{"report_id":"b4d98953-1a09-4672-9663-4fab216ab885","version":0,"status":"done","tags":[],"date":"2026-08-31T07:53:39Z","url":{"schema":"http","addr":"ops.bluefincesme.com/","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":0,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/login","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"title":"Festival Control · Bluefin Fest ’26","dom":{"size":8323,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8271), with no line terminators","md5":"7acd941bbf0bf2ba2f629d1078e288d2","sha1":"8483274d8682d52df476e9a2436cde6015b688cc","sha256":"934086f976aaf2b70c76cb7eb00fae0ee1fe12b0e303fcea679dcf32533801e8","sha512":"99c666fdae1235c587906da5b8f50685fea83c35874e9ad550c52eb7bef9f382c6cd32368df27eb6010a8edff99d0d8ea3284b1ee532c305b278a701611027b0","ssdeep":"192:R8nnnAZdXPyG/sBLRnFLz7xW0fy5p52b2POIw39U9rgnqzcpm4kg9w89j96NhQZg:nUjnTaZj4pHu","tlshash":"4d02641abc09de06ec7aad5c907f5f3b44c9cd7b823198a8eadccf1809c287517d6981","dom_hash":"domhasha354d75a61caa749e0b41c3b2cab41ee","first_seen":"2026-08-31T07:53:45.088073Z","last_seen":"2026-08-31T07:53:45.088073Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ops.bluefincesme.com/","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":0,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T07:53:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ops.bluefincesme.com","ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-31T07:53:40.581886Z","last_seen":"2026-08-31T07:53:40.581886Z","alert_count":36,"request_count":18,"received_data":579044,"sent_data":8763,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/turbopack-2atohua_id0m7.js","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e73c31e08dc50fcfa419413408409c5b","sha1":"ce8850411a8ca6d6b19ab3027b0744d4c7a1a882","sha256":"94b59f2992be2425ed1fb7fd7afb4d12058117b554de34344edf41e20dd1a7ad","sha512":"c52c00f56f1d9f94059345fe6ddef42def9fbf094a381aba9f857286d9bada8d80f5fc43afa4c28c57b6a4c2254adfa1c7bb1c9a4674430d6c231c482a0467af","ssdeep":"192:gnqdDKpb8YOsHl44IFHe89uQBT4qd3yB1WTZSayTe0S:gnqdGOe44ovFztOcY2","tlshash":"ef12c7da37e1f43353afa5eac07b4400e27a8469081e142cd39ca8f6387459a81f7f76","size":9725,"data":"","first_seen":"2026-08-31T07:53:45.098709Z","last_seen":"2026-08-31T08:58:57.913981Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/0f5hj116utj_4.js","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"62d203e34bf1a32da60a634269aaf21d","sha1":"44f4395cef05d572e97a58e25b13d39313f62648","sha256":"c40674c65bb858c56530adc0236f522855f6c7b69b2057a5a216f79bc326043e","sha512":"37809effc51b2cd9438799e0c26ad97b3ca54832ff4b8d6eb322a924649d50d1d9133bbf853b8c5c503c1f7d4c8b19a8f39aa6b4673af9dfab6492261fb4a0b4","ssdeep":"384:XCxqAC8vcpnk9c7PJjHWNBn4uGxTCjzBxk6hLoDK8W8pubbG3:lA8FvxkBx5o+6peG3","tlshash":"13c293a972d4f5d113a384f4843f401af23d1d7a245db0a0a3b2dceab9e454dd172faa","size":27510,"data":"","first_seen":"2026-08-31T07:53:45.105127Z","last_seen":"2026-08-31T08:58:57.909662Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/0xhc9erwik486.js","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b7e9bad6d9b04cd75a2b2ca07f138bc","sha1":"cb6b41182adf51d9027d5557257d355a4d8d8fac","sha256":"d470f688dfb942a8107862e15727a3beaff3a19c33fe688fb35572e78f8739ff","sha512":"f9c5151a90d902899d68f8f646b14746a5a60c0fe3e9ebe1aa7e35e66a5bbcfcddbbc9aed8c00be8f770fc4c9c566bf47cbdfaf992a44ae92db3fe86d7ac0483","ssdeep":"768:shuieP8/44Kl+wDYE8AvHMbpzmBW20Tu4tihe2KO:GpE8rpz3a4tiMO","tlshash":"87c28645b195faede92a05c4402fd00df23f3e9dcd4d8874baa86c651e244d9b223fda","size":25886,"data":"","first_seen":"2026-08-31T07:53:45.106327Z","last_seen":"2026-08-31T07:53:45.106327Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/1s17ht58k_9m9.js","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"cee8237bc9492811aeb0ca2f5b22a5f6","sha1":"f4a9156992e69268a37ca5d8d5f0a6881fe1a6b7","sha256":"5e91dde6e814bbbe1ca14790493393b5102186edaed8fc789b0ec02ad6e580be","sha512":"340f0f192e71d137abaa6db2669bc29ff075515bee84521cd5582af5d3a044721f6e9cbed2767625fed74403da269e12cfa276bc4f91267421d475625ef955de","ssdeep":"3072:M/zVfOaJjlHynRo/KfdEPZgwR+7IINg7/:M/zVfOaJhSnRo1ZgwR+7IINg7/","tlshash":"d6f3e6f935d5f4820bab41aac03f0006f22c4d77189e6860e3e5dcda756465de1b3faa","size":160041,"data":"","first_seen":"2026-08-31T07:53:45.092671Z","last_seen":"2026-08-31T08:58:57.902346Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-31T12:32:00.292172Z","times_seen":244246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e7603040038ed6565c24d2b0ec11898","sha1":"854766a71cdbc93f4412d0d1606ef61906e540ea","sha256":"ab20f2bb3d605015c9cdc186f706141658f72b120ea485738a33d1355967ba5f","sha512":"c6792f69d54106ae8254ed92bb25be12052d012f7a095a8b844eea2531a44875362d65f8cf9e086f381ddc788e433079062d1cc02502704b80b74c92a582aecb","ssdeep":"96:LYfy5p52b2Pk3W34H39U9ja7cg1xqzc/xmWBkg94H89NI/w9TkxX:cfy5p52b2POIw39U9rgnqzcpm4kg9w88","tlshash":"dca1d12ea805ed4aecbe6d2d013f9d3614cdc97b43a5d9f8e6ccce14098647927d69c0","size":4946,"data":"","first_seen":"2026-08-31T07:53:45.108767Z","last_seen":"2026-08-31T07:53:45.108767Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/0kv094s3oskx1.js","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1295a794638264317d92b80a03cb61dc","sha1":"935129dd90b667ca3ee6007f01245d20401df57f","sha256":"5e8c737e76f33aafffec916f699d764e36b7d20c5dac60755e9a20a431b1d5ea","sha512":"2ec8d64fd7ca0cfcc9a374fa29bc5ac5368fb01418ebe32f0f6a2833e07cacdef2f32b0e8791f7106718d6404a281467bb5471011baf03047fa5a36ab2815c31","ssdeep":"192:MwLDhEBx0I+NfQZP1wD4o1X8y43wWu6zQZwFDKw6PTMwNGAw7wk:NEb0IvS42uV3DKw6Pwt","tlshash":"8342a562b2d5fce1279b00950837600af2261c3a563db475b7f58cf66a804ddbd26bec","size":12657,"data":"","first_seen":"2026-08-31T07:53:45.094966Z","last_seen":"2026-08-31T08:58:57.908168Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/0b5vx6fhox00r.js","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"45c19c648fa95128803c1eb3b5624256","sha1":"e1f3f37e8e20d6d4992c6fdf9e40ea2d88864891","sha256":"1e708cbd7b93c2d2f74c367d7bcbaf5c82438bdab8401fd10b95e95b87e1b05c","sha512":"754412da5f58cca805797b667be694f00a8f3268ea79db11a554a8b7eb4491ef3365dcb88c963dedbf59d1d44a506c42c6285bf12bd47e4d958958c3c54fdf93","ssdeep":"192:KiMLn3mQOR/kOH7fRDRkG4vU0hEMzdcfpDe5cO28A4TeMq0thxAR0:KhOR/h7fRDRkGEEMze05cO2D0","tlshash":"5a52637132d0f8d1229f89e5c4364019f26d1d7a219e70a4b7e6ccfe36d198de0a1fa9","size":14383,"data":"","first_seen":"2026-08-31T07:53:45.099949Z","last_seen":"2026-08-31T08:58:57.893986Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/3n3olhs5ilgq6.js","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"29bd6a23112ca93ebbd5c85458fea254","sha1":"99c881b2d61b1533593dc7f4ff26226d22cc9bc5","sha256":"58a3c97376346caa2e00a72cdd2618a8726bffba4ca6b5a8bb43d4312bda33f8","sha512":"504e1baad0182cd844335e492dca9674a76098efe08efd6e7de90dbafbb18e2ce63889775704accce2725f952c78f2fb2aafe3d4602fca3a52cff07f0702de84","ssdeep":"3072:JLt7mScnU3pFdviCm0H8hTSXkhPK+0fDwzeCaJ9561:JLt7mScnU3pFdFGPmweCaJ9561","tlshash":"be24fbe83995f6626ab302a710af1403b338252b280d4d60b711fdddb57845eb17bf9e","size":229162,"data":"","first_seen":"2026-08-31T07:53:45.097498Z","last_seen":"2026-08-31T08:58:57.901344Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/15lo_4r9nnezs.js","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce6832fd987c8c19927e471fd906288c","sha1":"1cf386bf47c0e8857572f451b3e93f5dfcea2dea","sha256":"612103be4eeba2eab30a58e5a2e19eadcc4911091f98c6895fc97357dc4e9e0f","sha512":"f092ca1eee38793e02f6f0d36fb58e3cb4a81092d22dd25dec838c834e5069050fe29938f3000fadbe39131dde6efe171efaa6f8697e29a5853fafc1b93bd9ba","ssdeep":"","tlshash":"6651668871b1dbc5bb0c638cd0964e1fe78a0d88d7360c686b7e5c6e619f4d0a9c875e","size":2728,"data":"","first_seen":"2026-08-31T07:53:45.102445Z","last_seen":"2026-08-31T08:58:57.918934Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/441enx4unfrw0.css","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ops.bluefincesme.com/ops","date":"2026-08-31T07:53:09.116Z","timestamp":1788162789116,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/441enx4unfrw0.css HTTP/1.1\r\nHost: ops.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ops.bluefincesme.com/ops\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 07:53:09 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"116a-1a05488bdcd\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: ops.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4458,"size_decoded":1798,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (4457)","md5":"cd31d81157e1b13b8f1566e1f9f56a67","sha1":"0d74cdfff926f30d785b0e9755131681343edd2c","sha256":"21408ba042e4003cfca0c78d1fe7ea44e4f484550cb11e39bd4333f2ddf1359e","sha512":"f0ea896d6bd0ab2d926b7431ff01cb7f1239cb1b5a2c9607a2a58ca7986e35a3f212da17218b3ba12003dff4fb4431641010f4dd7a85a72517c816693159a451","ssdeep":"48:5SoktqqdlVUicsyQVsdkqcCIcEZM7xacVsXo5Xh8YPlmBGFE6iAW21Q66ccs+Bn:cVl0syApFZMVXB9PlEpAR1Q6cvBn","tlshash":"d891de6b72a193daf029e28df0805fcbeb85519a611b0abcdce952dcc8db07247a5345","first_seen":"2026-08-31T07:53:45.089548Z","last_seen":"2026-08-31T08:58:57.920236Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T07:53:07.339Z","timestamp":1788162787339,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ops.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 07:53:07 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nLocation: https://ops.bluefincesme.com/ops\r\nConnection: keep-alive\r\nX-Bluefin-Subdomain-Gateway: ops.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T12:32:54.847037Z","times_seen":18202287,"resource_available":true,"data":null}},"time_used":472,"timings":{"blocked":0,"dns":44,"connect":78,"send":0,"wait":78,"receive":0,"ssl":271},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/204db102rnu2r.css","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ops.bluefincesme.com/ops","date":"2026-08-31T07:53:08.333Z","timestamp":1788162788333,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/204db102rnu2r.css HTTP/1.1\r\nHost: ops.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ops.bluefincesme.com/ops\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 07:53:08 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"75a7-1a05488be1a\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: ops.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30119,"size_decoded":7859,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (30118)","md5":"fe3fbc3d58ef21d19e7f2182523155b6","sha1":"23e56f685dfd6d05ffc3b9f738ec512600848909","sha256":"e245528c648a2f859ab7fa490eab0f8cd07a87062803e3ad6aaf3417ac2f30f8","sha512":"cf4f0770602b999e29c79fdaaa193e144a0cde70cb7a6d75905aabd89c7d788bdf6f21b44fd460d4f57cdf0283d42cb3687472331059b9f90a2601a22f0e39e0","ssdeep":"384:Cvon+C3DNEdKydU4eAURJk8MTlIhAnruHuXauYxUuB4XyTpMVNZ5sHUXHSHRCYe+:Cvo+cZEdbLGD6nr4IQxUQAsCg51V00","tlshash":"3bd25073a2582128b47be8e5ea9167deb054e417e42303f8ed94f625c8db1e32737b05","first_seen":"2026-08-31T07:53:45.09147Z","last_seen":"2026-08-31T08:58:57.906435Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/1s17ht58k_9m9.js","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ops.bluefincesme.com/ops","date":"2026-08-31T07:53:08.341Z","timestamp":1788162788341,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/1s17ht58k_9m9.js HTTP/1.1\r\nHost: ops.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ops.bluefincesme.com/ops\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 07:53:08 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"27129-1a05488bdf2\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: ops.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":160041,"size_decoded":44338,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (36928)","md5":"cee8237bc9492811aeb0ca2f5b22a5f6","sha1":"f4a9156992e69268a37ca5d8d5f0a6881fe1a6b7","sha256":"5e91dde6e814bbbe1ca14790493393b5102186edaed8fc789b0ec02ad6e580be","sha512":"340f0f192e71d137abaa6db2669bc29ff075515bee84521cd5582af5d3a044721f6e9cbed2767625fed74403da269e12cfa276bc4f91267421d475625ef955de","ssdeep":"3072:M/zVfOaJjlHynRo/KfdEPZgwR+7IINg7/:M/zVfOaJhSnRo1ZgwR+7IINg7/","tlshash":"d6f3e6f935d5f4820bab41aac03f0006f22c4d77189e6860e3e5dcda756465de1b3faa","first_seen":"2026-08-31T07:53:45.092671Z","last_seen":"2026-08-31T08:58:57.902346Z","times_seen":2,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":74,"send":0,"wait":84,"receive":79,"ssl":153},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/37xt2r74isxma.css","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ops.bluefincesme.com/ops","date":"2026-08-31T07:53:08.335Z","timestamp":1788162788335,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/37xt2r74isxma.css HTTP/1.1\r\nHost: ops.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ops.bluefincesme.com/ops\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 07:53:08 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"973b-1a05488be5f\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: ops.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38715,"size_decoded":7040,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (9171)","md5":"be9ca072ec05dc012cc6417f757751f4","sha1":"f6dfaaeb8569bacb6f5bd64be945a7d5a70ce7d8","sha256":"34d6818e7077a5789c403781c4a974560d63c8b61b64074162fd2877e46f2c18","sha512":"651307ef22b0d4e45591d07549f3f41dc2d7f24ccc3014e246041fbec987cb4194ace00399e1e346cddac815539a6321ac9ca393dcb6e6527199baaf0ae394f1","ssdeep":"768:ftbVxJdm8V23+GNVAWrGBayfrqAYHLrJrgVWOVH5W2DS2uA5Gypil1x6EjOUcPSE:ftn12OGNVAyGBayfrqAYHLrJrgVWOVHX","tlshash":"8303787366e0171bb1afc0a9fc409edafad084df811217eceeeca29988961d757f1504","first_seen":"2026-08-31T07:53:45.093837Z","last_seen":"2026-08-31T08:58:57.899779Z","times_seen":2,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":74,"send":0,"wait":105,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/0kv094s3oskx1.js","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ops.bluefincesme.com/ops","date":"2026-08-31T07:53:08.337Z","timestamp":1788162788337,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/0kv094s3oskx1.js HTTP/1.1\r\nHost: ops.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ops.bluefincesme.com/ops\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 07:53:08 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"3171-1a05488bd8f\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: ops.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12657,"size_decoded":4047,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9737)","md5":"1295a794638264317d92b80a03cb61dc","sha1":"935129dd90b667ca3ee6007f01245d20401df57f","sha256":"5e8c737e76f33aafffec916f699d764e36b7d20c5dac60755e9a20a431b1d5ea","sha512":"2ec8d64fd7ca0cfcc9a374fa29bc5ac5368fb01418ebe32f0f6a2833e07cacdef2f32b0e8791f7106718d6404a281467bb5471011baf03047fa5a36ab2815c31","ssdeep":"192:MwLDhEBx0I+NfQZP1wD4o1X8y43wWu6zQZwFDKw6PTMwNGAw7wk:NEb0IvS42uV3DKw6Pwt","tlshash":"8342a562b2d5fce1279b00950837600af2261c3a563db475b7f58cf66a804ddbd26bec","first_seen":"2026-08-31T07:53:45.094966Z","last_seen":"2026-08-31T08:58:57.908168Z","times_seen":2,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":74,"send":0,"wait":81,"receive":1,"ssl":132},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/api/auth/me","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ops.bluefincesme.com/ops","date":"2026-08-31T07:53:08.910Z","timestamp":1788162788910,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /api/auth/me HTTP/1.1\r\nHost: ops.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ops.bluefincesme.com/ops\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 401 Unauthorized\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 07:53:08 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 78\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nETag: W/\"4e-8si1XGa0loKM9WDH7CBAe1oB2OY\"\r\nX-Bluefin-Subdomain-Gateway: ops.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78,"size_decoded":413,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3dabbb5de8166c6988bc9a2c0153f22e","sha1":"f2c8b55c66b496828cf560c7ec20407b5a01d8e6","sha256":"a2bd13eb04402d8fecf265136d04c7f1614f25780e446fdf35c5c61b0cc8e378","sha512":"7fc6ff01935ed8307298a6dd5a0d29eec84482414098311491ba360dd101d6ab8a523ecf996f6cc4e9af946c562ba81eb994124cbee33bdab08b8891529a79f5","ssdeep":"","tlshash":"c3a0228202cc3c2fbfa302a3b20e0e308a23c8fc8a820c0300c8e83800c2288c3030e0","first_seen":"2026-08-01T16:28:41.152395Z","last_seen":"2026-08-31T08:58:57.903448Z","times_seen":3,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/3n3olhs5ilgq6.js","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ops.bluefincesme.com/ops","date":"2026-08-31T07:53:08.340Z","timestamp":1788162788340,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/3n3olhs5ilgq6.js HTTP/1.1\r\nHost: ops.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ops.bluefincesme.com/ops\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 07:53:08 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"37f2a-1a05488bdba\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: ops.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":229162,"size_decoded":72107,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"29bd6a23112ca93ebbd5c85458fea254","sha1":"99c881b2d61b1533593dc7f4ff26226d22cc9bc5","sha256":"58a3c97376346caa2e00a72cdd2618a8726bffba4ca6b5a8bb43d4312bda33f8","sha512":"504e1baad0182cd844335e492dca9674a76098efe08efd6e7de90dbafbb18e2ce63889775704accce2725f952c78f2fb2aafe3d4602fca3a52cff07f0702de84","ssdeep":"3072:JLt7mScnU3pFdviCm0H8hTSXkhPK+0fDwzeCaJ9561:JLt7mScnU3pFdFGPmweCaJ9561","tlshash":"be24fbe83995f6626ab302a710af1403b338252b280d4d60b711fdddb57845eb17bf9e","first_seen":"2026-08-31T07:53:45.097498Z","last_seen":"2026-08-31T08:58:57.901344Z","times_seen":2,"resource_available":true,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":73,"send":0,"wait":89,"receive":148,"ssl":176},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/turbopack-2atohua_id0m7.js","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ops.bluefincesme.com/ops","date":"2026-08-31T07:53:08.343Z","timestamp":1788162788343,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/turbopack-2atohua_id0m7.js HTTP/1.1\r\nHost: ops.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ops.bluefincesme.com/ops\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 07:53:08 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"25fd-1a05488be20\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: ops.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9725,"size_decoded":4324,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9725), with no line terminators","md5":"e73c31e08dc50fcfa419413408409c5b","sha1":"ce8850411a8ca6d6b19ab3027b0744d4c7a1a882","sha256":"94b59f2992be2425ed1fb7fd7afb4d12058117b554de34344edf41e20dd1a7ad","sha512":"c52c00f56f1d9f94059345fe6ddef42def9fbf094a381aba9f857286d9bada8d80f5fc43afa4c28c57b6a4c2254adfa1c7bb1c9a4674430d6c231c482a0467af","ssdeep":"192:gnqdDKpb8YOsHl44IFHe89uQBT4qd3yB1WTZSayTe0S:gnqdGOe44ovFztOcY2","tlshash":"ef12c7da37e1f43353afa5eac07b4400e27a8469081e142cd39ca8f6387459a81f7f76","first_seen":"2026-08-31T07:53:45.098709Z","last_seen":"2026-08-31T08:58:57.913981Z","times_seen":2,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/0b5vx6fhox00r.js","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ops.bluefincesme.com/ops","date":"2026-08-31T07:53:08.344Z","timestamp":1788162788344,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/0b5vx6fhox00r.js HTTP/1.1\r\nHost: ops.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ops.bluefincesme.com/ops\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 07:53:08 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"382f-1a05488be61\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: ops.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14383,"size_decoded":4126,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14381), with no line terminators","md5":"45c19c648fa95128803c1eb3b5624256","sha1":"e1f3f37e8e20d6d4992c6fdf9e40ea2d88864891","sha256":"1e708cbd7b93c2d2f74c367d7bcbaf5c82438bdab8401fd10b95e95b87e1b05c","sha512":"754412da5f58cca805797b667be694f00a8f3268ea79db11a554a8b7eb4491ef3365dcb88c963dedbf59d1d44a506c42c6285bf12bd47e4d958958c3c54fdf93","ssdeep":"192:KiMLn3mQOR/kOH7fRDRkG4vU0hEMzdcfpDe5cO28A4TeMq0thxAR0:KhOR/h7fRDRkGEEMze05cO2D0","tlshash":"5a52637132d0f8d1229f89e5c4364019f26d1d7a219e70a4b7e6ccfe36d198de0a1fa9","first_seen":"2026-08-31T07:53:45.099949Z","last_seen":"2026-08-31T08:58:57.893986Z","times_seen":2,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":231,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/login?_rsc=QLBdCDjfpGkLRHBX","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ops.bluefincesme.com/ops","date":"2026-08-31T07:53:09.003Z","timestamp":1788162789003,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/login?_rsc=QLBdCDjfpGkLRHBX HTTP/1.1\r\nHost: ops.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ops.bluefincesme.com/ops\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%2C4608%5D%7D%2Cnull%2Cnull%2C4624%5D\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 07:53:09 GMT\r\nContent-Type: text/x-component; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nCache-Control: s-maxage=31536000\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: ops.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6131,"size_decoded":2415,"mime_type":"text/x-component; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (4942)","md5":"de0250f48084e2aed2ec5110081deb91","sha1":"cc67756228300ae52319415cdc9f7d862947b56d","sha256":"a0a6a94b66667bbe98fb94d1fff94d4ee37345e402e7a7d8b485befd689d9c17","sha512":"9fca063ae77ccd8af1f78592eb843f561f0abb32c893dea98c86053ed3a53c794c37a732b045b22a58489d50be2af43c2065a1204511ca33279b01a2b47bd5ac","ssdeep":"96:0xMZBMaBgCLtZE3NMzDfUHDAz/kM/VwZSj/BjAjHjEfhjvR8jOBjWjdjFnjRjQ3m:0xMZBMaBgCZcivIAz/HN/TB8rAh18KB8","tlshash":"c0c1af3a5a099e7e6e7b41d8802fc70b628e493b13654cf5c9ed9e1817911366bcb3c1","first_seen":"2026-08-31T07:53:45.101284Z","last_seen":"2026-08-31T08:58:57.917369Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/15lo_4r9nnezs.js","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ops.bluefincesme.com/ops","date":"2026-08-31T07:53:09.237Z","timestamp":1788162789237,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/15lo_4r9nnezs.js HTTP/1.1\r\nHost: ops.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ops.bluefincesme.com/ops/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 07:53:09 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"aa8-1a05488be18\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: ops.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2728,"size_decoded":1722,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2704), with no line terminators","md5":"ce6832fd987c8c19927e471fd906288c","sha1":"1cf386bf47c0e8857572f451b3e93f5dfcea2dea","sha256":"612103be4eeba2eab30a58e5a2e19eadcc4911091f98c6895fc97357dc4e9e0f","sha512":"f092ca1eee38793e02f6f0d36fb58e3cb4a81092d22dd25dec838c834e5069050fe29938f3000fadbe39131dde6efe171efaa6f8697e29a5853fafc1b93bd9ba","ssdeep":"","tlshash":"6651668871b1dbc5bb0c638cd0964e1fe78a0d88d7360c686b7e5c6e619f4d0a9c875e","first_seen":"2026-08-31T07:53:45.102445Z","last_seen":"2026-08-31T08:58:57.918934Z","times_seen":2,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/api/auth/me","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ops.bluefincesme.com/ops","date":"2026-08-31T07:53:09.242Z","timestamp":1788162789242,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /api/auth/me HTTP/1.1\r\nHost: ops.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ops.bluefincesme.com/ops/login\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 401 Unauthorized\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 07:53:09 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 78\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nETag: W/\"4e-8si1XGa0loKM9WDH7CBAe1oB2OY\"\r\nX-Bluefin-Subdomain-Gateway: ops.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78,"size_decoded":413,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3dabbb5de8166c6988bc9a2c0153f22e","sha1":"f2c8b55c66b496828cf560c7ec20407b5a01d8e6","sha256":"a2bd13eb04402d8fecf265136d04c7f1614f25780e446fdf35c5c61b0cc8e378","sha512":"7fc6ff01935ed8307298a6dd5a0d29eec84482414098311491ba360dd101d6ab8a523ecf996f6cc4e9af946c562ba81eb994124cbee33bdab08b8891529a79f5","ssdeep":"","tlshash":"c3a0228202cc3c2fbfa302a3b20e0e308a23c8fc8a820c0300c8e83800c2288c3030e0","first_seen":"2026-08-01T16:28:41.152395Z","last_seen":"2026-08-31T08:58:57.903448Z","times_seen":3,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T07:53:07.819Z","timestamp":1788162787819,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops HTTP/1.1\r\nHost: ops.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 07:53:07 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nCache-Control: s-maxage=31536000\r\nETag: \"cth7rmptuv55d\"\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: ops.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6696,"size_decoded":2551,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6673), with no line terminators","md5":"b0367d4d501afa606103f21fcd37e8ac","sha1":"271df7d5a01c6ec61d3d8246b552ce6f791be4f4","sha256":"8f6d15191f276f8078c4f644684390c38b0d500dfd1ff7a7c95a92d8acf07bad","sha512":"085104e3a64d260597e64726e2ca9be56e234b46eebc9e39d185901c0564bb8afe2729d87d732c2ed59aa8bfa4bc334ed782b77c10b76831b62b7170d946e0a5","ssdeep":"192:58MnU98PyG/sB1JxneE0fy5p52b2POIw39U9rgnqzcpm4kg9w89j96+:C1HedTaZ+","tlshash":"a9d1022aac04ed0adcba6d6d413e9e3b14cd8d7b8265d9f8e6ccde080ac157617d6dc0","first_seen":"2026-08-31T07:53:45.103923Z","last_seen":"2026-08-31T07:53:45.103923Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/0f5hj116utj_4.js","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ops.bluefincesme.com/ops","date":"2026-08-31T07:53:08.338Z","timestamp":1788162788338,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/0f5hj116utj_4.js HTTP/1.1\r\nHost: ops.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ops.bluefincesme.com/ops\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 07:53:08 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"6b76-1a05488be6d\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: ops.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27510,"size_decoded":7821,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (27510), with no line terminators","md5":"62d203e34bf1a32da60a634269aaf21d","sha1":"44f4395cef05d572e97a58e25b13d39313f62648","sha256":"c40674c65bb858c56530adc0236f522855f6c7b69b2057a5a216f79bc326043e","sha512":"37809effc51b2cd9438799e0c26ad97b3ca54832ff4b8d6eb322a924649d50d1d9133bbf853b8c5c503c1f7d4c8b19a8f39aa6b4673af9dfab6492261fb4a0b4","ssdeep":"384:XCxqAC8vcpnk9c7PJjHWNBn4uGxTCjzBxk6hLoDK8W8pubbG3:lA8FvxkBx5o+6peG3","tlshash":"13c293a972d4f5d113a384f4843f401af23d1d7a245db0a0a3b2dceab9e454dd172faa","first_seen":"2026-08-31T07:53:45.105127Z","last_seen":"2026-08-31T08:58:57.909662Z","times_seen":2,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":78,"send":0,"wait":88,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/0xhc9erwik486.js","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ops.bluefincesme.com/ops","date":"2026-08-31T07:53:08.346Z","timestamp":1788162788346,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/0xhc9erwik486.js HTTP/1.1\r\nHost: ops.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ops.bluefincesme.com/ops\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 07:53:08 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"651e-1a05488bdb2\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: ops.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25886,"size_decoded":9185,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25754), with no line terminators","md5":"5b7e9bad6d9b04cd75a2b2ca07f138bc","sha1":"cb6b41182adf51d9027d5557257d355a4d8d8fac","sha256":"d470f688dfb942a8107862e15727a3beaff3a19c33fe688fb35572e78f8739ff","sha512":"f9c5151a90d902899d68f8f646b14746a5a60c0fe3e9ebe1aa7e35e66a5bbcfcddbbc9aed8c00be8f770fc4c9c566bf47cbdfaf992a44ae92db3fe86d7ac0483","ssdeep":"768:shuieP8/44Kl+wDYE8AvHMbpzmBW20Tu4tihe2KO:GpE8rpz3a4tiMO","tlshash":"87c28645b195faede92a05c4402fd00df23f3e9dcd4d8874baa86c651e244d9b223fda","first_seen":"2026-08-31T07:53:45.106327Z","last_seen":"2026-08-31T07:53:45.106327Z","times_seen":1,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":271,"dns":0,"connect":0,"send":0,"wait":93,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/favicon.ico","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ops.bluefincesme.com/ops","date":"2026-08-31T07:53:08.832Z","timestamp":1788162788832,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ops.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ops.bluefincesme.com/ops\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 07:53:08 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nVary: Accept-Encoding\r\nX-Bluefin-Subdomain-Gateway: ops.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9,"size_decoded":373,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-08-31T11:44:03.360023Z","times_seen":90228,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ops.bluefincesme.com/ops/_next/static/chunks/15lo_4r9nnezs.js","fqdn":"ops.bluefincesme.com","domain":"bluefincesme.com","tld":"com"},"ip":{"addr":"85.105.131.170","port":443,"asn":47331,"as":"Turk Telekom","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ops.bluefincesme.com/ops","date":"2026-08-31T07:53:09.114Z","timestamp":1788162789114,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ops.bluefincesme.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 18:55:12 GMT","end":"Fri, 27 Nov 2026 18:55:11 GMT"},"fingerprint":{"sha1":"51:72:BE:BD:32:17:CC:90:6F:F7:3A:5C:01:56:48:A2:DB:6A:16:11","sha256":"31:62:6B:5D:C0:A6:BA:69:35:CC:DE:CB:CF:DE:C6:1A:44:C6:A8:14:AE:57:90:1B:91:71:CF:C1:5D:AB:E2:50"}}},"request":{"raw":"GET /ops/_next/static/chunks/15lo_4r9nnezs.js HTTP/1.1\r\nHost: ops.bluefincesme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ops.bluefincesme.com/ops\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 31 Aug 2026 07:53:09 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Sun, 30 Aug 2026 21:17:22 GMT\r\nETag: W/\"aa8-1a05488be18\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Bluefin-Subdomain-Gateway: ops.bluefincesme.com-\u003edirect-ops-3004\r\nX-Bluefin-RSC-Charset: utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2728,"size_decoded":1722,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2704), with no line terminators","md5":"ce6832fd987c8c19927e471fd906288c","sha1":"1cf386bf47c0e8857572f451b3e93f5dfcea2dea","sha256":"612103be4eeba2eab30a58e5a2e19eadcc4911091f98c6895fc97357dc4e9e0f","sha512":"f092ca1eee38793e02f6f0d36fb58e3cb4a81092d22dd25dec838c834e5069050fe29938f3000fadbe39131dde6efe171efaa6f8697e29a5853fafc1b93bd9ba","ssdeep":"","tlshash":"6651668871b1dbc5bb0c638cd0964e1fe78a0d88d7360c686b7e5c6e619f4d0a9c875e","first_seen":"2026-08-31T07:53:45.102445Z","last_seen":"2026-08-31T08:58:57.918934Z","times_seen":2,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ops.bluefincesme.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}