{"report_id":"b93b4d2a-7550-4735-a79e-59be519d46ab","version":6,"status":"done","tags":[],"date":"2025-10-09T13:18:36Z","url":{"schema":"http","addr":"21.cl/","fqdn":"21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":0,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.21.cl/","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"title":"Bomba Renca – VigésimoPrimera Compañía CBS"},"submit":{"url":{"schema":"http","addr":"21.cl/","fqdn":"21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":0,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-13T13:18:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.21.cl","ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"domain_registered":"2018-03-16","domain_rank":0,"first_seen":"2025-10-09T13:18:37.668499Z","last_seen":"2025-10-09T13:18:37.668499Z","alert_count":73,"request_count":37,"received_data":2218289,"sent_data":17594,"comment":"","tags":null,"fingerprints":[{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"21.cl","ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"domain_registered":"2018-03-16","domain_rank":0,"first_seen":"2025-10-09T13:18:37.669897Z","last_seen":"2025-10-09T13:18:37.669897Z","alert_count":2,"request_count":1,"received_data":107966,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.21.cl/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-26T18:18:13.199971Z","times_seen":799911,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/plugins/slider-video/Scripts/Rich-Web-Video-Slider-Widget.js?ver=6.8.3","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c697956927e4ff9a706bbca08a30d0b3","sha1":"93862fc362d0a7f3b2266cb1c5581a04f1445af4","sha256":"b80186bd4244bfa92d437bc43cf673313c33583777d4af44722a6bfb8a94a8a6","sha512":"5e61d11b3c71646b59efb4b97d9b3df2311422c4d49505f1658f8d2b9eb80da1f3a2528a6335ffd8b13311de436d4d97b3bc5590b25b5faf14a2f77f39cbb6a1","ssdeep":"","tlshash":"9911c455b9d8a6cc81b12360bcf4cba9eace49047e4c9d78f2d4301bc95a11e125bbfd","size":955,"data":"","first_seen":"2023-03-07T12:55:04Z","last_seen":"2026-05-23T01:11:43.676806Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-05-26T18:20:16.330723Z","times_seen":287975,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"768fed7f432d7a44c689644c65c8ac43","sha1":"4801e4b239a3a49006a96104f0f48f17ec288893","sha256":"901212268b5aee1a6a5166b5ce534d634e9bd7016c93f42de1bc3d4709d48aa4","sha512":"b13676feecb2c75b470c65d026ab791b94ac560b8b9a6816a09cf32c7a7dfef0c4704d6b52228e4d64619b436951ef9ed7dd21bed90ed38561044558597bdb8e","ssdeep":"","tlshash":"056199de3775348b32b604d16a2f4e07fb7258361a88d034cab9e7541cb14a3d37ae5a","size":3377,"data":"","first_seen":"2025-10-09T13:18:42.549708Z","last_seen":"2025-10-09T13:18:42.549708Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"68e154986aaccbeec1079fbb2c8414ac","sha1":"4f3451ddc53d8359ac9211ab01224196cd885f5a","sha256":"ae9bcc299dcd046515be4bb68920cbe5374b57dad02dd29d3101137e04312fa6","sha512":"e200994ec9a0918e1f5629b513b24d135e784974b1e12f8109621dfe737241be9d75517c3546fa4d9f81dd31cf375fb1b866e18e18bb21f099693294ab9d1715","ssdeep":"","tlshash":"cda024445704cf43c15045d40c147f73d13131115c30744017d0dcd4c500400cc0c103","size":75,"data":"","first_seen":"2025-10-09T13:18:42.550744Z","last_seen":"2025-10-09T13:18:42.550744Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-05-26T17:10:57.804256Z","times_seen":206529,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3cb1c7d2b60187c23810b5ab5019b223","sha1":"39ea6e9406517fbd27ca2b92160fe3bf2fa4bd6c","sha256":"4b8df4461a0d4cea1b3a6361bb4472ade103cbeb00d23db038645e4a8e9f09ab","sha512":"407affc995ad33cb6b67c3b36013e8f97865934d026bccd0393907348404922394d65637993113d486b2b2baf97a5cc49193b3bc921b36528f6b3e856fabf137","ssdeep":"","tlshash":"c511aad4b21506b404652919c0384bc9e2b968acb5cb1ca7cc0c9c1cf1b261f4176f7e","size":1053,"data":"","first_seen":"2025-05-03T16:22:44.77774Z","last_seen":"2026-05-22T18:32:13.623867Z","times_seen":562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-26T18:18:13.063016Z","times_seen":866399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.21.cl/","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-09T13:18:14.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/7.4.33\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://www.21.cl/index.php/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 09 Oct 2025 13:18:14 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":107539,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19379), with CRLF, LF line terminators","md5":"09719494d4c96138004f9c8481cc4ede","sha1":"683980e6e8319833cb23a069ea23ccfd6d3f947f","sha256":"5a9d512e97a975a2bcb9b4fa285e89e0bdfa1665b80638e08edc9438584d82fe","sha512":"eb0cbf834813b9d3adfc68ab0c76ed6fe3d68f69130b403ad1dfcfc078c3b61e91ae3a723f8dd064184c914a7683376fdc3bf06d4e4b066641e6b53cd5b0094f","ssdeep":"3072:5rMbMI+dFHoclQZOIt4wvSHIetKlbZIU5Cvhx4KT9:xMbMBdGZOIt4wvSHIetKlbZIU5Cvhxl5","tlshash":"52b3fa61936804fa796b876dd548e718b24ced02cf4657eaf4f6d15860ccefa08b370a","first_seen":"2025-10-09T13:18:42.517866Z","last_seen":"2025-10-09T13:18:42.517866Z","times_seen":1,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":222,"dns":0,"connect":0,"send":0,"wait":429,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-includes/blocks/navigation/style.min.css?ver=6.8.3","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-includes/blocks/navigation/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 16 Apr 2025 11:28:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2057\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16449,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16449), with no line terminators","md5":"d9709693f6fa74e9eae622c2b6d3fbfa","sha1":"8562935219e2b4299d36f0304c0382ee16390a9e","sha256":"377c5dd7befdaaeb1b293089c92885e8af3b42fca9e72e098a3bfc384ff33207","sha512":"aa5a96889c07344ed34ebcdea1830d2a5012a782b89f346c2c148c52596235ac69c1583563598f87b3978f8b06b86a984ee6b28ab6399dcdb9878e11008c208c","ssdeep":"192:qx7il1yFvomVogxLKuUxuOY7f7GUg54jyH9iXHuplUYv/m7tm7uxqERn23m9eAL/:CYsFvo7E9f7GUg5eyH9iXO/UYv/kDxR/","tlshash":"a872bfd05bb49cf4a9bb933b6e4490184633e902c5097bd5a0f3e694b68cb545be3f0b","first_seen":"2025-04-16T10:49:17.674495Z","last_seen":"2026-05-25T15:47:05.560421Z","times_seen":12918,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/themes/ona/assets/css/style.min.css?ver=6.8.3","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/themes/ona/assets/css/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Feb 2025 22:38:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3075\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12945,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12902)","md5":"ae372e483c6f93195e5fb9c2a68fc25b","sha1":"ceeab55ad43ae5a17148883df0e2c8a0e0a5c341","sha256":"e8cbd10252343720fa341d98fed49e79f8a2bd429dabcf4bdaeea6290c2d6149","sha512":"9fdc020172ff2bf297d21c654d56837516df7abeaae4342bd9d1a859e2b067b979ce6deb221c9a404478487192d48a5bf910abc9e281093467bc3cf6d76277b7","ssdeep":"192:nwjq7ZKUZBZGG9H9luTq0dAEm10tfti1JTxATlYTGzPTmQctewqS1h8VGHzetCIo:ImwaIqMAP","tlshash":"f842956053b028f83a7b8b368fc9e1486515d215c50239daf0e7d0b89bcde760ab5f5e","first_seen":"2025-02-27T16:46:56.355883Z","last_seen":"2026-05-23T22:00:25.823629Z","times_seen":46,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 08 Aug 2023 23:28:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4678\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-26T18:18:13.199971Z","times_seen":799911,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/uploads/2021/07/cropped-logo-21-1-192x192.jpg","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:16.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/uploads/2021/07/cropped-logo-21-1-192x192.jpg HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 19 Jul 2021 03:56:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12759\r\ndate: Thu, 09 Oct 2025 13:18:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12759,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 192x192, components 3","md5":"7b5763b4e735748b3ee3a6f4603ececc","sha1":"d84245d6d57867e21a06c38675781c400ff1e8ee","sha256":"b6f9d508e004fae7724c7418c444240fd2ce28249c95c3e06bff188fe01034bd","sha512":"e5131228df8f8939c73f061878bfa5cc1050353e7262da09739a499596c18324a22abacbab43dd99386425dc474a0405101751d76637c43ecfd3053e206e74c2","ssdeep":"192:/PN20q36oxdnY1V3awntMpr91ulAxyFHggq2kLH/RRQFcpJ8j65KnFPoFmctrLUF:3N2s8YSweR1ulAct4cuvKFbcRflRnE","tlshash":"cf42cfa4bb04979063031c6689681b5fa278bdc2cc8f2845f63ae747ead14d21d25f35","first_seen":"2025-10-09T13:18:42.521396Z","last_seen":"2025-10-09T13:18:42.521396Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/themes/ona/assets/img/architecture/testimonial_3.webp","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/themes/ona/assets/img/architecture/testimonial_3.webp HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 11 Feb 2025 22:38:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 648\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":648,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4e995360e3e491f2a10452de0f30a942","sha1":"793d59c6f6c783b1fa53c66005b1bf61f6fd8f9c","sha256":"4a1fa017f8ef880a570123d91d73026e8c93b7f26c0bad5c8a81c53977cf1b28","sha512":"1913656c021c1901bca072a272cca7b49019f0492203ea4acdce61fc837eaa1171ab2503fbcce507206da7caa480da9965d7b9e60458f6c5dffcfa01037ff58e","ssdeep":"","tlshash":"0af0620ff532c8a5dc482d71ff7636aca734c951483a2599808280c342a04e56b19e04","first_seen":"2025-05-15T13:22:20.557167Z","last_seen":"2026-05-16T05:18:50.750101Z","times_seen":6,"resource_available":false,"data":null}},"time_used":958,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":958,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-includes/blocks/cover/style.min.css?ver=6.8.3","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-includes/blocks/cover/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 16 Apr 2025 11:28:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1492\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19126,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19126), with no line terminators","md5":"63572908f5c4f1b77ab8bfb90a43d92f","sha1":"4dcca32b8b9143635264dccf437b80e1acf6525e","sha256":"666570bb7ac88a83bf11ede14a09166cd5cc1d83c4e2610f6b207e8a4596f6b6","sha512":"b71a51aa3808b586465a647285348b267ca721fe0609094988621e62f74498fb54d57b66240e055119146e444cd12cbf95e494a54de46710ebb8fb7afa3ea47c","ssdeep":"384:n95x4jp56/P14vPFgJUe3T1MHhZna/ZcBZDn/sNNgBgkgNgGg3xgc:n0eJ0GLaZmc","tlshash":"c7827a4122e58cfd75dfbe691f3deb88670b5c11c1894fdba53ae054634ca8888b3b16","first_seen":"2025-04-16T10:49:17.675381Z","last_seen":"2026-05-26T17:20:30.246246Z","times_seen":6197,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-includes/blocks/gallery/style.min.css?ver=6.8.3","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-includes/blocks/gallery/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 Nov 2024 00:29:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1674\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15927,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15927), with no line terminators","md5":"d31ad3fee2da824d4f846ab522e0a405","sha1":"bae18680d98f95c2817e1af0efe119bfbec3f592","sha256":"16f4dd6e1a09346f187af392e6b1802226f667df9dea45437f5c10c1aa197e21","sha512":"4bc699dd334f235898bbaa25306e5560e2da1524e528e1a29bbc3436c24c255023856001397b9830ad5d6b8ca09d8d7835ed4b9fd6414c8233c1c71844493687","ssdeep":"96:Ajflk9Kcqmaw85R3HD2IJkk5SM5IjEzJPyydvpO7nurqg/:Ajfj5hYz4zJPDdBO7tq","tlshash":"80628f3c5ab9befb1ef6a39cfc8fb07655813941676bc3f6e109c154908c94608b168e","first_seen":"2024-11-21T10:01:35.43619Z","last_seen":"2026-05-25T15:47:05.50065Z","times_seen":678,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 08 Nov 2023 00:28:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-26T18:18:13.063016Z","times_seen":866399,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/uploads/2024/12/Imagen-de-WhatsApp-2024-12-27-a-las-13.45.49_8511984a.jpg","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Imagen-de-WhatsApp-2024-12-27-a-las-13.45.49_8511984a.jpg HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 27 Dec 2024 16:46:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 120922\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":120922,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 567x840, components 3","md5":"748532ba3c61ba9e9e91dabc5242e3be","sha1":"27187bf8e45ee5fc7cb529b412c34709236d2e15","sha256":"4330340f951674de63ae0f097a063fa7cd986a7754125196a65e41fbb05fc1fc","sha512":"e50ec5765da85465af553b8879fe6db2abc203859d3475facb632eb0a7ce7d569a0d156a9119244ba261508177ab707c882d0d70f2c2bc8c68210a4347abf794","ssdeep":"3072:vX4YIt1sZaMxdjn+13BHTcT3tszmnzZjK1WN66:f4Vfk/7b+DACGzliWP","tlshash":"31c312d019bb91ef5092ea38d411ea213e19705fbad49d67da23ae54a3d67c30703cac","first_seen":"2025-10-09T13:18:42.524766Z","last_seen":"2025-10-09T13:18:42.524766Z","times_seen":1,"resource_available":false,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":739,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/uploads/2021/07/cropped-logo-21-1-32x32.jpg","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:16.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/uploads/2021/07/cropped-logo-21-1-32x32.jpg HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 19 Jul 2021 03:56:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1222\r\ndate: Thu, 09 Oct 2025 13:18:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1222,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 32x32, components 3","md5":"977b9f7488dbfddb747ec2e84a6675c7","sha1":"d8f0dae2fb282298f53896d91d4b4f000c3bb5c5","sha256":"49f15b5a812b91230e5542ef15cc34e83be3364408c14739e0f7e639cfb39bec","sha512":"d9c6b75b34eed862f4beef8b28b13401ddd97c7c41645a3554c1aef8405633b6565385e1ad95b3f1f86d0b28a9d3133d59790697f962da7ebf528bdcf253bf08","ssdeep":"","tlshash":"d121aa2a7b0792a455569db74a96234991c71c527c2ca3007731c7f2ce23dcd880854c","first_seen":"2025-10-09T13:18:42.525884Z","last_seen":"2025-10-09T13:18:42.525884Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"21.cl/","fqdn":"21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-09T13:18:12.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nx-powered-by: PHP/7.4.33\r\ncontent-type: text/html; charset=UTF-8\r\nx-redirect-by: WordPress\r\nlocation: https://www.21.cl/\r\ncontent-length: 0\r\ndate: Thu, 09 Oct 2025 13:18:14 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":107539,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T18:18:27.566527Z","times_seen":15742433,"resource_available":true,"data":null}},"time_used":1982,"timings":{"blocked":538,"dns":201,"connect":163,"send":0,"wait":905,"receive":0,"ssl":170},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/uploads/2024/12/Imagen-de-WhatsApp-2024-12-27-a-las-13.28.04_bf3bf473.jpg","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Imagen-de-WhatsApp-2024-12-27-a-las-13.28.04_bf3bf473.jpg HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 27 Dec 2024 16:28:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 68003\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68003,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 776x753, components 3","md5":"5499701e60c5f64564c917ac79de68ec","sha1":"a52f50bc1c2bde39f8b321ecf1b04b69cd1e1676","sha256":"d8e1de9f918f1959ab63e53a53f7883537e52019cb8f847a8037fa3794d48826","sha512":"0166b2cc09ce53acb941745bc0630dc7d9908b923526c2d54d07766dfd765d4f33e7bcb93494b482eece6ef1321c2791461750fd5cebeb23984b6cd267f85805","ssdeep":"1536:4HIla1W2PMCTV2ooX/gu2ohTD35ANylJjrid1:iICTm/gu2ohT9ANyk","tlshash":"16630427ed199e571529c7bc3f034ebd3b5e2a0d9d8237fe41320e8a6f942254c9b44a","first_seen":"2025-10-09T13:18:42.527626Z","last_seen":"2025-10-09T13:18:42.527626Z","times_seen":1,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/themes/ona/assets/img/architecture/icon-expand.svg","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/themes/ona/assets/img/architecture/icon-expand.svg HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 11 Feb 2025 22:38:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 251\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":470,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"32e01fde510e79124136e0b14b21b3a1","sha1":"06562803bcf8e326bb298dce6409e9bf7b0ffe15","sha256":"6d1060c00638f3f9f9adede2f9df029c3076ef3376b500c85b4c2fc92a41fd8f","sha512":"b22d8cfb715fb3c50c7eebad7fad154254058276b88f2b0cf750f0ad5cb3b8a05659cacc4a0d8fc5d59a9a7072d97d8cf3ab537bf774692df8ffb0b72546a77d","ssdeep":"","tlshash":"3ff0dc18393b828a5408e32e710c71ae327288e2d8e983e05306760f38088ba0e7c6d1","first_seen":"2025-05-15T13:22:20.542118Z","last_seen":"2026-05-22T17:20:37.240202Z","times_seen":10,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/themes/ona/assets/img/architecture/testimonial_1.webp","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/themes/ona/assets/img/architecture/testimonial_1.webp HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 11 Feb 2025 22:38:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 904\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":904,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"81493a2393db7f0153d5ece09f4ff615","sha1":"dc25a0db1420d937cd75a5c64033d8ded6c227d3","sha256":"515c816b6053a8e97c7fb2696563f97189773f6417c8c82c98c977fb8b4e9b78","sha512":"92685335b7805041cfffe715f1c7637466930151e86a9839c0527fa261802f21006dabb8122d70c5cbb6a59fbe0886cdd9f57ce59f61b0459bf7b387182864f0","ssdeep":"","tlshash":"e611b71ad1ab54e4e74ca23b8ff0b1326859cefa8a785d3111701cc195a4252a8c9643","first_seen":"2025-05-15T13:22:20.540446Z","last_seen":"2026-05-16T05:18:50.748895Z","times_seen":6,"resource_available":false,"data":null}},"time_used":964,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":964,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/themes/ona/assets/img/architecture/testimonial_2.webp","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/themes/ona/assets/img/architecture/testimonial_2.webp HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 11 Feb 2025 22:38:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 688\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8399c1b85f9d29816388744ecbf2c3dd","sha1":"9e0f17cc5201a6490272d822392ead103430a3ce","sha256":"6e693adc3d8751cfd423cd71662e8e50f280bf6adf0c1a0935817f42f5e6836b","sha512":"f42b263a6caa0e0bba9f63da53d46e1bad43ad529250fb6c5a5b647f78640c9f0aeb69de41e317fa0d84907e0e55fea8b76d6dc2763fb141b4e73a5c1502765f","ssdeep":"","tlshash":"370144db354624b0d80fb3313731b5a5aa2d462eba5c44265c460142ff8218c71c2cb5","first_seen":"2025-05-15T13:22:20.531442Z","last_seen":"2026-05-16T05:18:50.779821Z","times_seen":6,"resource_available":false,"data":null}},"time_used":960,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":960,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/uploads/2024/12/Imagen-de-WhatsApp-2024-12-27-a-las-00.31.55_be86200a.jpg","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Imagen-de-WhatsApp-2024-12-27-a-las-00.31.55_be86200a.jpg HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 27 Dec 2024 03:33:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 70110\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":70110,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 578x667, components 3","md5":"e351e03e269306f35466ba6094e7f48f","sha1":"888f67eae6606300d0625f1f8e7e5d2e64331344","sha256":"d4e49bcb93f16ffdaa73a8eef98e7a688fe8b681c1f1880eff9f3e2041ae74a2","sha512":"8f799c218f3bdbcd6b33bc14bd49f82b44990121dc64e682859b4e717bb8350902d97b05d0b8f8adbf2e118b0e1fd2d3ad8666db25622ac177819a9921987cca","ssdeep":"1536:LYQ1QH20saA8AFgClBhmIQhWRiLqRN77a35y4oAYfiAg2RH7l2f/2m3s:svskAFgCliIPi21+35NBORHRK/2","tlshash":"a7630213bb000963dc30a75d7c8e5b4eb631375c29c172bb6e0e2aec6535692037e95a","first_seen":"2025-10-09T13:18:42.530484Z","last_seen":"2025-10-09T13:18:42.530484Z","times_seen":1,"resource_available":false,"data":null}},"time_used":985,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":973,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=61572d447d60c0aa5240","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=61572d447d60c0aa5240 HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 16 Apr 2025 11:28:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1049\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3358,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (3358), with no line terminators","md5":"39b6679f083c89806ae1dab66a6b1f83","sha1":"ccc3e4d82490e24c5bab603beb04961ba3225571","sha256":"091b36f4ce349cd155f3d0ffb19f46e954f82aa4eb78dd9091da2ab9c9f20a99","sha512":"9b61e3a83ee4cbdf339401bc60d30e6e58f4871e4411398bbbdfde7e31f1fc6e8624be8e63fcfc1d238e923695f3fa95b5b182ee08fdfb026b8720ef8d6062b3","ssdeep":"","tlshash":"7c610234306575b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","first_seen":"2025-04-16T10:49:17.676934Z","last_seen":"2026-05-26T16:34:56.438453Z","times_seen":13007,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/uploads/2021/07/cropped-logo-footer-1-1.png","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/uploads/2021/07/cropped-logo-footer-1-1.png HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Jul 2021 14:09:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13409\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13409,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 155, 8-bit/color RGBA, non-interlaced","md5":"976c9a1baa0bddab52b7201554788e5e","sha1":"f37ff05a7c5a0ea9ac361255554b85e3e122948e","sha256":"69916136fb50e3976a53e3a0d3be25d2f2090003061bb2c16e17bb9ff93e44c4","sha512":"336f0c3084f0c30cb089c56bc7ee5fe290738e15b71caa1ab2f153821a1000c5f5b74ac4793e5f6cf7e8c412722c4863a93874dab7d3a0836cd4463bed1fc228","ssdeep":"384:uHl3Y2eLK1tPwIRTJbgCHsizd0krJZbHHApTiru8YHE:uHl3YM1em3HtddHgpTGuZHE","tlshash":"c452c03957575e2f568eb6cc23d6a0e22035178361b9ab9073c8953bc46dc8d2062f7b","first_seen":"2025-10-09T13:18:42.532071Z","last_seen":"2025-10-09T13:18:42.532071Z","times_seen":1,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/themes/ona/assets/img/architecture/testimonial_4.webp","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/themes/ona/assets/img/architecture/testimonial_4.webp HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 11 Feb 2025 22:38:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 774\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":774,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d3fc963bb268c27d85f0caf254db35c7","sha1":"603e1e1a9dbb4768b86c494da1d8af539a8b0255","sha256":"e3b99bd1090536b1a36fc4d3c643d0ec4af53a28899ee3fa061020b650490bd3","sha512":"3f475fdc8c965331d5c9f671127e85d954e6222b852e9c630c507bd99c76702967cbfbd0aa3ec3cf47d52e8007e495443c763257f4f33b953e2972f6b26f77b7","ssdeep":"","tlshash":"d301b5073193f239ec08e73372e3419e12e862039cf69a0a1b3084d9c9421dc763d43a","first_seen":"2025-05-15T13:22:20.560184Z","last_seen":"2026-05-16T05:18:50.763015Z","times_seen":6,"resource_available":false,"data":null}},"time_used":954,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":954,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/uploads/2024/12/Imagen-de-WhatsApp-2024-12-27-a-las-12.37.54_ff3fcfa1.jpg","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Imagen-de-WhatsApp-2024-12-27-a-las-12.37.54_ff3fcfa1.jpg HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 01 Jan 2025 00:00:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 108772\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":108772,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 874x544, components 3","md5":"ae48f8c53d8318b0b8d6aa87188489cf","sha1":"a13b9f01afb778515c710b4135f908d0539a1ab6","sha256":"10739fc561a3a5a8c7739c8b6ff944a8e5bf7332ecafbaba204eec55e18d5964","sha512":"3087331d83b6a4a3beffa76d510204f921e5c396288b8bdb823fb358db18b7bce25fcae75ff27168c9839ba9304b644e93930d421307844f59b5de3228f43075","ssdeep":"3072:WC3k/k7/2Pp+96SxfeqEn9JoEVq/XvvJtbfvjJAZJLIO:WC3x7kp+96SxW9J1WvJtzbQSO","tlshash":"9ab3121643cf63fb4e163196c366b5b15f915073086e2664c52e1ed82270554efcecbb","first_seen":"2025-10-09T13:18:42.533681Z","last_seen":"2025-10-09T13:18:42.533681Z","times_seen":1,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/plugins/slider-video/Style/Rich-Web-Video-Slider-Widget.css?ver=6.8.3","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/plugins/slider-video/Style/Rich-Web-Video-Slider-Widget.css?ver=6.8.3 HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 08 Dec 2022 14:41:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 417\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1469,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (327), with CRLF line terminators","md5":"7d7f8191edf63a973221d4d96fe1d7f3","sha1":"10b913693ff4590e66054e7253fba5b8299a9eae","sha256":"893792641422c0855692ccde040be5d4058a4f7dae6f8f03637bcbcc2a5328e1","sha512":"5a6703ef0f06772b461ad11596373e2a479bd04888ce3bb28b251686dafea5e0dda295ec48e6ec758893f7dfaabaacae0fa328e79af119dbb1fdeda47aa600f0","ssdeep":"","tlshash":"ee318d61a69522c0a803c328e607ca9cca7d4460e527117de8bb5f71d6ef5951d23acc","first_seen":"2023-04-09T09:49:30Z","last_seen":"2026-05-23T01:11:43.711068Z","times_seen":166,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/plugins/slider-video/Style/richwebicons.css?ver=6.8.3","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/plugins/slider-video/Style/richwebicons.css?ver=6.8.3 HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 08 Dec 2022 14:41:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6462\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38534,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (412), with CRLF line terminators","md5":"849eb0dde482f609b53b4d5363e9aef8","sha1":"4fb778dd42d14e491d9c31614f07f6481f704b61","sha256":"8543a09f7fcf6e79c4996147f5e515da027543bbf5da9e6b93c13c39476b6817","sha512":"068c7ef1b6fc0c016e412d2b7a6284d2f1c16d9a2953ff351a8116a6a852188aed5f2141477736f41ff2d60146b2727651d30a2e3759e34ee820cab0071f06ae","ssdeep":"768:IiOB3+JKCzHFpeKG12YzsLztwlrxi2I+cZGF2NOqtTwPsvK8LTuDh8XBv2vHxJQz:IiOB3kKCzlpeK0Z0twlFi2IjAF6Oqt8W","tlshash":"bd030af69d4d82904321e281eb6fe2847b8db4ac89425c5cd906389d93c369b83d73fd","first_seen":"2023-04-05T23:58:18Z","last_seen":"2026-05-23T01:11:43.809188Z","times_seen":168,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/themes/ona/assets/css/blocks.min.css?ver=1.23.2","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/themes/ona/assets/css/blocks.min.css?ver=1.23.2 HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Feb 2025 22:38:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2408\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11300,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11256)","md5":"c31a310014c110a64b32ccc2aeb34750","sha1":"5a38ac6743a71141632c20df09b49eb471c0547d","sha256":"2c6122b9cba2952f6849602626202584f50aa314079e94687fefd6ac76488a1d","sha512":"a8d339144badb70903c74f148678dc403ec5e45d40930a03ae12570f99509d323935978e5daa91acb33fa86ef4ad511a9ad6897021aed0fb3c9a23a21e35b17c","ssdeep":"96:IhUTXmDdxuH7OFHKaFYbY9zezenmdJfLZsrWDSbYiscG27saKK3LGh8IBdAq2ly9:VmDdwH7OFH9TeZsrbbYinZm6c8IBwy9","tlshash":"d43286627bb08cf868bb6b268cc4a5182962c40edf4166d6f451f354a3cded70db1b1e","first_seen":"2025-02-27T16:46:56.353192Z","last_seen":"2026-05-23T22:00:25.861284Z","times_seen":46,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/uploads/2024/12/Imagen-de-WhatsApp-2024-12-27-a-las-00.32.45_0546a6c5.jpg","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Imagen-de-WhatsApp-2024-12-27-a-las-00.32.45_0546a6c5.jpg HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 27 Dec 2024 03:33:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 91815\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":91815,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 807x601, components 3","md5":"51f4bf3a039e379d4fb99ceae749c447","sha1":"5c0852cf740a21b81eda7301ad7fadd81aaf1257","sha256":"13e5ab6e775526c7c4e6913de53a109e5adcf62baa4062549dce42e1d71ac3f5","sha512":"5fceb805f29813c2ff30a9a92974e3113063cf63957e9dbc5111441afdcf0568a60d5ecf5e985a27582497cb062053ff7532d32928be135c28a6ce192e01e1ae","ssdeep":"1536:7J89HdO8QEpCU4YBaLPbX1BYWxR2yxRII4Ep7qrJOU4+SufX3px0QnqBsP5Nm:18ddtpMqa/Nx0yxR/4Ep+rJOWTr5qBP","tlshash":"b39312a7c19d83c39d462cd51bdb00a1744735066ecd32595e8d988aab3bcc59fe2b28","first_seen":"2025-10-09T13:18:42.537173Z","last_seen":"2025-10-09T13:18:42.537173Z","times_seen":1,"resource_available":false,"data":null}},"time_used":975,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":953,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/uploads/2024/12/carro.jpg","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/carro.jpg HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Dec 2024 19:57:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 198473\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":198473,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x960, components 3","md5":"616ba39fe7ba049eaaebdd0ac4895684","sha1":"7f2814210a636eeccef43c53b075aa4717dbf4f9","sha256":"c6338aae135834afe0e58b49ae069132ee777536c644f9416c3adc743604c74a","sha512":"bef8c665e8c3d83ddba29ed7b21bd6f8107faad150904c152530670cfcaac6e3744a46066729b8159f8aa8802a564018dea7fb4c0ee8e7bf5e166929851d80e0","ssdeep":"3072:oQTf6e004qDVhFXAJupn020OKgO5eW6O9T+phMESkKqOa7yyUzAPLKhOP:7/fxAJo0Vf51huMTEWLsj7P","tlshash":"36141244676a6df9c779a2389ad10793f7d305e68be4ed0e2c2d1ed503767393a02823","first_seen":"2025-10-09T13:18:42.538367Z","last_seen":"2025-10-09T13:18:42.538367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":439,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.3 HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 15 Jul 2025 23:28:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4769\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-05-26T17:10:57.804256Z","times_seen":206529,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-includes/blocks/social-links/style.min.css?ver=6.8.3","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-includes/blocks/social-links/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 16 Apr 2025 11:28:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1467\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11740,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11740), with no line terminators","md5":"bd28f62393b318a586cab036956f29ba","sha1":"43c91c8019360dad76b7c92826e866b30327ccf5","sha256":"0716d31d1ee3728bf05645447f91be6cbf69faea560ecc571990d01ef739b295","sha512":"acefc37262fba714ee3f49739a46c28fca4daa7bbb61835e355110d85e735608a1b9eac306c1b0dce82d95ef1a3be7d31c4ccea436a227d18668ae6bea0d47f9","ssdeep":"96:J+becpmYNmwqWQOvdNtzUlGE/2Q3pXWxBbtPDX9bj9thWLprYM/02WMKlQsAtfsF:lBBwqWQqNNAYQAR","tlshash":"23328008875d8ce2348bce14c58ef35ee69629c099dd07a7d531a321598c27c74bbbaf","first_seen":"2025-04-16T10:49:17.683684Z","last_seen":"2026-05-23T09:14:50.716108Z","times_seen":2875,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/plugins/slider-video/Scripts/Rich-Web-Video-Slider-Widget.js?ver=6.8.3","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/plugins/slider-video/Scripts/Rich-Web-Video-Slider-Widget.js?ver=6.8.3 HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 08 Dec 2022 14:41:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 281\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":955,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c697956927e4ff9a706bbca08a30d0b3","sha1":"93862fc362d0a7f3b2266cb1c5581a04f1445af4","sha256":"b80186bd4244bfa92d437bc43cf673313c33583777d4af44722a6bfb8a94a8a6","sha512":"5e61d11b3c71646b59efb4b97d9b3df2311422c4d49505f1658f8d2b9eb80da1f3a2528a6335ffd8b13311de436d4d97b3bc5590b25b5faf14a2f77f39cbb6a1","ssdeep":"","tlshash":"9911c455b9d8a6cc81b12360bcf4cba9eace49047e4c9d78f2d4301bc95a11e125bbfd","first_seen":"2023-03-07T12:55:04Z","last_seen":"2026-05-23T01:11:43.676806Z","times_seen":160,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/uploads/2024/12/Imagen-de-WhatsApp-2024-12-16-a-las-17.55.53_faac5ff4.jpg","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Imagen-de-WhatsApp-2024-12-16-a-las-17.55.53_faac5ff4.jpg HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Dec 2024 20:58:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 203969\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":203969,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 876x872, components 3","md5":"61c31f5bb7503376a67374c7a3ee0829","sha1":"9f4f9f2257deb76c48f2b5776c0ca908fad5809a","sha256":"3cf555d21aa795f6a353ec13ca664f6313639c67e5bca0bd43ba13c4347ebed7","sha512":"5b0c4d7b10366aaa8d6ab5d31cbb2e9b31997a9dd97f7701271758d7f5a4274416bb6861aefe631e499d3dc519ab5f2ad294d49238905d52a5cc5feb35a15428","ssdeep":"6144:FF7VHMeBzlnZML8A6d9PFh3gSHUk4Fs2BtcPp:n5HMKzlZMz6dRFySuxcR","tlshash":"ef1423b58b940f41b770a100639baefce6dbbc9c342950445df243d85b8a60ad2eca77","first_seen":"2025-10-09T13:18:42.541184Z","last_seen":"2025-10-09T13:18:42.541184Z","times_seen":1,"resource_available":false,"data":null}},"time_used":743,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":222,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/uploads/2024/12/WhatsApp-Image-2022-03-02-at-7.51.08-AM-1-1536x1152.jpeg","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/WhatsApp-Image-2022-03-02-at-7.51.08-AM-1-1536x1152.jpeg HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 27 Dec 2024 16:51:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 367856\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":367856,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1536x1152, components 3","md5":"eeb2bd4b8940e3d5382445e31425b5bb","sha1":"374de1f78b1ddc87472cdfcbbb6a3d4d5009ba66","sha256":"85c809cea9e43f8cbafe5bc38101d077239b046374db83fded188108cbf763ec","sha512":"9fb661b0d47efe88218c319312011b0de48e07ef3f2e9134f8a88b0fd2e43277fe23a5dc591fb9a9d4cb8d9f2c6154e556873a1827158d488edfee7df82535cf","ssdeep":"6144:rpcZJs0gf4QmeCaawo+HeNmxRUPM9Yc1KYXuaWYe+3MoOItKYhwibAvW3CzpLa7P:Gy0ggQmJaaz++0P5YUWa9hJAoKpLab","tlshash":"7b7423f5078a4a2870bcd6ce74243d222f913ad5598eb58f812cfe57cb44ad09e1ca2d","first_seen":"2025-10-09T13:18:42.542243Z","last_seen":"2025-10-09T13:18:42.542243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":972,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":801,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/uploads/2023/12/Bomba.jpg","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/Bomba.jpg HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 05 Dec 2023 23:13:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24756\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24756,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 450x550, components 3","md5":"c15095b8a9458d8f272b52098b4f9235","sha1":"6367e8e6645082ffd29c68523134f555c6360b60","sha256":"6fb8167d472c0e56794ac4cb7c5726a526bd6121c59920ad9e429513aa38beca","sha512":"8e846c87ff4b7ce749284817f5fbab9c01e1b448259627ac172d789ef42b806261145d824a4bae4415dac6a0acd5765cf5aee588356dc5e339fce0410334ac47","ssdeep":"384:UXEUfo2DkBFZtbR3ZmBGgA9S8yQL+PQuALwigBKhHB3rig4s9fjdkJnZiMVOVOt:kJo7ZtN8BGgx8BIQxE8JLfu5ZiMVCq","tlshash":"33b2c03b7adc1216c620d5b7abe397440722bc55cad51e1e33c43b509af321f19aa869","first_seen":"2025-10-09T13:18:42.543313Z","last_seen":"2025-10-09T13:18:42.543313Z","times_seen":1,"resource_available":false,"data":null}},"time_used":968,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":854,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/themes/ona/assets/img/arrow-right-line.svg","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/themes/ona/assets/img/arrow-right-line.svg HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 11 Feb 2025 22:38:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 148\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":220,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc7a8045d976fc85fb85c128d47c4760","sha1":"2ea4deb5ec28072bd303f90883ca352b8a3c3404","sha256":"1b44a40e68d80688deada3acc40abc1f57751bc97b9390f44db8802063cd526d","sha512":"a8bd25e9257bae60abb12e251c82bb93cdd702fb82b395dd26f455a0a9f14236165a1f8a73b817a032c245e3cf1133196b8f97ff692da0104de74164a0f8fd58","ssdeep":"","tlshash":"ddd0a796c3183945494d8750eeac626954e57059221e01dce3446124f68e547ec23b14","first_seen":"2025-05-15T13:22:20.561129Z","last_seen":"2026-05-22T17:20:37.156941Z","times_seen":16,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 16 Apr 2025 11:28:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6812\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-05-26T18:20:16.330723Z","times_seen":287975,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/themes/ona/assets/img/architecture/stars-small.svg","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/themes/ona/assets/img/architecture/stars-small.svg HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 11 Feb 2025 22:38:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 528\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2275,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfbdd6880fa2656c11aaf0f5fcc95ac9","sha1":"fe56882e13802470c782d0c31a52493f1d0f0754","sha256":"fc3110e061efd2d5e9c65f4bb9bf94751e38867c7e40c66577176ff9f0a8b3e2","sha512":"d13f748dc0e511faf01373724e66a5405283ebe11dab5d69b9dcb17d51d117663bbf808789008ee22beb393d28767601f81298d42a17ed8443ee91a0e8fcc95e","ssdeep":"","tlshash":"be41c0f75278c7d8da24e7b341e8202ca37a8cfe46ca62bdabd1741115ad1a50f96dc0","first_seen":"2025-05-15T13:22:20.554309Z","last_seen":"2026-05-16T05:18:50.734355Z","times_seen":6,"resource_available":false,"data":null}},"time_used":961,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":961,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/uploads/2024/12/Imagen-de-WhatsApp-2024-12-27-a-las-00.32.25_69005a99.jpg","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Imagen-de-WhatsApp-2024-12-27-a-las-00.32.25_69005a99.jpg HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 27 Dec 2024 03:33:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 153815\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":153815,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 845x591, components 3","md5":"cf5168ba6c1b4da7b64df398ac12931d","sha1":"2f08e6eb3994d95facdc170e013a60bd2f5463a4","sha256":"2e6ad7665fce19f620d4ad74629bdf97410756329f27595a9ed3bfaac89f74ac","sha512":"e112dfeed21cfe113867d886ad06a91c8d1cb85870879d0a193f86852b594bb2e7e7feaef7838ac155813e81f048d2e40740100735a075465b52598e76af6934","ssdeep":"3072:0RATGGavMLTlm4o2ruzJrTFLV4DNK/pyUU7yEqls3asRw+k:0R1ULTl5truz1JZuaXK3aUk","tlshash":"ade323a681c3ec20de478df6ece6b045dc9ffc193a91a79544a165192b0882eb1f737c","first_seen":"2025-10-09T13:18:42.546815Z","last_seen":"2025-10-09T13:18:42.546815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1011,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":983,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/themes/ona-architecture/assets/fonts/inter/Inter_18pt-Regular.ttf","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/themes/ona-architecture/assets/fonts/inter/Inter_18pt-Regular.ttf HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Tue, 11 Feb 2025 22:38:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 150687\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":342680,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 60 names, Microsoft, language 0x409","md5":"37dcabff629c3690303739be2e0b3524","sha1":"bd1976c1f019853ab6143ef1246e25aa66fd990e","sha256":"3e5f90a0138b38de4cf4d779ad78391974ea1df776b9164842bdcbb60ce383c5","sha512":"04b16cb8b7b85fc7232adf4f82cf44d365761417eef975dec48f1b8db224a2cc3517b507f37787febb43fecb3f267942e091ddaa26d70e37ce82764e986ed9b7","ssdeep":"6144:n/T/NSxUpjwDP3q4xSIVNI1Gq9AE6olVArv0mb50t7NRuhpSw8u8MqTShUIn:nTNSxUp8DnVNIUgVe0sw7NG1n","tlshash":"76745b27eb13930dd70a787c8aa1c7a473357c61be1ae21bb49e2a50c89f1f41cd56d8","first_seen":"2024-10-22T08:50:47.761508Z","last_seen":"2026-05-26T16:38:52.555629Z","times_seen":786,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":619,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.21.cl/wp-content/themes/ona-architecture/assets/fonts/urbanist/Urbanist-SemiBold.ttf","fqdn":"www.21.cl","domain":"21.cl","tld":"cl"},"ip":{"addr":"206.168.149.42","port":443,"asn":53850,"as":"GORILLASERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.21.cl/","date":"2025-10-09T13:18:15.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21.cl","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 02:28:08 GMT","end":"Fri, 12 Dec 2025 02:28:07 GMT"},"fingerprint":{"sha1":"5C:36:00:98:89:9A:AF:99:8E:CD:07:0D:AA:F2:D3:E1:2A:9B:FC:C8","sha256":"18:9C:FB:84:E4:38:10:5E:DC:AB:E9:A5:F2:C6:B2:46:3A:31:70:24:D9:8D:BE:CF:5E:75:EF:DD:EC:1B:64:59"}}},"request":{"raw":"GET /wp-content/themes/ona-architecture/assets/fonts/urbanist/Urbanist-SemiBold.ttf HTTP/1.1\r\nHost: www.21.cl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.21.cl/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 13:18:15 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Tue, 11 Feb 2025 22:38:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22202\r\ndate: Thu, 09 Oct 2025 13:18:15 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42068,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 21 names, Microsoft, language 0x409, Copyright 2021 The Urbanist Project Authors (https://github.com/coreyhu/Urbanist)Urbanist SemiBo","md5":"3d48965b5965e8dd69ed0e18d044d64f","sha1":"b5d08f8959820a3797d083cdf84e0e7304f85dc4","sha256":"b11c53edc1812129768b3383e70482768a4887227635a02d8d7fa9bcfc1cfc25","sha512":"548c23bc0e4a3e63a9b4a823500f8e208c1884c6e4224276956840967f10b8706477176bd5284bafbe5ae7c16c9b639a40f2d4580cdbe6a4dcf20bf7a07576ee","ssdeep":"768:4tr2Tbfnd98D9XR4FovHhYzdfBE4AEYIwAP:492Tbfd2D9GFSHhGBEEYIrP","tlshash":"af134a47fb52d40deb6258fcd533cbb9a330bea07e0142abb546ca156d8b0a98cd3844","first_seen":"2023-09-07T00:47:53Z","last_seen":"2026-05-23T22:00:25.890185Z","times_seen":38,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":639,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"www.21.cl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}