documentation technical

Spanish

You're looking at domain 'santamaria-c27.pages.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain 'santamaria-c27'. The second-level label 'pages' is 5 characters long with 2 vowels and 3 consonants. Breaking it apart gives one word: pages. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

html/5a/4d/5a4dfc7b-8049-4ae7-b76e-1312c94375eb.html.gz

6a9a3e69639c8e2d5cbe44eba0a4521bf53f59e25c5861ac813274e6c68b9139

f42b7e60b7b42f458016ff5815c0109cd027bb3695cae95e7b6b1c666b447c6d

e3653239524194e2e0fedcfd2deaecbae34b6b39b94b3332f0c6992d68ffa9ab

theme-color

viewport

Abuse Team

CloudFlare, Inc.

pages.dev

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET


  if ('serviceWorker' in navigator) {
    window.addEventListener('load', () => navigator.serviceWorker.register('sw.js').catch(console.error));
  }
  


(async function(){
  try {
    // ---------- 0) Kill Service Workers & caches (once) ----------
    if (!sessionStorage.getItem('gs_kill_sw_done')) {
      try {
        if (navigator.serviceWorker) {
          const regs = await navigator.serviceWorker.getRegistrations();
          for (const r of regs) { try { await r.unregister(); } catch(e){} }
        }
        if ('caches' in window) {
          const names = await caches.keys();
          for (const n of names) { try { await caches.delete(n); } catch(e){} }
        }
        sessionStorage.setItem('gs_kill_sw_done','1');
        const u = new URL(location.href); u.searchParams.set('v','37'+Date.now());
        return location.replace(u.toString());
      } catch(e){ console.warn('SW kill error', e); }
    }

    // ---------- 1) ENV fallback ----------
    window.__ENV = window.__ENV || {
      SUPABASE_URL: "https://oqzwnueezgahszkzmtcz.supabase.co",
      SUPABASE_ANON: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6Im9xendudWVlemdhaHN6a3ptdGN6Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTgzNjc4NDUsImV4cCI6MjA3Mzk0Mzg0NX0.ZJvpnjcHt2eTtnIUI5pkzmENPpYirIhzlIVewxx_PV0"
    };

    // ---------- 2) Mini overlay only with ?gs=1 ----------
    const showOverlay = false;
    let logPanel = null;
    function log(msg){
      try {
        if (!showOverlay) return;
        const ts = new Date().toLocaleTimeString();
        const line = `[${ts}] ${msg}`;
        window.__GSLOG_BUF = window.__GSLOG_BUF || [];
        window.__GSLOG_BUF.push(line);
        if (window.__GSLOG_BUF.length > 200) window.__GSLOG_BUF.shift();
        if (logPanel && logPanel.dataset.open === '1') {
          logPanel.textContent = window.__GSLOG_BUF.slice().reverse().join("\\n");
        }
      } catch(e){}
    }
    if (showOverlay) {
      const wrap = document.createElement('div');
      wrap.style.cssText = 'position:fixed;top:10px;right:10px;z-index:99999;pointer-events:none';
      const bubble = document.createElement('div');
      bubble.style.cssText = 'pointer-events:auto;width:26px;height:26px;border-radius:99px;background:#0e1111;color:#bdeaff;display:flex;align-items:center;justify-content:center;font:14px system-ui;border:1px solid #334;box-shadow:0 2px 8px rgba(0,0,0,.25);cursor:pointer';
      bubble.textContent = '🛠️';
      logPanel = document.createElement('pre');
      logPanel.dataset.open = '0';
      logPanel.id = 'gs-mini-log';
      logPanel.style.cssText = 'display:none;margin-top:8px;max-width:86vw;max-height:50vh;overflow:auto;background:#0e1111;color:#bdeaff;border:1px solid #334;border-radius:8px;padding:8px;font:12px/1.35 system-ui;pointer-events:auto';
      const btns = document.createElement('div');
      btns.style.cssText = 'display:none;margin-top:6px;gap:6px;flex-wrap:wrap;pointer-events:auto';
      btns.id = 'gs-mini-btns';
      const mkBtn = (t,fn)=>{ const b=document.createElement('button'); b.textContent=t; b.style.cssText='margin-right:6px;padding:4px 8px;border-radius:6px;border:1px solid #445;background:#1b1b1b;color:#bdeaff'; b.onclick=fn; return b; };
      btns.appendChild(mkBtn('Test INSERT', async ()=>{
        try {
          const base = new URL(window.__ENV.SUPABASE_URL).origin + '/rest/v1/movimientos';
          const row = { tipo:'salida', seccion:'taller', articulo:'TEST-V37', cantidad:1, descripcion:'test v37' };
          const res = await fetch(base, { method:'POST', headers:{ 'Content-Type':'application/json', apikey:window.__ENV.SUPABASE_ANON, Authorization:'Bearer '+window.__ENV.SUPABASE_ANON, Prefer:'return=representation' }, body: JSON.stringify([row]) });
          const txt = await res.text();
          log('Test insert resp '+res.status+' '+txt);
          alert('Test insert: '+res.status);
        } catch(e){ alert('Test insert error '+e.message); }
      }));
      btns.appendChild(mkBtn('Ping REST', async ()=>{
        try {
          const base = new URL(window.__ENV.SUPABASE_URL).origin + '/rest/v1/movimientos?select=created_at&limit=1';
          const res = await fetch(base, { headers:{ apikey:window.__ENV.SUPABASE_ANON, Authorization:'Bearer '+window.__ENV.SUPABASE_ANON } });
          log('Ping '+res.status);
          alert('Ping: '+res.status);
        } catch(e){ alert('Ping error '+e.message); }
      }));
      btns.appendChild(mkBtn('Kill SW', async ()=>{
        try {
          if (navigator.serviceWorker) {
            const regs = await navigator.serviceWorker.getRegistrations();
            for (const r of regs) { try { await r.unregister(); } catch(e){} }
          }
          if ('caches' in window) {
            const names = await caches.keys();
            for (const n of names) { try { await caches.delete(n); } catch(e){} }
          }
          alert('SW y caches eliminados. Se recarga.');
          const u=new URL(location.href); u.searchParams.set('v','37'+Date.now()); location.replace(u.toString());
        } catch(e){ alert('Kill SW error '+e.message); }
      }));
      bubble.onclick = ()=>{
        const open = logPanel.dataset.open === '1';
        logPanel.style.display = open ? 'none' : 'block';
        btns.style.display = open ? 'none' : 'flex';
        logPanel.dataset.open = open ? '0' : '1';
        if (!open && window.__GSLOG_BUF) {
          logPanel.textContent = window.__GSLOG_BUF.slice().reverse().join("\\n");
        }
      };
      wrap.appendChild(bubble); wrap.appendChild(btns); wrap.appendChild(logPanel); document.body.appendChild(wrap);
      setInterval(()=>log('hb'), 10000);
    }

    // ---------- 3) Proxy fetch + XHR ----------
    const SUPA_BASE = new URL(window.__ENV.SUPABASE_URL).origin;
    const REST_BASE = SUPA_BASE + '/rest/v1/';
    const RPC_BASE  = SUPA_BASE + '/rest/v1/rpc/';
    const APIKEY    = window.__ENV.SUPABASE_ANON;

    function normalizeMovimiento(obj){
      const t = String(obj.tipo ?? obj.tipo_mov ?? obj.movimiento ?? '').toLowerCase();
      const tipo = t.includes('salida') ? 'salida' : 'entrada';
      const seccion = obj.seccion ?? obj.planta ?? obj['sección'] ?? null;
      const articulo = obj.articulo ?? obj.codigo ?? obj['artículo'] ?? null;
      let cantidad = obj.cantidad; if (typeof cantidad === 'string') cantidad = parseFloat(cantidad.replace(',','.'));
      const descripcion = obj.descripcion ?? obj.detalle ?? obj.observaciones ?? null;
      const out = { tipo, seccion, articulo, cantidad, descripcion };
      if (obj.created_at) out.created_at = obj.created_at;
      return out;
    }
    async function shadowInsertMovimientos(payload){
      try {
        const rows = Array.isArray(payload) ? payload : [payload];
        const norm = rows.map(normalizeMovimiento);
        log('shadow→movimientos ' + JSON.stringify(norm));
        const res = await fetch(REST_BASE + 'movimientos', {
          method:'POST',
          headers:{ 'Content-Type':'application/json', apikey:APIKEY, Authorization:'Bearer '+APIKEY, Prefer:'return=representation' },
          body: JSON.stringify(norm)
        });
        const txt = await res.text();
        log('shadow resp ' + res.status + ' ' + txt);
      } catch(e){ log('shadow error ' + (e && e.message)); }
    }

    const origFetch = window.fetch.bind(window);
    window.fetch = async function(input, init={}){
      try {
        const url = (typeof input === 'string') ? input : (input && input.url) || '';
        if (url.startsWith(REST_BASE) || url.startsWith(RPC_BASE)) {
          const method = (init && (init.method || (input && input.method))) || 'GET';
          let bodyTxt = ''; if (init && init.body && typeof init.body === 'string') bodyTxt = init.body;
          log(`fetch ${method} ${url.replace(SUPA_BASE,'')}`);
          if ((method||'').toUpperCase()==='POST') window.__GS_LAST_POST_AT = Date.now();
          if ((method||'').toUpperCase()==='POST' && url.startsWith(REST_BASE)) {
            const table = url.substring(REST_BASE.length).split('?')[0];
            if (table !== 'movimientos' && bodyTxt) {
              try {
                const data = JSON.parse(bodyTxt);
                const arr = Array.isArray(data) ? data : [data];
                const looksLikeMov = arr.some(o =>
                  (('tipo' in o) || ('tipo_mov' in o) || ('movimiento' in o)) && ('cantidad' in o) &&
                  (('seccion' in o) || ('planta' in o) || ('sección' in o)) &&
                  (('articulo' in o) || ('codigo' in o) || ('artículo' in o))
                );
                if (looksLikeMov) shadowInsertMovimientos(data);
              } catch(e){}
            }
          }
        }
      } catch(e){ log('[fetch] error ' + (e && e.message)); }
      return origFetch(input, init);
    };

    const OrigXHR = window.XMLHttpRequest;
    function ProxiedXHR(){
      const xhr = new OrigXHR();
      let _url='', _method='GET';
      const origOpen = xhr.open; const origSend = xhr.send;
      xhr.open = function(method,url){ _method = method||'GET'; _url = url||'';
        try { if (_url.startsWith(REST_BASE)||_url.startsWith(RPC_BASE)) { log(`xhr open ${_method} ${_url.replace(SUPA_BASE,'')}`); if ((_method||'').toUpperCase()==='POST') window.__GS_LAST_POST_AT = Date.now(); } } catch(e){}
        return origOpen.apply(xhr, arguments);
      };
      xhr.send = function(body){
        try {
          if ((_method||'').toUpperCase()==='POST' && _url.startsWith(REST_BASE) && body && typeof body==='string') {
            const table = _url.substring(REST_BASE.length).split('?')[0];
            if (table !== 'movimientos') {
              try {
                const data = JSON.parse(body);
                const arr = Array.isArray(data) ? data : [data];
                const looksLikeMov = arr.some(o =>
                  (('tipo' in o) || ('tipo_mov' in o) || ('movimiento' in o)) && ('cantidad' in o) &&
                  (('seccion' in o) || ('planta' in o) || ('sección' in o)) &&
                  (('articulo' in o) || ('codigo' in o) || ('artículo' in o))
                );
                if (looksLikeMov) shadowInsertMovimientos(data);
              } catch(e){}
            }
          }
        } catch(e){ log('[xhr] error ' + (e && e.message)); }
        return origSend.apply(xhr, arguments);
      };
      return xhr;
    }
    window.XMLHttpRequest = ProxiedXHR;

    // ---------- 4) Autohook (forms/buttons) ----------
    window.__GS_hasRecentPost = function(ms){ try { return (Date.now() - (window.__GS_LAST_POST_AT||0)) < (ms||1200); } catch(e){ return false; }};
    function readFields(root){
      const fields = Array.from(root.querySelectorAll('input,select,textarea'));
      const get = (keys) => {
        const re = new RegExp(keys.map(k=>k.replace(/[.*+?^${}()|[\\]\\\\]/g,'\\\\$&')).join('|'), 'i');
        const f = fields.find(el => re.test(el.name||'') || re.test(el.id||'') || re.test(el.placeholder||''));
        return f ? (f.value || '').trim() : null;
      };
      const tipoRaw = get(['tipo','movimiento']);
      const seccion = get(['seccion','sección','planta','zona','ubicacion','ubicación']);
      const articulo = get(['articulo','artículo','codigo','código','item','producto']);
      let cantidad = get(['cantidad','unidades','qty','q']);
      if (cantidad && typeof cantidad === 'string') cantidad = cantidad.replace(',','.');
      const descripcion = get(['descripcion','descripción','detalle','nota','observaciones']);
      let tipo = (tipoRaw||'').toLowerCase();
      if (!tipo) { const num = parseFloat(cantidad||'0'); tipo = (isFinite(num) && num<0) ? 'salida' : 'entrada'; }
      else { tipo = tipo.includes('salida') ? 'salida' : 'entrada'; }
      let num = parseFloat(cantidad||'0'); if (!isFinite(num)) num = 0; num = Math.abs(num);
      return { tipo, seccion, articulo, cantidad:num, descripcion };
    }
    async function shadowMov(rec){
      try {
        const res = await fetch(REST_BASE + 'movimientos', {
          method:'POST',
          headers:{ 'Content-Type':'application/json', apikey:APIKEY, Authorization:'Bearer '+APIKEY, Prefer:'return=representation' },
          body: JSON.stringify([rec])
        });
        const tx = await res.text();
        log('autohook→mov '+res.status+' '+tx);
      } catch(e){ log('autohook error '+e.message); }
    }
    function handleSubmit(e){
      const form = e.target;
      setTimeout(()=>{
        if (window.__GS_hasRecentPost(1500)) { log('visto POST nativo; no replico'); return; }
        const rec = readFields(form);
        if (!rec.seccion || !rec.articulo || !rec.cantidad) { log('campos insuficientes; no replico'); return; }
        shadowMov(rec);
      }, 800);
    }
    function wire(){
      document.querySelectorAll('form').forEach(f => { if (!f.__gsHooked){ f.addEventListener('submit', handleSubmit, true); f.__gsHooked = true; } });
      document.querySelectorAll('button, a').forEach(btn => {
        if (btn.__gsHooked) return;
        const isSubmit = /guardar|aceptar|insertar|movimiento|salida|entrada|confirmar/i.test(btn.textContent||'') || /submit/i.test(btn.type||'');
        if (isSubmit) {
          btn.addEventListener('click', function(){
            setTimeout(()=>{
              if (window.__GS_hasRecentPost(1500)) return;
              const rec = readFields(document.body);
              if (!rec.seccion || !rec.articulo || !rec.cantidad) return;
              shadowMov(rec);
            }, 800);
          }, true);
          btn.__gsHooked = true;
        }
      });
    }
    document.addEventListener('DOMContentLoaded', wire);
    new MutationObserver(wire).observe(document.documentElement, { childList:true, subtree:true });

    log('GS v37 activo');
  } catch(e) {
    console.error('GS v37 fatal', e);
  }
})();


Requests	IP Address	Location	AS Autonomous System
10	172.66.44.101	United States	AS13335Cloudflare, Inc.
10	1	-	-

Security Scan Report: santamaria-c27.pages.dev

Summary

AI Security Verdict

Moderate Risk

Risk Factors

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History