diff --git a/blueteam/auto.sh b/blueteam/auto.sh
deleted file mode 100644
index f983800..0000000
--- a/blueteam/auto.sh
+++ /dev/null
@@ -1,5 +0,0 @@
-#!/usr/bin/env bash
-
-
-curl -L https://hackhpi.kyudev.xyz/api/red -X POST -H "Content-Type: application/json" -d "{\"data\": \"Start of post-exploitation\", \"timestamp\": \"$(date +%s)\"}"
-curl -L https://hackhpi.kyudev.xyz/api/blue -X POST -H "Content-Type: application/json" -d "{\"data\": \"\", \"timestamp\": \"$(date +%s)\"}"
diff --git a/blueteam/blueteam1.sh b/blueteam/blueteam1.sh
new file mode 100755
index 0000000..c2493e8
--- /dev/null
+++ b/blueteam/blueteam1.sh
@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+
+domain=hackhpi23.timo.one
+
+curl -L https://${domain}/api/red -X POST -H "Content-Type: application/json" -d "{\"data\": \"Start of post-exploitation\", \"timestamp\": \"$(date +%s)\"}"
+
+curl -L https://${domain}/api/blue -X POST -H "Content-Type: application/json" -d "{\"data\": \"<b style='color: yellow'>Snort: Intrusion Detected!</b>\", \"timestamp\": \"$(date +%s)\"}"