Celer Network's initial analysis shows that there was suspicious DNS activity at 7:00 pm UTC on Aug. 17.