{"report_id":"78d32f78-0fe9-4df6-84d8-315852578800","version":0,"status":"done","tags":[],"date":"2026-08-31T08:58:52Z","url":{"schema":"http","addr":"stf.bluefincesme.com/","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":0,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/login","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"title":"Festival Control · Bluefin Fest ’26","dom":{"size":8807,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8754), with no line terminators","md5":"4211331aa080907622adac72f9a1894d","sha1":"e4cc203e8d5f7becbf1799b6ebd94d5fb344c06c","sha256":"d0b000dadeb9320495d3985009aa280fd04f159002bcef844d7ca21841e2855a","sha512":"d09cc50c0b264c0ae5c10802d1ea79b6ab11a485a1393c1a8716ea09a2b3c126fb741f9c3a1adca505abc5c95d2c0f8d3d959085c847e71f2abcb59e647acecd","ssdeep":"192:R8nnnAZdXPyG/sB+RnFLz7xW0fy5y5rjhQOIwj9U9rgnqzcpmDg9w89sY9+HNhQW:nTjJf+vTj4pHu","tlshash":"f502421a7c09de46ec7aad5c807e5e3b84c9cd7b837198b8eadccf180ac287517d5981","dom_hash":"domhasha354d75a61caa749e0b41c3b2cab41ee","first_seen":"2026-08-31T08:58:57.886077Z","last_seen":"2026-08-31T08:58:57.886077Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"stf.bluefincesme.com/","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":0,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T08:58:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"stf.bluefincesme.com","ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-31T08:58:53.545926Z","last_seen":"2026-08-31T08:58:53.545926Z","alert_count":36,"request_count":18,"received_data":579733,"sent_data":8956,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/sponsor","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-31T12:32:00.292172Z","times_seen":244246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/sponsor","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"5dc1d10f3a82808f05a49ec79b9df8f4","sha1":"cb92160a98a278e3f6ee3c1a1fec792039486057","sha256":"df512d0b92a8d115da6765c5ddf40a214347445051b34f065c703597c821fb73","sha512":"332645cf75415468b9156d5ed8ef0f97ac6c03906407f8abe84280f1010fc4b3a1a48d745dee3314d0c338fa90a1ac2b2982123e45cc4b6260642bda4953c4a8","ssdeep":"96:LYfy5y5rjhQk3W34Hj9U9ja7cg1xqzc/xmWD7Zcg94H89kIjuY9+qkxX:cfy5y5rjhQOIwj9U9rgnqzcpmDg9w89q","tlshash":"66b1be2e6805dd4aec7e6d2d013e9d3a14cd8d7b43a5daf8e6cdcf18094247927d69c0","size":5430,"data":"","first_seen":"2026-08-31T08:58:57.921955Z","last_seen":"2026-08-31T08:58:57.921955Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/turbopack-2atohua_id0m7.js","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e73c31e08dc50fcfa419413408409c5b","sha1":"ce8850411a8ca6d6b19ab3027b0744d4c7a1a882","sha256":"94b59f2992be2425ed1fb7fd7afb4d12058117b554de34344edf41e20dd1a7ad","sha512":"c52c00f56f1d9f94059345fe6ddef42def9fbf094a381aba9f857286d9bada8d80f5fc43afa4c28c57b6a4c2254adfa1c7bb1c9a4674430d6c231c482a0467af","ssdeep":"192:gnqdDKpb8YOsHl44IFHe89uQBT4qd3yB1WTZSayTe0S:gnqdGOe44ovFztOcY2","tlshash":"ef12c7da37e1f43353afa5eac07b4400e27a8469081e142cd39ca8f6387459a81f7f76","size":9725,"data":"","first_seen":"2026-08-31T07:53:45.098709Z","last_seen":"2026-08-31T08:58:57.913981Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/0f5hj116utj_4.js","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"62d203e34bf1a32da60a634269aaf21d","sha1":"44f4395cef05d572e97a58e25b13d39313f62648","sha256":"c40674c65bb858c56530adc0236f522855f6c7b69b2057a5a216f79bc326043e","sha512":"37809effc51b2cd9438799e0c26ad97b3ca54832ff4b8d6eb322a924649d50d1d9133bbf853b8c5c503c1f7d4c8b19a8f39aa6b4673af9dfab6492261fb4a0b4","ssdeep":"384:XCxqAC8vcpnk9c7PJjHWNBn4uGxTCjzBxk6hLoDK8W8pubbG3:lA8FvxkBx5o+6peG3","tlshash":"13c293a972d4f5d113a384f4843f401af23d1d7a245db0a0a3b2dceab9e454dd172faa","size":27510,"data":"","first_seen":"2026-08-31T07:53:45.105127Z","last_seen":"2026-08-31T08:58:57.909662Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/0b5vx6fhox00r.js","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"45c19c648fa95128803c1eb3b5624256","sha1":"e1f3f37e8e20d6d4992c6fdf9e40ea2d88864891","sha256":"1e708cbd7b93c2d2f74c367d7bcbaf5c82438bdab8401fd10b95e95b87e1b05c","sha512":"754412da5f58cca805797b667be694f00a8f3268ea79db11a554a8b7eb4491ef3365dcb88c963dedbf59d1d44a506c42c6285bf12bd47e4d958958c3c54fdf93","ssdeep":"192:KiMLn3mQOR/kOH7fRDRkG4vU0hEMzdcfpDe5cO28A4TeMq0thxAR0:KhOR/h7fRDRkGEEMze05cO2D0","tlshash":"5a52637132d0f8d1229f89e5c4364019f26d1d7a219e70a4b7e6ccfe36d198de0a1fa9","size":14383,"data":"","first_seen":"2026-08-31T07:53:45.099949Z","last_seen":"2026-08-31T08:58:57.893986Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/20yca6ig999l9.js","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5c00724781c95d71e1574b5d2e351ee","sha1":"c9076824bfe2fe8bb3170dcce92044d92d05d97d","sha256":"48f636f117cbadbb1d71dbcfec27b18bd9788729aeb288acd95b62f3a6b54617","sha512":"ab85ca181132e6a0e07fdbddc8af47dc318f5859415d3cea80edb380c24ba98ca73a7ece8e8e445c1a48aa424de2e0ca04580e061b913946cef81ee5e3d7a9ab","ssdeep":"768:sF2aefcngY6tqMLkE88aBwtaiq7Y0WxVMzMpWXuFWRRpThhi3Lo5K:eZE8W30WxVMzMMXuFW3p7ieK","tlshash":"39c2c748b5d1fbe9e62a0584802fc00df22f3a5ccd4d9874bbadac651d244d8b263fd9","size":26082,"data":"","first_seen":"2026-08-31T08:58:57.896062Z","last_seen":"2026-08-31T08:58:57.896062Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/1s17ht58k_9m9.js","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"cee8237bc9492811aeb0ca2f5b22a5f6","sha1":"f4a9156992e69268a37ca5d8d5f0a6881fe1a6b7","sha256":"5e91dde6e814bbbe1ca14790493393b5102186edaed8fc789b0ec02ad6e580be","sha512":"340f0f192e71d137abaa6db2669bc29ff075515bee84521cd5582af5d3a044721f6e9cbed2767625fed74403da269e12cfa276bc4f91267421d475625ef955de","ssdeep":"3072:M/zVfOaJjlHynRo/KfdEPZgwR+7IINg7/:M/zVfOaJhSnRo1ZgwR+7IINg7/","tlshash":"d6f3e6f935d5f4820bab41aac03f0006f22c4d77189e6860e3e5dcda756465de1b3faa","size":160041,"data":"","first_seen":"2026-08-31T07:53:45.092671Z","last_seen":"2026-08-31T08:58:57.902346Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/3n3olhs5ilgq6.js","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"29bd6a23112ca93ebbd5c85458fea254","sha1":"99c881b2d61b1533593dc7f4ff26226d22cc9bc5","sha256":"58a3c97376346caa2e00a72cdd2618a8726bffba4ca6b5a8bb43d4312bda33f8","sha512":"504e1baad0182cd844335e492dca9674a76098efe08efd6e7de90dbafbb18e2ce63889775704accce2725f952c78f2fb2aafe3d4602fca3a52cff07f0702de84","ssdeep":"3072:JLt7mScnU3pFdviCm0H8hTSXkhPK+0fDwzeCaJ9561:JLt7mScnU3pFdFGPmweCaJ9561","tlshash":"be24fbe83995f6626ab302a710af1403b338252b280d4d60b711fdddb57845eb17bf9e","size":229162,"data":"","first_seen":"2026-08-31T07:53:45.097498Z","last_seen":"2026-08-31T08:58:57.901344Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/15lo_4r9nnezs.js","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce6832fd987c8c19927e471fd906288c","sha1":"1cf386bf47c0e8857572f451b3e93f5dfcea2dea","sha256":"612103be4eeba2eab30a58e5a2e19eadcc4911091f98c6895fc97357dc4e9e0f","sha512":"f092ca1eee38793e02f6f0d36fb58e3cb4a81092d22dd25dec838c834e5069050fe29938f3000fadbe39131dde6efe171efaa6f8697e29a5853fafc1b93bd9ba","ssdeep":"","tlshash":"6651668871b1dbc5bb0c638cd0964e1fe78a0d88d7360c686b7e5c6e619f4d0a9c875e","size":2728,"data":"","first_seen":"2026-08-31T07:53:45.102445Z","last_seen":"2026-08-31T08:58:57.918934Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/0kv094s3oskx1.js","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1295a794638264317d92b80a03cb61dc","sha1":"935129dd90b667ca3ee6007f01245d20401df57f","sha256":"5e8c737e76f33aafffec916f699d764e36b7d20c5dac60755e9a20a431b1d5ea","sha512":"2ec8d64fd7ca0cfcc9a374fa29bc5ac5368fb01418ebe32f0f6a2833e07cacdef2f32b0e8791f7106718d6404a281467bb5471011baf03047fa5a36ab2815c31","ssdeep":"192:MwLDhEBx0I+NfQZP1wD4o1X8y43wWu6zQZwFDKw6PTMwNGAw7wk:NEb0IvS42uV3DKw6Pwt","tlshash":"8342a562b2d5fce1279b00950837600af2261c3a563db475b7f58cf66a804ddbd26bec","size":12657,"data":"","first_seen":"2026-08-31T07:53:45.094966Z","last_seen":"2026-08-31T08:58:57.908168Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/0b5vx6fhox00r.js","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stf.bluefincesme.com/ops/sponsor","date":"2026-08-31T08:58:22.290Z","timestamp":1788166702290,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/0b5vx6fhox00r.js HTTP/1.1\r\nHost: stf.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stf.bluefincesme.com/ops/sponsor\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 08:58:22 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"382f-1a05488be61\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: stf.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14383,"size_decoded":4126,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14381), with no line terminators","md5":"45c19c648fa95128803c1eb3b5624256","sha1":"e1f3f37e8e20d6d4992c6fdf9e40ea2d88864891","sha256":"1e708cbd7b93c2d2f74c367d7bcbaf5c82438bdab8401fd10b95e95b87e1b05c","sha512":"754412da5f58cca805797b667be694f00a8f3268ea79db11a554a8b7eb4491ef3365dcb88c963dedbf59d1d44a506c42c6285bf12bd47e4d958958c3c54fdf93","ssdeep":"192:KiMLn3mQOR/kOH7fRDRkG4vU0hEMzdcfpDe5cO28A4TeMq0thxAR0:KhOR/h7fRDRkGEEMze05cO2D0","tlshash":"5a52637132d0f8d1229f89e5c4364019f26d1d7a219e70a4b7e6ccfe36d198de0a1fa9","first_seen":"2026-08-31T07:53:45.099949Z","last_seen":"2026-08-31T08:58:57.893986Z","times_seen":2,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":255,"dns":0,"connect":0,"send":0,"wait":86,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/20yca6ig999l9.js","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stf.bluefincesme.com/ops/sponsor","date":"2026-08-31T08:58:22.291Z","timestamp":1788166702291,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/20yca6ig999l9.js HTTP/1.1\r\nHost: stf.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stf.bluefincesme.com/ops/sponsor\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 08:58:22 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"65e2-1a05488be6d\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: stf.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26082,"size_decoded":9285,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25991), with no line terminators","md5":"b5c00724781c95d71e1574b5d2e351ee","sha1":"c9076824bfe2fe8bb3170dcce92044d92d05d97d","sha256":"48f636f117cbadbb1d71dbcfec27b18bd9788729aeb288acd95b62f3a6b54617","sha512":"ab85ca181132e6a0e07fdbddc8af47dc318f5859415d3cea80edb380c24ba98ca73a7ece8e8e445c1a48aa424de2e0ca04580e061b913946cef81ee5e3d7a9ab","ssdeep":"768:sF2aefcngY6tqMLkE88aBwtaiq7Y0WxVMzMpWXuFWRRpThhi3Lo5K:eZE8W30WxVMzMMXuFW3p7ieK","tlshash":"39c2c748b5d1fbe9e62a0584802fc00df22f3a5ccd4d9874bbadac651d244d8b263fd9","first_seen":"2026-08-31T08:58:57.896062Z","last_seen":"2026-08-31T08:58:57.896062Z","times_seen":1,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":263,"dns":0,"connect":0,"send":0,"wait":81,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/favicon.ico","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stf.bluefincesme.com/ops/sponsor","date":"2026-08-31T08:58:22.755Z","timestamp":1788166702755,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: stf.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stf.bluefincesme.com/ops/sponsor\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 08:58:22 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nVary: Accept-Encoding\r\nX-Bluefin-Subdomain-Gateway: stf.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9,"size_decoded":373,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-08-31T11:44:03.360023Z","times_seen":90228,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/37xt2r74isxma.css","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stf.bluefincesme.com/ops/sponsor","date":"2026-08-31T08:58:22.279Z","timestamp":1788166702279,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/37xt2r74isxma.css HTTP/1.1\r\nHost: stf.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stf.bluefincesme.com/ops/sponsor\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 08:58:22 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"973b-1a05488be5f\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: stf.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38715,"size_decoded":7040,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (9171)","md5":"be9ca072ec05dc012cc6417f757751f4","sha1":"f6dfaaeb8569bacb6f5bd64be945a7d5a70ce7d8","sha256":"34d6818e7077a5789c403781c4a974560d63c8b61b64074162fd2877e46f2c18","sha512":"651307ef22b0d4e45591d07549f3f41dc2d7f24ccc3014e246041fbec987cb4194ace00399e1e346cddac815539a6321ac9ca393dcb6e6527199baaf0ae394f1","ssdeep":"768:ftbVxJdm8V23+GNVAWrGBayfrqAYHLrJrgVWOVH5W2DS2uA5Gypil1x6EjOUcPSE:ftn12OGNVAyGBayfrqAYHLrJrgVWOVHX","tlshash":"8303787366e0171bb1afc0a9fc409edafad084df811217eceeeca29988961d757f1504","first_seen":"2026-08-31T07:53:45.093837Z","last_seen":"2026-08-31T08:58:57.899779Z","times_seen":2,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":74,"send":0,"wait":92,"receive":2,"ssl":111},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/3n3olhs5ilgq6.js","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stf.bluefincesme.com/ops/sponsor","date":"2026-08-31T08:58:22.283Z","timestamp":1788166702283,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/3n3olhs5ilgq6.js HTTP/1.1\r\nHost: stf.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stf.bluefincesme.com/ops/sponsor\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 08:58:22 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"37f2a-1a05488bdba\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: stf.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":229162,"size_decoded":72107,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"29bd6a23112ca93ebbd5c85458fea254","sha1":"99c881b2d61b1533593dc7f4ff26226d22cc9bc5","sha256":"58a3c97376346caa2e00a72cdd2618a8726bffba4ca6b5a8bb43d4312bda33f8","sha512":"504e1baad0182cd844335e492dca9674a76098efe08efd6e7de90dbafbb18e2ce63889775704accce2725f952c78f2fb2aafe3d4602fca3a52cff07f0702de84","ssdeep":"3072:JLt7mScnU3pFdviCm0H8hTSXkhPK+0fDwzeCaJ9561:JLt7mScnU3pFdFGPmweCaJ9561","tlshash":"be24fbe83995f6626ab302a710af1403b338252b280d4d60b711fdddb57845eb17bf9e","first_seen":"2026-08-31T07:53:45.097498Z","last_seen":"2026-08-31T08:58:57.901344Z","times_seen":2,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":73,"send":0,"wait":93,"receive":148,"ssl":152},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/1s17ht58k_9m9.js","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stf.bluefincesme.com/ops/sponsor","date":"2026-08-31T08:58:22.284Z","timestamp":1788166702284,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/1s17ht58k_9m9.js HTTP/1.1\r\nHost: stf.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stf.bluefincesme.com/ops/sponsor\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 08:58:22 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"27129-1a05488bdf2\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: stf.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":160041,"size_decoded":44338,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (36928)","md5":"cee8237bc9492811aeb0ca2f5b22a5f6","sha1":"f4a9156992e69268a37ca5d8d5f0a6881fe1a6b7","sha256":"5e91dde6e814bbbe1ca14790493393b5102186edaed8fc789b0ec02ad6e580be","sha512":"340f0f192e71d137abaa6db2669bc29ff075515bee84521cd5582af5d3a044721f6e9cbed2767625fed74403da269e12cfa276bc4f91267421d475625ef955de","ssdeep":"3072:M/zVfOaJjlHynRo/KfdEPZgwR+7IINg7/:M/zVfOaJhSnRo1ZgwR+7IINg7/","tlshash":"d6f3e6f935d5f4820bab41aac03f0006f22c4d77189e6860e3e5dcda756465de1b3faa","first_seen":"2026-08-31T07:53:45.092671Z","last_seen":"2026-08-31T08:58:57.902346Z","times_seen":2,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":77,"send":0,"wait":91,"receive":82,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/api/auth/me","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://stf.bluefincesme.com/ops/sponsor","date":"2026-08-31T08:58:23.128Z","timestamp":1788166703128,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /api/auth/me HTTP/1.1\r\nHost: stf.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://stf.bluefincesme.com/ops/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 401 Unauthorized\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 08:58:23 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 78\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nETag: W/\"4e-8si1XGa0loKM9WDH7CBAe1oB2OY\"\r\nX-Bluefin-Subdomain-Gateway: stf.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":78,"size_decoded":413,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3dabbb5de8166c6988bc9a2c0153f22e","sha1":"f2c8b55c66b496828cf560c7ec20407b5a01d8e6","sha256":"a2bd13eb04402d8fecf265136d04c7f1614f25780e446fdf35c5c61b0cc8e378","sha512":"7fc6ff01935ed8307298a6dd5a0d29eec84482414098311491ba360dd101d6ab8a523ecf996f6cc4e9af946c562ba81eb994124cbee33bdab08b8891529a79f5","ssdeep":"","tlshash":"c3a0228202cc3c2fbfa302a3b20e0e308a23c8fc8a820c0300c8e83800c2288c3030e0","first_seen":"2026-08-01T16:28:41.152395Z","last_seen":"2026-08-31T08:58:57.903448Z","times_seen":3,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/api/auth/me","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://stf.bluefincesme.com/ops/sponsor","date":"2026-08-31T08:58:22.831Z","timestamp":1788166702831,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /api/auth/me HTTP/1.1\r\nHost: stf.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://stf.bluefincesme.com/ops/sponsor\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 401 Unauthorized\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 08:58:22 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 78\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nETag: W/\"4e-8si1XGa0loKM9WDH7CBAe1oB2OY\"\r\nX-Bluefin-Subdomain-Gateway: stf.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":78,"size_decoded":413,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3dabbb5de8166c6988bc9a2c0153f22e","sha1":"f2c8b55c66b496828cf560c7ec20407b5a01d8e6","sha256":"a2bd13eb04402d8fecf265136d04c7f1614f25780e446fdf35c5c61b0cc8e378","sha512":"7fc6ff01935ed8307298a6dd5a0d29eec84482414098311491ba360dd101d6ab8a523ecf996f6cc4e9af946c562ba81eb994124cbee33bdab08b8891529a79f5","ssdeep":"","tlshash":"c3a0228202cc3c2fbfa302a3b20e0e308a23c8fc8a820c0300c8e83800c2288c3030e0","first_seen":"2026-08-01T16:28:41.152395Z","last_seen":"2026-08-31T08:58:57.903448Z","times_seen":3,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T08:58:21.486Z","timestamp":1788166701486,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: stf.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 08:58:21 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nLocation: https://stf.bluefincesme.com/ops/sponsor\r\nConnection: keep-alive\r\nX-Bluefin-Subdomain-Gateway: stf.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T12:32:54.847037Z","times_seen":18202287,"resource_available":true,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":42,"connect":78,"send":0,"wait":78,"receive":0,"ssl":275},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/204db102rnu2r.css","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stf.bluefincesme.com/ops/sponsor","date":"2026-08-31T08:58:22.277Z","timestamp":1788166702277,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/204db102rnu2r.css HTTP/1.1\r\nHost: stf.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stf.bluefincesme.com/ops/sponsor\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 08:58:22 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"75a7-1a05488be1a\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: stf.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30119,"size_decoded":7859,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (30118)","md5":"fe3fbc3d58ef21d19e7f2182523155b6","sha1":"23e56f685dfd6d05ffc3b9f738ec512600848909","sha256":"e245528c648a2f859ab7fa490eab0f8cd07a87062803e3ad6aaf3417ac2f30f8","sha512":"cf4f0770602b999e29c79fdaaa193e144a0cde70cb7a6d75905aabd89c7d788bdf6f21b44fd460d4f57cdf0283d42cb3687472331059b9f90a2601a22f0e39e0","ssdeep":"384:Cvon+C3DNEdKydU4eAURJk8MTlIhAnruHuXauYxUuB4XyTpMVNZ5sHUXHSHRCYe+:Cvo+cZEdbLGD6nr4IQxUQAsCg51V00","tlshash":"3bd25073a2582128b47be8e5ea9167deb054e417e42303f8ed94f625c8db1e32737b05","first_seen":"2026-08-31T07:53:45.09147Z","last_seen":"2026-08-31T08:58:57.906435Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/0kv094s3oskx1.js","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stf.bluefincesme.com/ops/sponsor","date":"2026-08-31T08:58:22.280Z","timestamp":1788166702280,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/0kv094s3oskx1.js HTTP/1.1\r\nHost: stf.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stf.bluefincesme.com/ops/sponsor\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 08:58:22 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"3171-1a05488bd8f\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: stf.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12657,"size_decoded":4047,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9737)","md5":"1295a794638264317d92b80a03cb61dc","sha1":"935129dd90b667ca3ee6007f01245d20401df57f","sha256":"5e8c737e76f33aafffec916f699d764e36b7d20c5dac60755e9a20a431b1d5ea","sha512":"2ec8d64fd7ca0cfcc9a374fa29bc5ac5368fb01418ebe32f0f6a2833e07cacdef2f32b0e8791f7106718d6404a281467bb5471011baf03047fa5a36ab2815c31","ssdeep":"192:MwLDhEBx0I+NfQZP1wD4o1X8y43wWu6zQZwFDKw6PTMwNGAw7wk:NEb0IvS42uV3DKw6Pwt","tlshash":"8342a562b2d5fce1279b00950837600af2261c3a563db475b7f58cf66a804ddbd26bec","first_seen":"2026-08-31T07:53:45.094966Z","last_seen":"2026-08-31T08:58:57.908168Z","times_seen":2,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":78,"send":0,"wait":86,"receive":1,"ssl":174},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/0f5hj116utj_4.js","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stf.bluefincesme.com/ops/sponsor","date":"2026-08-31T08:58:22.282Z","timestamp":1788166702282,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/0f5hj116utj_4.js HTTP/1.1\r\nHost: stf.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stf.bluefincesme.com/ops/sponsor\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 08:58:22 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"6b76-1a05488be6d\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: stf.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27510,"size_decoded":7821,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (27510), with no line terminators","md5":"62d203e34bf1a32da60a634269aaf21d","sha1":"44f4395cef05d572e97a58e25b13d39313f62648","sha256":"c40674c65bb858c56530adc0236f522855f6c7b69b2057a5a216f79bc326043e","sha512":"37809effc51b2cd9438799e0c26ad97b3ca54832ff4b8d6eb322a924649d50d1d9133bbf853b8c5c503c1f7d4c8b19a8f39aa6b4673af9dfab6492261fb4a0b4","ssdeep":"384:XCxqAC8vcpnk9c7PJjHWNBn4uGxTCjzBxk6hLoDK8W8pubbG3:lA8FvxkBx5o+6peG3","tlshash":"13c293a972d4f5d113a384f4843f401af23d1d7a245db0a0a3b2dceab9e454dd172faa","first_seen":"2026-08-31T07:53:45.105127Z","last_seen":"2026-08-31T08:58:57.909662Z","times_seen":2,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":73,"send":0,"wait":92,"receive":2,"ssl":131},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/turbopack-2atohua_id0m7.js","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stf.bluefincesme.com/ops/sponsor","date":"2026-08-31T08:58:22.286Z","timestamp":1788166702286,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/turbopack-2atohua_id0m7.js HTTP/1.1\r\nHost: stf.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stf.bluefincesme.com/ops/sponsor\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 08:58:22 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"25fd-1a05488be20\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: stf.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9725,"size_decoded":4324,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9725), with no line terminators","md5":"e73c31e08dc50fcfa419413408409c5b","sha1":"ce8850411a8ca6d6b19ab3027b0744d4c7a1a882","sha256":"94b59f2992be2425ed1fb7fd7afb4d12058117b554de34344edf41e20dd1a7ad","sha512":"c52c00f56f1d9f94059345fe6ddef42def9fbf094a381aba9f857286d9bada8d80f5fc43afa4c28c57b6a4c2254adfa1c7bb1c9a4674430d6c231c482a0467af","ssdeep":"192:gnqdDKpb8YOsHl44IFHe89uQBT4qd3yB1WTZSayTe0S:gnqdGOe44ovFztOcY2","tlshash":"ef12c7da37e1f43353afa5eac07b4400e27a8469081e142cd39ca8f6387459a81f7f76","first_seen":"2026-08-31T07:53:45.098709Z","last_seen":"2026-08-31T08:58:57.913981Z","times_seen":2,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/sponsor","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T08:58:21.968Z","timestamp":1788166701968,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/sponsor HTTP/1.1\r\nHost: stf.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 08:58:22 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nCache-Control: s-maxage=31536000\r\nETag: \"137x5n4uox75is\"\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: stf.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7180,"size_decoded":2591,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7156), with no line terminators","md5":"7b31a04a43580be6c2ff5b6119cc7c28","sha1":"9cf5fa3fde5a7d8a160410286f80a12bcdab630b","sha256":"b07daa6a0ac973a5a183e7d414d60a9fc2390b4472910b5b653d3ec95041e3bc","sha512":"792271d2c86627f91559163878ced7527d51bd50c00f27fbf9f52e203bd7ba117c9ec80e095210998a056ce00f313bfc06703c02737eedd955360712a706027e","ssdeep":"192:58MnU98PyG/sBsJxneE0fy5y5rjhQOIwj9U9rgnqzcpmDg9w89sY9+H+:CsHeDf+vT+","tlshash":"e5e1ed2bac09dd0adc7a6d6c413e9d3a54cd8d7b83a5d9f8e6cdcf080a8147a17d6d80","first_seen":"2026-08-31T08:58:57.915526Z","last_seen":"2026-08-31T08:58:57.915526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/login?_rsc=9r2X3_DdCHSPK1Qw","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://stf.bluefincesme.com/ops/sponsor","date":"2026-08-31T08:58:22.930Z","timestamp":1788166702930,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/login?_rsc=9r2X3_DdCHSPK1Qw HTTP/1.1\r\nHost: stf.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://stf.bluefincesme.com/ops/sponsor\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22sponsor%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%2C4608%5D%7D%2Cnull%2Cnull%2C4608%5D%7D%2Cnull%2Cnull%2C4624%5D\r\nnext-url: /sponsor\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 08:58:22 GMT\r\nContent-Type: text/x-component; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nCache-Control: s-maxage=31536000\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: stf.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6131,"size_decoded":2415,"mime_type":"text/x-component; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (4942)","md5":"de0250f48084e2aed2ec5110081deb91","sha1":"cc67756228300ae52319415cdc9f7d862947b56d","sha256":"a0a6a94b66667bbe98fb94d1fff94d4ee37345e402e7a7d8b485befd689d9c17","sha512":"9fca063ae77ccd8af1f78592eb843f561f0abb32c893dea98c86053ed3a53c794c37a732b045b22a58489d50be2af43c2065a1204511ca33279b01a2b47bd5ac","ssdeep":"96:0xMZBMaBgCLtZE3NMzDfUHDAz/kM/VwZSj/BjAjHjEfhjvR8jOBjWjdjFnjRjQ3m:0xMZBMaBgCZcivIAz/HN/TB8rAh18KB8","tlshash":"c0c1af3a5a099e7e6e7b41d8802fc70b628e493b13654cf5c9ed9e1817911366bcb3c1","first_seen":"2026-08-31T07:53:45.101284Z","last_seen":"2026-08-31T08:58:57.917369Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/15lo_4r9nnezs.js","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stf.bluefincesme.com/ops/sponsor","date":"2026-08-31T08:58:23.015Z","timestamp":1788166703015,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/15lo_4r9nnezs.js HTTP/1.1\r\nHost: stf.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stf.bluefincesme.com/ops/sponsor\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 08:58:23 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"aa8-1a05488be18\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: stf.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2728,"size_decoded":1722,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2704), with no line terminators","md5":"ce6832fd987c8c19927e471fd906288c","sha1":"1cf386bf47c0e8857572f451b3e93f5dfcea2dea","sha256":"612103be4eeba2eab30a58e5a2e19eadcc4911091f98c6895fc97357dc4e9e0f","sha512":"f092ca1eee38793e02f6f0d36fb58e3cb4a81092d22dd25dec838c834e5069050fe29938f3000fadbe39131dde6efe171efaa6f8697e29a5853fafc1b93bd9ba","ssdeep":"","tlshash":"6651668871b1dbc5bb0c638cd0964e1fe78a0d88d7360c686b7e5c6e619f4d0a9c875e","first_seen":"2026-08-31T07:53:45.102445Z","last_seen":"2026-08-31T08:58:57.918934Z","times_seen":2,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/441enx4unfrw0.css","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stf.bluefincesme.com/ops/sponsor","date":"2026-08-31T08:58:23.016Z","timestamp":1788166703016,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/441enx4unfrw0.css HTTP/1.1\r\nHost: stf.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stf.bluefincesme.com/ops/sponsor\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 08:58:23 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"116a-1a05488bdcd\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: stf.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4458,"size_decoded":1798,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (4457)","md5":"cd31d81157e1b13b8f1566e1f9f56a67","sha1":"0d74cdfff926f30d785b0e9755131681343edd2c","sha256":"21408ba042e4003cfca0c78d1fe7ea44e4f484550cb11e39bd4333f2ddf1359e","sha512":"f0ea896d6bd0ab2d926b7431ff01cb7f1239cb1b5a2c9607a2a58ca7986e35a3f212da17218b3ba12003dff4fb4431641010f4dd7a85a72517c816693159a451","ssdeep":"48:5SoktqqdlVUicsyQVsdkqcCIcEZM7xacVsXo5Xh8YPlmBGFE6iAW21Q66ccs+Bn:cVl0syApFZMVXB9PlEpAR1Q6cvBn","tlshash":"d891de6b72a193daf029e28df0805fcbeb85519a611b0abcdce952dcc8db07247a5345","first_seen":"2026-08-31T07:53:45.089548Z","last_seen":"2026-08-31T08:58:57.920236Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stf.bluefincesme.com/ops/_next/static/chunks/15lo_4r9nnezs.js","fqdn":"stf.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stf.bluefincesme.com/ops/sponsor","date":"2026-08-31T08:58:23.118Z","timestamp":1788166703118,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/15lo_4r9nnezs.js HTTP/1.1\r\nHost: stf.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stf.bluefincesme.com/ops/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 08:58:23 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"aa8-1a05488be18\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: stf.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2728,"size_decoded":1722,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2704), with no line terminators","md5":"ce6832fd987c8c19927e471fd906288c","sha1":"1cf386bf47c0e8857572f451b3e93f5dfcea2dea","sha256":"612103be4eeba2eab30a58e5a2e19eadcc4911091f98c6895fc97357dc4e9e0f","sha512":"f092ca1eee38793e02f6f0d36fb58e3cb4a81092d22dd25dec838c834e5069050fe29938f3000fadbe39131dde6efe171efaa6f8697e29a5853fafc1b93bd9ba","ssdeep":"","tlshash":"6651668871b1dbc5bb0c638cd0964e1fe78a0d88d7360c686b7e5c6e619f4d0a9c875e","first_seen":"2026-08-31T07:53:45.102445Z","last_seen":"2026-08-31T08:58:57.918934Z","times_seen":2,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"stf.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}