{"report_id":"8fd16bed-691c-4e5f-bfca-71adce8d2220","version":0,"status":"done","tags":[],"date":"2026-07-02T15:43:54Z","url":{"schema":"http","addr":"celestia.best/","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":0,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"celestia.best/","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"title":"Unrivaled selection only for you","dom":{"size":96326,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139)","md5":"3a3dc701c860ace00d21bfdc3190ab82","sha1":"8bf6606ef5fcb803a2a46bda9f53d1773caaeaf3","sha256":"56403a155ba1211bf37491aa4fcc6358352d7dfa143021ed30b5204871208d2b","sha512":"688825ac620f2a91ed92fa38a60480186d269ed07ef4dfc835ceb807a808ef688ff5778399cd799492eec9e11b776a44de8c032fd5843ac6a726b1e431b6b2f2","ssdeep":"1536:5xypYW1Kg2gIg1mtgGnSVgxwZ1N3I8MyCFPXM4HtnwwHkQws1LlwMR21:5s6OhdH0tgcSVgxwZ1NY8MyoPXM4Bww8","tlshash":"2793a772f0f619368667d0d5a9d27b1e7ae0e307ca4285d0b2fc47989fc9cd6a49321c","dom_hash":"domhash871777027219873a9a4417b2cf0a6259","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"celestia.best/","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":0,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-06T15:43:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"celestia.best","ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"domain_registered":"2025-01-28","domain_rank":0,"first_seen":"2025-08-14T16:12:45.944634Z","last_seen":"2025-08-14T16:12:45.944634Z","alert_count":84,"request_count":28,"received_data":2819824,"sent_data":18687,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"img4.sellvia.com","ip":{"addr":"95.211.45.161","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-04-06","domain_rank":0,"first_seen":"2022-12-18T11:06:57Z","last_seen":"2026-07-02T05:34:38.336346Z","alert_count":0,"request_count":4,"received_data":73834,"sent_data":2412,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":1,"received_data":1523,"sent_data":523,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-28T22:19:26.805281Z","alert_count":0,"request_count":1,"received_data":26717,"sent_data":549,"comment":"","tags":null,"fingerprints":null},{"fqdn":"download-video-ak.vimeocdn.com","ip":{"addr":"23.36.77.9","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-04-21","domain_rank":178624,"first_seen":"2024-11-13T07:36:36Z","last_seen":"2026-06-26T19:19:25.608092Z","alert_count":0,"request_count":2,"received_data":6343244,"sent_data":1562,"comment":"","tags":null,"fingerprints":null},{"fqdn":"player.vimeo.com","ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-12-15","domain_rank":132,"first_seen":"2013-09-26T03:16:08Z","last_seen":"2026-06-29T11:46:54.026371Z","alert_count":0,"request_count":2,"received_data":3355,"sent_data":1400,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"celestia.best/","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"271b7ba7d1d3e8a9a286d525eb4b2d37","sha1":"4e2b34b16d1c0faa080bdf026254e03749c9eae7","sha256":"045d88dcfd766ccd46fd1d4f06e0a749c1b2f77877ae6ff1001840aaeb6661dd","sha512":"4414e1bb82c4e680c4b73413ff2205099271f614bc4633e85691c07d9bc69b6eb4c609142c3c41569311b9c6eda104e8b830528522f30d3e3afbc18e82126a73","ssdeep":"","tlshash":"9ca0243f0d430715135c5dd01f731d1011f571143410c0c0fc0c3140cf500057c04000","size":84,"data":"","first_seen":"2026-07-02T15:43:57.854048Z","last_seen":"2026-07-02T15:43:57.854048Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6cb519e6b02dc9aae9b8154751f4f462","sha1":"706ae657ba9db2a05e830ae7d1ec4b01ee0bbb60","sha256":"c11db573107bff42655ac09f14a006c13dfdb5ca4403418874cc032411685bfa","sha512":"7d89cce4f2c657f10bf4d7efe1c6c133dab1f817d836d51f14be1dd72d652d751cdcd1bd9301d335a352bdb30881ce38a799835a516a75307b868027728690c9","ssdeep":"","tlshash":"67f05eaa565052f801c35ee128eee2923d32e482b98b6b01f9fdd405cb80d494d23ff8","size":514,"data":"","first_seen":"2026-06-11T09:11:12.765594Z","last_seen":"2026-07-22T01:14:08.287313Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"308cf3fe2c8475d8d1ecdba1b85060c0","sha1":"d9e84e7f1ddb59b650a6fcac4bf63e26d711ba50","sha256":"945a0bc94f68592c482c946ef6997b6e1226fa3f2c102f9f2ed65cd93ad612ba","sha512":"6fe451deeaf4249935a47c65ad50bb008005aeb963e7ff926dfcd34eefed89466e83cbdb0ab9c849166779f32a7235a3fc16a096fa75f3a8f84a2085b7068f00","ssdeep":"192:eOhj7EKyMR4zsjtDhXNN8gtHbx5zrhla8:eU3ERYjtD1htb/3hla8","tlshash":"4d42d44772365f9ec74491cb289b2f9c49f93b9711c058e9a4cadd1803a9ceaa10f37d","size":12757,"data":"","first_seen":"2026-06-11T09:11:12.767613Z","last_seen":"2026-07-22T01:14:08.287779Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a31d9a1b4dd1fef9f6c6d227a298ac9f","sha1":"294b8b41bc9a5c09762fe968d973be64964b467b","sha256":"90bc1eb1af7c93e98866e4218de3e4153784015abfd97b2d8911f377b7769db9","sha512":"ac178811ef017ec05c902a3b1b9f966ccd9a41db35a15f93041a61a5c82dafa2dca4b287e0182eb59359fb1b19a8a3d5cdf20a520ce3cb8642b76727c90abb97","ssdeep":"","tlshash":"d3b022fe03cc2f32e3c00ee00c23223320b0b830e820c08203002000c030c82fce8000","size":109,"data":"","first_seen":"2026-07-02T15:43:57.85654Z","last_seen":"2026-07-02T15:43:57.85654Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7eb021462723191efe9da1282a6775","sha1":"34fab201b86638a66ab2b5703d0a9936fb532df7","sha256":"54c0d943bf72e125e451857a021ccf6953ea9a36e4f341780eee51d3a9886317","sha512":"ff8b0c45799563fc576b1216acfde4264291314998e5bfc68721a4ac61209d2d3d5ba0557aa8d1348a690e51508021d39c8584ae39a29a4645ada8b36ef73279","ssdeep":"","tlshash":"c3d02e5ea19a2f642e423af8a99a1e3332caa222e1108880b088884484a48c5608c00d","size":244,"data":"","first_seen":"2026-07-02T15:43:57.857805Z","last_seen":"2026-07-02T15:43:57.857805Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c3ee12b45c3d9da2942060a9b65639a","sha1":"d1cf9d8e61c17518acb5398cba740e15d83e9d0c","sha256":"616ebc91c4c7cec38b7265ad4c14c842b015818e56c84b22308e8e1f8f0e03f1","sha512":"4483df6c10e4c8ff16a725a4a9479503d96341f68d790bcb9ce43152a9cd9c9a337d659aae9d7934c1b043ca4cc1f7f5ccdb5cf8a81db91fcdd205c76c7ae76d","ssdeep":"","tlshash":"ded097eac1bc1fd0b2b02ef800ab3e7b3ce9b41088f0e4858c80a0c9c014c14aa8c00e","size":241,"data":"","first_seen":"2026-07-02T15:43:57.858937Z","last_seen":"2026-07-02T15:43:57.858937Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea3bade52212b774be122483f2285946","sha1":"e581d0cdbdc5b821d098501d50875860294f0652","sha256":"1a971800ed136794dc00107335b250ce214fcfe748064f71fd06ea7fa4962934","sha512":"f6c81e5e201662dba80b24449b3e4195fbb5227aae5a13355bd02bf0854b05349838849d00f40bdbd0dae6461a346456ebcaac9170b93e8ab9ff79c8dc4eb903","ssdeep":"","tlshash":"f2c0805d767918710533b225476fe755257510472401c8017e1c40850fd450521b3d55","size":182,"data":"","first_seen":"2026-06-09T16:35:58.067996Z","last_seen":"2026-07-22T01:14:08.294031Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/plugins/sellvia-platform/assets/front/js/cart.min.js?ver=1.1.16.38","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4cd2dcf172c5135ba175eda836eff94","sha1":"832193554478fdff06c1adafaca6832674ea7726","sha256":"dde351adaf4df290786425a0abdc3a92e95f53341eb4dc86372f79d214137e67","sha512":"7154f17bfec02279d1de333bcf3b5f9fa1c58f43e8ee3708f788880b5ad70d4c972bc2485648cb78c85b37fe792d2d16f638edb9ca4398dea26a274babafa76e","ssdeep":"192:uHTyx+AeA8PLxadSEx2O8F1z3nQ+IvKPvrA12abn3Xi39:uHex+AeA81ad5x2O8X3nuvUvrAAaz38","tlshash":"def154b473d4b8ff0577726412776f5ea0b27566e18a446040ecd2e04f69acb60b3aac","size":8160,"data":"","first_seen":"2026-04-29T23:22:39.672351Z","last_seen":"2026-07-22T01:14:08.281021Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/plugins/sellvia-platform/assets/front/js/search-product.min.js?ver=1.1.16.38","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"19dc472a9e9bf941cb0d74b09ce9fdd9","sha1":"b9b0d4845225fd555eeb04a6448e162696c4f9b5","sha256":"cfc7adf1839b81a98ee20ec2bd62c732fcf5f0a7b4758751836c6f264c3ad030","sha512":"b2b2c2894f9732e39d620a06dd7a96c463da8d1e0c44fc3162ff8ed81ab798ed2fd3bb161c33e1c83897663b6f4821b821c88f5c3d85f3912072f0f9cc3da4bb","ssdeep":"","tlshash":"92515ea7e138e697127330bc356f7b8f389b7a188dc3128691a1f6010ac2e187f4941a","size":2491,"data":"","first_seen":"2023-10-09T13:19:17Z","last_seen":"2026-07-22T01:14:08.272294Z","times_seen":244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/themes/botticelli/assets/js/allmin.js?ver=1.0.0","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f7bf07e5321bcbdf812ef128d099ccb","sha1":"887716c4956d86a065b07c8417e9e9a4387a2fe0","sha256":"14bb1d1735244227d4197866331ae3118348b8a121addbc5aabccb22631ca3cd","sha512":"f347604832bab0850c84c69e37993bf06946b5cd082c2b750e618dc732d87deec75f820ec9b13440f775c3f91e9c625525a56d9b2143d088c86866c7ced1b069","ssdeep":"1536:Xw7u+WpfraAi0JiUZh48zgZaK2ly3teJFOSUiiR5IfqD9w/sKPUdd1JH+6d/+e0G:Xw7u+WpfmFwiUZkAy3teJFOSUiiR5If2","tlshash":"c29365783164a137057b12e7b1abb7ca76b131dee8020019587ccc8e1da8cd757a5efa","size":91967,"data":"","first_seen":"2026-02-01T17:29:28.544539Z","last_seen":"2026-07-02T15:43:57.847992Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-includes/js/masonry.min.js?ver=4.2.2","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b3fc826e58fc554108e4a651c9c7848","sha1":"76778fd446e2ff2377588a7b4ac4d79f258427c9","sha256":"e00add38134eac2fb8e8e9c09cbfff7bbe57952b210322eb2eecb0a21fc055eb","sha512":"ae192d8d804f7dafd8b7a95220ceb66c0c308a51cdf42c172c20f71f50052e4529b01f8781c5f305e1e0d6c5367d9678f1d908ee4273db594fbb650c56a9f61b","ssdeep":"384:Ar7mIr/Dh5rA3rzB4rMhr/XWGHW/6rMz1xftF2OUVP4eAnbhfreD6dCBEOav7blM:+SxxGG2/71xftFqVP4eAnI0ROavPSCzo","tlshash":"b9b2848f73407425428bf16696af020fb137655c7a4790acba6ad8db1cb984d2037fbd","size":24138,"data":"","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-07-23T23:25:12.555368Z","times_seen":79899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/themes/botticelli/assets/js/jquery.js?ver=7.0","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89503,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-07-23T22:26:06.941355Z","times_seen":20824,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/plugins/sellvia-platform/assets/front/js/popover.js?ver=1.1.16.38","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"97f6873d0fec07a27efd7c791389062f","sha1":"547eedc0e60a3349471d51de146246c2ec8454fc","sha256":"4ee3bca9479d6b67204fa5489bfb6d8850dcb1f66b9590967f7cb04b3aaebdff","sha512":"0ccc16d9cf0ec8eca3dac4351d3b2217e8b79deef3f797d82ed1068664cd9ae9bf5e6e0952d27a19572870cad311ae2d59fcc440b0049a8edeb153c619dcfca9","ssdeep":"192:VGPqBkJIQNlh3DRHVRoLIuGXB/gZYHk9e3A4:VN8NfzRHVRMIuGlgDMA4","tlshash":"af327409b6a1367183ab91e1511b150d7332963df542517c3968c6f26cf2c4ae337fba","size":10975,"data":"","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-07-22T01:14:08.263524Z","times_seen":275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/front-formatPrice-js-extra","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5336818c7baea4723895f68d8b83676","sha1":"1c7ff1184ec872d3c53e5ad6792f420723ac5b3f","sha256":"a0bc5209326f7099f640b314e7eb456d8d076efb7195f36618de0cd79a742897","sha512":"1f2e3ac127697335f89a1196f04c01d0c75769f62e741f4c987b9984ac78bcd11091ff01a2abbe97a816a245f5b6fbbc7e6f6b96a0edc9846b17382928e3eb47","ssdeep":"192:1QOhj7EKyMR4zsjtDhXNN8gtHbx5zrhla+:OU3ERYjtD1htb/3hla+","tlshash":"5752c447f2365f9ec74490fb289b2f5c49f93b96d18058e594ca9d1803a8ceaa10f37d","size":13772,"data":"","first_seen":"2026-05-30T23:16:19.078692Z","last_seen":"2026-07-02T15:43:57.860672Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/plugins/sellvia-platform/assets/front/js/formatPrice.min.js?ver=1.1.16.38","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd45829d88294b385f123f611767c7a6","sha1":"f5f46c8b195dc00680c0965287d9707930e0859b","sha256":"7e6301d5ccd96cfd01fce0dee4ed542c4547bf1b8ef9c21b3044bc402b84dfd5","sha512":"cabd3a0c26f631892c2b549a592850fc0a96f39f0a3d6d0a9c75173407b80f32a1f565eaebeb50fd82a3d14842292b4a992788423155fa7a113e3f2fb9566123","ssdeep":"","tlshash":"df5143c835d2b4e7d733681445af122bb17bead0399a4281d02da1c27db4d0ad127dee","size":2581,"data":"","first_seen":"2024-10-11T08:36:06.931096Z","last_seen":"2026-07-22T01:14:08.277427Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/front-search-product-js-extra","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69c5dd3e35d5eab362bb6a47cba63d2c","sha1":"beb042524eba7ce9c8b215ce037138d7d8d4be31","sha256":"5afae54b975566a32479169cf5655fd9487d711bf7a8be8065815c195d2ea982","sha512":"2fd2194cd0edc0a8ca9a6a8e0d28f44df3cd94e73ee015a9b29529d99d4747f2d75db3d2a5a917b65f72b6b348da3d462db33852b6bf01c665085b375509034e","ssdeep":"","tlshash":"892197eac1bc1fd0b2b02ef804ab3e7b3ce9b410c8f0e4858c84e0c9c014c14aa8c00e","size":1274,"data":"","first_seen":"2026-07-02T15:43:57.861896Z","last_seen":"2026-07-02T15:43:57.861896Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","size":5520,"data":"","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-07-24T00:28:50.899202Z","times_seen":199093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/plugins/sellvia-platform/assets/front/js/core.min.js?ver=1.1.16.38","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"115a6dc36b995b9139afae68ba5d5a38","sha1":"f028d09c70b85cf5122c09910f682b33e9179efa","sha256":"c98e470e9fe8ef588f274b095efd7b0114c16eeb08515ec34f24a9ca6d185428","sha512":"9a07ff6556203030c95bd81a6f43824815324cd5a70aeeab7a91d9be2d27eb716738adfaf840e31ad824f19090640d68e47eb5f10af9b4622bbb5ebd88184b5a","ssdeep":"","tlshash":"ac61415c6be464c920ebb2b030af3d8939ab25157c9684746093d89d242d2adb176ff3","size":3226,"data":"","first_seen":"2023-03-14T08:32:13Z","last_seen":"2026-07-22T01:14:08.280136Z","times_seen":243,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/plugins/sellvia-platform/assets/front/js/currencyPrice.min.js?ver=1.1.16.38","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f68ce856b3b84f53ebed5907fe138a1","sha1":"5c958a7fa8559e5f266ded936171f6b35d2aa103","sha256":"b10b93e54a5e2db2b0fc8460fa88dde918db2df1abb499fe4f3482bcae2887c4","sha512":"33e78b84f3949054df185cd31967c83a7a1b2e285ee1224403bbf4ed54910219fdd72dda691b28f1795787ef504156fd61bdadc05dc10887536b8a238e0c7cfa","ssdeep":"","tlshash":"c2219ec8b57068c6817f34f145ab120526e73b7867478145626d74e21b3076df926e3f","size":1154,"data":"","first_seen":"2023-10-09T13:19:17Z","last_seen":"2026-07-22T01:14:08.284354Z","times_seen":263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/front-cart-js-extra","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a63c6da49798e14d5d366dfdcec7f00b","sha1":"f83d114824cc9efb9e424c67f9c90615fd082542","sha256":"a99537f4c4f899e1ad1f80f414be545869ad698e4ac5d65ed842e9480f204ed8","sha512":"18340b886104fa38c5054cd090c7f08d7d9bc2094531fa085d8171af5ad24105adb4520a2676904e14a8ef51c185a8e08fa5c83e9e06a3ba1d29bfe140aac9ac","ssdeep":"","tlshash":"342122aec2c82f22e2808ef00c22223320b0a820e820c0820200a000c0b0c82bca8000","size":1130,"data":"","first_seen":"2026-07-02T15:43:57.863025Z","last_seen":"2026-07-02T15:43:57.863025Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/adstm-js-extra","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1857f2249f4207cf19c5374bce1c244","sha1":"7243d0e00984649f4f307b208c857dab227b369f","sha256":"3213866966ebc26f0970dbc1c0d28975b9921268fd3df49e29989f7d35f4dda7","sha512":"70eed57fd316d33b5715bffcd0d653ecd75f637dc4f73ccc3ad3f7a86222df44eb3868d0d71b86de141579a9036503b9ca8cc2a3b31e1f021a67a20ee73745bc","ssdeep":"","tlshash":"36212e5ee19a2f642e423ef8a99e1e3332caa222e1508880b088c84484a48c5608c00d","size":1270,"data":"","first_seen":"2026-07-02T15:43:57.864154Z","last_seen":"2026-07-02T15:43:57.864154Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/plugins/sellvia-platform/assets/front/js/smart_paypal.js?ver=1.1.16.38","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"080c513b40a209fb061f482ae0868edf","sha1":"1e666931ec393ccfdffe4841995d39cd460142f6","sha256":"f4cdc3e6e12c449c66ca45633a60cbcd637d4b7df5c080f81544b9211cf8a939","sha512":"c7ca7c7a98d03a7a82da954150ea13bef908e102c49b0460cf041f1c81b2d3be45204a21bec8a8adc4df75f9c67ba52c46add423de0c1c2a9c6cb312d93c8938","ssdeep":"","tlshash":"b241b544b106aed753f31878043faa0aa2323a615608e481b01fe6f09d78d9f7233f68","size":2120,"data":"","first_seen":"2023-03-14T08:32:14Z","last_seen":"2026-07-22T01:14:08.284797Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"player.vimeo.com/progressive_redirect/playback/972947491/rendition/720p/file.mp4?loc=external\u0026log_user=0\u0026signature=c5a4a32ade3766f462d08dac09e3ebb10138b450ee7879dee5b3b11ea6357ee0","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:24.120Z","timestamp":1783007004120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /progressive_redirect/playback/972947491/rendition/720p/file.mp4?loc=external\u0026log_user=0\u0026signature=c5a4a32ade3766f462d08dac09e3ebb10138b450ee7879dee5b3b11ea6357ee0 HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Thu, 02 Jul 2026 15:43:28 GMT\r\ncontent-length: 0\r\nlocation: https://download-video-ak.vimeocdn.com/v3-1/playback/2987e23b-6ea7-4309-be9d-05ff5390887a/9f40316c?__token__=st=1783007008~exp=1783010608~acl=%2Fv3-1%2Fplayback%2F2987e23b-6ea7-4309-be9d-05ff5390887a%2F9f40316c%2A~hmac=066cb072479271adfeb57565cadcc09be12f629b5e62fb756f10bf84f45fd55a\u0026r=dXMtd2VzdDE%3D\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://f.vimeocdn.com; style-src 'self' https://f.vimeocdn.com; img-src 'self' https://f.vimeocdn.com https://i.vimeocdn.com\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-host: player-backend-c95bf5cf7-hscrq\r\nx-player-backend: g\r\nx-xss-protection: 1; mode=block\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-c95bf5cf7-hscrq\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\nx-served-by: cache-iad-kiad7000119-IAD, cache-bma-essb1270050-BMA\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-timer: S1783007008.306512,VS0,VE126\r\nvary: Origin, Referer\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nset-cookie: __cf_bm=e2X6mllZ2p7LyGO3dM0DeciQtXPH8qzgIaV61GjUEyA-1783007008.2939982-1.0.1.1-JSioHX0pF8xJ3XzV89zsIvXbAJAUpgu11Es7_TuKoG4BJLBzRc5kThnO1oBJnsKPhgDelczppKuoaquR9o6il2KtydMchJO_zN7tp0dLG_G_JxmPyCYWRqzczA8l_qxd; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Thu, 02 Jul 2026 16:13:28 GMT\r\nserver: cloudflare\r\ncf-ray: a14ec429db995a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":0,"size_decoded":0,"mime_type":"video/mp4","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T00:50:52.477296Z","times_seen":17489349,"resource_available":true,"data":null}},"time_used":3268,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":147,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/themes/botticelli/style.css?ver=7.0","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.230Z","timestamp":1783007003230,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/themes/botticelli/style.css?ver=7.0 HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:25 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 06 Mar 2026 17:21:57 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nVary: Accept-Encoding\r\nETag: W/\"69ab0d35-33cda\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":212186,"size_decoded":70298,"mime_type":"text/css","magic":"ASCII text, with very long lines (65252), with CRLF line terminators","md5":"51bf81929c71f8ee4ae53de3d46dac1b","sha1":"267d997f402a603ef470ab261c877383b408c514","sha256":"b4501c3ed88891b349f6dc5b0bdb4d148578b618d0ec4c84f8b60f038511e5ae","sha512":"5f2f02efb6c2fb752ba8fc7bd854592ca065858052f892f37961169464825c0ee77ecb3874ed8097750637a2d764e435d2cb707dbf22eaf1148f190508e6fac4","ssdeep":"6144:Ob/hsjpaE0KGdg2HJE2rvV+I2oSoaJzreFkoq7:Ob/hsjpaE0KGdg2HJE2rN+I2oSoaJzrb","tlshash":"b024f931e2a4301cf92be561bad067de7528d113f76306aeed96773ac5cb0a2067178c","first_seen":"2026-02-01T17:29:28.524526Z","last_seen":"2026-07-02T15:43:57.809842Z","times_seen":19,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":92,"send":0,"wait":207,"receive":92,"ssl":221},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/plugins/sellvia-platform/assets/front/css/flags.css?ver=1.1.16.38","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.231Z","timestamp":1783007003231,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/plugins/sellvia-platform/assets/front/css/flags.css?ver=1.1.16.38 HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:25 GMT\r\nContent-Type: text/css\r\nContent-Length: 183\r\nLast-Modified: Mon, 22 Jun 2026 12:05:28 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nETag: \"6a392508-b7\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":183,"size_decoded":510,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a256e3609f6c8b417eb888114fe37c29","sha1":"5378bcb7dd9229e57c72b63d1af7c45f544a564b","sha256":"37024073bc3a7509984646edc25c97c8ad9a370de86415272a56fece5d71c67f","sha512":"52cb2f4ff484596d463cc76992759dbb8c48b33f0fd9a811da1f6e6202606dc9222d782b43d3fcf60cf327cb6d264834da922f8cb4e9eb55008f95f7f1ab21f5","ssdeep":"","tlshash":"43c0c9989161468da1761286d5ec158b3466c94e7816459ff6293d09d91670e0601d2b","first_seen":"2023-06-14T15:50:44Z","last_seen":"2026-07-22T01:14:08.26166Z","times_seen":269,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":92,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-includes/js/masonry.min.js?ver=4.2.2","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.242Z","timestamp":1783007003242,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:25 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sat, 13 Jun 2020 18:53:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nVary: Accept-Encoding\r\nETag: W/\"5ee520a8-5e4a\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24138,"size_decoded":7755,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23966)","md5":"3b3fc826e58fc554108e4a651c9c7848","sha1":"76778fd446e2ff2377588a7b4ac4d79f258427c9","sha256":"e00add38134eac2fb8e8e9c09cbfff7bbe57952b210322eb2eecb0a21fc055eb","sha512":"ae192d8d804f7dafd8b7a95220ceb66c0c308a51cdf42c172c20f71f50052e4529b01f8781c5f305e1e0d6c5367d9678f1d908ee4273db594fbb650c56a9f61b","ssdeep":"384:Ar7mIr/Dh5rA3rzB4rMhr/XWGHW/6rMz1xftF2OUVP4eAnbhfreD6dCBEOav7blM:+SxxGG2/71xftFqVP4eAnI0ROavPSCzo","tlshash":"b9b2848f73407425428bf16696af020fb137655c7a4790acba6ad8db1cb984d2037fbd","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-07-23T23:25:12.555368Z","times_seen":79899,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":247,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img4.sellvia.com/uploads/2025/08/08/abb6eb55d7382342db6b5b3c20882d76.webp-350x350.webp?10000","fqdn":"img4.sellvia.com","domain":"sellvia.com","tld":"com"},"ip":{"addr":"95.211.45.161","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:24.108Z","timestamp":1783007004108,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img4.sellvia.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 18:59:26 GMT","end":"Mon, 24 Aug 2026 18:59:25 GMT"},"fingerprint":{"sha1":"29:9D:D3:B0:65:76:DD:94:A9:DC:01:5E:6B:F8:76:66:21:97:15:E9","sha256":"41:26:0C:4B:D2:E2:D5:44:52:A1:F7:A7:94:C8:F4:4B:CE:62:7B:E5:8B:1F:F9:5A:7A:45:E9:CC:C2:BB:29:82"}}},"request":{"raw":"GET /uploads/2025/08/08/abb6eb55d7382342db6b5b3c20882d76.webp-350x350.webp?10000 HTTP/1.1\r\nHost: img4.sellvia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.14.2\r\ndate: Thu, 02 Jul 2026 15:43:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23562\r\nlast-modified: Fri, 08 Aug 2025 05:42:15 GMT\r\netag: \"68958e37-5c0a\"\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23562,"size_decoded":23780,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 350x350, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fe0bc3a7cd85fd43c50ea053d928838a","sha1":"631620721c21fa6ae1ff70c5151a3cab8b0956a3","sha256":"c0985c52bf64442f37c474742f44eaa1d6758fe43d333c13cd208e134428f5af","sha512":"6a55f1b81e575e24ee0480017615a36aec5b012cc7e05d45bdb3c589d7fc445df8202769012bbf16003e474d71c02408ff81e2c93f3a8b969ce373acbd2a6480","ssdeep":"384:KFviAjMnxhXX0Wc1uvHIYGRQINnqT3XG4GIfWkTz9a7CXFxHtnJjxvt:kvieq10WzvHIlC8n+G4BfWkTRaQDNJj3","tlshash":"c9b2e00dcab7241887f869aef27cda1d107855c9f96feb0a6c2600f913e15ec27a0497","first_seen":"2025-11-08T01:12:41.545016Z","last_seen":"2026-07-02T15:43:57.815637Z","times_seen":6,"resource_available":false,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":135,"connect":22,"send":0,"wait":201,"receive":89,"ssl":316},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/plugins/sellvia-platform/assets/img/flags/png/US.png","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:25.383Z","timestamp":1783007005383,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/plugins/sellvia-platform/assets/img/flags/png/US.png HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 444\r\nLast-Modified: Mon, 22 Jun 2026 12:05:28 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nETag: \"6a392508-1bc\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":444,"size_decoded":773,"mime_type":"image/png","magic":"PNG image data, 22 x 16, 8-bit/color RGBA, non-interlaced","md5":"678b340cdb6caeea909c136e0edce7f0","sha1":"c86ebc345d1c91ccfddd4cc5cbb6257aea0cb414","sha256":"63f63ff2f6866d673d3d3b88cc230cb16a10606de31b1e161eb84daa898af428","sha512":"789f5730491b60e9b121d2d690dd5488b1e0992ee4f5a7b8ad92ca464ef82f447672363c64866c20b3759526265ae05116474888ac8c423c27a0334242b7943b","ssdeep":"","tlshash":"b8f023cd8bb451be8e9d8c1e62432d44dcb6390e2b8429176909693854068b63cb3388","first_seen":"2023-06-14T15:50:44Z","last_seen":"2026-07-22T01:14:08.278237Z","times_seen":179,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-02T15:43:20.616Z","timestamp":1783007000616,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:24 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/7.4.33\r\nSet-Cookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea; expires=Sat, 01-Aug-2026 15:43:24 GMT; Max-Age=2592000; path=/\r\nLink: \u003chttps://celestia.best/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://celestia.best/wp-json/wp/v2/pages/30\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://celestia.best/\u003e; rel=shortlink\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":92352,"size_decoded":17993,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139), with CRLF, LF line terminators","md5":"8b565140e66f3d751a4cd2a1616a2d82","sha1":"5b27c1c424f23f302c66f831e64eaa3c3de7304e","sha256":"c1158a7b69d38db30bc8a2c2ad8b06f7a7f7e1cfc752b13712a78d2ce3218326","sha512":"92ac176fd10ccde64979e6268c58316b79eaf492b7c336736319477efcd8c44257666d042355e5f8dae50ad82c5ff35e25984e28de0de49b91e881183103da70","ssdeep":"1536:ijypMaA6cuXZ28i//PXM4HtnwwHkQws1LlwMq2R:iON7/Z28m/PXM4BwwEQt1RwMN","tlshash":"e993c767b0f64436467791c699e33f0efee4a307ca42859072fc539a9ff5c96a093218","first_seen":"2026-07-02T15:43:57.818653Z","last_seen":"2026-07-02T15:43:57.818653Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2214,"timings":{"blocked":-1,"dns":405,"connect":93,"send":0,"wait":1415,"receive":0,"ssl":301},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/plugins/sellvia-platform/assets/front/css/smart_paypal.min.css?ver=1.1.16.38","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.235Z","timestamp":1783007003235,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/plugins/sellvia-platform/assets/front/css/smart_paypal.min.css?ver=1.1.16.38 HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:25 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 22 Jun 2026 12:05:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nVary: Accept-Encoding\r\nETag: W/\"6a392508-632\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1586,"size_decoded":981,"mime_type":"text/css","magic":"ASCII text, with very long lines (1585)","md5":"2a182e8d6ed5ea0ad12d70117789ed30","sha1":"d12750ad494ba9772b4fbfdf011aec49cf8a1b4b","sha256":"bcf4d5ae1211a97c6aff5469866df061538944ce4c41ae867b3f4791ae7ee46c","sha512":"77383809356c47ec84ad7580aef5b68ddafc6e615389bba093dfdd402253975e2cd6c2b2708c5bf7e66a75021b234acdcbae253feea32f65a60bca19f0fb23b5","ssdeep":"","tlshash":"20312021d4915148d82ba211bac0aed400248757e9330fafbf5c73298eca4df1abe342","first_seen":"2023-10-09T13:19:18Z","last_seen":"2026-07-22T01:14:08.262581Z","times_seen":176,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":92,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/plugins/sellvia-platform/assets/front/js/formatPrice.min.js?ver=1.1.16.38","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.247Z","timestamp":1783007003247,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/plugins/sellvia-platform/assets/front/js/formatPrice.min.js?ver=1.1.16.38 HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:25 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 22 Jun 2026 12:05:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nVary: Accept-Encoding\r\nETag: W/\"6a392508-a15\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2581,"size_decoded":1589,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2581), with no line terminators","md5":"bd45829d88294b385f123f611767c7a6","sha1":"f5f46c8b195dc00680c0965287d9707930e0859b","sha256":"7e6301d5ccd96cfd01fce0dee4ed542c4547bf1b8ef9c21b3044bc402b84dfd5","sha512":"cabd3a0c26f631892c2b549a592850fc0a96f39f0a3d6d0a9c75173407b80f32a1f565eaebeb50fd82a3d14842292b4a992788423155fa7a113e3f2fb9566123","ssdeep":"","tlshash":"df5143c835d2b4e7d733681445af122bb17bead0399a4281d02da1c27db4d0ad127dee","first_seen":"2024-10-11T08:36:06.931096Z","last_seen":"2026-07-22T01:14:08.277427Z","times_seen":239,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":381,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/uploads/2026/03/img-crop-back-125x-1-1.jpg","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.261Z","timestamp":1783007003261,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/img-crop-back-125x-1-1.jpg HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2133457\r\nLast-Modified: Fri, 06 Mar 2026 18:06:15 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nETag: \"69ab1797-208dd1\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2133457,"size_decoded":2133794,"mime_type":"image/jpeg","magic":"PNG image data, 2220 x 888, 8-bit/color RGBA, non-interlaced","md5":"a976e521f6e339c1a29172d703ee7c4b","sha1":"98b43c436a0e9951be4f21d183eebda73ede036e","sha256":"2989b0a005189085a3f4a10b5e45e1cf0ffebec83b55d6e60b33453d0c662409","sha512":"c62260d6f3679eecbedef5b768feaec56b350c518085fe59484c52de22ae868ec6661b6f7f4071f2d06fe643c9793bd05de00669d82f63a47b75a685a24a606d","ssdeep":"24576:zHIjObzMNTxcAkqd/OAys8o+fyyoGlIs3QLaiU:LIjO/MQ+dSByyoGlIMKaR","tlshash":"aa2533b695fe6d62f683cd39f6442bad786a2c29ceb9e564c2bcc55d51650f0300032f","first_seen":"2025-08-14T03:45:17.2182Z","last_seen":"2026-07-22T01:14:08.272805Z","times_seen":72,"resource_available":false,"data":null}},"time_used":1197,"timings":{"blocked":549,"dns":0,"connect":0,"send":0,"wait":92,"receive":556,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/progressive_redirect/playback/972947491/rendition/720p/file.mp4?loc=external\u0026log_user=0\u0026signature=c5a4a32ade3766f462d08dac09e3ebb10138b450ee7879dee5b3b11ea6357ee0","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:24.121Z","timestamp":1783007004121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /progressive_redirect/playback/972947491/rendition/720p/file.mp4?loc=external\u0026log_user=0\u0026signature=c5a4a32ade3766f462d08dac09e3ebb10138b450ee7879dee5b3b11ea6357ee0 HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Thu, 02 Jul 2026 15:43:25 GMT\r\ncontent-length: 0\r\nlocation: https://download-video-ak.vimeocdn.com/v3-1/playback/2987e23b-6ea7-4309-be9d-05ff5390887a/9f40316c?__token__=st=1783007005~exp=1783010605~acl=%2Fv3-1%2Fplayback%2F2987e23b-6ea7-4309-be9d-05ff5390887a%2F9f40316c%2A~hmac=01dd336e999e02f05900f8ba2b167eb64fa4cd79b0871aaac56966505cee1bd7\u0026r=dXMtd2VzdDE%3D\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://f.vimeocdn.com; style-src 'self' https://f.vimeocdn.com; img-src 'self' https://f.vimeocdn.com https://i.vimeocdn.com\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-host: player-backend-c95bf5cf7-nkxlt\r\nx-player-backend: g\r\nx-xss-protection: 1; mode=block\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-c95bf5cf7-nkxlt\r\naccept-ranges: bytes\r\nvia: 1.1 varnish, 1.1 varnish\r\nx-served-by: cache-iad-kiad7000143-IAD, cache-bma-essb1270020-BMA\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-timer: S1783007005.417406,VS0,VE319\r\nvary: Origin, Referer\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=pDJGQrgrAuUBMAT0IloFR2CPj7qqJuN1DqfqAg0w1GM-1783007005.3998904-1.0.1.1-mmiX0iN.yOopdfqR1vp.M7LUaIzmTy1DjUMVif_2Qc0BTXR0OvYTuEOz8Ii.XKPhFZwJMr_xozMeNW1wGisB8_Mr5viRxWuKdC40pg0vc63J..yOE8Fz4orpRSeXWD_7; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Thu, 02 Jul 2026 16:13:25 GMT\r\nserver: cloudflare\r\ncf-ray: a14ec417badbb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"video/mp4","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T00:50:52.477296Z","times_seen":17489349,"resource_available":true,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":2,"connect":2,"send":0,"wait":345,"receive":0,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/plugins/sellvia-platform/assets/front/js/core.min.js?ver=1.1.16.38","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.246Z","timestamp":1783007003246,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/plugins/sellvia-platform/assets/front/js/core.min.js?ver=1.1.16.38 HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:25 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 22 Jun 2026 12:05:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nVary: Accept-Encoding\r\nETag: W/\"6a392508-c9a\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3226,"size_decoded":1555,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3226), with no line terminators","md5":"115a6dc36b995b9139afae68ba5d5a38","sha1":"f028d09c70b85cf5122c09910f682b33e9179efa","sha256":"c98e470e9fe8ef588f274b095efd7b0114c16eeb08515ec34f24a9ca6d185428","sha512":"9a07ff6556203030c95bd81a6f43824815324cd5a70aeeab7a91d9be2d27eb716738adfaf840e31ad824f19090640d68e47eb5f10af9b4622bbb5ebd88184b5a","ssdeep":"","tlshash":"ac61415c6be464c920ebb2b030af3d8939ab25157c9684746093d89d242d2adb176ff3","first_seen":"2023-03-14T08:32:13Z","last_seen":"2026-07-22T01:14:08.280136Z","times_seen":243,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":375,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/plugins/sellvia-platform/assets/front/js/cart.min.js?ver=1.1.16.38","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.250Z","timestamp":1783007003250,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/plugins/sellvia-platform/assets/front/js/cart.min.js?ver=1.1.16.38 HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:25 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 22 Jun 2026 12:05:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nVary: Accept-Encoding\r\nETag: W/\"6a392508-1fe0\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8160,"size_decoded":2617,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8160), with no line terminators","md5":"a4cd2dcf172c5135ba175eda836eff94","sha1":"832193554478fdff06c1adafaca6832674ea7726","sha256":"dde351adaf4df290786425a0abdc3a92e95f53341eb4dc86372f79d214137e67","sha512":"7154f17bfec02279d1de333bcf3b5f9fa1c58f43e8ee3708f788880b5ad70d4c972bc2485648cb78c85b37fe792d2d16f638edb9ca4398dea26a274babafa76e","ssdeep":"192:uHTyx+AeA8PLxadSEx2O8F1z3nQ+IvKPvrA12abn3Xi39:uHex+AeA81ad5x2O8X3nuvUvrAAaz38","tlshash":"def154b473d4b8ff0577726412776f5ea0b27566e18a446040ecd2e04f69acb60b3aac","first_seen":"2026-04-29T23:22:39.672351Z","last_seen":"2026-07-22T01:14:08.281021Z","times_seen":46,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":462,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/themes/botticelli/webfonts/nunitosans400.woff","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.959Z","timestamp":1783007003959,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/themes/botticelli/webfonts/nunitosans400.woff HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/wp-content/themes/botticelli/style.css?ver=7.0\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:26 GMT\r\nContent-Type: application/font-woff\r\nContent-Length: 25164\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nLast-Modified: Fri, 06 Mar 2026 17:21:57 GMT\r\nETag: \"624c-64c5e4a496c8f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25164,"size_decoded":25439,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 25164, version 1.0","md5":"9b84b662db1b649df08eac8e42b03b77","sha1":"9b75768820860f33713280688758c998eb9cdf03","sha256":"22d0b17acc0b4c7343eec50512b47f875bc34ff146458ca869b0995a4382e459","sha512":"99089775327c4d4f8b490ef6a77fcf9d1dcac07f2d12d88e4c9b74c76f8028d1139c901e999c8e0b5ffc7cf48a5f8e5c2fc539db82931b5c69c4b58263eb2000","ssdeep":"768:Dkb0gn9nvKFHDT++N1E26KKgwtaeLVSudxF:Qb0g9vsjTNNGntTVSw","tlshash":"70b2f191dfb1220ac19508bcb1aeb0506de52b3efac42ea46f891b35ccd38d1539dc71","first_seen":"2024-10-24T22:53:29.484642Z","last_seen":"2026-07-22T01:14:08.267426Z","times_seen":140,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img4.sellvia.com/uploads/2025/08/12/bfbb780fa89b9ea350e005a9a76d9ed6.webp-350x350.webp?10000","fqdn":"img4.sellvia.com","domain":"sellvia.com","tld":"com"},"ip":{"addr":"95.211.45.161","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:24.106Z","timestamp":1783007004106,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img4.sellvia.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 18:59:26 GMT","end":"Mon, 24 Aug 2026 18:59:25 GMT"},"fingerprint":{"sha1":"29:9D:D3:B0:65:76:DD:94:A9:DC:01:5E:6B:F8:76:66:21:97:15:E9","sha256":"41:26:0C:4B:D2:E2:D5:44:52:A1:F7:A7:94:C8:F4:4B:CE:62:7B:E5:8B:1F:F9:5A:7A:45:E9:CC:C2:BB:29:82"}}},"request":{"raw":"GET /uploads/2025/08/12/bfbb780fa89b9ea350e005a9a76d9ed6.webp-350x350.webp?10000 HTTP/1.1\r\nHost: img4.sellvia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.14.2\r\ndate: Thu, 02 Jul 2026 15:43:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19058\r\nlast-modified: Tue, 12 Aug 2025 09:58:44 GMT\r\netag: \"689b1054-4a72\"\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19058,"size_decoded":19276,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 350x350, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dd91c620970206858ecf51a23071698e","sha1":"d532195d366650bfa157378dabba1f56562a7a96","sha256":"b651c345356691f7a68f5747322d3dd33fb047231c12333042ae0a0fc3f56eed","sha512":"105a03b6d03ded2a6f5d2251ce7ad7ff82af90656e8165f292f24097125e9a8b7b630c3c5d5fee724238ce6848ae0f6cafb7fb99163e6f337b03858f681b593f","ssdeep":"384:2+Jmy3A6qJDvufk92UxRj0p3yZ1Of6ZmkeCt6si6vslwOgyi2nEa:2klQ/ak91Rj2iZ1Of6ZE6vslwWXB","tlshash":"1982e12209d4980d5e2973f3dcd609be563ba76330595b0a55e00dac1e78bf1be2ac4f","first_seen":"2026-03-29T01:13:06.471245Z","last_seen":"2026-07-02T15:43:57.827202Z","times_seen":2,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":137,"connect":23,"send":0,"wait":202,"receive":89,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-admin/admin-ajax.php","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:24.129Z","timestamp":1783007004129,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 23\r\nOrigin: https://celestia.best\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 469\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nX-Powered-By: PHP/7.4.33\r\nAccess-Control-Allow-Origin: https://celestia.best\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex\r\nX-Content-Type-Options: nosniff\r\nExpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nCache-Control: no-cache, must-revalidate, max-age=0, no-store, private\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self';\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":469,"size_decoded":1064,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"499cd9b75205dcdbf7139aec4de11b8e","sha1":"3797d20420ce3ec4a2657589b0bada7baccfcc0f","sha256":"92c8d5c19d0254b58268d9d1384107f2519c27fcc4471bf2e18705095b185409","sha512":"0d6b4c74f137a64ff2416420eee0a5d0dc6b317096fef19ed19080b87e3ff3439189e59a215afda8a7fa769f18a0425e35b3e9b03846d3831658c89cf3b688b5","ssdeep":"","tlshash":"31f0977db6bee410b535b0c0d5d901b6e8e4415a8e44c088a2bc3a1ae3f82ea0691910","first_seen":"2025-08-14T16:12:48.786907Z","last_seen":"2026-07-02T15:43:57.82885Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-admin/admin-ajax.php","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:24.227Z","timestamp":1783007004227,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 58\r\nOrigin: https://celestia.best\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:27 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 452\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nX-Powered-By: PHP/7.4.33\r\nAccess-Control-Allow-Origin: https://celestia.best\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex\r\nX-Content-Type-Options: nosniff\r\nExpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nCache-Control: no-cache, must-revalidate, max-age=0, no-store, private\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self';\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":452,"size_decoded":1054,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"66e9e75ad3ce20a85106dafb535ac239","sha1":"4a909bef044c8bc24b967af9530296442c0c9ae0","sha256":"ab6a7165bd92d9164d273119dfbf4122571b3b7f1478a4ca43e3d6756d77cfd4","sha512":"c1e6b1852308874951ed4bf5fb1cf2c1d03a2fc898542aabc06462af3be22e7560ed5fc9df38f7500e99a18e7da2aa40c2e11d40bff5f272243340dcbd72fd04","ssdeep":"","tlshash":"79f022a411789802563e1994ba773d2a83cc602bafd1efb0c3ed4c0f17f9a9a6721035","first_seen":"2023-06-14T15:50:44Z","last_seen":"2026-07-22T01:14:08.269675Z","times_seen":239,"resource_available":false,"data":null}},"time_used":1193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Cinzel:wght@400..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.226Z","timestamp":1783007003226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /css2?family=Cinzel:wght@400..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 02 Jul 2026 15:43:23 GMT\r\ndate: Thu, 02 Jul 2026 15:43:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":839,"size_decoded":1063,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a0a575c268d25799069d610c2b3e0226","sha1":"be1eeef01a4e09aa50f6cf3d6de61e9a19e8c566","sha256":"d16a4100a175af18ccd111b28f9d86a5fb0e9213f649183658af3abf39ba05d1","sha512":"abaa6a788bd96c66e44f3d634f7b70bdb0b29da0d8390a313d72935b986536b6047cb5506b063b20a258e777c7b4ef5651cc0efcfc726d25d9298bdd32ed64ce","ssdeep":"","tlshash":"2f01cec208279104dba30dc126de7d33ef1e225168449978affe18d8bc9ad668356b1d","first_seen":"2025-09-12T03:57:44.448803Z","last_seen":"2026-07-23T16:45:35.22992Z","times_seen":462,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":32,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/plugins/sellvia-platform/assets/front/css/shopping_cart.css?ver=1.1.16.38","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.232Z","timestamp":1783007003232,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/plugins/sellvia-platform/assets/front/css/shopping_cart.css?ver=1.1.16.38 HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:25 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 22 Jun 2026 12:05:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nVary: Accept-Encoding\r\nETag: W/\"6a392508-2244\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8772,"size_decoded":3075,"mime_type":"text/css","magic":"ASCII text, with very long lines (1022), with CRLF line terminators","md5":"2e9b6a7b7161a6bfc39fc0eed87e9770","sha1":"b57433a464249298d2875f1106a4c84eee2bbf79","sha256":"564ae7aad79d0d21bb6e745446aa6c79d015c79f7cc26ce82fb64f5b5c3356ea","sha512":"993d5791660bbe9b99ad233e9e51bc8086c510d3c9df601e0d6714ea82f1625d81be82b0039feed18604e74df55b2ae086521bf7b99a11bac594418691d7d8f7","ssdeep":"192:LcsHlmG4WPI5mhb2ZCRiO8IZMELaQV/eJPEL/DvUkwH7ET:LcklmGDGELfK7O","tlshash":"d4022031b15d123ca43faa93a69076dd69a9f056e2cf12f5fb45b314cb4a0876630ecc","first_seen":"2026-04-29T23:22:39.665895Z","last_seen":"2026-07-22T01:14:08.283841Z","times_seen":48,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":92,"send":0,"wait":93,"receive":0,"ssl":213},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/plugins/sellvia-platform/assets/front/css/search-product.css?ver=1.1.16.38","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.234Z","timestamp":1783007003234,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/plugins/sellvia-platform/assets/front/css/search-product.css?ver=1.1.16.38 HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:25 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 22 Jun 2026 12:05:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nVary: Accept-Encoding\r\nETag: W/\"6a392508-c74\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3188,"size_decoded":1167,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"0ee4b65e59e64c5873d69141f7a7126a","sha1":"eb60c2765831cac92fb75613ba2f2bf40cbc5243","sha256":"a3147cebed331dcaae4555c1dd93bad38af2ab9dcb800b0b637cf69e48e27d4c","sha512":"14269cca227a4182c43421b2ae1e4a574225c9c3a04f122d0ec2b47cb5085214a112994a5898d04bc696e29b4eb180292c09bd282a44e8b97bfa2a0ec20ff8ff","ssdeep":"","tlshash":"3561ab9ac53501c57036da7a27963983fd5630138e8a6628fecdf6019fb68780a50edf","first_seen":"2023-10-09T13:19:18Z","last_seen":"2026-07-22T01:14:08.271041Z","times_seen":238,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":93,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/plugins/sellvia-platform/assets/front/js/currencyPrice.min.js?ver=1.1.16.38","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.249Z","timestamp":1783007003249,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/plugins/sellvia-platform/assets/front/js/currencyPrice.min.js?ver=1.1.16.38 HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:25 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 22 Jun 2026 12:05:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nVary: Accept-Encoding\r\nETag: W/\"6a392508-482\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1154,"size_decoded":819,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1154), with no line terminators","md5":"2f68ce856b3b84f53ebed5907fe138a1","sha1":"5c958a7fa8559e5f266ded936171f6b35d2aa103","sha256":"b10b93e54a5e2db2b0fc8460fa88dde918db2df1abb499fe4f3482bcae2887c4","sha512":"33e78b84f3949054df185cd31967c83a7a1b2e285ee1224403bbf4ed54910219fdd72dda691b28f1795787ef504156fd61bdadc05dc10887536b8a238e0c7cfa","ssdeep":"","tlshash":"c2219ec8b57068c6817f34f145ab120526e73b7867478145626d74e21b3076df926e3f","first_seen":"2023-10-09T13:19:17Z","last_seen":"2026-07-22T01:14:08.284354Z","times_seen":263,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":392,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cinzel/v26/8vIJ7ww63mVu7gt79mT7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.967Z","timestamp":1783007003967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/cinzel/v26/8vIJ7ww63mVu7gt79mT7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://celestia.best\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25904\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Jun 2026 23:02:33 GMT\r\nexpires: Wed, 30 Jun 2027 23:02:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 146451\r\nlast-modified: Tue, 09 Sep 2025 18:58:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":25904,"size_decoded":26717,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25904, version 1.0","md5":"e7ed1ab78a1744183d3dde29701c5fa8","sha1":"e3007b7235a3e42a9c4ce5020ab4236000073885","sha256":"09941fb1c169c38fd414536b37690057fc01b3117a5c63dd6571186540c8f370","sha512":"da3f51449b0f406be081cb782cb3ffece599cd29045c142eb00b2a591f491f49e05fd20989f510c5f3b4e443b365a82d78c25b38133c61b248cf3767f1878ccb","ssdeep":"768:IZQ9vezb0u8t5Q0NM3LXhros4eh/Cy7rEfW:Qzb6mFGelCQQu","tlshash":"32c2e131e18142c92d548df72b8f78915d4de0636fb3919482d5ab3ade2e70a22b41db","first_seen":"2025-09-10T23:55:05.516003Z","last_seen":"2026-07-23T23:28:02.658905Z","times_seen":3885,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":5,"connect":35,"send":0,"wait":20,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/uploads/2026/03/best-sellers-23-fav.png","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:25.174Z","timestamp":1783007005174,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/best-sellers-23-fav.png HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 861\r\nLast-Modified: Fri, 06 Mar 2026 18:06:09 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nETag: \"69ab1791-35d\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":861,"size_decoded":1190,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"efce2e48deac655d879b973fa7e41857","sha1":"c6dc7ad67773f99ab6e064141c3d8cabd1552060","sha256":"43f550e945cacf8ca619d854317327e09d79698f0af69b6c4ac758a74efe90fc","sha512":"ff57f0cb745a762abb95a35d13d8d9ff7e972979dbc8d9ff932d530195f18cb7076deb162ce9fad547d528b13a47903a77eaa9216cddb607ed8435a92e6a31a9","ssdeep":"","tlshash":"0111da4376a40de1c3364753c0906424fdaba24c55505c74d90dd68329bc4cde5ea5f6","first_seen":"2025-09-07T01:34:24.232718Z","last_seen":"2026-07-21T11:01:32.51283Z","times_seen":3,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/themes/botticelli/assets/css/allstyle.css?ver=7.0","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.227Z","timestamp":1783007003227,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/themes/botticelli/assets/css/allstyle.css?ver=7.0 HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:25 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 06 Mar 2026 17:21:56 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nVary: Accept-Encoding\r\nETag: W/\"69ab0d34-89c6\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35270,"size_decoded":7596,"mime_type":"text/css","magic":"ASCII text, with very long lines (35268), with CRLF line terminators","md5":"13026bb73935882453e4279f6f0337db","sha1":"ca8322c4c2aa6159d48a2fe1392b925934f850e3","sha256":"fed58bdb4f80739f4b9f2417878503a71c96049a2f030092015b0309b15f3f9c","sha512":"58ad9603f7fe183aad208b05948451f9c14698cc3295d68d02277d31fde9ca1f47d4baede2d9652ac015785502124726a01e29a88dcca93ddbd5c215eb63dcf4","ssdeep":"768:FHyHpvs+FQRDt5WWJ6PJH8osLFvEXIpQUyyU+sUSv0E8Z37:mU+iRDDWWJ6PJHGLFvEXIpAyov0E8Z37","tlshash":"79f2e923a75030089777d172fee6e7dc3829d512e90259edfd54d1b887ca08bd23e29a","first_seen":"2025-11-08T01:12:41.53645Z","last_seen":"2026-07-22T01:14:08.276532Z","times_seen":81,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.240Z","timestamp":1783007003240,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:25 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 11 Aug 2023 18:18:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nVary: Accept-Encoding\r\nETag: W/\"64d67b72-1590\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5520,"size_decoded":2178,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4358)","md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-07-24T00:28:50.899202Z","times_seen":199093,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/plugins/sellvia-platform/assets/front/js/search-product.min.js?ver=1.1.16.38","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.252Z","timestamp":1783007003252,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/plugins/sellvia-platform/assets/front/js/search-product.min.js?ver=1.1.16.38 HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:25 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 22 Jun 2026 12:05:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nVary: Accept-Encoding\r\nETag: W/\"6a392508-9bb\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2491,"size_decoded":1355,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2487), with no line terminators","md5":"19dc472a9e9bf941cb0d74b09ce9fdd9","sha1":"b9b0d4845225fd555eeb04a6448e162696c4f9b5","sha256":"cfc7adf1839b81a98ee20ec2bd62c732fcf5f0a7b4758751836c6f264c3ad030","sha512":"b2b2c2894f9732e39d620a06dd7a96c463da8d1e0c44fc3162ff8ed81ab798ed2fd3bb161c33e1c83897663b6f4821b821c88f5c3d85f3912072f0f9cc3da4bb","ssdeep":"","tlshash":"92515ea7e138e697127330bc356f7b8f389b7a188dc3128691a1f6010ac2e187f4941a","first_seen":"2023-10-09T13:19:17Z","last_seen":"2026-07-22T01:14:08.272294Z","times_seen":244,"resource_available":true,"data":null}},"time_used":567,"timings":{"blocked":475,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/themes/botticelli/webfonts/nunitosans600.woff","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.962Z","timestamp":1783007003962,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/themes/botticelli/webfonts/nunitosans600.woff HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/wp-content/themes/botticelli/style.css?ver=7.0\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:26 GMT\r\nContent-Type: application/font-woff\r\nContent-Length: 25396\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nLast-Modified: Fri, 06 Mar 2026 17:21:57 GMT\r\nETag: \"6334-64c5e4a496c8f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25396,"size_decoded":25671,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 25396, version 1.0","md5":"fdd1426c3444d1fadd51cfc2a47c30f4","sha1":"2b12d33220792dde2bc2619c81b8c8bf29da2477","sha256":"718114e85c9908959438851420e53c192191b33e18dfdd5eeef2526d71458e7a","sha512":"e2e75a4c5cb25064fff6815722b27f34aaa322d390928d46abd56975365181404831180240bdff3dc78bd652208858a0483cdca268090c01ef7ff17d635f7e18","ssdeep":"384:xew/fhs7WRAjUInqEBcS0JBW7jA6PZBYUbOCh32kq62nUMb5cBBhcUz3:xhqWRAYOcSWGjA6cUb932kqhjSBDpz3","tlshash":"95b2e0113aa43e21d8840fbbbad067ecd600526179f307b1e68786640bf7dadbb50837","first_seen":"2024-10-24T22:53:29.488366Z","last_seen":"2026-07-22T01:14:08.273345Z","times_seen":140,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/themes/botticelli/webfonts/nunitosans700.woff","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.964Z","timestamp":1783007003964,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/themes/botticelli/webfonts/nunitosans700.woff HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/wp-content/themes/botticelli/style.css?ver=7.0\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:26 GMT\r\nContent-Type: application/font-woff\r\nContent-Length: 25920\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nLast-Modified: Fri, 06 Mar 2026 17:21:57 GMT\r\nETag: \"6540-64c5e4a496c8f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25920,"size_decoded":26195,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 25920, version 1.0","md5":"74f1a82d70a1d5a7dcf08a6d3e674eeb","sha1":"3efbd61a2b6b96cb489cac508e832e3454e0c7b0","sha256":"801de1b07f647e33846d7c712811c8d0208acd850ff54cd2b724a71e295eb541","sha512":"4ac4fdc3f6f08d05b2b19cb16294f36ca9706348c1867f907b31c285b33f7c4952864beb079a96df600191172e7e63b93b374c7109181ef422dfe98621fec013","ssdeep":"768:DS1rXDFR4QpOeOKiNlq7Ru+W+21MkoFJuMEMbkH:o5lnh7Lx21KFJ/W","tlshash":"10c2f118656f1adf9f98057ca237b776242afa3ff8c42fb0d6e4dd902431488e309606","first_seen":"2024-10-24T22:53:29.49295Z","last_seen":"2026-07-22T01:14:08.264082Z","times_seen":140,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img4.sellvia.com/uploads/2025/08/07/a82f1a129bf6ff62c6a5f47e2a03fd84.webp-350x350.webp?10000","fqdn":"img4.sellvia.com","domain":"sellvia.com","tld":"com"},"ip":{"addr":"95.211.45.161","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:24.107Z","timestamp":1783007004107,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img4.sellvia.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 18:59:26 GMT","end":"Mon, 24 Aug 2026 18:59:25 GMT"},"fingerprint":{"sha1":"29:9D:D3:B0:65:76:DD:94:A9:DC:01:5E:6B:F8:76:66:21:97:15:E9","sha256":"41:26:0C:4B:D2:E2:D5:44:52:A1:F7:A7:94:C8:F4:4B:CE:62:7B:E5:8B:1F:F9:5A:7A:45:E9:CC:C2:BB:29:82"}}},"request":{"raw":"GET /uploads/2025/08/07/a82f1a129bf6ff62c6a5f47e2a03fd84.webp-350x350.webp?10000 HTTP/1.1\r\nHost: img4.sellvia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.14.2\r\ndate: Thu, 02 Jul 2026 15:43:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17356\r\nlast-modified: Thu, 07 Aug 2025 10:35:14 GMT\r\netag: \"68948162-43cc\"\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17356,"size_decoded":17574,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 350x350, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0235c02642fc675b105f237e81647960","sha1":"87190091dcbf2d4001ce0320ec4ff9785e1e1943","sha256":"1a05886ec8157ba5b9be5ffdf18698b80c2624ea25eeb1eb01f4efa344c7d6b8","sha512":"acc75be9b087df9d2483e2b7b9e12779911f59062d4e21b77cdb2da05b360f23b79af586dfae19d0e57519c16407953d31acbeb8174b8e39d4fd620806e471c8","ssdeep":"384:L4UCwagITsPl2Z6tKACQn6coqHZ+Swze5Ci8M7INLoiBNWwty:LLCwfusPl24tp6coqHkHzep8M05dNWP","tlshash":"d072cf215703d4929cd5a27b33263b1b63b66af0503a498ebc12f69f8ced3847102a5f","first_seen":"2025-11-08T01:12:41.555206Z","last_seen":"2026-07-02T15:43:57.842695Z","times_seen":3,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":136,"connect":21,"send":0,"wait":210,"receive":94,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"download-video-ak.vimeocdn.com/v3-1/playback/2987e23b-6ea7-4309-be9d-05ff5390887a/9f40316c?__token__=st=1783007008~exp=1783010608~acl=%2Fv3-1%2Fplayback%2F2987e23b-6ea7-4309-be9d-05ff5390887a%2F9f40316c%2A~hmac=066cb072479271adfeb57565cadcc09be12f629b5e62fb756f10bf84f45fd55a\u0026r=dXMtd2VzdDE%3D","fqdn":"download-video-ak.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"23.36.77.9","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:28.448Z","timestamp":1783007008448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vod-adaptive-ak.vimeocdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 08:56:24 GMT","end":"Sun, 16 Aug 2026 08:56:23 GMT"},"fingerprint":{"sha1":"35:CB:C7:0F:E9:2E:5A:54:10:46:55:6C:D3:2B:9D:50:E9:F6:D7:25","sha256":"B0:EE:70:F5:D5:EB:EE:CB:8A:4B:94:32:71:7B:D2:20:5B:9C:73:E1:45:35:F0:DF:76:20:FD:2A:A0:E0:A0:AC"}}},"request":{"raw":"GET /v3-1/playback/2987e23b-6ea7-4309-be9d-05ff5390887a/9f40316c?__token__=st=1783007008~exp=1783010608~acl=%2Fv3-1%2Fplayback%2F2987e23b-6ea7-4309-be9d-05ff5390887a%2F9f40316c%2A~hmac=066cb072479271adfeb57565cadcc09be12f629b5e62fb756f10bf84f45fd55a\u0026r=dXMtd2VzdDE%3D HTTP/1.1\r\nHost: download-video-ak.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nRange: bytes=0-\r\nReferer: https://celestia.best/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\naccept-ranges: bytes\r\ncontent-type: video/mp4\r\nx-request-id: sxDIOveD4agzl6vliEuHRGC8FZw8wOGq\r\ncache-control: max-age=30969998\r\ndate: Thu, 02 Jul 2026 15:43:28 GMT\r\ncontent-range: bytes 0-3170826/3170827\r\ncontent-length: 3170827\r\nakamai-request-bc: [a=23.36.77.5,b=998483748,c=g,n=NO__OSLO,o=20940]\r\nakamai-mon-iucid-del: 1687679\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC,Akamai-Grn\r\naccess-control-allow-headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\nakamai-grn: 0.054d2417.1783007008.3b83a724\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":null,"data":{"size":3170827,"size_decoded":3171622,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"482312da8629058ae9196e14b80f7d67","sha1":"201f8fdee20506ece0f5ce95383b212e917c724d","sha256":"3044ee40d49bd92be3b5b306331fa37c12194b89a9c26c146628a705bf922b82","sha512":"3337830850814c3d5ef8c14b979cb1da8775a9da7dac119e701f8e11e0292169c3f511d9560cb28b68f350435b48fdae5e8da6d13930e10637f75d3975cf997b","ssdeep":"24576:E55ZNIZZkeVEN6BudpgffODi6/ni5bPhpgvOA6hO:E55Z1eVRVf2DB/iZpgOc","tlshash":"5325231097f4bd87c063c6715eced35a6135ca9ac4e43b912e699b82acd14f613ebac0","first_seen":"2025-08-01T08:55:24.123799Z","last_seen":"2026-07-22T01:14:08.279647Z","times_seen":94,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/themes/botticelli/adstm/customization/style.css?ver=4.7","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.237Z","timestamp":1783007003237,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/themes/botticelli/adstm/customization/style.css?ver=4.7 HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:25 GMT\r\nContent-Type: text/css\r\nContent-Length: 0\r\nLast-Modified: Thu, 02 Jul 2026 15:43:24 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nETag: \"6a46871c-0\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":324,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T00:50:52.477296Z","times_seen":17489349,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":291,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img4.sellvia.com/uploads/2025/08/08/645ffedc68f094d9c7840243f20cc5e4.webp-350x350.webp?10000","fqdn":"img4.sellvia.com","domain":"sellvia.com","tld":"com"},"ip":{"addr":"95.211.45.161","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:24.109Z","timestamp":1783007004109,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img4.sellvia.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 18:59:26 GMT","end":"Mon, 24 Aug 2026 18:59:25 GMT"},"fingerprint":{"sha1":"29:9D:D3:B0:65:76:DD:94:A9:DC:01:5E:6B:F8:76:66:21:97:15:E9","sha256":"41:26:0C:4B:D2:E2:D5:44:52:A1:F7:A7:94:C8:F4:4B:CE:62:7B:E5:8B:1F:F9:5A:7A:45:E9:CC:C2:BB:29:82"}}},"request":{"raw":"GET /uploads/2025/08/08/645ffedc68f094d9c7840243f20cc5e4.webp-350x350.webp?10000 HTTP/1.1\r\nHost: img4.sellvia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.14.2\r\ndate: Thu, 02 Jul 2026 15:43:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12986\r\nlast-modified: Fri, 08 Aug 2025 05:42:15 GMT\r\netag: \"68958e37-32ba\"\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12986,"size_decoded":13204,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 350x350, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3e932d9d997f0dda9f43ea1dce7b7a91","sha1":"f8dcfa2508e3933d22badaf3d92a9d026977570d","sha256":"8398a50c6f6d5774879f0ec8d53f10cd62c62acc7cd6855f29022344df4aa109","sha512":"c8a83c9155aa3381dbda84bf81da4ed73c4bb39e8d7b3b9039becaf6b356cc51254f55251765b30c63d8eb995696304e33e14911f26d41e737eebc4c73fc39cf","ssdeep":"192:Qsj9wsvHf/J3OSTxPEk/c7o18MfDeC4N/WjDGgOlxI3npOl4BiQuHmn5koXS6XOi:Qsj9nJPo8i3kGN6i3GvjXJ","tlshash":"ca42d0b7cbbaa54ec70b25004d3d006c25bf54b80e99167d3b798636a56e50c793322c","first_seen":"2025-12-30T02:55:26.264083Z","last_seen":"2026-07-02T15:43:57.844867Z","times_seen":3,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":134,"connect":22,"send":0,"wait":211,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/themes/botticelli/assets/js/jquery.js?ver=7.0","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.244Z","timestamp":1783007003244,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/themes/botticelli/assets/js/jquery.js?ver=7.0 HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:25 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 06 Mar 2026 17:21:56 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nVary: Accept-Encoding\r\nETag: W/\"69ab0d34-15d9f\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89503,"size_decoded":31260,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-07-23T22:26:06.941355Z","times_seen":20824,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":340,"dns":0,"connect":0,"send":0,"wait":101,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/themes/botticelli/assets/js/allmin.js?ver=1.0.0","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.251Z","timestamp":1783007003251,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/themes/botticelli/assets/js/allmin.js?ver=1.0.0 HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:25 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 06 Mar 2026 17:21:56 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nVary: Accept-Encoding\r\nETag: W/\"69ab0d34-1673f\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91967,"size_decoded":21386,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1f7bf07e5321bcbdf812ef128d099ccb","sha1":"887716c4956d86a065b07c8417e9e9a4387a2fe0","sha256":"14bb1d1735244227d4197866331ae3118348b8a121addbc5aabccb22631ca3cd","sha512":"f347604832bab0850c84c69e37993bf06946b5cd082c2b750e618dc732d87deec75f820ec9b13440f775c3f91e9c625525a56d9b2143d088c86866c7ced1b069","ssdeep":"1536:Xw7u+WpfraAi0JiUZh48zgZaK2ly3teJFOSUiiR5IfqD9w/sKPUdd1JH+6d/+e0G:Xw7u+WpfmFwiUZkAy3teJFOSUiiR5If2","tlshash":"c29365783164a137057b12e7b1abb7ca76b131dee8020019587ccc8e1da8cd757a5efa","first_seen":"2026-02-01T17:29:28.544539Z","last_seen":"2026-07-02T15:43:57.847992Z","times_seen":19,"resource_available":true,"data":null}},"time_used":656,"timings":{"blocked":467,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/plugins/sellvia-platform/assets/front/js/smart_paypal.js?ver=1.1.16.38","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.254Z","timestamp":1783007003254,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/plugins/sellvia-platform/assets/front/js/smart_paypal.js?ver=1.1.16.38 HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:25 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 22 Jun 2026 12:05:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nVary: Accept-Encoding\r\nETag: W/\"6a392508-848\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2120,"size_decoded":1408,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2120), with no line terminators","md5":"080c513b40a209fb061f482ae0868edf","sha1":"1e666931ec393ccfdffe4841995d39cd460142f6","sha256":"f4cdc3e6e12c449c66ca45633a60cbcd637d4b7df5c080f81544b9211cf8a939","sha512":"c7ca7c7a98d03a7a82da954150ea13bef908e102c49b0460cf041f1c81b2d3be45204a21bec8a8adc4df75f9c67ba52c46add423de0c1c2a9c6cb312d93c8938","ssdeep":"","tlshash":"b241b544b106aed753f31878043faa0aa2323a615608e481b01fe6f09d78d9f7233f68","first_seen":"2023-03-14T08:32:14Z","last_seen":"2026-07-22T01:14:08.284797Z","times_seen":145,"resource_available":true,"data":null}},"time_used":576,"timings":{"blocked":484,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-admin/admin-ajax.php","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:24.020Z","timestamp":1783007004020,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 34\r\nOrigin: https://celestia.best\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/7.4.33\r\nAccess-Control-Allow-Origin: https://celestia.best\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex\r\nX-Content-Type-Options: nosniff\r\nExpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nCache-Control: no-cache, must-revalidate, max-age=0, no-store, private\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self';\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1318,"size_decoded":1025,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"60ff2f676215e05e129788421e9e7473","sha1":"e66f4277eb080d9c867bee236b3a38106317b824","sha256":"2f1dab20dfcd0021ea590ba46fb2b1176a554020788e069ed971acce46b84740","sha512":"bd7f5a7636513369b4a917d3089e936455789ec41051c3bec7c148b59ba2c7c02faf712aac096f49a533e43ff1aba03726b7676acc7441a2c596c0d61fc04569","ssdeep":"","tlshash":"2621b47a606c34371ec698e97f6a157f7d41f0484cbb9e5073dca689e381960cf07464","first_seen":"2025-08-14T16:12:48.77806Z","last_seen":"2026-07-02T15:43:57.852152Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"download-video-ak.vimeocdn.com/v3-1/playback/2987e23b-6ea7-4309-be9d-05ff5390887a/9f40316c?__token__=st=1783007005~exp=1783010605~acl=%2Fv3-1%2Fplayback%2F2987e23b-6ea7-4309-be9d-05ff5390887a%2F9f40316c%2A~hmac=01dd336e999e02f05900f8ba2b167eb64fa4cd79b0871aaac56966505cee1bd7\u0026r=dXMtd2VzdDE%3D","fqdn":"download-video-ak.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"23.36.77.9","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:25.757Z","timestamp":1783007005757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vod-adaptive-ak.vimeocdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 08:56:24 GMT","end":"Sun, 16 Aug 2026 08:56:23 GMT"},"fingerprint":{"sha1":"35:CB:C7:0F:E9:2E:5A:54:10:46:55:6C:D3:2B:9D:50:E9:F6:D7:25","sha256":"B0:EE:70:F5:D5:EB:EE:CB:8A:4B:94:32:71:7B:D2:20:5B:9C:73:E1:45:35:F0:DF:76:20:FD:2A:A0:E0:A0:AC"}}},"request":{"raw":"GET /v3-1/playback/2987e23b-6ea7-4309-be9d-05ff5390887a/9f40316c?__token__=st=1783007005~exp=1783010605~acl=%2Fv3-1%2Fplayback%2F2987e23b-6ea7-4309-be9d-05ff5390887a%2F9f40316c%2A~hmac=01dd336e999e02f05900f8ba2b167eb64fa4cd79b0871aaac56966505cee1bd7\u0026r=dXMtd2VzdDE%3D HTTP/1.1\r\nHost: download-video-ak.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nRange: bytes=0-\r\nReferer: https://celestia.best/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\naccept-ranges: bytes\r\ncontent-type: video/mp4\r\nx-request-id: sxDIOveD4agzl6vliEuHRGC8FZw8wOGq\r\ncache-control: max-age=30970001\r\ndate: Thu, 02 Jul 2026 15:43:25 GMT\r\ncontent-range: bytes 0-3170826/3170827\r\ncontent-length: 3170827\r\nakamai-request-bc: [a=23.36.77.5,b=998476293,c=g,n=NO__OSLO,o=20940]\r\nakamai-mon-iucid-del: 1687679\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC,Akamai-Grn\r\naccess-control-allow-headers: origin,range,hdntl,hdnts,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\nakamai-grn: 0.054d2417.1783007005.3b838a05\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":null,"data":{"size":3170827,"size_decoded":3171622,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"482312da8629058ae9196e14b80f7d67","sha1":"201f8fdee20506ece0f5ce95383b212e917c724d","sha256":"3044ee40d49bd92be3b5b306331fa37c12194b89a9c26c146628a705bf922b82","sha512":"3337830850814c3d5ef8c14b979cb1da8775a9da7dac119e701f8e11e0292169c3f511d9560cb28b68f350435b48fdae5e8da6d13930e10637f75d3975cf997b","ssdeep":"24576:E55ZNIZZkeVEN6BudpgffODi6/ni5bPhpgvOA6hO:E55Z1eVRVf2DB/iZpgOc","tlshash":"5325231097f4bd87c063c6715eced35a6135ca9ac4e43b912e699b82acd14f613ebac0","first_seen":"2025-08-01T08:55:24.123799Z","last_seen":"2026-07-22T01:14:08.279647Z","times_seen":94,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":2,"dns":9,"connect":1,"send":0,"wait":9,"receive":97,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestia.best/wp-content/plugins/sellvia-platform/assets/front/js/popover.js?ver=1.1.16.38","fqdn":"celestia.best","domain":"celestia.best","tld":"best"},"ip":{"addr":"23.105.172.12","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestia.best/","date":"2026-07-02T15:43:23.245Z","timestamp":1783007003245,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"celestia.best","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 00:42:58 GMT","end":"Sun, 20 Sep 2026 00:42:57 GMT"},"fingerprint":{"sha1":"16:9B:6D:A1:6D:2C:2D:2C:AB:AD:D5:AE:8B:5D:CD:3A:7D:36:90:42","sha256":"D3:88:94:8A:32:FE:2B:30:0E:18:5E:9D:D8:DC:FB:62:62:5A:50:0E:9B:75:F1:AC:82:38:96:25:93:4B:13:4F"}}},"request":{"raw":"GET /wp-content/plugins/sellvia-platform/assets/front/js/popover.js?ver=1.1.16.38 HTTP/1.1\r\nHost: celestia.best\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://celestia.best/\r\nCookie: slv_session_1a610dd96cdc43b1e11ae149482dc97e=d1b33d673141ffab1c0dc68b748e07ca%7C%7C1783179804%7C%7C1783176204%7C%7Cddde999c47098027d5be6437a3194eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 02 Jul 2026 15:43:25 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 22 Jun 2026 12:05:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nVary: Accept-Encoding\r\nETag: W/\"6a392508-2adf\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10975,"size_decoded":3883,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10866), with CRLF line terminators","md5":"97f6873d0fec07a27efd7c791389062f","sha1":"547eedc0e60a3349471d51de146246c2ec8454fc","sha256":"4ee3bca9479d6b67204fa5489bfb6d8850dcb1f66b9590967f7cb04b3aaebdff","sha512":"0ccc16d9cf0ec8eca3dac4351d3b2217e8b79deef3f797d82ed1068664cd9ae9bf5e6e0952d27a19572870cad311ae2d59fcc440b0049a8edeb153c619dcfca9","ssdeep":"192:VGPqBkJIQNlh3DRHVRoLIuGXB/gZYHk9e3A4:VN8NfzRHVRMIuGlgDMA4","tlshash":"af327409b6a1367183ab91e1511b150d7332963df542517c3968c6f26cf2c4ae337fba","first_seen":"2023-03-07T12:10:07Z","last_seen":"2026-07-22T01:14:08.263524Z","times_seen":275,"resource_available":true,"data":null}},"time_used":462,"timings":{"blocked":369,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"celestia.best","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}