DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://hingeometer.com/zKjMdQ.html
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://hingeometer.com/zKjMdQ.html
- Submitted IP / ASN
31.56.146.198 AS215362 · Promo Plus SRL
- Final URL
- https://playafterdark.com/click?key=wsimf6l8rglpjx2tjad1&SUB_ID_SHORT=6e9cdff242535e8b4e3356588642788c&COST_CPM=1.000000&PLACEMENT_ID=30839951&CAMPAIGN_ID=1376580&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&REMOTE_LANGUAGE=11&BANNER_ID=3658381#
- Final IP / ASN
104.21.94.240 AS13335 · CLOUDFLARENET
Final page
- Page title
- Lust Goddess
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 41.2 KB (42143 bytes)
Detections
Activity
- HTTP requests
- 38
- Observed hosts
- 4
- Script records
- 9
Estimated HTTP data
- Sent
- ~34.5 KB
- Received
- ~619.8 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| hingeometer.com | N/A | 2017-11-07 | 2023-02-16 | 2023-07-31 | 5.4 KB | 12.2 KB | 31.56.146.198 | C Programming languages C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system. Perl Programming languages Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages. Angie:1.12.1 Web servers Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version. Anubis Security Anubis is a system that evaluates the characteristics of incoming HTTP requests to determine their legitimacy and enhance website protection. |
| playafterdark.com | N/A | 2026-01-11 | 2026-01-15 | 2026-08-25 | 22.6 KB | 517.5 KB | 104.21.94.240 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. AddToAny Widgets AddToAny is a universal sharing platform that can be integrated into a website by use of a web widget or plugin. |
| static.addtoany.com | 28267 | 2006-03-10 | 2012-05-21 | 2026-08-24 | 4.0 KB | 86.5 KB | 172.66.171.172 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| www.effectivecpmnetwork.com 2 alerts | N/A | 2026-05-14 | 2026-05-16 | 2026-08-29 | 2.5 KB | 3.5 KB |  172.240.108.68 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Nginx:1.28.2 Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |