{"report_id":"d4eff2dc-46e0-4174-aa72-ccffd11b57bd","version":6,"status":"done","tags":[],"date":"2026-02-27T05:36:32Z","url":{"schema":"http","addr":"celestialdrifts.com","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"celestialdrifts.com/","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"title":"CelestialDrifts","dom":{"size":43072,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27697)","md5":"061c8c5390079c3e684d76dcf6593db9","sha1":"172e798b1073a76b2db9df18972bbe8617596df0","sha256":"752c59285010841a67bcc2371e94b9d2942c2b5a04b520784cfec36b1d877b03","sha512":"1f1c7419069255b6bdd8c9d4c83aaf3ea1e9461f57c1b7f686b7c765c93f1198505ac06ef3c8eaa60ee70a5d916191bd362a764a32967ac7a764527f079d7467","ssdeep":"768:4j08FYTbfsTO+LDGBPKHs9TvfqaSQXOQqGMWYWf:4j08FYTbfsTO+LDCPKHshqa/XOl6rf","tlshash":"a91396176780462c9c5392a8f399a54ea32df684ef6359eef7c62410c2d93ff088b456","dom_hash":"domhash5a2e7b986a359100c1311ce7180015d1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"celestialdrifts.com","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-03T05:36:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-02-26T02:34:39.487604Z","alert_count":0,"request_count":3,"received_data":323928,"sent_data":1381,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-02-26T03:48:10.0381Z","alert_count":0,"request_count":1,"received_data":7668,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"celestialdrifts.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-31","domain_rank":0,"first_seen":"2026-02-26T22:06:21.981468Z","last_seen":"2026-02-26T22:06:21.981468Z","alert_count":22,"request_count":22,"received_data":1008438,"sent_data":10146,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":1,"received_data":2527,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"52.57.152.176","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-02-25T21:56:58.023327Z","alert_count":0,"request_count":1,"received_data":1550,"sent_data":531,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-02-25T21:56:58.031302Z","alert_count":0,"request_count":1,"received_data":18556,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"18.153.252.53","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-02-26T02:34:39.210115Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":608,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":1,"received_data":29323,"sent_data":536,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/slick/slick-animation.min.js","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"993930401917e0f967afef1fe6138f7f","sha1":"535f6e1f2c002576d1107b567489188870dbdcd3","sha256":"1138fb0dac3902beb24680d9e7a7083a58a6683bd5c4b98577a5e1dbc023d963","sha512":"b28c217fb1ee2e244d7f4d644f5c1f82d04c37980f4c56fb37920d40d8e08caebaa501205fda18b37b484c04d459a77294749d2a8e2a4b01dd526f6f6e57e586","ssdeep":"","tlshash":"d631998c7c4314a2a39706f7001f2058467369e8e9344b5aac6ed8bd06ad42c7b5bf7a","size":1774,"data":"","first_seen":"2023-03-07T14:51:09Z","last_seen":"2026-07-26T14:31:05.951003Z","times_seen":906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"696d9aa99779af036a47ff3e1d53c88e","sha1":"ca058b536e47570338ae918ec8fd2c5a796a0222","sha256":"a0ac2cc71373a92d24e05d85ab65e697b5c9bb93813097ccac8726321a793a20","sha512":"afbe996615dd2f0f76727f132f6941e1e59731f8589e5cfeab1f4b0ec64df91adf7ebc4ce2427f984ff3da350bc555cb6fc4eb2aa772b6a4b7ba3fd6532d0364","ssdeep":"","tlshash":"fde0ab3d3c38808557a240b480b6f2283a1a30208041d957d89ac97a5cb0fddbd02595","size":418,"data":"","first_seen":"2026-02-26T22:06:25.92897Z","last_seen":"2026-02-27T05:36:34.243383Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/colorbox/jquery.colorbox.js","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae2edff1a3fb70bb226e7be41837a16a","sha1":"487fe167d9630ef73db842affd20ba09f07aaca9","sha256":"acc38263f94b51331c279fb6e839e1f4fca5a4bdf6f81c5a3cda2af7ccdef03a","sha512":"03099f35d9bdf68160ade0f54373b80960551fd598319efdf22ab9899cec6e3e1d9ed81035cda556ea6370e64bd2e71ea306d2dce832998767293a251e0d187b","ssdeep":"384:t3gsDG1DrzIZNBHCDfwzk84RM4mNjzRT89995Ly9qwc:tbDG1/eizONT8949+","tlshash":"90d2a6b4e77e261e803a107dd84d43cd123f81721526b9bbfca4466c98e05ae4369fed","size":29168,"data":"","first_seen":"2024-12-21T23:47:55.618056Z","last_seen":"2026-06-12T23:50:31.070251Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/slick/slick.min.js","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-07-27T00:23:34.998677Z","times_seen":108918,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/bootstrap/bootstrap.min.js","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fee38966575436b9167e65183cb4768","sha1":"d45e611de242b77ecdd47b93fcefc9778b12b5ad","sha256":"64f04853c9056be2380aeecfa89e0b8fdf7b170d54e6371583188e25b4c740c4","sha512":"3874c0d4890252eea240fa65938c23d29dd94747622379d58f321a210e144b2fb9321455e5094a55dc6fdea421dc019789feac53feab250fa398f46c1deb821f","ssdeep":"768:doD1OQYUhHVvO1Nnng76Tq8mrIIeoBAiAHFcQqK8jXLb6mH/3fn57hC9:dQ1r7CDVBUXv/VhC9","tlshash":"7e53750672a4f472059fa176803b0a0bb7362c9de506b16cbad998dd1f7cd443267f3a","size":63200,"data":"","first_seen":"2024-11-30T23:57:57.202287Z","last_seen":"2026-05-19T07:02:26.984532Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","size":18052,"data":"","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-08T20:09:52.517882Z","times_seen":4265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/js/script.js","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad2859afe887916dbc67bc0957843fed","sha1":"45ca8a676bb827298c97f83bd99f9b910885ea2f","sha256":"61c61ee693c9b99d33d1d4873e7be4a241ca9fd3810b2c6b1eb62437c4e3715c","sha512":"738808a7e344c4a802faa770ec7a82bd9f7aebbc8762cbb4ce90a91714add8c9f3b5bbef266ec02c33d1a1b1f9905cdc78c3e9a6e662e63561351fc745b09b27","ssdeep":"96:39LYLXNM0aAg5u5wfaUw8LQFp8Apk++ezFp8ApbTQezFp8Ap1Wq9+0x3MSDLA5aS:3KL9TE12v2KvNvXRuvssz","tlshash":"efe1eb85ff2c3167457ee26c8a5ed6cbe21d50329a828476fcf768a809e003d175ea1d","size":6943,"data":"","first_seen":"2024-01-28T14:25:46Z","last_seen":"2026-05-09T14:16:06.042212Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"da4f0e0be6c92e336d4649cc4c2a6aa8","sha1":"6f1dba6299e256f825d6a6960c25348dad0f7023","sha256":"adc66deb2279a2f77fcf369f46737eafd7744669e3c4eea9354c87c6d82b85ee","sha512":"239d038d3864064eefbb9f3779ce357e3f200ccea7bea5c11b9d744933b31fe79cd1836fc4951e3691028f5ffac170b351413a422f81c15744ced032624dc00c","ssdeep":"","tlshash":"0121e15d78f21cdeb173b02a93ea53242d24a42b04128dc07e4c65d8bf1a974b04af9c","size":1114,"data":"","first_seen":"2026-02-26T21:54:57.19232Z","last_seen":"2026-02-27T05:36:34.243999Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/jQuery/jquery.min.js","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12b69d0ae6c6f0c42942ae6da2896e84","sha1":"d2cc8d43ce1c854b1172e42b1209502ad563db83","sha256":"6150a35c0f486c46cadf0e230e2aa159c7c23ecfbb5611b64ee3f25fcbff341f","sha512":"a55f55d56899ab440ef0cae17b28d5cc8f5b9766d1e9bc1a8ac6b89376924b476c1ab0c325497eb5d44af41f4ebf8eea236d87a36902244b8a3eca54994b8711","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:AYh8eip3huuf6IidlrvakdtQ47GKl","tlshash":"e893f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89475,"data":"","first_seen":"2023-03-07T01:02:27Z","last_seen":"2026-07-26T23:31:03.866779Z","times_seen":17358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"21890e3ea4150ef3525b68ef5f72afce","sha1":"6df23d0429ef9b9a23538b9176430ecffe04594a","sha256":"f0193457ba29f8addbfc54d4a9d326d87f1e44e0485bba0cf0e8b317d41f8985","sha512":"689d3598489f0f874bb6af31668a49427c0dbf177be9ed4e1366fa5795fce73b318fcdf9d73c5f364dfed427fb006db4e5fd4ae0a85a57752ba4593ac761d8ad","ssdeep":"","tlshash":"19a0021501512554631720901125c3992679a067ac49923a765e57404740415c528401","size":76,"data":"","first_seen":"2023-03-11T12:15:57Z","last_seen":"2026-06-07T05:55:19.874949Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/shuffle/shuffle.min.js","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"690ccc1456d3bf15a11343fc70f50a11","sha1":"920dac42d91312b597d400da201b3c6ec4b1b63c","sha256":"765fda7d44a93935d23398c58f6c0353bf0d9b724d5e8f5363e121df8f4e618d","sha512":"e629114064783fd276a98fe64db0dbe0183d1fc056b5ae038d183ec0ae4c9fdf49e845070ec7bec1671159a950f770d7af7a134ceab4fabc89d208a78d43650d","ssdeep":"192:+SkwJPjfh5hVN6Q1bUOlkfFG2gQq/YEiU+lnAoeN33QSRmlOQ46ZlZy9Ws3kjX1E:+nwVoEbnlMvTWolnM4lwP","tlshash":"fa92a6997242753189c7b17554bf020eb17aa9243ac6c08cf436d9e66d78c8db4b3f78","size":19866,"data":"","first_seen":"2023-03-07T22:07:31Z","last_seen":"2026-07-20T17:25:27.627486Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-AIm7gawg.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"58de573622a38f62db9d2a272e43fbcf","sha1":"49e950e0379784f144c07d6114384baff4b74e8a","sha256":"b42ec41323945db7018887a79887e94e5e324b56642a07aa33f19e0c486dde96","sha512":"d9482f7493b2ec8fe9ecf11b4c6888fe6ea1acf1508f86126744b931534ffa1d1bb089cdf8f6679bb4085bc920fddd7b0dd4c617574e1bfcc5e939eba47d9eb3","ssdeep":"6144:VRJU8SN+KtxKR/ZgQuTlBraPPMHPVsddG:VLU8SNjTlBraMvVg4","tlshash":"5e544ad47295b43443a700e5507f2006b33e5c29a809c068f6adddf67db9989a2b7fbc","size":283085,"data":"","first_seen":"2026-02-17T09:27:34.892087Z","last_seen":"2026-03-02T07:55:13.406489Z","times_seen":786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"c92a10324374fac681719d63979d00fe","sha1":"aee655773d856fb038536adcfd6472fc7543463e","sha256":"158a323a7ba44870f23d96f1516dd70aa48e9a72db4ebb026b0a89e212a208ab","sha512":"d27859c90f5748d3ec0ef6d4ef49c1755d6ce1ac8035cd4f7dba41b8dd7d440ad8fca164ccc948b5630ef90346ff9279e35d31887e724ab6e0284300a80eb61f","ssdeep":"","tlshash":"8430000000000000000c0000000000000000000003000000c000003000000000000c00","size":4,"data":"","first_seen":"2024-08-20T00:14:53.541497Z","last_seen":"2026-07-23T01:39:44.874962Z","times_seen":27518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:07.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://celestialdrifts.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28488\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 17:21:40 GMT\r\nexpires: Wed, 24 Feb 2027 17:21:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:46:11 GMT\r\ncontent-type: font/woff2\r\nage: 216867\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28488,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28488, version 1.0","md5":"22c3b00d2e65fb2c876a292423108958","sha1":"3c61d84659817fef687045bbfa0e1da9568e164b","sha256":"bd73278ee0c50041b91b4c03d1229e35b501637f46b6409e7da2d3a758446ea5","sha512":"33954d8a7ed3c87b3af8577bbae9439b9efba2a64445463d893681dad085bb8630d31c995ce010510a9c732926017dba9d5fd5002d0000ec1488b61889d6ddfe","ssdeep":"384:jlzdJfoB5YJ2kG1CdQegm8m00xr19KB668/BOTqE85gyqvPA34uEomcGvpMwvg84:jlzdyBzhIb0u1QB6vBOv8uvPAovJCs4","tlshash":"cfd2e0195e9673efe4552d3ea830affe91e32aad30507162c5db6c1155c438bc8e4ec4","first_seen":"2025-09-11T19:05:43.498829Z","last_seen":"2026-07-26T23:17:29.240495Z","times_seen":33362,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":103,"dns":1,"connect":8,"send":0,"wait":9,"receive":8,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CNhvSpp0.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:07.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/style-CNhvSpp0.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://celestialdrifts.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:07 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6994310c-919a\"\r\nexpires: Wed, 17 Feb 2027 09:18:37 GMT\r\nlast-modified: Tue, 17 Feb 2026 09:12:44 GMT\r\nx-77-nzt: EwwBuUwJGwH3zvoMAAwBuUwKEwH3DAAAAAwBWd59LgG3AAAAAA\r\nx-77-nzt-ray: fdb54123e58bfadb472da1694e45ea27\r\nx-77-cache: HIT\r\nx-77-age: 850638\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":37274,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37273)","md5":"0bf3fa4ae16e33ecf6bae9c7a91c24ef","sha1":"d4c8266daeb1f4b825d4db90f13765f82224b9bd","sha256":"05085b4c6bb66159589e884f0cfe7dc68c3e5953fd10d34941036a47809faeb0","sha512":"9b3769c86553af1f03838f99420120ae72f4284719508d29e96a425f968a885f8fc17f322861e575d209b55245481ad74b230576d7746d1f8ba3a3b950000c5c","ssdeep":"768:E8Ch4TcCWYtomXFDxrnSJPHs24vq+ggFgZ:E804TcCWYtdXjuPF4t2Z","tlshash":"d7f2975daad5093cec33c166e3f8e58c9229f5d1df321a9af6433a048ac27bf1987514","first_seen":"2026-02-17T09:27:34.886834Z","last_seen":"2026-03-10T05:00:21.922479Z","times_seen":1217,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:07.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 06:53:02 GMT","end":"Tue, 14 Apr 2026 06:53:01 GMT"},"fingerprint":{"sha1":"7E:EF:00:8F:D6:2A:E3:14:6D:3F:6B:EC:B9:8F:1A:76:B8:61:A9:77","sha256":"B6:34:A4:A4:5B:9F:9C:14:2D:21:86:24:65:1A:DD:99:08:D7:4A:A5:CE:0D:88:31:29:C9:6F:A5:41:A5:2A:65"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://celestialdrifts.com/\r\nOrigin: https://celestialdrifts.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 328a2bb6fa0144f5d85400b5b12df9bcac88a3e9\r\nx-77-nzt: EwwBuUwJGwH3eQAAAAwBuUwKEwH3AQAAAAwBw7WvFwG2WQIAAA\r\nx-77-nzt-ray: fdb54123d669e2e0472da169b1367030\r\nx-77-cache: HIT\r\nx-77-age: 121\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7171,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e73fb26e61b7779ac37a909aa465da53","sha1":"f1aa800d8470d6f52b8f1a919951d96b8c2bac85","sha256":"99edc223afd1cef944e2059f41beadcacc433ce17f52855cdf7803d197268431","sha512":"0df22279f76ba298db9c864b8853738968705515f880586293dd22fd7b4caf87cab05e9aee3dd37c350a490ba4ba1f51011b28dbdf7afc065840020a3641a624","ssdeep":"192:P4lkA+UC1IY8pZbXF/UQq29yg4zPYfXhIIdeD/F:Al3GKYKZrJA2Yg48fXPdeD/F","tlshash":"c7e1b74f9a144eb987c6438276cfb84675bc807352509d3afd8cc8b842697cda3e3b94","first_seen":"2026-01-13T09:38:59.141589Z","last_seen":"2026-03-04T07:11:45.044045Z","times_seen":1814,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":45,"dns":21,"connect":7,"send":0,"wait":7,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-27T05:36:06.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:06 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 03 Feb 2026 11:07:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WqH5tEsDAsLfygx125XUsdz7lZzxj0EggYnFKFCEKRLrGQixyuTerjQYhTbyCncR374Ja8cKKf7%2FALYAqygbfIidWVH3afzSz6rJ5TBMc5xYN%2FQ%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d455296fe99120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61483,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (527)","md5":"ba4a92351c63491bda1f700ed432b9b0","sha1":"f426d4167f199396c13412b5cd10aba69f4e2f57","sha256":"890ea948a768ace365cce8d93129a08b2b49eb0b63b0dc750fd7b833ae7bb240","sha512":"637a7dd8dd370e63b6ec4072d74c31aed5bc9f1069bc4ab19eab371076d821441d88bd4fcf20d13a240fd21de5eb7a08523a1c0872a882ff6c05c6837f2afc69","ssdeep":"1536:XeUC3uoO+koHgAqEN5QvwE/phskpxteYL59ML509:KpgAqEN5QvwE/DfxteY19MG","tlshash":"5b53642168f4987700e785c855726e2aaef9c307d95a1584bbac8be10ff3e5dce33509","first_seen":"2026-02-26T22:06:25.913706Z","last_seen":"2026-02-27T05:36:34.228642Z","times_seen":2,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":43,"dns":19,"connect":1,"send":0,"wait":252,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/colorbox/jquery.colorbox.js","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:06.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /plugins/colorbox/jquery.colorbox.js HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:06 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 8400\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:06 GMT\r\netag: \"71f0-65315332-1aef6a;br\"\r\nlast-modified: Thu, 19 Oct 2023 16:02:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NBhGp6iymcbo1zDnuFJ8%2BNrhDM%2FdQ0HhAedS8hbkR5g7h0A6bI3pgRH4uQG3dUpsZRAHvxHAvxU7%2FwmpC7WmOl5i32ph4LE7BYm4hOogOjcq%2F88%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d455299a91c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":29168,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"ae2edff1a3fb70bb226e7be41837a16a","sha1":"487fe167d9630ef73db842affd20ba09f07aaca9","sha256":"acc38263f94b51331c279fb6e839e1f4fca5a4bdf6f81c5a3cda2af7ccdef03a","sha512":"03099f35d9bdf68160ade0f54373b80960551fd598319efdf22ab9899cec6e3e1d9ed81035cda556ea6370e64bd2e71ea306d2dce832998767293a251e0d187b","ssdeep":"384:t3gsDG1DrzIZNBHCDfwzk84RM4mNjzRT89995Ly9qwc:tbDG1/eizONT8949+","tlshash":"90d2a6b4e77e261e803a107dd84d43cd123f81721526b9bbfca4466c98e05ae4369fed","first_seen":"2024-12-21T23:47:55.618056Z","last_seen":"2026-06-12T23:50:31.070251Z","times_seen":38,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/bootstrap/bootstrap.min.css","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:06.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /plugins/bootstrap/bootstrap.min.css HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:06 GMT\r\ncontent-type: text/css\r\ncontent-length: 20924\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:06 GMT\r\netag: \"2725a-65315328-1aef4a;br\"\r\nlast-modified: Thu, 19 Oct 2023 16:02:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PaW%2FQyH8xanTqlmab3Yi%2F7dqoN04pmZSMEnKBA7nTo84NQkpJVBKrJJcikpWB36Z%2FtR0GrKhJ5A%2FEaN46cOOpQUpvDFi2tjUFCtYpVHcldOjlh4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d45529998df3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":160346,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65326)","md5":"3cb11e99fab7e7ffaa1bc14b64192977","sha1":"7537224938a615d34932f0ec6b4daa48732d5a14","sha256":"7bf1ed945f788d355c903ef8d5b8b20aea2d81c40000f61931025b2735b0b560","sha512":"695aa5a707ba1c03f0adf8da5ed9177165958457e7ca9d8064c55343423661a225a8d0572b334a06e0ec2fe83455ab80846ae42b986bf1aed4c440839e89e3ba","ssdeep":"1536:kw7CIJ0T+r+ryEIA1pDEBi8yNcuSEIA1/uypq3SYiLENM6HN26C:H7VKGGq3SYiLENM6HN26C","tlshash":"d6f353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-08T01:54:40Z","last_seen":"2026-07-21T03:00:18.678088Z","times_seen":336,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/jQuery/jquery.min.js","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:06.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /plugins/jQuery/jquery.min.js HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:06 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 30120\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:06 GMT\r\netag: \"15d83-65315330-1aef70;br\"\r\nlast-modified: Thu, 19 Oct 2023 16:02:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SQ6SMp1OVrZQNH0GA2e2h6YwnpU0c1IHUBykM37NQmTG8dJ71mzBCr3nxzywKOzFqXs0wrLmy2JUGfmbOeltVJ5XSChaEgtOoTAZpY0JeByV%2FRE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d455299a9073181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89475,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"12b69d0ae6c6f0c42942ae6da2896e84","sha1":"d2cc8d43ce1c854b1172e42b1209502ad563db83","sha256":"6150a35c0f486c46cadf0e230e2aa159c7c23ecfbb5611b64ee3f25fcbff341f","sha512":"a55f55d56899ab440ef0cae17b28d5cc8f5b9766d1e9bc1a8ac6b89376924b476c1ab0c325497eb5d44af41f4ebf8eea236d87a36902244b8a3eca54994b8711","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:AYh8eip3huuf6IidlrvakdtQ47GKl","tlshash":"e893f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:27Z","last_seen":"2026-07-26T23:31:03.866779Z","times_seen":17358,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/images/slider-main/inr_2.jpg","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:07.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /images/slider-main/inr_2.jpg HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 72937\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:07 GMT\r\netag: \"11ce9-64aee7ac-1aee65;;;\"\r\nlast-modified: Wed, 12 Jul 2023 17:49:32 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r57vyqUomqhHq6Idafudix%2FPfnO%2F6g3D6wC3gpWRGe3gw9lTI8o640%2BRLGiQDqj4VEo7ngVtt28AjoRNhIyBNsIt3DJqGOeRk2vXfdp9%2B3DBEhg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d45529cca6f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":72937,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Freepik Company S.L. - www.freepik.com], baseline, precision 8, 1920x700, components 3","md5":"41ff0ad9d9fd041a32718bba00b26f5f","sha1":"0f29d7d06f272ba99454ceeb67c9392bccd2add0","sha256":"80ad90ca49efbe533a91286c0c72246dac6129406b2748c7f51a335dd5f9a741","sha512":"0e5c69a7d8d2df43b32c84ce6b3d20ffcddda28540c1d84c755a4c40c45122bc13e301953d468f13ab398a55ea28f512bdfc47a3363ac4fb75634fe669d31a3e","ssdeep":"1536:eZPDog+pVTadJAqcPNgE1zFpVjp0i2P0H5CQWuGp/vYA6aqj2:eDoRVTsAbaE1zP0i2s9GpnYVxy","tlshash":"eb63f191bf035756c27c23b02ff394296f1b09b4e1126b22eba9083b72d0659addd7d4","first_seen":"2026-02-26T21:54:57.142554Z","last_seen":"2026-02-27T05:36:34.230934Z","times_seen":5,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":331,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:07.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /plugins/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/plugins/fontawesome/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:07 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 80328\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:07 GMT\r\netag: \"139c8-65315344-1aef87;;;\"\r\nlast-modified: Thu, 19 Oct 2023 16:03:16 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3a%2FVfhgPQ4aPwHTJc7RYbsnmZlWCqlUyXmsQe12r12wqiQCIwReayGneMHH9U6p0j74fDxMuwBp5%2BOFTJRBSrxuW9TyHpUPiehm2Ai%2Fw7lzf1uI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d45529cca833181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":80328,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 80328, version 331.589","md5":"412a43d6840addd683665ec12c30f810","sha1":"f3be6605dbff23cf22ec3abddd1141a81a99e3aa","sha256":"0bf1b8d8ac1b4ef0caea0db8cbe1b6a35f8a84a2f5fffa2421936cc11a1a91fc","sha512":"aadf26f3d595c0b3c9cc1f2a762559b37ba9fa0be055e8128dfa98005510ea7e2ae412abe9af7d593034d1b9126be542d7bad8d986b0128f2c2dffc6b71ec66f","ssdeep":"1536:Yfry2m5ogN0SJFfJpaz+AbNW6iGKY+aNHUO4dhdx4LxfGhRf:YfIoguYjpa3b2GKYN0N0f+f","tlshash":"cd7302dcbb83b68bb583370f2e9c59615695080de0aa11e252e5eccc0add36ed175cce","first_seen":"2023-04-15T16:03:12Z","last_seen":"2026-07-26T18:41:22.126355Z","times_seen":1972,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":298,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/animate-css/animate.css","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:06.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /plugins/animate-css/animate.css HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:06 GMT\r\ncontent-type: text/css\r\ncontent-length: 4042\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:06 GMT\r\netag: \"df06-65315336-1aefa9;br\"\r\nlast-modified: Thu, 19 Oct 2023 16:03:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aTDYzxhy0zLO%2BrnaJME8O2Mhiv8SG8mWnP8ITuJZI3M2crnnBMvVrL8hCWYwfHBy%2FqlmhMsrr5XoI8LV1or8%2Fw7nZr6vRSJDvavScNteGHjO%2FrQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d455299a8ec3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57094,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"6ff853ff7ca6e0567f7210bd33dbdf0f","sha1":"32fd89580135750ac63927ac1862be4feac74518","sha256":"ff03c8444c1f5d2ae424faa8221bc63cd142505983179f111aab8c1fa782639b","sha512":"648c422c0caf00d255f62b2ab3a661295b741a4c67d1f40da9c76610b8fcf6dc8bf8dcda75cc01df21f9de7725c631c4a8cf676078636c6d709fc3b0d0293669","ssdeep":"192:LIQHnIwf2T/awfDZUiduG+MONjnbimZbHMxymDSVbyPiVEzfukrWL7XU+qLmfRvg:LIW6y+","tlshash":"6143d96929a1104466370a15c7df9e78663ce2a31866ecffb3d2548b8f41fac23cd617","first_seen":"2023-04-09T10:42:46Z","last_seen":"2026-07-25T08:48:33.667247Z","times_seen":1042,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Oswald:wght@200..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:06.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Oswald:wght@200..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 27 Feb 2026 05:36:07 GMT\r\ndate: Fri, 27 Feb 2026 05:36:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1841,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"39f7235215ac3d458c5649ed5569e864","sha1":"a1ed2713e0711cf13f8e9d7f5a913e986ca76e9e","sha256":"9be804cf0e072e021332f7fe5f416b1567eb7f2df71853a49e270d2349a64f50","sha512":"82590b302a4036f2539396cccce8d880421c18ca7a4e9a37313e5d756413cb958738d56719856811301c0e1a683ece5ef5bd1c181f6a351cdc0e38a849c8d4d6","ssdeep":"","tlshash":"2a31ae92042b9480ef475cc133cf7e36ad4e61463461c9796ffd18a8dceae225359b4d","first_seen":"2025-09-13T08:07:44.212203Z","last_seen":"2026-07-26T12:00:18.370784Z","times_seen":1257,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":114,"dns":1,"connect":20,"send":0,"wait":31,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/086250c9d0fdd6fa904e87a3976db0cdfdc1dc91.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"52.57.152.176","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:07.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/086250c9d0fdd6fa904e87a3976db0cdfdc1dc91.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://celestialdrifts.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 8f78827c99f8a70d2cd46ee881b468733ffd9813\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4a8-JPigCUiyozYD05T87a7olvnqm5w\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1192,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"72b228e2323ca96e71f8e7a49172cd71","sha1":"24f8a00948b2a33603d394fcedaee896f9ea9b9c","sha256":"c0a32a99911cd974c7b3bf7d7f44df96cc9e7a008395421bc9a7b7144397d27a","sha512":"4754ccd45b1bdf5d7a6fa65ca6f6e33bcc54d87d5509307b909386cf4c466691db4f7399c8dd9047c2405944f8f976a2df2acc6386db6e46cce3239c0dc31de2","ssdeep":"","tlshash":"4a21466d8a6822fd9245c6d6c5047f075fbcdcb37104397dfa0d1a4d60eb2e6213646b","first_seen":"2025-08-05T21:46:53.700457Z","last_seen":"2026-02-27T05:36:34.233291Z","times_seen":12,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":130,"dns":21,"connect":21,"send":0,"wait":23,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/slick/ajax-loader.gif","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:07.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /plugins/slick/ajax-loader.gif HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/plugins/slick/slick-theme.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:07 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4178\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:07 GMT\r\netag: \"1052-6531532a-1aef52;;;\"\r\nlast-modified: Thu, 19 Oct 2023 16:02:50 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Ze34AVaoZWBjWqAlIe1hI79UIELmNw1I44U%2FeNH5En5%2BInrt6zxqISb0gl8FT3BaAey8g5WyZM4UCIioSB2%2BhY7356VKvwL1edf5ThKS3HuVnU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d45529dedc93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4178,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"c5cd7f5300576ab4c88202b42f6ded62","sha1":"7a1aa43614396382bb15e5fde574d9cdcd21698f","sha256":"e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b","sha512":"f0d7ada22a3eb3b2758198a71472fb240c74ce4ca09028076e23690c70b2339c6b2a40f9158dd71c52d953ef27bbcc0105b061bdc74fbb0ad0b304c7c6a04a38","ssdeep":"48:32e4MxZKDtivGOFkoajWKOwD2s4UYX034Hk4zHdwt4zeoAF5oM4JTp3uVj4gBFyj:32e4ZtyiqsdWAXWwXPF5oMcdUjVsmuS","tlshash":"e2810b9ce8a0f631c59936b78dd92d1a9adc5796ac3ccf5215986808f91f223028735d","first_seen":"2023-04-05T22:52:05Z","last_seen":"2026-07-27T00:31:47.299467Z","times_seen":45218,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/images/favicon.png","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:07.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 36278\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:08 GMT\r\netag: \"8db6-6904e176-1aee69;;;\"\r\nlast-modified: Fri, 31 Oct 2025 16:19:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XxA%2FTULdxdK%2FyPbPYOJ81rETyHxs0nLEUfjmIrGOcryIthEN%2BD%2F3o9inReKSC6afzOl4yIOPdDPF4%2Bm2eFYbCSIDQ%2BYkmoT%2FbcUlUw4IQHS19Xk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4552a1aae93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36278,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 425, 8-bit/color RGBA, non-interlaced","md5":"6b3cdbcb154cbb0722f8e0464f469f49","sha1":"32d862020949bf168c81c8c6f6030c9a6e6cd1ae","sha256":"f0f40322db1e14b353a9b69b0ca037a192386bc268bf1745e0a64cbea190e062","sha512":"1c51ca56918e053a366db3a30d3937b99947c4f21cb44268adbbfc0ef3002a3e801175ef2e46f566f4d16d54f05d9fe7ab2afec53207c6f2ec0ea881f2301fb1","ssdeep":"768:vjnKCiHet9S/zSlYu0OLqJld5voG69z98yEdcEniuK:v+CtnS/2nyPoG69z98KEM","tlshash":"10f28c77cbc2bd9b5d8c8332b64325c5906b1637773d4e8b0bd0a93549ab090ebb1d26","first_seen":"2026-02-26T22:06:25.909733Z","last_seen":"2026-02-27T05:36:34.234297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":450,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/css/style.css","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:06.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:06 GMT\r\ncontent-type: text/css\r\ncontent-length: 10117\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:06 GMT\r\netag: \"db94-69041814-1aefae;br\"\r\nlast-modified: Fri, 31 Oct 2025 01:59:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bt%2Bcr%2FNk%2FoRWhfyjaNF8ScFTmqhB9d%2FGasY5qS0FCxLwB2UTNWCgvDjQzxo8XT8%2BwXxJTEsr3DqlRf9ByfFJ4n5h4pDPjoiOe5Jdlwa49TpjGew%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d455299a9033181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56212,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a267773f80217c6c4bce2ee0f46241a4","sha1":"c6d4c62b81f99d8980cd64887784fac83ad37581","sha256":"e149fb1fb0986782c21cc088eca1b8a13cc259ca51fbe2b34901a07d34619d7e","sha512":"6b2f613777dc7e918fa8b2bf00329cd65b51b3a6bce11fe388a19c05404c932ae5b27cced0c5dd0b4ed7768428dce1046b3fef56cf0ea30433c230d8cf454dde","ssdeep":"1536:onSlwxW5FrNIqO4MDUMWY273lamRRkJlYqjr8U0rvFsxSHohz1:onSlwxQ5aqOgY271amRaMq3PTKohz1","tlshash":"864332d7a7f55500704b91a9b892af92735d5442e60fcdb8abf0211ceec43d89933b8e","first_seen":"2026-02-26T22:06:25.914671Z","last_seen":"2026-02-27T05:36:34.234858Z","times_seen":2,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/slick/slick.min.js","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:06.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /plugins/slick/slick.min.js HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:06 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 10006\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:06 GMT\r\netag: \"a76f-6531532e-1aef62;br\"\r\nlast-modified: Thu, 19 Oct 2023 16:02:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iBMhDsVHxQlvyINx4gr4ZY8MusCcBabbM8YAQnmjomvT6zNJJCraOvOKt0tUJvOCMkVzuGnqfUdCnVM7TAua322oDYwDD4nkMyFF6BSRIaEHn8c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d455299a9163181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":42863,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-07-27T00:23:34.998677Z","times_seen":108918,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/shuffle/shuffle.min.js","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:06.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /plugins/shuffle/shuffle.min.js HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:06 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 6025\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:06 GMT\r\netag: \"4d9a-65315328-1aef78;br\"\r\nlast-modified: Thu, 19 Oct 2023 16:02:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QU2fWM2AFToLVvkZhJja0sM35BrfqZ7eyFjO9nHwT%2BpBtouKbtaF%2FZrllAEY8yqUcI3uQlRZ6AiCW9KyyYWPux2XElFJ7n4sqy2mgfR6EV3TqB0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d455299b9283181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":19866,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (19866), with no line terminators","md5":"690ccc1456d3bf15a11343fc70f50a11","sha1":"920dac42d91312b597d400da201b3c6ec4b1b63c","sha256":"765fda7d44a93935d23398c58f6c0353bf0d9b724d5e8f5363e121df8f4e618d","sha512":"e629114064783fd276a98fe64db0dbe0183d1fc056b5ae038d183ec0ae4c9fdf49e845070ec7bec1671159a950f770d7af7a134ceab4fabc89d208a78d43650d","ssdeep":"192:+SkwJPjfh5hVN6Q1bUOlkfFG2gQq/YEiU+lnAoeN33QSRmlOQ46ZlZy9Ws3kjX1E:+nwVoEbnlMvTWolnM4lwP","tlshash":"fa92a6997242753189c7b17554bf020eb17aa9243ac6c08cf436d9e66d78c8db4b3f78","first_seen":"2023-03-07T22:07:31Z","last_seen":"2026-07-20T17:25:27.627486Z","times_seen":101,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/slick/fonts/slick.woff","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:07.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /plugins/slick/fonts/slick.woff HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/plugins/slick/slick-theme.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:07 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 1380\r\netag: \"564-6531534a-1aef5b;;;\"\r\nlast-modified: Thu, 19 Oct 2023 16:03:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=42cPnoQ0m4R51C9N%2Fm96D36Cy%2FXZw%2BtKrbMVHYjNfQHNoJys1yBh16CPk6j4pb9bi66bpfzA7ktUm9DvCFqFj5fNYzoJJfldlTklcmK1jUe2iwg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d45529e1e743181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1380,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, CFF, length 1380, version 1.0","md5":"b7c9e1e479de3b53f1e4e30ebac2403a","sha1":"af91c12f0f406a4f801aeb3b398768fe41d8f864","sha256":"26726bac4060abb1226e6ceebc1336e84930fe7a7af1b3895a109d067f5b5dcc","sha512":"976f6e9d65859b1a5e3bbd426441e6885d1912f5694f40e2897b10f46b3bd0c7d940f7917a6050d6bb8cdeaaa5e5f0332391d3d398f6c21ce27299dfc7036911","ssdeep":"","tlshash":"cb21a55dbda5eb19fe9ed376738497e1bb1e849db2a20246990e2e3db280040a880655","first_seen":"2023-04-05T04:33:55Z","last_seen":"2026-07-27T00:31:47.201924Z","times_seen":25325,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/fontawesome/css/all.min.css","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:06.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /plugins/fontawesome/css/all.min.css HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:06 GMT\r\ncontent-type: text/css\r\ncontent-length: 12240\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:06 GMT\r\netag: \"e643-65315338-1aefa3;br\"\r\nlast-modified: Thu, 19 Oct 2023 16:03:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O2Eip3wxs%2BoyfSuvU4h7uYbXLHdcUE2PZ3ViCQb7jxAohb1IuyXGZXTp4xjuZ3erq38mbVClfki5hHY1H4%2Be4v99DesQT3I1MK6V6PG5VmsQSEA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d45529998e93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":58947,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (58761)","md5":"f1f93a215dbcc07b3c05df202473c6c3","sha1":"2cb43b8d3408f9d48f8fb5f5a2ba4b6299234ff1","sha256":"290bf0aac69af039be5703a9f92acfb65307b1027382588a3117092cd82e8ddd","sha512":"7bd7300952f6b73f01ee14da6c5381502b59840433b5809d060657c62ba1f70587c937396547955a2d7cbc9bbbc7a582712f5cb0b228ac1cfe4f51a814af9745","ssdeep":"768:gEC31sPiyLNq4/xtoAbHJ2kEBR/MMQyYJIXtBjtF5Qzi:gE/PxLE4/v5HQpBCfOtBt42","tlshash":"6343fbb8e54c01c9a731c44bff81b2bc61baf73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-08-29T22:51:36Z","last_seen":"2026-06-28T19:28:31.856247Z","times_seen":9,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/slick/slick.css","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:06.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /plugins/slick/slick.css HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:06 GMT\r\ncontent-type: text/css\r\ncontent-length: 484\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:06 GMT\r\netag: \"6f0-6531532a-1aef50;br\"\r\nlast-modified: Thu, 19 Oct 2023 16:02:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jd1ZKiXQoMAx7DiGlOQf7tXwpShjBHCceIDFssEpl9QylB6yRNfFfr67vgm7Kt541g6ereWy5A6pWFGfF0azax4w0vb9MkRKDhpJp%2BgbmWPGU%2F8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d455299a8ee3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-07-27T00:23:35.013213Z","times_seen":72210,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/slick/slick-theme.css","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:06.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /plugins/slick/slick-theme.css HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:06 GMT\r\ncontent-type: text/css\r\ncontent-length: 780\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:06 GMT\r\netag: \"c59-6531532c-1aef5f;br\"\r\nlast-modified: Thu, 19 Oct 2023 16:02:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0SqZoXozghf1eKo%2FqgCMBVGmK75bhe9kLg4VVs7pKvzWDhvJWJXuT9IH9J0lgS%2F4SvfDsV%2FOB8x4wKYRrlAwHsTdPvz7dXGrabM1gmanypmm1J0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d455299a8fc3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3161,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"a6dba2d937f83e1f14d2906c9269bd80","sha1":"e328aaa5ff5dba06b2096038876d1ce52e0b02db","sha256":"935dcf534ffa94190ea73cf3b51eecb2f741b2f4f6a7d38250af375aa9352b1c","sha512":"9a2d13df2ca76d352c11131895f3e3197d82e6d8d309bd88ca3f242774d6d104db9db200fa5dc979461cb13efd60dcd5b1db1367488ddb9242fb8e15fdaff958","ssdeep":"","tlshash":"2451ef985ab3a742101794943be7472477cbb0131629d8acff91638c8fce0d8ead934e","first_seen":"2023-05-07T20:03:29Z","last_seen":"2026-02-27T05:36:34.238547Z","times_seen":7,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/images/slider-main/inr_1.jpg","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:07.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /images/slider-main/inr_1.jpg HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 104436\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:07 GMT\r\netag: \"197f4-64aee7ac-1aee60;;;\"\r\nlast-modified: Wed, 12 Jul 2023 17:49:32 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJq7%2BsxImbfeeuLZNRrKqLVyjRr98R0Iil3mNCvxCHvsy9n2F4%2B0%2BuRBIMorj9g6iBMRuLc7XiE8Go0dmalOxxqPFj5E3MoEawi%2Fh987g73xdA4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d45529cca6c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":104436,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Freepik Company S.L. - www.freepik.com], baseline, precision 8, 1920x700, components 3","md5":"fc0f61bf12bd92b34d54208f26133936","sha1":"1c55b23379938ba8a057a430838ee0323b79a6dd","sha256":"0f802d5637cbfa97c93275bb99609478a6de8ef6067141411bcbf27811836b62","sha512":"3007469800ba98960c4799a4e09891b7891e4a3dcb9b43e5ee06c9f99d516d2e038a4815f51425884cfbfa73d479f1563b28fe41f56ea6712f0282bf60ef3f11","ssdeep":"1536:eyz009jJ0zGdvuSXLcW1QEc7uu94WIQ8MPxP8R/EyMs5pKXYDDKYnu9g56lDl:X/9SMuS7ctj9FhtToDDKYnu9g5Cl","tlshash":"2ea30201639feb87c9ed3c35c5ebab1d729f244629038c261b5ac42326f53b87d49547","first_seen":"2024-07-01T22:51:51Z","last_seen":"2026-06-17T08:41:57.039177Z","times_seen":22,"resource_available":false,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":400,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:07.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://celestialdrifts.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:07 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6994310c-7b0\"\r\nexpires: Tue, 17 Feb 2026 09:23:37 GMT\r\nlast-modified: Tue, 17 Feb 2026 09:12:44 GMT\r\nx-77-nzt: EwwBuUwJGwH3AQAAAAwBuUwKCQH3AAAAAAwBw7WvAgG3AAAAAA\r\nx-77-nzt-ray: fdb54123e58bfadb472da169ab546e24\r\nx-77-cache: HIT\r\nx-77-age: 1\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8c6e0b46fbd6392043ad39aa04995247","sha1":"fec208492d5002c717fff6a5c74c21473a28cd4b","sha256":"98342799bc6c190d85d496ae153b3a961680fd53de37062869eb29d7292957f9","sha512":"71a953f7ba65b87feaf12f56869228a96510f9428d04b9020af280771ee0d10953d3506082a1d6e379f0ce1c6b8d737a65309fdcee99c13afc65490e8feaa562","ssdeep":"","tlshash":"bf414993c0f80d531b9d612bb8948a014d54c3c7e89a3d0d366e8a7f6f0ceba10d276d","first_seen":"2026-02-17T09:27:34.925Z","last_seen":"2026-03-02T07:55:13.450948Z","times_seen":786,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":47,"dns":21,"connect":7,"send":0,"wait":7,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-AIm7gawg.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:07.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/main-AIm7gawg.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://celestialdrifts.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:07 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6994310c-451cd\"\r\nexpires: Wed, 17 Feb 2027 09:18:37 GMT\r\nlast-modified: Tue, 17 Feb 2026 09:12:44 GMT\r\nx-77-nzt: EwwBuUwJGwH3zvoMAAwBuUwKAQH3DAAAAAwBw7WvAgG3AAAAAA\r\nx-77-nzt-ray: fdb54123e58bfadb472da169c6d6e027\r\nx-77-cache: HIT\r\nx-77-age: 850638\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":283085,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28071)","md5":"58de573622a38f62db9d2a272e43fbcf","sha1":"49e950e0379784f144c07d6114384baff4b74e8a","sha256":"b42ec41323945db7018887a79887e94e5e324b56642a07aa33f19e0c486dde96","sha512":"d9482f7493b2ec8fe9ecf11b4c6888fe6ea1acf1508f86126744b931534ffa1d1bb089cdf8f6679bb4085bc920fddd7b0dd4c617574e1bfcc5e939eba47d9eb3","ssdeep":"6144:VRJU8SN+KtxKR/ZgQuTlBraPPMHPVsddG:VLU8SNjTlBraMvVg4","tlshash":"5e544ad47295b43443a700e5507f2006b33e5c29a809c068f6adddf67db9989a2b7fbc","first_seen":"2026-02-17T09:27:34.892087Z","last_seen":"2026-03-02T07:55:13.406489Z","times_seen":786,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/colorbox/colorbox.css","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:06.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /plugins/colorbox/colorbox.css HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:06 GMT\r\ncontent-type: text/css\r\ncontent-length: 943\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:06 GMT\r\netag: \"b88-65315330-1aef67;br\"\r\nlast-modified: Thu, 19 Oct 2023 16:02:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aA16%2BnXrHEPZHbIdtFvrQ1zFZQcFlTXZfPi6MjLyPKJz55EsWhJTUVXO4V9qwj9UKR5AMjsukXlpNEwOUNEezm0VU00JeEJbNZrj27dAArT8X00%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d455299a8fe3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2952,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"80c5cba9061f641dbd360d8b269b2f1f","sha1":"a8fbe75e6478dbf9feacdd995918b6a2f40d3244","sha256":"63e61d4f32dafbbea507c91bb08653ff1fa6108070c01e86a681f1c0819b8636","sha512":"415948796e302f01c113fba34af72ddc792589d34809da2d0b20e884b127f217750252dcde18d377b1225133730954d069a398bd834ae4723fecf6a6b1dbee42","ssdeep":"","tlshash":"fd51233606d5320de19bf334eaa8f7bc5221940aab434d9fb51c2874d7ce68940776de","first_seen":"2023-08-29T22:51:35Z","last_seen":"2026-04-28T18:40:17.816439Z","times_seen":10,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/slick/slick-animation.min.js","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:06.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /plugins/slick/slick-animation.min.js HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:06 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 605\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:06 GMT\r\netag: \"6ee-6531532c-1aef63;br\"\r\nlast-modified: Thu, 19 Oct 2023 16:02:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H1HC1u1yeFxYPwNTaiiLwyheAFjcKGS9k5t77SVlC7GLGn3TJ9jR5meiqovyOcUlEXWNl3d8xeq117My9NqHf3CKlEezZSyd4KbBNSqssdcOg7M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d455299a91a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1774,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (746)","md5":"993930401917e0f967afef1fe6138f7f","sha1":"535f6e1f2c002576d1107b567489188870dbdcd3","sha256":"1138fb0dac3902beb24680d9e7a7083a58a6683bd5c4b98577a5e1dbc023d963","sha512":"b28c217fb1ee2e244d7f4d644f5c1f82d04c37980f4c56fb37920d40d8e08caebaa501205fda18b37b484c04d459a77294749d2a8e2a4b01dd526f6f6e57e586","ssdeep":"","tlshash":"d631998c7c4314a2a39706f7001f2058467369e8e9344b5aac6ed8bd06ad42c7b5bf7a","first_seen":"2023-03-07T14:51:09Z","last_seen":"2026-07-26T14:31:05.951003Z","times_seen":906,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/js/script.js","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:06.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:06 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1626\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:06 GMT\r\netag: \"1b1f-652f138e-1aefab;br\"\r\nlast-modified: Tue, 17 Oct 2023 23:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x1uRRI3S%2F0BrsT2pUIxKN8uevl1G3p%2BfB4Cz4KmN8Ve%2FBd5Th0N%2BUw%2BOkcSARcEEbGACjVeLROMPxnz04c8UcwB%2FH%2F1u4ZSFMLBWGkvC9o4LvsI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d455299b92d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6943,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"ad2859afe887916dbc67bc0957843fed","sha1":"45ca8a676bb827298c97f83bd99f9b910885ea2f","sha256":"61c61ee693c9b99d33d1d4873e7be4a241ca9fd3810b2c6b1eb62437c4e3715c","sha512":"738808a7e344c4a802faa770ec7a82bd9f7aebbc8762cbb4ce90a91714add8c9f3b5bbef266ec02c33d1a1b1f9905cdc78c3e9a6e662e63561351fc745b09b27","ssdeep":"96:39LYLXNM0aAg5u5wfaUw8LQFp8Apk++ezFp8ApbTQezFp8Ap1Wq9+0x3MSDLA5aS:3KL9TE12v2KvNvXRuvssz","tlshash":"efe1eb85ff2c3167457ee26c8a5ed6cbe21d50329a828476fcf768a809e003d175ea1d","first_seen":"2024-01-28T14:25:46Z","last_seen":"2026-05-09T14:16:06.042212Z","times_seen":32,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/images/logo.png","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:07.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 36278\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:07 GMT\r\netag: \"8db6-6904e176-1aee7b;;;\"\r\nlast-modified: Fri, 31 Oct 2025 16:19:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aqlNfdIG1B0CubSyOwpDw6F1TTUqCePzxRpXHggZ8PVEcBUohB%2Fxard5cV5Lyrj1Mb47Brekc7QEExEjL%2FNhxixrq%2BnMaYo6pXSYQrTrNPhf8vk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d45529d8caa3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36278,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 425, 8-bit/color RGBA, non-interlaced","md5":"6b3cdbcb154cbb0722f8e0464f469f49","sha1":"32d862020949bf168c81c8c6f6030c9a6e6cd1ae","sha256":"f0f40322db1e14b353a9b69b0ca037a192386bc268bf1745e0a64cbea190e062","sha512":"1c51ca56918e053a366db3a30d3937b99947c4f21cb44268adbbfc0ef3002a3e801175ef2e46f566f4d16d54f05d9fe7ab2afec53207c6f2ec0ea881f2301fb1","ssdeep":"768:vjnKCiHet9S/zSlYu0OLqJld5voG69z98yEdcEniuK:v+CtnS/2nyPoG69z98KEM","tlshash":"10f28c77cbc2bd9b5d8c8332b64325c5906b1637773d4e8b0bd0a93549ab090ebb1d26","first_seen":"2026-02-26T22:06:25.909733Z","last_seen":"2026-02-27T05:36:34.234297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":324,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"celestialdrifts.com/plugins/bootstrap/bootstrap.min.js","fqdn":"celestialdrifts.com","domain":"celestialdrifts.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:06.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celestialdrifts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 14:46:31 GMT","end":"Wed, 27 May 2026 15:44:20 GMT"},"fingerprint":{"sha1":"53:2D:23:03:1B:92:61:ED:54:3C:39:C8:27:24:CE:8A:77:29:B4:9C","sha256":"A0:FD:5A:82:4C:73:01:02:43:89:31:9E:98:D1:92:EF:EB:47:40:67:6A:99:81:93:7F:F2:3F:8B:AF:9C:01:48"}}},"request":{"raw":"GET /plugins/bootstrap/bootstrap.min.js HTTP/1.1\r\nHost: celestialdrifts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:07 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 14159\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Mar 2026 05:36:06 GMT\r\netag: \"f6e0-6531532a-1aef4d;br\"\r\nlast-modified: Thu, 19 Oct 2023 16:02:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zGIiXWVBi%2BJ1vr85yXZ3CzhnNu3%2B2bE49DJVYjEZsM4%2FYa2dOVC5ZvrZrmC2T9Nn9zXi7T9wGWzYY%2FolLAlPDoG%2F34R6IGqntqCQNiYFhOh%2BYF4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d455299a90d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":63200,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (62963)","md5":"4fee38966575436b9167e65183cb4768","sha1":"d45e611de242b77ecdd47b93fcefc9778b12b5ad","sha256":"64f04853c9056be2380aeecfa89e0b8fdf7b170d54e6371583188e25b4c740c4","sha512":"3874c0d4890252eea240fa65938c23d29dd94747622379d58f321a210e144b2fb9321455e5094a55dc6fdea421dc019789feac53feab250fa398f46c1deb821f","ssdeep":"768:doD1OQYUhHVvO1Nnng76Tq8mrIIeoBAiAHFcQqK8jXLb6mH/3fn57hC9:dQ1r7CDVBUXv/VhC9","tlshash":"7e53750672a4f472059fa176803b0a0bb7362c9de506b16cbad998dd1f7cd443267f3a","first_seen":"2024-11-30T23:57:57.202287Z","last_seen":"2026-05-19T07:02:26.984532Z","times_seen":12,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"celestialdrifts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:07.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:55:02 GMT","end":"Wed, 15 Apr 2026 06:55:01 GMT"},"fingerprint":{"sha1":"D6:AF:CD:AE:04:C9:18:A9:86:FD:53:08:D9:99:99:9B:9D:A8:58:29","sha256":"66:75:58:C3:A9:29:2F:14:30:FB:BE:32:2C:1C:9B:D1:A4:E6:58:D5:9F:33:F7:16:C3:0B:F7:A4:6C:49:F2:B5"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://celestialdrifts.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 05:36:07 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6969e151-4684\"\r\nexpires: Fri, 27 Feb 2026 05:36:04 GMT\r\nlast-modified: Fri, 16 Jan 2026 06:57:21 GMT\r\nx-77-nzt: EwwBuUwJGwH3OgAAAAwBuUwKCQH3AAAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: fdb54123185ffdd2472da16911b3660c\r\nx-77-cache: HIT\r\nx-77-age: 58\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17979)","md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-08T20:09:52.517882Z","times_seen":4265,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":62,"dns":33,"connect":7,"send":0,"wait":8,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"18.153.252.53","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://celestialdrifts.com/","date":"2026-02-27T05:36:07.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://celestialdrifts.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 6Nr7lWeJM1o0unmi1bZWow==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 27 Feb 2026 05:36:08 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: YAnwZo3Dy5jy9vrOnoHy3vSJDQk=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T00:51:04.580831Z","times_seen":17552855,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":104,"connect":125,"send":0,"wait":22,"receive":1,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}