{"report_id":"0ece36b3-6aee-4287-93ec-5b413fffcefd","version":6,"status":"done","tags":[],"date":"2025-07-19T22:27:18Z","url":{"schema":"http","addr":"www.rojadirecta.me/","fqdn":"www.rojadirecta.me","domain":"rojadirecta.me","tld":"me"},"ip":{"addr":"52.223.39.56","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"www.rojadirecta.me/","fqdn":"www.rojadirecta.me","domain":"rojadirecta.me","tld":"me"},"title":"rojadirecta.me/"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-08-23T22:27:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.rojadirecta.me","ip":{"addr":"52.223.39.56","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2011-01-24","domain_rank":458932,"first_seen":"2013-01-30T19:32:00Z","last_seen":"2025-07-17T21:13:01.926776Z","alert_count":0,"request_count":3,"received_data":2776,"sent_data":1251,"comment":"","tags":null,"fingerprints":null},{"fqdn":"77fa1a6ecb04.01691059.us-east-1.token.awswaf.com","ip":{"addr":"54.240.174.33","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2015-10-05","domain_rank":0,"first_seen":"2024-12-07T16:17:19.71667Z","last_seen":"2025-07-19T00:55:31.801813Z","alert_count":1,"request_count":3,"received_data":1101664,"sent_data":1598,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2025-07-19","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"77fa1a6ecb04.01691059.us-east-1.token.awswaf.com/77fa1a6ecb04/04b9781908b7/df99f9afaaa1/challenge.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2025-07-19","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"javascript.script.md5:2c3e1faa0a31dc58298c5ca7538d4c1b","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}]},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"www.rojadirecta.me/","fqdn":"www.rojadirecta.me","domain":"rojadirecta.me","tld":"me"},"ip":{"addr":"52.223.39.56","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fcf5e0a9de72a19db7ea1c12ac5bf303","sha1":"242e0c686a905baca94fda2e21474d2fa683b7b6","sha256":"a8fb40f7f4f1a9876cfdc0db8eaa23b9fc6a4e937312a407babfe3e84270eb35","sha512":"d78c975e205f9701a96f7289e684e5698d96c018e003d3f05f4e6410a4cbf636d4ca983040166839546908bc3d1cc0d493641d57e1b9e651fcd4e972b32fc26a","ssdeep":"","tlshash":"8801b5738072919b0021e03b8ea5184fe983c2aa4574400ebf9cee400b7cc7b0b824cb","size":765,"data":"","first_seen":"2025-07-19T22:27:19.562821Z","last_seen":"2025-07-19T22:27:19.562821Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.rojadirecta.me/","fqdn":"www.rojadirecta.me","domain":"rojadirecta.me","tld":"me"},"ip":{"addr":"52.223.39.56","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"be0f34ad0da11a419087bfd302eadaae","sha1":"a9df3dbf8816edf2ac052e7619c380db6ce3a533","sha256":"edd4f79be789627d4029e85859f8382b8bccfbfb518bad629e1f8bd523329efb","sha512":"81bf8d78eff65c21d546f384a9b66240879c367690258535bf7eeae7334c0fe190defc0dedc088b675fc0d239bbb6e383204c2dc98153d0f42290289bb9f136d","ssdeep":"","tlshash":"46f0dfcbb36540012273bd36ee4be00ea4b1dabb000ad9217c8de6500f8d28683833a7","size":462,"data":"","first_seen":"2025-03-03T10:39:40.264121Z","last_seen":"2026-04-03T17:45:22.853577Z","times_seen":1239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"77fa1a6ecb04.01691059.us-east-1.token.awswaf.com/77fa1a6ecb04/04b9781908b7/df99f9afaaa1/challenge.js","fqdn":"77fa1a6ecb04.01691059.us-east-1.token.awswaf.com","domain":"awswaf.com","tld":"com"},"ip":{"addr":"54.240.174.33","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c3e1faa0a31dc58298c5ca7538d4c1b","sha1":"f645cc414da670ed469e8974c2ab48b1e09fd40b","sha256":"5fdc4174bb1eb074b78387ee6bd4c4166a2789167387342de0b9332d7e6e720c","sha512":"4a082ab992afe280d2bce8bc285e614c834717a2d0e4da142b686e66b52cee096489ba9c172c752f657f42fd95a78fc69986ef4f0523562cd353b7b0e7a968fd","ssdeep":"12288:HWhSaEdA85/NnQ1exK7xbmEikb3iamAMw60FJIW9hDrNuO9EtdpSeUOVpM0:Ha5EdhxKSAKAx60UYDabpSeUOVpM0","tlshash":"9a35c84077c07858438b9bb6731bb4eae81e1c6f79884d4ff100fd6065aaa27f9e5631","size":1099405,"data":"","first_seen":"2025-07-19T22:27:19.556883Z","last_seen":"2025-07-19T22:27:19.556883Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2025-07-19","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"javascript.script.md5:2c3e1faa0a31dc58298c5ca7538d4c1b","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"www.rojadirecta.me/","fqdn":"www.rojadirecta.me","domain":"rojadirecta.me","tld":"me"},"ip":{"addr":"52.223.39.56","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-19T22:26:56.533Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.rojadirecta.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 202 Accepted\r\nServer: awselb/2.0\r\nDate: Sat, 19 Jul 2025 22:26:56 GMT\r\nContent-Length: 1991\r\nConnection: keep-alive\r\nx-amzn-waf-action: challenge\r\nCache-Control: no-store, max-age=0\r\nContent-Type: text/html; charset=UTF-8\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 86400\r\nAccess-Control-Allow-Methods: OPTIONS,GET,POST\r\nAccess-Control-Allow-Headers: x-amzn-waf-action\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":null,"data":{"size":1991,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (398)","md5":"604642b70fd2a8997d12be914fbc194b","sha1":"40e9a804436778fe50551db645eb40a6e4501680","sha256":"20db1f469a0acf69356c28f655841057494a319c82b92a69fbbd547df1dc6add","sha512":"331490df9b2df1b654bb8dc62b6f0f505de17c759a5f2fdb53f55d8f129ae9240f9047fe8c4fb16ea027df83ad0498c548722da82a0fb8949e018edea1d05e8c","ssdeep":"","tlshash":"3b4185976df1c0031133a827dea2e51e5ec2d1af0118c8087eddd5441fdcbab8a876ba","first_seen":"2025-07-19T22:27:19.554211Z","last_seen":"2025-07-19T22:27:19.554211Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"77fa1a6ecb04.01691059.us-east-1.token.awswaf.com/77fa1a6ecb04/04b9781908b7/df99f9afaaa1/challenge.js","fqdn":"77fa1a6ecb04.01691059.us-east-1.token.awswaf.com","domain":"awswaf.com","tld":"com"},"ip":{"addr":"54.240.174.33","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://www.rojadirecta.me/","date":"2025-07-19T22:26:56.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.01691059.us-east-1.token.awswaf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 05 Apr 2025 00:00:00 GMT","end":"Sun, 03 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:EA:47:8C:45:F0:DA:44:69:17:F4:16:3A:F6:DF:B0:9E:06:EA:40","sha256":"8C:0B:63:27:23:A4:B8:93:D0:27:D0:03:C8:39:4A:DE:D6:D2:68:9B:47:C8:48:51:65:57:2B:10:81:00:3B:CC"}}},"request":{"raw":"GET /77fa1a6ecb04/04b9781908b7/df99f9afaaa1/challenge.js HTTP/1.1\r\nHost: 77fa1a6ecb04.01691059.us-east-1.token.awswaf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.rojadirecta.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\ndate: Sat, 19 Jul 2025 22:26:57 GMT\r\nexpires: 0\r\nx-amzn-waf-challenge-id: Root=1-687c1bb1-28962fa65644fa811def4070\r\ncache-control: private, max-age=86400, stale-while-revalidate=604800\r\nlast-modified: Sat, 19 Jul 2025 22:26:57 +0000\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Y0KjHzKd4fk_JMUUgAq85l6peJsYWWNjMH1UfE5sK0ODczpfXydvAw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1099405,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2c3e1faa0a31dc58298c5ca7538d4c1b","sha1":"f645cc414da670ed469e8974c2ab48b1e09fd40b","sha256":"5fdc4174bb1eb074b78387ee6bd4c4166a2789167387342de0b9332d7e6e720c","sha512":"4a082ab992afe280d2bce8bc285e614c834717a2d0e4da142b686e66b52cee096489ba9c172c752f657f42fd95a78fc69986ef4f0523562cd353b7b0e7a968fd","ssdeep":"12288:HWhSaEdA85/NnQ1exK7xbmEikb3iamAMw60FJIW9hDrNuO9EtdpSeUOVpM0:Ha5EdhxKSAKAx60UYDabpSeUOVpM0","tlshash":"9a35c84077c07858438b9bb6731bb4eae81e1c6f79884d4ff100fd6065aaa27f9e5631","first_seen":"2025-07-19T22:27:19.556883Z","last_seen":"2025-07-19T22:27:19.556883Z","times_seen":1,"resource_available":true,"data":null}},"time_used":676,"timings":{"blocked":73,"dns":23,"connect":4,"send":0,"wait":523,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2025-07-19","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"77fa1a6ecb04.01691059.us-east-1.token.awswaf.com/77fa1a6ecb04/04b9781908b7/df99f9afaaa1/challenge.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"77fa1a6ecb04.01691059.us-east-1.token.awswaf.com/77fa1a6ecb04/04b9781908b7/df99f9afaaa1/inputs?client=browser","fqdn":"77fa1a6ecb04.01691059.us-east-1.token.awswaf.com","domain":"awswaf.com","tld":"com"},"ip":{"addr":"54.240.174.33","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://www.rojadirecta.me/","date":"2025-07-19T22:26:58.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.01691059.us-east-1.token.awswaf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 05 Apr 2025 00:00:00 GMT","end":"Sun, 03 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:EA:47:8C:45:F0:DA:44:69:17:F4:16:3A:F6:DF:B0:9E:06:EA:40","sha256":"8C:0B:63:27:23:A4:B8:93:D0:27:D0:03:C8:39:4A:DE:D6:D2:68:9B:47:C8:48:51:65:57:2B:10:81:00:3B:CC"}}},"request":{"raw":"GET /77fa1a6ecb04/04b9781908b7/df99f9afaaa1/inputs?client=browser HTTP/1.1\r\nHost: 77fa1a6ecb04.01691059.us-east-1.token.awswaf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://www.rojadirecta.me/\r\nOrigin: http://www.rojadirecta.me\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\ncontent-length: 477\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Sat, 19 Jul 2025 22:26:58 GMT\r\nx-amzn-waf-challenge-id: Root=1-687c1bb2-093d943260206ae1142ab2bc\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS,GET,POST\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Ss60JKG-odAO49pYz_S-tnaQd4q4-TWBlA_FkwX0VfmrCE0XQfiV6A==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":477,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"aa9f8dc899299eacbbff8726e3794fc0","sha1":"4669031868c3331d5a670796cebf411570bcba80","sha256":"47471a3d039efe26ae3090eb54a0fa75519ba9f5b2f9e29167ce05d9ed5b0ad1","sha512":"624dbf1fd11112446d36455e7d71ce85d07846acf21e768d301a1687ff6f0322b9f88a854931e58d2d02c2a49fb365453acffce3cb6b5d4dc83aa9f1e8aef8e4","ssdeep":"","tlshash":"8df0d42534b05bd35b06272505df4c8a672e56b50d2051da16dc8c5a0ca9b9b537047c","first_seen":"2025-07-19T22:27:19.558911Z","last_seen":"2025-07-19T22:27:19.558911Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":1,"dns":1,"connect":0,"send":0,"wait":319,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.rojadirecta.me/favicon.ico","fqdn":"www.rojadirecta.me","domain":"rojadirecta.me","tld":"me"},"ip":{"addr":"52.223.39.56","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://www.rojadirecta.me/","date":"2025-07-19T22:26:58.233Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.rojadirecta.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.rojadirecta.me/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 202 Accepted\r\nServer: awselb/2.0\r\nDate: Sat, 19 Jul 2025 22:26:58 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nx-amzn-waf-action: challenge\r\nCache-Control: no-store, max-age=0\r\nContent-Type: text/html; charset=UTF-8\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 86400\r\nAccess-Control-Allow-Methods: OPTIONS,GET,POST\r\nAccess-Control-Allow-Headers: x-amzn-waf-action\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"77fa1a6ecb04.01691059.us-east-1.token.awswaf.com/77fa1a6ecb04/04b9781908b7/df99f9afaaa1/report","fqdn":"77fa1a6ecb04.01691059.us-east-1.token.awswaf.com","domain":"awswaf.com","tld":"com"},"ip":{"addr":"54.240.174.33","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://www.rojadirecta.me/","date":"2025-07-19T22:26:58.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.01691059.us-east-1.token.awswaf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 05 Apr 2025 00:00:00 GMT","end":"Sun, 03 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:EA:47:8C:45:F0:DA:44:69:17:F4:16:3A:F6:DF:B0:9E:06:EA:40","sha256":"8C:0B:63:27:23:A4:B8:93:D0:27:D0:03:C8:39:4A:DE:D6:D2:68:9B:47:C8:48:51:65:57:2B:10:81:00:3B:CC"}}},"request":{"raw":"POST /77fa1a6ecb04/04b9781908b7/df99f9afaaa1/report HTTP/1.1\r\nHost: 77fa1a6ecb04.01691059.us-east-1.token.awswaf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://www.rojadirecta.me/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4926\r\nOrigin: http://www.rojadirecta.me\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Sat, 19 Jul 2025 22:26:58 GMT\r\nx-amzn-waf-challenge-id: Root=1-687c1bb2-41bcc2797e0e3c4e2e52027d\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS,GET,POST\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: HeqXiPGuUwFF2xq-YQNUDJkab45AOi4GxuKsGJqUAjVyekTmMLHvwA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"9d4568c009d203ab10e33ea9953a0264","sha1":"dd29ecf524b030a65261e3059c48ab9e1ecb2585","sha256":"12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126","sha512":"64d24560970ca14d349bea0e7d2526d4754bf3283568ab4dd602bd79eb454dc3657d5bb6f9a30c90ea98d9600ebd0fb45d582f4cae3f8e3c50b0e8fb18059892","ssdeep":"","tlshash":"c710000000000000000000000000000030000000000000000000000000000000000000","first_seen":"2023-03-09T21:44:55Z","last_seen":"2026-04-03T18:21:50.414794Z","times_seen":14350,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rojadirecta.me/","fqdn":"www.rojadirecta.me","domain":"rojadirecta.me","tld":"me"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-19T22:26:56.001Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.rojadirecta.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":302,"dns":0,"connect":1,"send":0,"wait":0,"receive":0,"ssl":206},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}