I was poking around winterba.sh for secret hats and I figured there may be a secret hat linked to a URL so I decided to look at some different URLs and got plenty of 404s but, some pages throw different 404s than others. Why?

Example: http://winterba.sh/sdfj throws the classic "Page Not Found" winterbash style... but http://winterba.sh/hat just has the text "404"

(http://winterba.sh/secret used to throw just the text "404" but since that has changed)

Still happening at 2016 with http://winterbash2016.stackexchange.com/hat.

  • 1
    Maybe hat is the name of a directory on the server? Commented Dec 21, 2012 at 4:58
  • true, but what would be in there? all the images and things are hosted at a diffrent domain
    – DeadChex
    Commented Dec 21, 2012 at 5:04
  • 1
    @DeadChex That's the secret LOL
    – Mr. Alien
    Commented Dec 21, 2012 at 6:13
  • @irrelephant: Seems more like a sole file then a directory for me. Maybe a joke? Commented Dec 21, 2012 at 8:15
  • I guess something to do with the URL-rewriting, "hat" is probably the name of the ASPX file although I wasn't able to prove that just yet. Commented Jan 9, 2013 at 10:34

1 Answer 1


Turns out I was right.

After some trial and error, I got to this: http://winterbash2016.stackexchange.com/hat?id=1 which returns JSON data for a specific hat.

Stack Exchange simply use this internally to load hats data.

  • 1
    I see a traces of russian hackers in the link :) Commented Jan 3, 2017 at 10:14

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .