https://win32subsystem.live/supermium/

ID de l'analyse :: a72bb7aa-f913-4c7c-a3ed-0896caf71e6eTerminée
URL soumise :: https://win32subsystem.live/supermiumRedirigé
Fin du rapport :: 6 avr. 2025, 15:22:59Public

Transactions HTTP · 21 détectées

Une liste de toutes les requêtes et réponses HTTP émises par la ressource au cours de la session en cours


GETh2	403	https://win32subsystem.live/supermium Chaîne de redirection https://win32subsystem.live/supermium301 https://win32subsystem.live/supermium/	Documenttext/html	4,39ko1,92ko	188.114.97.3AS13335 (US)
Général URL complète https://win32subsystem.live/supermium/ Protocole h2 Sécurité TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Serveur 188.114.97.3AS13335 (US) Logiciel de serveur cloudflare Hachage de ressource 75fcc5b3561e352c5850dc39da248e6443238dcea8eddd06ec60e7826536088b En-têtes de sécurité content-security-policy upgrade-insecure-requests; expect-ct max-age=86400, enforce permissions-policy interest-cohort=(), browsing-topics=() referrer-policy same-origin x-content-type-options nosniff x-frame-options SAMEORIGIN x-xss-protection 1; mode=block En-têtes de requête Upgrade-Insecure-Requests 1 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" sec-ch-ua-platform Win32 :authority win32subsystem.live :method GET :path /supermium/ :scheme https accept text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 74748b4a-0ee1-40b0-92cc-dde6071e9938 priority u=0, i sec-fetch-dest document sec-fetch-mode navigate sec-fetch-site none sec-fetch-user ?1 upgrade-insecure-requests 1 user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 En-têtes de réponse cf-ray 92c248e30972667b-MAD content-encoding zstd content-security-policy upgrade-insecure-requests; content-type text/html; charset=utf-8 date Sun, 06 Apr 2025 15:23:08 GMT expect-ct max-age=86400, enforce permissions-policy interest-cohort=(), browsing-topics=() referrer-policy same-origin server cloudflare x-content-type-options nosniff x-frame-options SAMEORIGIN x-xss-protection 1; mode=block En-têtes de redirection https://win32subsystem.live/supermium301 location https://win32subsystem.live/supermium/ alt-svc h3=":443"; ma=86400 cf-cache-status DYNAMIC cf-ray 92c248e09e9f667b-MAD content-security-policy upgrade-insecure-requests; content-type text/html; charset=iso-8859-1 date Sun, 06 Apr 2025 15:23:08 GMT expect-ct max-age=86400, enforce nel {"success_fraction":0,"report_to":"cf-nel","max_age":604800} permissions-policy interest-cohort=(), browsing-topics=() referrer-policy same-origin report-to {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j3NDRP5pafQG7n85nQihgNOoiXqn5tQc0pzjNOc4lT1%2FVHCY%2FsAic80XjJHlj2KwzZKBUN0QPaOw90mmGxxMEmVAVqE2XZCzhSn%2FzZcRO9DqXpTi2LB4wBIZZsjbH7iYakupreok7Fd9cawaxUaDndXM"}],"group":"cf-nel","max_age":604800} server cloudflare server-timing cfL4;desc="?proto=TCP&rtt=0&min_rtt=0&rtt_var=0&sent=0&recv=0&lost=0&retrans=0&sent_bytes=0&recv_bytes=0&delivery_rate=0&cwnd=0&unsent_bytes=0&cid=a9dd9c864ae58bc5&ts=382&x=0" strict-transport-security max-age=31536000; includeSubDomains; preload x-content-type-options nosniff x-frame-options SAMEORIGIN x-xss-protection 1; mode=block
GETh2	200	cf.errors.csshttps://win32subsystem.live/cdn-cgi/styles	Feuille de styletext/css	23,49ko4,93ko	188.114.97.3AS13335 (US)
Général URL complète https://win32subsystem.live/cdn-cgi/styles/cf.errors.css Auteur de la requête URL https://win32subsystem.live/supermium/ Hôte win32subsystem.live Type parser Protocole h2 Sécurité TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Serveur 188.114.97.3AS13335 (US) Logiciel de serveur cloudflare Hachage de ressource 84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091 En-têtes de sécurité content-security-policy upgrade-insecure-requests; referrer-policy same-origin x-content-type-options nosniff expect-ct max-age=86400, enforce x-frame-options SAMEORIGIN permissions-policy interest-cohort=(), browsing-topics=() x-xss-protection 1; mode=block En-têtes de requête sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://win32subsystem.live/supermium/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority win32subsystem.live :method GET :path /cdn-cgi/styles/cf.errors.css :scheme https accept text/css,/;q=0.1 accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 74748b4a-0ee1-40b0-92cc-dde6071e9938 priority u=0 referer https://win32subsystem.live/supermium/ sec-fetch-dest style sec-fetch-mode no-cors sec-fetch-site same-origin user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 En-têtes de réponse date Sun, 06 Apr 2025 15:23:08 GMT content-security-policy upgrade-insecure-requests; referrer-policy same-origin x-content-type-options nosniff content-encoding zstd server cloudflare expect-ct max-age=86400, enforce x-frame-options SAMEORIGIN content-type text/css permissions-policy interest-cohort=(), browsing-topics=() cf-ray 92c248e359b2667b-MAD x-xss-protection 1; mode=block
GETh2	200	icon-exclamation.pnghttps://win32subsystem.live/cdn-cgi/images	imageimage/png	452o620o	188.114.97.3AS13335 (US)
Général URL complète https://win32subsystem.live/cdn-cgi/images/icon-exclamation.png?1376755637 Auteur de la requête URL https://win32subsystem.live/cdn-cgi/styles/cf.errors.css Hôte win32subsystem.live Type parser Protocole h2 Sécurité TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Serveur 188.114.97.3AS13335 (US) Logiciel de serveur cloudflare Hachage de ressource f1591a5221136c49438642155691ae6c68e25b7241f3d7ebe975b09a77662016 En-têtes de sécurité x-content-type-options nosniff x-frame-options DENY En-têtes de requête sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://win32subsystem.live/cdn-cgi/styles/cf.errors.css User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 En-têtes de réponse date Sun, 06 Apr 2025 15:23:08 GMT x-content-type-options nosniff last-modified Mon, 31 Mar 2025 18:01:59 GMT server cloudflare etag "67ead897-1c4" x-frame-options DENY vary Accept-Encoding content-type image/png cache-control max-age=7200, public accept-ranges bytes cf-ray 92c248e3aa16667b-MAD content-length 452 expires Sun, 06 Apr 2025 17:23:08 GMT
GETh2	200	favicon.icohttps://win32subsystem.live	Autreimage/vnd.microsoft.icon	49,82ko35,2ko	188.114.97.3AS13335 (US)
Général URL complète https://win32subsystem.live/favicon.ico Protocole h2 Sécurité TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Serveur 188.114.97.3AS13335 (US) Logiciel de serveur cloudflare Hachage de ressource b0ec5d48f9158927c351245287f9a9465eddf6ed4386243064799afc48c9ec15 En-têtes de sécurité strict-transport-security max-age=31536000; includeSubDomains; preload x-content-type-options nosniff content-security-policy upgrade-insecure-requests; x-xss-protection 1; mode=block referrer-policy same-origin expect-ct max-age=86400, enforce x-frame-options SAMEORIGIN permissions-policy interest-cohort=(), browsing-topics=() En-têtes de requête sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://win32subsystem.live/supermium/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority win32subsystem.live :method GET :path /favicon.ico :scheme https accept image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 74748b4a-0ee1-40b0-92cc-dde6071e9938 priority u=1, i referer https://win32subsystem.live/supermium/ sec-fetch-dest image sec-fetch-mode no-cors sec-fetch-site same-origin user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 En-têtes de réponse date Sun, 06 Apr 2025 15:23:09 GMT strict-transport-security max-age=31536000; includeSubDomains; preload x-content-type-options nosniff cf-cache-status HIT nel {"success_fraction":0,"report_to":"cf-nel","max_age":604800} content-security-policy upgrade-insecure-requests; content-encoding zstd server-timing cfL4;desc="?proto=TCP&rtt=0&min_rtt=0&rtt_var=0&sent=0&recv=0&lost=0&retrans=0&sent_bytes=0&recv_bytes=0&delivery_rate=0&cwnd=0&unsent_bytes=0&cid=a9dd9c864ae58bc5&ts=890&x=0" alt-svc h3=":443"; ma=86400 x-xss-protection 1; mode=block referrer-policy same-origin last-modified Sun, 25 Feb 2024 20:00:08 GMT server cloudflare etag W/"c74c-6123a3d69a200" expect-ct max-age=86400, enforce vary Accept-Encoding report-to {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KNikSDf0qBbmgd50J4x%2BUtpVa6A3itjdWYdl908LWSRU5QbK5BZFq1%2BxkDMMHi4Q7UNtxzqlRdLOTbi%2BHVdkGbtXzKgge12Z5XwcHgH3skTia34gmiXIArhGZ4dYJ7paPKprzJ0Tu%2BLCzwM8b49P75tZ"}],"group":"cf-nel","max_age":604800} content-type image/vnd.microsoft.icon x-frame-options SAMEORIGIN cache-control max-age=14400 permissions-policy interest-cohort=(), browsing-topics=() cf-ray 92c248e42aa2667b-MAD
GETh2	200	https://win32subsystem.live/supermium Chaîne de redirection https://win32subsystem.live/cdn-cgi/phish-bypass?atok=DFgg4MEi4nOzoCx4OfQ1z.Cv8LgGeLw.K8jTEqm9dHA-1743952988.6427116-0.0.1.1-%2Fsupermium%2F301 https://win32subsystem.live/supermium/	Documenttext/html	7,35ko3,11ko	188.114.97.3AS13335 (US)
Général URL complète https://win32subsystem.live/supermium/ Protocole h2 Sécurité TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Serveur 188.114.97.3AS13335 (US) Logiciel de serveur cloudflare Hachage de ressource 79565f6e17fc492f87f5b2f4409839f534b7ca15fcd395509c5925076a376dc9 En-têtes de sécurité content-security-policy upgrade-insecure-requests; expect-ct max-age=86400, enforce permissions-policy interest-cohort=(), browsing-topics=() referrer-policy same-origin x-content-type-options nosniff x-frame-options SAMEORIGIN x-xss-protection 1; mode=block En-têtes de requête Referer https://win32subsystem.live/supermium/ Upgrade-Insecure-Requests 1 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" sec-ch-ua-platform Win32 :authority win32subsystem.live :method GET :path /supermium/ :scheme https accept text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 74748b4a-0ee1-40b0-92cc-dde6071e9938 cookie __cf_mw_byp=DFgg4MEi4nOzoCx4OfQ1z.Cv8LgGeLw.K8jTEqm9dHA-1743952988.6427116-0.0.1.1-%2Fsupermium%2F priority u=0, i referer https://win32subsystem.live/supermium/ sec-fetch-dest document sec-fetch-mode navigate sec-fetch-site same-origin sec-fetch-user ?1 upgrade-insecure-requests 1 user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 En-têtes de réponse alt-svc h3=":443"; ma=86400 cf-cache-status DYNAMIC cf-ray 92c248eae877667b-MAD content-encoding zstd content-security-policy upgrade-insecure-requests; content-type text/html; charset=UTF-8 date Sun, 06 Apr 2025 15:23:10 GMT expect-ct max-age=86400, enforce permissions-policy interest-cohort=(), browsing-topics=() referrer-policy same-origin server cloudflare x-content-type-options nosniff x-frame-options SAMEORIGIN x-xss-protection 1; mode=block En-têtes de redirection https://win32subsystem.live/cdn-cgi/phish-bypass?atok=DFgg4MEi4nOzoCx4OfQ1z.Cv8LgGeLw.K8jTEqm9dHA-1743952988.6427116-0.0.1.1-%2Fsupermium%2F301 location /supermium/ cache-control private, no-cache cf-ray 92c248eac869667b-MAD content-security-policy upgrade-insecure-requests; date Sun, 06 Apr 2025 15:23:09 GMT expect-ct max-age=86400, enforce permissions-policy interest-cohort=(), browsing-topics=() referrer-policy same-origin server cloudflare x-content-type-options nosniff x-frame-options SAMEORIGIN x-xss-protection 1; mode=block
GETh2	200	styles.csshttps://win32subsystem.live/supermium	Feuille de styletext/css	7,02ko1,94ko	188.114.97.3AS13335 (US)
Général URL complète https://win32subsystem.live/supermium/styles.css Auteur de la requête URL https://win32subsystem.live/supermium/ Hôte win32subsystem.live Type parser Protocole h2 Sécurité TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Serveur 188.114.97.3AS13335 (US) Logiciel de serveur cloudflare Hachage de ressource 8e9249f28b0227b42ea1fff17238b53cc5c8ccd7554a4b9526e4ac0072c0d644 En-têtes de sécurité content-security-policy upgrade-insecure-requests; x-content-type-options nosniff x-xss-protection 1; mode=block referrer-policy same-origin expect-ct max-age=86400, enforce x-frame-options SAMEORIGIN permissions-policy interest-cohort=(), browsing-topics=() En-têtes de requête sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://win32subsystem.live/supermium/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority win32subsystem.live :method GET :path /supermium/styles.css :scheme https accept text/css,/;q=0.1 accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 74748b4a-0ee1-40b0-92cc-dde6071e9938 cookie __cf_mw_byp=DFgg4MEi4nOzoCx4OfQ1z.Cv8LgGeLw.K8jTEqm9dHA-1743952988.6427116-0.0.1.1-%2Fsupermium%2F priority u=0 referer https://win32subsystem.live/supermium/ sec-fetch-dest style sec-fetch-mode no-cors sec-fetch-site same-origin user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 En-têtes de réponse date Sun, 06 Apr 2025 15:23:10 GMT content-security-policy upgrade-insecure-requests; content-encoding zstd cf-cache-status HIT x-content-type-options nosniff alt-svc h3=":443"; ma=86400 x-xss-protection 1; mode=block referrer-policy same-origin last-modified Thu, 02 Jan 2025 22:00:28 GMT server cloudflare etag W/"1c18-62ac04a3f1700" expect-ct max-age=86400, enforce x-frame-options SAMEORIGIN content-type text/css cache-control max-age=14400 permissions-policy interest-cohort=(), browsing-topics=() cf-ray 92c248ebd961667b-MAD
GETh2	200	NotoSansSemiCondensed-Medium.woff2https://win32subsystem.live/supermium/fonts	Policefont/woff2	200,94ko201,64ko	188.114.97.3AS13335 (US)
Général URL complète https://win32subsystem.live/supermium/fonts/NotoSansSemiCondensed-Medium.woff2 Auteur de la requête URL https://win32subsystem.live/supermium/ Hôte win32subsystem.live Type parser Protocole h2 Sécurité TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Serveur 188.114.97.3AS13335 (US) Logiciel de serveur cloudflare En-têtes de sécurité strict-transport-security max-age=31536000; includeSubDomains; preload x-content-type-options nosniff content-security-policy upgrade-insecure-requests; x-xss-protection 1; mode=block referrer-policy same-origin expect-ct max-age=86400, enforce x-frame-options SAMEORIGIN permissions-policy interest-cohort=(), browsing-topics=() En-têtes de requête sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://win32subsystem.live/supermium/ Origin https://win32subsystem.live User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority win32subsystem.live :method GET :path /supermium/fonts/NotoSansSemiCondensed-Medium.woff2 :scheme https accept / accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 74748b4a-0ee1-40b0-92cc-dde6071e9938 cookie __cf_mw_byp=DFgg4MEi4nOzoCx4OfQ1z.Cv8LgGeLw.K8jTEqm9dHA-1743952988.6427116-0.0.1.1-%2Fsupermium%2F origin https://win32subsystem.live priority u=1 referer https://win32subsystem.live/supermium/ sec-fetch-dest font sec-fetch-mode cors sec-fetch-site same-origin user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 En-têtes de réponse date Sun, 06 Apr 2025 15:23:10 GMT strict-transport-security max-age=31536000; includeSubDomains; preload x-content-type-options nosniff cf-cache-status HIT nel {"success_fraction":0,"report_to":"cf-nel","max_age":604800} content-security-policy upgrade-insecure-requests; server-timing cfL4;desc="?proto=TCP&rtt=0&min_rtt=0&rtt_var=0&sent=0&recv=0&lost=0&retrans=0&sent_bytes=0&recv_bytes=0&delivery_rate=0&cwnd=0&unsent_bytes=0&cid=a9dd9c864ae58bc5&ts=1927&x=0" alt-svc h3=":443"; ma=86400 content-length 205764 x-xss-protection 1; mode=block referrer-policy same-origin last-modified Fri, 23 Feb 2024 03:22:51 GMT server cloudflare etag "323c4-61204132ab8c0" expect-ct max-age=86400, enforce vary Accept-Encoding report-to {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dcedT2o0LeEwDqmKkiIWfbvKslVf5BgZFPwFS%2BkplQ9mfSbXWpeGymRDdSkcwbiAI0SWQITA9YfKoiOQkfdYLcDlLkDvRa1CKSfvJgF563j9WX33sMz6z%2ByFxFmGoNzzL8nX1PmTFnb%2B3lI7BuUDT6%2F%2F"}],"group":"cf-nel","max_age":604800} content-type font/woff2 x-frame-options SAMEORIGIN cache-control max-age=14400 permissions-policy interest-cohort=(), browsing-topics=() accept-ranges bytes cf-ray 92c248ebd965667b-MAD
GETh2	200	Selawik-Regular.woff2https://win32subsystem.live/supermium/fonts	Policefont/woff2	15,52ko15,64ko	188.114.97.3AS13335 (US)
Général URL complète https://win32subsystem.live/supermium/fonts/Selawik-Regular.woff2 Auteur de la requête URL https://win32subsystem.live/supermium/ Hôte win32subsystem.live Type parser Protocole h2 Sécurité TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Serveur 188.114.97.3AS13335 (US) Logiciel de serveur cloudflare En-têtes de sécurité content-security-policy upgrade-insecure-requests; x-content-type-options nosniff x-xss-protection 1; mode=block referrer-policy same-origin expect-ct max-age=86400, enforce x-frame-options SAMEORIGIN permissions-policy interest-cohort=(), browsing-topics=() En-têtes de requête sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://win32subsystem.live/supermium/ Origin https://win32subsystem.live User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority win32subsystem.live :method GET :path /supermium/fonts/Selawik-Regular.woff2 :scheme https accept / accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 74748b4a-0ee1-40b0-92cc-dde6071e9938 cookie __cf_mw_byp=DFgg4MEi4nOzoCx4OfQ1z.Cv8LgGeLw.K8jTEqm9dHA-1743952988.6427116-0.0.1.1-%2Fsupermium%2F origin https://win32subsystem.live priority u=1 referer https://win32subsystem.live/supermium/ sec-fetch-dest font sec-fetch-mode cors sec-fetch-site same-origin user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 En-têtes de réponse date Sun, 06 Apr 2025 15:23:10 GMT content-security-policy upgrade-insecure-requests; x-content-type-options nosniff cf-cache-status HIT alt-svc h3=":443"; ma=86400 content-length 15892 x-xss-protection 1; mode=block referrer-policy same-origin last-modified Sat, 03 Feb 2024 22:10:26 GMT server cloudflare etag "3e14-610817ee49880" expect-ct max-age=86400, enforce x-frame-options SAMEORIGIN content-type font/woff2 cache-control max-age=14400 permissions-policy interest-cohort=(), browsing-topics=() accept-ranges bytes cf-ray 92c248ebd968667b-MAD
GETh2	200	scripts.jsTéléchargerhttps://win32subsystem.live/supermium	Scripttext/javascript	575o1,04ko	188.114.97.3AS13335 (US)
Général URL complète https://win32subsystem.live/supermium/scripts.js Auteur de la requête URL https://win32subsystem.live/supermium/ Hôte win32subsystem.live Type parser Protocole h2 Sécurité TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Serveur 188.114.97.3AS13335 (US) Logiciel de serveur cloudflare Hachage de ressource 91a5f373244e4ec6205b4ac232a769061fc293491de7a30d8b4aea1eeca21068 En-têtes de sécurité strict-transport-security max-age=31536000; includeSubDomains; preload x-content-type-options nosniff content-security-policy upgrade-insecure-requests; x-xss-protection 1; mode=block referrer-policy same-origin expect-ct max-age=86400, enforce x-frame-options SAMEORIGIN permissions-policy interest-cohort=(), browsing-topics=() En-têtes de requête sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://win32subsystem.live/supermium/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority win32subsystem.live :method GET :path /supermium/scripts.js :scheme https accept / accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 74748b4a-0ee1-40b0-92cc-dde6071e9938 cookie __cf_mw_byp=DFgg4MEi4nOzoCx4OfQ1z.Cv8LgGeLw.K8jTEqm9dHA-1743952988.6427116-0.0.1.1-%2Fsupermium%2F priority u=1 referer https://win32subsystem.live/supermium/ sec-fetch-dest script sec-fetch-mode no-cors sec-fetch-site same-origin user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 En-têtes de réponse date Sun, 06 Apr 2025 15:23:10 GMT strict-transport-security max-age=31536000; includeSubDomains; preload x-content-type-options nosniff cf-cache-status HIT nel {"success_fraction":0,"report_to":"cf-nel","max_age":604800} content-security-policy upgrade-insecure-requests; content-encoding zstd server-timing cfL4;desc="?proto=TCP&rtt=0&min_rtt=0&rtt_var=0&sent=0&recv=0&lost=0&retrans=0&sent_bytes=0&recv_bytes=0&delivery_rate=0&cwnd=0&unsent_bytes=0&cid=a9dd9c864ae58bc5&ts=1922&x=0" alt-svc h3=":443"; ma=86400 x-xss-protection 1; mode=block referrer-policy same-origin last-modified Sat, 30 Mar 2024 02:45:19 GMT server cloudflare etag W/"23f-614d7bf396dc0" expect-ct max-age=86400, enforce vary Accept-Encoding report-to {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xDl19cC67saVR3okIAiLIQ5lLeJh0unHVpZNZk%2F7s1OEh5v0CNERzgqotFtjjdjtsStX4UzjZjycCDk3iy88YBNlYCYHFFwxWJcr%2FKC4APz2c1Kge65emyzMJnCUkPbnNGJcZKJGpfU3EIRLc0o8%2Fx%2B7"}],"group":"cf-nel","max_age":604800} content-type text/javascript x-frame-options SAMEORIGIN cache-control max-age=14400 permissions-policy interest-cohort=(), browsing-topics=() cf-ray 92c248ebd96a667b-MAD
GETh2	200	OS-Stickers.pnghttps://win32subsystem.live/supermium/images	imageimage/png	10,5ko10,98ko	188.114.97.3AS13335 (US)
Général URL complète https://win32subsystem.live/supermium/images/OS-Stickers.png Auteur de la requête URL https://win32subsystem.live/supermium/ Hôte win32subsystem.live Type parser Protocole h2 Sécurité TLS 1.3, X25519Kyber768Draft00, AES_128_GCM Serveur 188.114.97.3AS13335 (US) Logiciel de serveur cloudflare Hachage de ressource 17fb02152b627f1e9623a6ea3ee749238a71f1a3c1bd104402ace03ff9dbfaa1 En-têtes de sécurité strict-transport-security max-age=31536000; includeSubDomains; preload x-content-type-options nosniff content-security-policy upgrade-insecure-requests; x-xss-protection 1; mode=block referrer-policy same-origin expect-ct max-age=86400, enforce x-frame-options SAMEORIGIN permissions-policy interest-cohort=(), browsing-topics=() En-têtes de requête sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://win32subsystem.live/supermium/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority win32subsystem.live :method GET :path /supermium/images/OS-Stickers.png :scheme https accept image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 accept-encoding gzip, deflate, br, zstd accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 74748b4a-0ee1-40b0-92cc-dde6071e9938 cookie __cf_mw_byp=DFgg4MEi4nOzoCx4OfQ1z.Cv8LgGeLw.K8jTEqm9dHA-1743952988.6427116-0.0.1.1-%2Fsupermium%2F priority u=2, i referer https://win32subsystem.live/supermium/ sec-fetch-dest image sec-fetch-mode no-cors sec-fetch-site same-origin user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 En-têtes de réponse date Sun, 06 Apr 2025 15:23:10 GMT strict-transport-security max-age=31536000; includeSubDomains; preload x-content-type-options nosniff cf-cache-status HIT nel {"success_fraction":0,"report_to":"cf-nel","max_age":604800} content-security-policy upgrade-insecure-requests; server-timing cfL4;desc="?proto=TCP&rtt=0&min_rtt=0&rtt_var=0&sent=0&recv=0&lost=0&retrans=0&sent_bytes=0&recv_bytes=0&delivery_rate=0&cwnd=0&unsent_bytes=0&cid=a9dd9c864ae58bc5&ts=2114&x=0" alt-svc h3=":443"; ma=86400 content-length 10748 x-xss-protection 1; mode=block referrer-policy same-origin last-modified Mon, 11 Mar 2024 02:59:37 GMT server cloudflare etag "29fc-61359bb615840" expect-ct max-age=86400, enforce vary Accept-Encoding report-to {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oeAD3OooQmxH50NcYmfD6YbYd7O4dtj8tX9ETWbzNEyVE3YUMMMFQNgP2UtM6OKe85aug4kIys4yLK3wwZ%2BziDkwhe8nH7%2BiGBTQkQvOdUPLbUNIap%2FC14g3zKczLYP6a67fJrTuzWR0Z6OIt4nKYjhz"}],"group":"cf-nel","max_age":604800} content-type image/png x-frame-options SAMEORIGIN cache-control max-age=14400 permissions-policy interest-cohort=(), browsing-topics=() accept-ranges bytes cf-ray 92c248ebd96c667b-MAD

Historique de la page : 4 entrées trouvées

Redirection HTTP, JavaScript ou Meta tag

https://win32subsystem.live/supermium301
https://win32subsystem.live/supermium/403
https://win32subsystem.live/cdn-cgi/phish-bypass?atok=DFgg4MEi4nOzoCx4OfQ1z.Cv8LgGeLw.K8jTEqm9dHA-1743952988.6427116-0.0.1.1-%2Fsupermium%2F301
https://win32subsystem.live/supermium/200

Chaînes de redirection : 2 trouvées

Redirections détectées sur les transactions HTTP

Chaîne de redirection pour la transaction N°1

https://win32subsystem.live/supermium301
https://win32subsystem.live/supermium/

Chaîne de redirection pour la transaction N°5

https://win32subsystem.live/cdn-cgi/phish-bypass?atok=DFgg4MEi4nOzoCx4OfQ1z.Cv8LgGeLw.K8jTEqm9dHA-1743952988.6427116-0.0.1.1-%2Fsupermium%2F301
https://win32subsystem.live/supermium/

Enregistrements DNS : 4 trouvé(s)

Les enregistrements DNS fournissent des informations concernant un domaine, notamment l'adresse IP à laquelle il est associé

Type	Nom	Contenu	DNSSEC
A	win32subsystem.live	188.114.97.3	Désactivé
A	win32subsystem.live	188.114.96.3	Désactivé
AAAA	win32subsystem.live	2a06:98c1:3120::3	Désactivé
AAAA	win32subsystem.live	2a06:98c1:3121::3	Désactivé