP
185.135.241.21:80
ASN
#208332 Hosting 2 GO B.V.

Requested by
http://winmeter.nl/grumpie/

File type
HTML document, ASCII text
Size
245 B (245 bytes)
Hash
1b24d6d3e7237e7a4b6bb85a60829198
19f5049914bff5bc8e59b415a2dda84cb95b4fa9
27941da5460fafee1ca952ff21162dd52dff1f2eaca1a0b6a4782f008eb387cd

HTTP Headers

GET /media/facebook.png HTTP/1.1
Host: www.winmeter.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://winmeter.nl/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 May 2024 10:46:58 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 245
Connection: keep-alive
Location: http://winmeter.nl/media/facebook.png
Cache-Control: max-age=2592000
Expires: Mon, 03 Jun 2024 10:46:58 GMT

www.winmeter.nl/media/twitter.png

185.135.241.21

301 Moved Permanently

244 B

URL GET HTTP/1.1
www.winmeter.nl/media/twitter.png
IP
185.135.241.21:80
ASN
#208332 Hosting 2 GO B.V.

Requested by
http://winmeter.nl/grumpie/

File type
HTML document, ASCII text
Size
244 B (244 bytes)
Hash
f5df76eb106ab1009ff3e63618e012cd
ae8a7c11f032701e13d04dfd8175a1b59646c617
acf69b04734da6373859ad1013283b1ae05749ff699f4e875ba4675cbea0fdec

HTTP Headers

GET /media/twitter.png HTTP/1.1
Host: www.winmeter.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://winmeter.nl/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 May 2024 10:46:58 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 244
Connection: keep-alive
Location: http://winmeter.nl/media/twitter.png
Cache-Control: max-age=2592000
Expires: Mon, 03 Jun 2024 10:46:58 GMT

winmeter.nl/media/youtube.png

185.135.241.21

200 OK

2.2 kB

URL GET HTTP/1.1
winmeter.nl/media/youtube.png
IP
185.135.241.21:80
ASN
#208332 Hosting 2 GO B.V.

Requested by
http://winmeter.nl/grumpie/

File type
PNG image data, 72 x 72, 8-bit gray+alpha, non-interlaced
Size
2.2 kB (2205 bytes)
Hash
6b9d5de03e8f4540f25e55159499188b
3418c936ff9cc778797c2045034094cb55fe218e
76e2972facf0e27db311b4f3855709d848779257c199df48d9cfbddd5399ed9a

HTTP Headers

GET /media/youtube.png HTTP/1.1
Host: winmeter.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://winmeter.nl/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 10:46:58 GMT
Content-Type: image/png
Content-Length: 2205
Last-Modified: Sun, 15 Jan 2017 13:31:07 GMT
Connection: keep-alive
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 10:46:58 GMT
ETag: "587b799b-89d"
Accept-Ranges: bytes

winmeter.nl/media/googleplus.png

185.135.241.21

200 OK

2.5 kB

URL GET HTTP/1.1
winmeter.nl/media/googleplus.png
IP
185.135.241.21:80
ASN
#208332 Hosting 2 GO B.V.

Requested by
http://winmeter.nl/grumpie/

File type
PNG image data, 72 x 72, 8-bit gray+alpha, non-interlaced
Size
2.5 kB (2502 bytes)
Hash
4c328719545a6346fce419bd53631dc4
5c65df14875a810e22f43993b09c0bc312c47365
e5592191096d6ddbf594c063582b103db676c35c76129f7ac12cb5ff81a6a04d

HTTP Headers

GET /media/googleplus.png HTTP/1.1
Host: winmeter.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://winmeter.nl/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 10:46:58 GMT
Content-Type: image/png
Content-Length: 2502
Last-Modified: Sun, 15 Jan 2017 13:31:06 GMT
Connection: keep-alive
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 10:46:58 GMT
ETag: "587b799a-9c6"
Accept-Ranges: bytes

winmeter.nl/media/facebook.png

185.135.241.21

200 OK

2.1 kB

URL GET HTTP/1.1
winmeter.nl/media/facebook.png
IP
185.135.241.21:80
ASN
#208332 Hosting 2 GO B.V.

Requested by
http://winmeter.nl/grumpie/

File type
PNG image data, 72 x 72, 8-bit gray+alpha, non-interlaced
Size
2.1 kB (2066 bytes)
Hash
3f16c0d4137b50b4e3c2d29e692df237
5dd7a933a924f4849064fe67ef36d61cd6e06db8
c32cd80f0fac0c75f793b35b8462a4060f84296a2528b165861a940a0a2f1398

HTTP Headers

GET /media/facebook.png HTTP/1.1
Host: winmeter.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://winmeter.nl/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 10:46:58 GMT
Content-Type: image/png
Content-Length: 2066
Last-Modified: Sun, 15 Jan 2017 13:31:06 GMT
Connection: keep-alive
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 10:46:58 GMT
ETag: "587b799a-812"
Accept-Ranges: bytes

winmeter.nl/media/twitter.png

185.135.241.21

200 OK

2.3 kB

URL GET HTTP/1.1
winmeter.nl/media/twitter.png
IP
185.135.241.21:80
ASN
#208332 Hosting 2 GO B.V.

Requested by
http://winmeter.nl/grumpie/

File type
PNG image data, 72 x 72, 8-bit gray+alpha, non-interlaced
Size
2.3 kB (2298 bytes)
Hash
7b416b12cfd87463d89828da4df3843e
a05667f1c8b3257f0714778c0ec6d52781f12fae
b2ec209ca57231c8311c0b64ac18607fbcbca8d7e91ad9fcf390fa47b31fa2dd

HTTP Headers

GET /media/twitter.png HTTP/1.1
Host: winmeter.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://winmeter.nl/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 10:46:58 GMT
Content-Type: image/png
Content-Length: 2298
Last-Modified: Sun, 15 Jan 2017 13:31:07 GMT
Connection: keep-alive
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 10:46:58 GMT
ETag: "587b799b-8fa"
Accept-Ranges: bytes

winmeter.nl/images/favicon.ico

185.135.241.21

200 OK

6.0 kB

URL GET HTTP/1.1
winmeter.nl/images/favicon.ico
IP
185.135.241.21:80
ASN
#208332 Hosting 2 GO B.V.

Requested by
http://winmeter.nl/grumpie/

File type
GIF image data, version 89a, 16 x 16
Size
6.0 kB (6046 bytes)
Hash
892939aba32ec47529dfc05981fe058e
dcd16dfc992b7d5fed9d36e737368bbd20de59ce
6587bf69879cb4ad3ac4768fa45aa05de9f811d667669ef7ef6359d4f15f93cc

HTTP Headers

GET /images/favicon.ico HTTP/1.1
Host: winmeter.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://winmeter.nl/grumpie/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 May 2024 10:46:58 GMT
Content-Type: image/x-icon
Content-Length: 6046
Last-Modified: Sat, 14 Jan 2017 20:03:38 GMT
Connection: keep-alive
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 10:46:58 GMT
ETag: "587a841a-179e"
Accept-Ranges: bytes

daks2k3a4ib2z.cloudfront.net/img/webclip.png

54.230.241.103

200 OK

4.8 kB

URL GET HTTP/2
daks2k3a4ib2z.cloudfront.net/img/webclip.png
IP
54.230.241.103:443
ASN
#16509 AMAZON-02

Requested by
http://winmeter.nl/grumpie/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Size
4.8 kB (4807 bytes)
Hash
4ff20fa6aa65e68a21f28fefb0a2c3e9
8f20cc5b884b7c2642558d11d7cf79e416ea4a7f
c305e6b8ea9916705eec8eb8c281561d907fdaa0c84f3dbe7b65dac9e2ddf993

HTTP Headers

GET /img/webclip.png HTTP/1.1
Host: daks2k3a4ib2z.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://winmeter.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 4807
last-modified: Thu, 05 Oct 2023 18:14:58 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: rSDmpQNuQqoVbh9JRDEaL4vADBvuwdCz
accept-ranges: bytes
server: AmazonS3
date: Sat, 04 May 2024 03:54:55 GMT
cache-control: max-age=84600, must-revalidate
etag: "4ff20fa6aa65e68a21f28fefb0a2c3e9"
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
age: 26623
access-control-allow-origin: *
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zIroz4JMScbmQR9jvQEz-si0dH5Y3hTEh74QNcHEbgNcrG_CVf13ZA==
X-Firefox-Spdy: h2

ads.quasaraffiliates.com/renderimage.aspx?pid=1417655&bid=2324

0.0.0.0

0 B

URL GET
ads.quasaraffiliates.com/renderimage.aspx?pid=1417655&bid=2324
IP
0.0.0.0:0
ASN
#0

Requested by
http://winmeter.nl/grumpie/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /renderimage.aspx?pid=1417655&bid=2324 HTTP/1.1
Host: ads.quasaraffiliates.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://winmeter.nl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

assets.powerjackpot.com/r700x486/affiliates/378/games/20278.jpg

0.0.0.0

0 B

URL GET
assets.powerjackpot.com/r700x486/affiliates/378/games/20278.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
http://winmeter.nl/grumpie/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /r700x486/affiliates/378/games/20278.jpg HTTP/1.1
Host: assets.powerjackpot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://winmeter.nl/
Pragma: no-cache
Cache-Control: no-cache

assets.vippowerlounge.com/r750x500/affiliates/378/games/130001.jpg

0.0.0.0

0 B

URL GET
assets.vippowerlounge.com/r750x500/affiliates/378/games/130001.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
http://winmeter.nl/grumpie/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /r750x500/affiliates/378/games/130001.jpg HTTP/1.1
Host: assets.vippowerlounge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://winmeter.nl/
Pragma: no-cache
Cache-Control: no-cache

assets.powerjackpot.com/r700x486/affiliates/378/games/70037.jpg

0.0.0.0

0 B

URL GET
assets.powerjackpot.com/r700x486/affiliates/378/games/70037.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
http://winmeter.nl/grumpie/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /r700x486/affiliates/378/games/70037.jpg HTTP/1.1
Host: assets.powerjackpot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://winmeter.nl/
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (22)

URL User Request GET

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size