{"report_id":"28ffd766-19d1-4d40-a9da-1a638ab521de","version":6,"status":"done","tags":[],"date":"2026-02-15T11:02:49Z","url":{"schema":"https","addr":"blue-invest.org/de","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"blue-invest.org/de","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"title":"BLUE INVESTMENT PARTNERS LTD","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"blue-invest.org/de","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-22T11:02:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-15","alert":"Hunting_JS_WebAssembly","trigger":"cdn.lrkt-in.com/logger-1.min.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"api.blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.blue-invest.org","ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-16","domain_rank":0,"first_seen":"2026-02-15T11:02:52.252463Z","last_seen":"2026-02-15T11:02:52.252463Z","alert_count":2,"request_count":2,"received_data":19283,"sent_data":899,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.lrkt-in.com","ip":{"addr":"172.67.132.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-28","domain_rank":91220,"first_seen":"2024-08-30T10:03:39Z","last_seen":"2026-02-08T11:27:59.625144Z","alert_count":1,"request_count":1,"received_data":817525,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}]},{"fqdn":"blue-invest.org","ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-16","domain_rank":0,"first_seen":"2026-02-15T11:02:52.249963Z","last_seen":"2026-02-15T11:02:52.249963Z","alert_count":43,"request_count":43,"received_data":4186683,"sent_data":20781,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"blue-invest.org/_next/static/chunks/framework-5f2acf0e54e464e8.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"349870dbae5e98d35f9d7dbe4a66f431","sha1":"e14571f2161a7a7702c2edb9cc1a0209995a3b2e","sha256":"783b190c1b3aaf6415cf79a1e011aa638c5b815ec6db0a6aa4358f1bee8bab60","sha512":"f5795f89b30e832c8d98b40ab34e7dd75a87f61af8627f2da6068de4d3873521fd6cd9d5db57c2e96a1c09bddbace8078c72fe002c0a2b43749a9277d1ca2303","ssdeep":"1536:MlSq4vldLMp5KZKIxm4Ea+36UEaXcfhKWWrQe:MUVe5IxgELNe","tlshash":"ffe309e83996f5526ab311a700df2803733d1a1b280c4960a615fd9eb5b842fb17bfdd","size":148134,"data":"","first_seen":"2025-01-10T05:21:25.003403Z","last_seen":"2026-04-08T04:13:44.557508Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/MbfozOhnFzuISJNw7t-4D/_buildManifest.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb2ac8b3f47a55ed34c17f552a5d0cf9","sha1":"f63168095f728cdb1cd8033723eb3710db0980bf","sha256":"8c79d6858bf5e7a1f08880195a93c29fdc2540bd58e8d8d58580995a775f17ce","sha512":"036151258eee6c920e4d643a1a27058aee544b0c399ea420c43705ccdfce116961c886034d9d21921354723d6ace671d3abbe40059a4d9bad2a2143478472c0c","ssdeep":"","tlshash":"d561ab134401f6199de0dee9b02f5322cac0ca33aa76d5c187dd5f6c01925ea9fbd823","size":3464,"data":"","first_seen":"2026-02-15T11:02:56.270861Z","last_seen":"2026-02-15T11:06:28.921118Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/chunks/2273.f10a57af40bd465f.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72482a0b86de70ce97e995e7e9767cd3","sha1":"55b6fd07abeb9178fdc65f31866db3f82ebe9a36","sha256":"7e6f23c44fff877df35481e79d39b848956fa140eeafb183140f39756fd213b7","sha512":"3723d2c327e4a19bdd828a5c8ded95fa83be31e8a03600f43a55eb26942ea8208de398f13e61ef880b8eb11126ef82c85bff74c71684332aeae9a6a32d3b9202","ssdeep":"192:jXHgoiWORR5ENzhjRILZ+TgcUKvuvmpl3Zhqn5oJ1JaVfw+:LHgRRR5ENtNtthyVfw+","tlshash":"d302c6b53741b076e3df576e806f432db3b7118530039828d2a89cd66d616b682e3fa9","size":8250,"data":"","first_seen":"2026-02-15T11:02:56.277625Z","last_seen":"2026-04-08T04:13:44.571948Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/tradingview/charting_library.standalone.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"245007392b6340cec37f49a558af50e8","sha1":"7b23aef994ae02331b1da913091707d09d1b96ee","sha256":"aeaf9a383cba07c0d52439f40f73a3091539eb123aabc8bb48ebcf06213a205e","sha512":"65c3b0a20bf187ea750641ac78b347e78a717eab6bba2c2e2c67097b5ddae6c5720f268d521fcb7a288a950a57f4fefe756e16af3f9a120676df2b8d016d3850","ssdeep":"384:wkkcU8h/juT6F0GratOOlsWQK+8No3Vs3dVSQNX4Gsi0Xh+5/ISJhvHIh6egPh3c:/kcU8h2DlJTNyQh4G0h+5//JhvHIh6eJ","tlshash":"7ea21a509a35b83b06cf4af8817b18079127ef60b409889c3854aacc55fc9c6e57bff9","size":21962,"data":"","first_seen":"2026-02-15T11:02:56.29174Z","last_seen":"2026-04-08T04:13:44.582394Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/MbfozOhnFzuISJNw7t-4D/_ssgManifest.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-05-25T11:38:34.782855Z","times_seen":227868,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/chunks/pages/index-e6cdc6aed7e6dc0c.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b669956472365dd2c016c79a76057dff","sha1":"8f1ab032ff7e6ed8782bdb50ff35f185d631a44c","sha256":"1c7d0dfb527b150cb28321d3c00aff030927a8d84a91564e0bc9e5bc0677783b","sha512":"972e876bd94ae2998ff3749bbfa73a267774ae30cf883df23f52c79351c74fbd1335840358749500f0d3a19557f39666b0782ddb4ad01be48ed466fce27de5b1","ssdeep":"","tlshash":"3b21f408b9f2f85421a28cfc843b1c1b933f360418adbc7590a19dd56eb074eb292d6d","size":1397,"data":"","first_seen":"2026-02-15T11:02:56.294404Z","last_seen":"2026-04-08T04:13:44.603609Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/chunks/webpack-b5e10820ab328258.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84a458a35a7bd885c09c10d4d22949e5","sha1":"be5c6427830b53d433d2109a6512de69002b9e7e","sha256":"6a1a548df0446518df563e66e1d470164c5fec29f2d5368093e9d0584bfbd498","sha512":"49fc8e52d0f845e3379ca93fc89e3e57176b6db003c40fcc5a1246b9677ac7b01546cc0238708dd61c3d94121c0f267041b3887f0a53403fa0a6d32e41d69433","ssdeep":"384:JSJQNC6+URlBB7AvMt1kN0g4Snx1pcEr8wki6f9OvdtqT8:B+mBB7/8yOx1pcEr8pi6fKdtqw","tlshash":"5b424b9e371df4d9396209e05c3b6499b17c7432381a88e0d289d6f95c78eec9233fa5","size":12853,"data":"","first_seen":"2026-02-15T11:02:56.272992Z","last_seen":"2026-02-15T11:06:28.917267Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/chunks/main-6a9d4d5daea4a5c2.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"26860551d244d553c54ef5247658892b","sha1":"a4addaba11374d7d50b901cb0538b6c414fb0b08","sha256":"5853e7d4912c6acd65a392521f702e5ded19ccb8b26627160a208bb3e2b9d4a3","sha512":"c0635bb2a61efd7e74f77ae2a2cdae30bf9b93acd45816c9558603637e355e86227ce90cdfa19d83645d40e17d8a760422b8b6498b425787a9962f440da03bb6","ssdeep":"1536:5B9B5dQXwwSB/OZKm8V9GZgpf/Y9KNPJSWNDWkrSjm2z4u1EY:5SnSBbbSg9NhSQDNSjmkJEY","tlshash":"11c3fab6b6d1f8a203c741e4843b0006f36a1dbe145f6045f3aadcd6b96499da0f3f69","size":119218,"data":"","first_seen":"2026-02-15T11:02:56.260712Z","last_seen":"2026-04-20T20:06:12.750017Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/chunks/pages/_app-40f396c48faecfd5.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cf182dcee7b5bdee75ffa99aa9e0ded","sha1":"60e99f8ce2a357151f3c3a037526e80e204c9312","sha256":"849f46a0e2a1d4af739e8867b53e18e335289ce2f74ec703b0fd4b85e89f0d58","sha512":"85cf2f7c28a3be3d90acbe2b85ea59228567792caa556cea830d8aaa3c460953523410ee981d3f4f91fa968f93237d417a9b1fabfbd2f3126b318cfc86fcaa02","ssdeep":"12288:A2bnYp0behvU9fzZ7/Tw8Crl3kroWL3SKT1m2208qsZ:A2Pbehc9NTwVB4LCKTH21","tlshash":"2e4519daf26cb33692d66275c06f734ea26c7d56c40c8438b7d3e8cb16788c4716ab25","size":1183785,"data":"","first_seen":"2026-02-15T11:02:56.297052Z","last_seen":"2026-02-15T11:06:28.930868Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/chunks/9704-878c3611fdcf28ca.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc1e91ace4fb9e0b759a26210b92640c","sha1":"8a8e7f9f58fc5a63331c5518a5b1f8ad8e07c441","sha256":"77c9be4058cd164e7063f031bf3e636aaea594cc4457d9b7520fb4e7348c608b","sha512":"be0d1f6b41fd46342a660fa923ad2ceaa03da0db3cf7747e23595db2575c9094d4851e41eef41a5c17b122e8f198775add659962f5dee464bbe95418b63cd1a4","ssdeep":"192:0SpMiJfcqloNndadpY1dkkPv9FClB9ElvmZJBxktSUU/maZ:5HvdCdkA9FPvm/2SUQmY","tlshash":"296235786750e94417f91274d97fe92ba2bd2c06e4d3ace0a0ad39ef06d70c531b861e","size":14802,"data":"","first_seen":"2026-02-15T11:02:56.261501Z","last_seen":"2026-02-15T11:06:28.928864Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/chunks/7351.52c05bc198b14897.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ad33a64cab0dd401b8c016ab146687c","sha1":"c8ce4d4ea267312a783e00f6e7c08f7fce958027","sha256":"f97f052f547087a0234c028b9a86866dde79e1af1e9fc639800b563b4d8987f8","sha512":"99d20bc3ba9f15303121c1cace11f0bee73600c648fbaeef082d2c6d952742992f612d239f95739705fa11bfb08080d5576cff81d7e2b524a0f9bcd53f51168b","ssdeep":"1536:otBDqjPMy+3Ec2fFxuGrHjsOILVlWR47oUQ+tbBc:oEMEuGrHjsOILVlWRK3Q+hC","tlshash":"fa838305b2517facf5eb5994896e40dcf06f2b08c60e8cb9767e28061daa0cc7257bd7","size":82914,"data":"","first_seen":"2026-02-15T11:02:56.26233Z","last_seen":"2026-02-15T11:06:28.900661Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/tradingview/datafeeds/udf/dist/bundle.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ede41ddc1693787c7cff266e59afb86","sha1":"f0793f4e0944910fe99089404ce5ba5fc8714739","sha256":"f33015e6043f595de80279923df5504d9bb702713965f1e8b63b0d2fccdadf20","sha512":"3100064dc781736e9337d4be0116b472b0bccad5978a4426cc1d15da91c8146b91c46f3239446e09ede44e0f32bab7563c3285bc8b9e0ab96f56d9e5f9da3109","ssdeep":"384:jCbsNdZSerFS7jGq9iXshyvoTRpVxKConMCtWVVfZguORG:WYrZprFS7jGqsXs4vo9xVonztWzfZgux","tlshash":"f152d8865731702201e34063d4fb6a23e12c3b16305658bcb19d6eceee8db5db523e7a","size":13964,"data":"","first_seen":"2024-10-20T17:28:04.438219Z","last_seen":"2026-05-14T21:43:44.977448Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lrkt-in.com/logger-1.min.js","fqdn":"cdn.lrkt-in.com","domain":"lrkt-in.com","tld":"com"},"ip":{"addr":"172.67.132.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"204a2a1c0319646029a6583c0f578bf3","sha1":"65a6979a014b5fd09dc29de8c487687b3351469e","sha256":"f19905fb70761648dbff4305c87087274125ed2c22b8d945df661098df955604","sha512":"823e7edb4b9e3c97e3fbd2f8c34c93a0ffa31da3c626b1a79905a63d93843787340060901158f987f95f920f3faba18fc8203b3786890e7c3f007ae41be93dcc","ssdeep":"12288:1sBgTuofwyAtUBM6NyxmYo+lPoHpiNb0HLVh/yGCAnhymx4AD4S5IT7Zd:GiKc+sh/yGCA0mx4AUS5ITFd","tlshash":"71052c893a98f46302da81d9503b2407f335181e706de0e4f3d9ddda686d68a617bf3b","size":816489,"data":"","first_seen":"2026-02-13T22:50:15.477517Z","last_seen":"2026-02-17T17:40:05.796245Z","times_seen":71,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-15","alert":"Hunting_JS_WebAssembly","trigger":"cdn.lrkt-in.com/logger-1.min.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/chunks/5022.582216ba6ea5660f.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"688d730d5c051b7eb41fa96830946781","sha1":"c7a330493d5d1ac48e4754ca828bd145ea3c4dd8","sha256":"0b6dd16161008f01585e8f512d8d2ca6158b9fef0eb7431b975b9558eeba1632","sha512":"c91bc3f8b27972d49f0a72a9339815e1da92d67810b476ce4d6e74ffb918cae844bd0d63198e4de23af7cc64bb14a79fbbe4144fd2ae2a82df6835fd3d72611d","ssdeep":"96:mf6T5Zm+h+PKXpF3mRJXaiQCEFcbiBg7X35YMNh7xifQeA4AMu36mFpbQ+fIxq7g:mCS5+mRZBNm0MIQ+fIxq7V2","tlshash":"aec2ec69d098aed17c187ca09b3b9d8d33df679c855a18f8e8925916107d8e0332bfcd","size":27890,"data":"","first_seen":"2026-02-15T11:02:56.288463Z","last_seen":"2026-02-15T11:06:28.922113Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/scripts/theme.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51af021037e2af37c6ed76c4cad06f47","sha1":"f786f6bfbada0f464248f84fa694717945d37852","sha256":"2b1dc9ba1584b98353a0a574ea1363b38032611f3f356a6610fb87a95fa357d4","sha512":"036249d0920caa9ff3a0dbbfe61e92396fc6fd615ee1bb59afa6a424b88150e398e45ab379ce49c5100b01e336eff4bde7d2f169e0611867aa3a0fca7be4d79e","ssdeep":"","tlshash":"ede0687899000112a5ae02ed752396543a3a5012b33a2221eaaee09816a6f8bc1a1bd9","size":387,"data":"","first_seen":"2026-02-15T11:02:56.275658Z","last_seen":"2026-04-08T04:13:44.566291Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Fblue%2Funderstand-laptop-3.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Fblue%2Funderstand-laptop-3.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24032\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: BYamLOstOIG+VULkpl6eUeKrcRqZBIxxOyOh9Zuyqok=\r\ncontent-disposition: inline; filename=\"understand-laptop-3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F78h5pntnVgaDTj%2FOUKl3wQUN%2F8T8uRoBibUI92NSqnlxaMwVULtvqtySxu1xQYgT72OA%2F26nKNhQ%2B%2FEKZubyviS3qGmTLyGkzyQ4I2Ppw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502ce8a44eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24032,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1520x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bce881f01a81775c9a373e106960785d","sha1":"1222dc21b6cd32369d1a4d36c97c7ac1d59b7764","sha256":"0586a62ceb2d3881be5542e4a65e9e51e2ab711a99048c713b23a1f59bb2aa89","sha512":"202e240791b4afaa59835170173ef44e2c81f2de205dda108e48d3e437e8269aae76a714f9398584771f8b36b4cd76df10b55229cc37a4e3e91dcfddaafeec5f","ssdeep":"384:v76kmuyh0Ckab3hvqO/xee0b4ID665ofTUqSEX9Q6RmwHANY5mf:eJwC17TZexb40efTEEX9fBAC6","tlshash":"0bb2c0308ec17a4ecec1c94c4863ba02755e0a7559b81e6e969ec87d2c4c89adfe831c","first_seen":"2026-02-15T11:02:56.256761Z","last_seen":"2026-02-15T11:06:28.918703Z","times_seen":2,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Foffer-phone.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Foffer-phone.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 58274\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: uglu0gvW6256-LXAVIdcKbndFV0FmNBbZnc3WY8S8lM=\r\ncontent-disposition: inline; filename=\"offer-phone.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lUHpBuK1ZMaVjNAYhc00DlQ8RRzI17kbtMdtlyDv1N7BmaZiAC1%2BqCHVm%2Fj14uMGCAssnX4z8FZOLmL05akTK0anFNeQ3DZcg1RGX%2BPVvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502cf8a84eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58274,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8e99254ba9d2e63c2dbbfe62665b1b9d","sha1":"cdf9193e97ae1cd4fa3c6c06a135d248e52656e2","sha256":"ba096ed20bd6eb6e7afcb5c054875c29b9dd155d0598d05b667737598f12f253","sha512":"d52584d31071c8542eb7760ddb636b5e7cbb42f0903b7a24a886716e854865037757454e1b032ce3691214dcb4ca8a1bd74721ddf1f4eaf3058c41ac44560d81","ssdeep":"1536:a8XnVDNNZ9RWIHHGhpAA+leUjR9x4dq6biSeSMc:a8F3bH1eGx4dqLSeq","tlshash":"1c43026fe1c24603ff63d7696e482a21429522068ef57b8436b90fd263a2c71725c8d1","first_seen":"2026-02-15T11:02:56.25796Z","last_seen":"2026-02-15T11:06:28.92639Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Fblue%2Fcontact-laptop.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Fblue%2Fcontact-laptop.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59814\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: dgwjvdeXbqU8jtqTIjnjT0Z2adD1pxyaYqXNktTSgGw=\r\ncontent-disposition: inline; filename=\"contact-laptop.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rG5zKRr9FdezEZvqTIQ5l2OmfOsKSZe1MBjsb%2B1LLBluqQ%2FZup9pIlBxT9Aeg2SyUDAMRtyQFIH9mj%2FCq%2Bxj%2BPqBO3AcZUvz6kXQ8YHnIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502cf8ab4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59814,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be1ad86eb6ba57bfe55ed68c7fc623a0","sha1":"e22cc74f65ffbd2389b9faf17ca649c1e90b4a70","sha256":"760c23bdd7976ea53c8eda932239e34f467669d0f5a71c9a62a5cd92d4d2806c","sha512":"a9f67041f67380eec01e97bc8abe87e24c2794f5e6f0272ebd26cc2a4faf3c367f1cb1e90f64f4cc1f29d9cc77c0e6429b43268fa117d05a834327d96e338bea","ssdeep":"1536:A7LEZrT3fmgkYIuy65FuGCBSDw+CObcZhLwQ+5rwzhk+Fii2Y+n:4ArT3VBkYuYyOgZFm5rwxFiihw","tlshash":"3e43f1cee295261cc4db6f46b15dae2f818a1407fee2efc163344a5e718edd24b44722","first_seen":"2026-02-15T11:02:56.258945Z","last_seen":"2026-02-15T11:06:28.903186Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/tradingview/datafeeds/udf/dist/bundle.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:27.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /tradingview/datafeeds/udf/dist/bundle.js HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 11 Feb 2026 18:05:32 GMT\r\netag: W/\"368c-19c4de139e0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2eDixSjQ6Ozo2%2F2mKpaJFpPfx139FyRmBOf85IxLFKsECEYY3Agb2YwRgshHykUOyOOU8NoYAfkxrAUKgs3sCEpIasRQHAIHTttGxXbJaQ%3D%3D\"}]}\r\ncf-ray: 9ce45026cf5d4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13964,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13963)","md5":"7ede41ddc1693787c7cff266e59afb86","sha1":"f0793f4e0944910fe99089404ce5ba5fc8714739","sha256":"f33015e6043f595de80279923df5504d9bb702713965f1e8b63b0d2fccdadf20","sha512":"3100064dc781736e9337d4be0116b472b0bccad5978a4426cc1d15da91c8146b91c46f3239446e09ede44e0f32bab7563c3285bc8b9e0ab96f56d9e5f9da3109","ssdeep":"384:jCbsNdZSerFS7jGq9iXshyvoTRpVxKConMCtWVVfZguORG:WYrZprFS7jGqsXs4vo9xVonztWzfZgux","tlshash":"f152d8865731702201e34063d4fb6a23e12c3b16305658bcb19d6eceee8db5db523e7a","first_seen":"2024-10-20T17:28:04.438219Z","last_seen":"2026-05-14T21:43:44.977448Z","times_seen":11,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/chunks/main-6a9d4d5daea4a5c2.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:27.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/static/chunks/main-6a9d4d5daea4a5c2.js HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 11 Feb 2026 18:10:38 GMT\r\netag: W/\"1d1b2-19c4de5e550\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Di%2FOFasWhf%2F4O0EAmbazK4K%2FmgQCFev2HdaWOXk2XBAFMosYwJBy9101a%2F8hADJaDjVYdCuNN4Q3WKivtKcxSDxufmAccPPonRIjlGrv3A%3D%3D\"}]}\r\ncf-ray: 9ce45026cf644eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119218,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"26860551d244d553c54ef5247658892b","sha1":"a4addaba11374d7d50b901cb0538b6c414fb0b08","sha256":"5853e7d4912c6acd65a392521f702e5ded19ccb8b26627160a208bb3e2b9d4a3","sha512":"c0635bb2a61efd7e74f77ae2a2cdae30bf9b93acd45816c9558603637e355e86227ce90cdfa19d83645d40e17d8a760422b8b6498b425787a9962f440da03bb6","ssdeep":"1536:5B9B5dQXwwSB/OZKm8V9GZgpf/Y9KNPJSWNDWkrSjm2z4u1EY:5SnSBbbSg9NhSQDNSjmkJEY","tlshash":"11c3fab6b6d1f8a203c741e4843b0006f36a1dbe145f6045f3aadcd6b96499da0f3f69","first_seen":"2026-02-15T11:02:56.260712Z","last_seen":"2026-04-20T20:06:12.750017Z","times_seen":7,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/chunks/9704-878c3611fdcf28ca.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:27.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/static/chunks/9704-878c3611fdcf28ca.js HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 11 Feb 2026 18:10:38 GMT\r\netag: W/\"39d2-19c4de5e54c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rnv81Xi1z9%2BvHJrFa7HWdru623eL1POs3VsFICimMdmXtma%2BTH4v%2FaRKGoHFp9c1%2BOKiS2O9HlM9l4ZlB8OTXV%2Fz5ChJfYM0mfKkzeX7JQ%3D%3D\"}]}\r\ncf-ray: 9ce45026cf674eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14802,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14802), with no line terminators","md5":"cc1e91ace4fb9e0b759a26210b92640c","sha1":"8a8e7f9f58fc5a63331c5518a5b1f8ad8e07c441","sha256":"77c9be4058cd164e7063f031bf3e636aaea594cc4457d9b7520fb4e7348c608b","sha512":"be0d1f6b41fd46342a660fa923ad2ceaa03da0db3cf7747e23595db2575c9094d4851e41eef41a5c17b122e8f198775add659962f5dee464bbe95418b63cd1a4","ssdeep":"192:0SpMiJfcqloNndadpY1dkkPv9FClB9ElvmZJBxktSUU/maZ:5HvdCdkA9FPvm/2SUQmY","tlshash":"296235786750e94417f91274d97fe92ba2bd2c06e4d3ace0a0ad39ef06d70c531b861e","first_seen":"2026-02-15T11:02:56.261501Z","last_seen":"2026-02-15T11:06:28.928864Z","times_seen":2,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/chunks/7351.52c05bc198b14897.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/static/chunks/7351.52c05bc198b14897.js HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 11 Feb 2026 18:10:38 GMT\r\netag: W/\"143e2-19c4de5e55c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s8NIDMOXiL0HrbZIDwAKalIBPxXs7ptvEaC5PiYU4NUgt%2Fih0CQyEdXhMlNeH3wgrF4NpLkfbo%2B%2BmujBalpEGhC5jmG6INSMlXiRrsSHhg%3D%3D\"}]}\r\ncf-ray: 9ce4502aa8194eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82914,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65488), with no line terminators","md5":"5ad33a64cab0dd401b8c016ab146687c","sha1":"c8ce4d4ea267312a783e00f6e7c08f7fce958027","sha256":"f97f052f547087a0234c028b9a86866dde79e1af1e9fc639800b563b4d8987f8","sha512":"99d20bc3ba9f15303121c1cace11f0bee73600c648fbaeef082d2c6d952742992f612d239f95739705fa11bfb08080d5576cff81d7e2b524a0f9bcd53f51168b","ssdeep":"1536:otBDqjPMy+3Ec2fFxuGrHjsOILVlWR47oUQ+tbBc:oEMEuGrHjsOILVlWRK3Q+hC","tlshash":"fa838305b2517facf5eb5994896e40dcf06f2b08c60e8cb9767e28061daa0cc7257bd7","first_seen":"2026-02-15T11:02:56.26233Z","last_seen":"2026-02-15T11:06:28.900661Z","times_seen":2,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Fblue%2Funderstand-laptop-1.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Fblue%2Funderstand-laptop-1.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22278\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 69j3niVKo0ZSOXGSl66DDdaaT3PvEA4zq31Oa478K-g=\r\ncontent-disposition: inline; filename=\"understand-laptop-1.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UoebEDcSk%2FJlrjW4qDpuHTltPSkzwGGuIIutN5beGl%2F1Ygz4dW1dP7yM1XuoKCsAArBjFKGPd74fd8hXcdfwkMpku0rGDgeQIko0sTbJLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502ce89e4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22278,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1520x716, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"316f8c7b1b7898683d051227ce63bfbc","sha1":"99604d3e72b163379170988568d34622b41433df","sha256":"ebd8f79e254aa3465239719297ae830dd69a4f73ef100e33ab7d4e6b8efc2bf8","sha512":"051c7178b39a3be60f3300c334d0d4afd1b42e15e39562cec956d84713d8f45cc5047b39ca6823d1cbf7eac6bc35f3ef0e86c33a3af3b19becea9fe7de614547","ssdeep":"384:GtFQU67tjmx/EXDXWC0YJ4pgb1gYLV9UD2fOcpgqiBZe5c+k56aDB5wKQBfXX4Aq:EQkmDPdgYZ9UDRcKqiBZeW+kxwKIUx","tlshash":"2ea2e04095716c507faceb3932da60eb719cf6da9c93b909f0032d87d5f22256934f25","first_seen":"2026-02-15T11:02:56.263175Z","last_seen":"2026-02-15T11:06:28.898116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Fblue%2Funderstand-tablet-2.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Fblue%2Funderstand-tablet-2.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35862\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: EFRDiBZdSKsHAMQgVbAajSBAN-0PwUg2YEjDKvejtO8=\r\ncontent-disposition: inline; filename=\"understand-tablet-2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wu2B%2BRk%2BnpWkytO%2B4G15v3hm9TZvqQaoNDwQF%2FvBpPGiQ7CKUaaGYYG6w9LffJ%2F3DyHjL5P%2BwIz8xV0sdxep9IiF41wG%2FVkfce7s1TDx%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502ce8a04eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35862,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x520, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9e65cebc177e9b3b612bc74f813c5b5b","sha1":"2e6002c3755329003ee0b4ea92bd363ff39e2a88","sha256":"10544388165d48ab0700c42055b01a8d204037fd0fc148366048c32af7a3b4ef","sha512":"0e1b19c31f27afe3918a4ef5a6bbe015f20fa139dd0901a0973121c4a6bbbcd24716a6ad163a331725e5487b379cf68ac897ea5b73ae1e0d62c0f528631274aa","ssdeep":"768:RRShlXSC8cMa+fHVFD3zpKq4FWfWJQp2xLlr6KtA/482Pb0YVv+ps4T:RIeC8ckHVFNz1fmQ4xx2KtA/uz0K4T","tlshash":"caf2f2a30def01c0abd870ac09e6322b6a604db7b12e6cd5df9bdbcec055129409cd29","first_seen":"2026-02-15T11:02:56.264005Z","last_seen":"2026-02-15T11:06:28.929508Z","times_seen":2,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.blue-invest.org/api/cdn/bluelogo.png","fqdn":"api.blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /api/cdn/bluelogo.png HTTP/1.1\r\nHost: api.blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 15186\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: public, max-age=86400\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'none'; img-src 'self'\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nlast-modified: Sun, 15 Feb 2026 11:02:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2BhnUlm6ewlwOyek1EcAW0MOR9MX5%2B52w3oOB%2F11%2FNsUTR1jvz6i6QBk%2BO9iKeLA%2Bg55sPnV0aAEix4fGmqLeyn1XHYcvkNiTtpp11wMibnimRI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502e08d14eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15186,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 340 x 94, 8-bit/color RGBA, non-interlaced","md5":"fed5e44949527dfdf3a3974f599d0e3c","sha1":"6402024ad2f1ae1309c49dd78f6e8dc35dffdaf1","sha256":"a2a9ad3222bbd10a0323867c5d5d02ff8763d5c3d86453e4993c0a22cc0ef49f","sha512":"dcb355e02c78167bd8c7a986d4a4b8fa4cd5c47458b816297a4c666956d7fea055df3e5bab5285c89af29e0d7045c935ceb6e8905ceb8c6a20eb941b53629752","ssdeep":"384:f6NxttEW6VgL8IoyiUDbLfp6NNoy/uIawJ9OL0/E:SOIoJo/fpby2IawJ1E","tlshash":"0c62c0f6ad368827b52f25543cc75c7b00aaa6954913c7c06b0ad40f36ae31559bffe0","first_seen":"2026-02-15T11:02:56.26631Z","last_seen":"2026-02-15T11:06:28.915015Z","times_seen":2,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"api.blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Fblue%2Funderstand-laptop-2.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Fblue%2Funderstand-laptop-2.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40074\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: ydIBh33CuW9kBrVCDiAmbmqTXVOXQJerrgB6k47MPz0=\r\ncontent-disposition: inline; filename=\"understand-laptop-2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mbTCR90WSl0Nzu34laJyX3C8G5cNqxStf0AGFvl9949jlVuIwxyk184s4BWM36TZ7n%2FEynbQJtqNR1VYAhJGobnySwJtk2MgD6Oyq9DkmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502ce8a14eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40074,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1520x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"002b5a6a53909d5442f98e8f8900109a","sha1":"f8a4a1447043b76e1857fd68e659e610511b53aa","sha256":"c9d201877dc2b96f6406b5420e20266e6a935d53974097abae007a938ecc3f3d","sha512":"9ad255a145ecc90f9ebbce42d1606473ed449995da4e68fef1438b3550a6c709ff8901c9eaebaebdf99f15e302985ae0a367cb4a83838a17b9c166db49b82c03","ssdeep":"768:gJVUGBUBjpVbNCq3J0trEhZft/1gajl5RUVmf8mFYTyHFau5J:eVpyjptNC4J0trEht97EVmfbc2J","tlshash":"ee03e1688b3e4894c93617784c4d54f32334d6299ca9894cfa3c5f9a95cade1d7032fb","first_seen":"2026-02-15T11:02:56.267143Z","last_seen":"2026-02-15T11:06:28.901954Z","times_seen":2,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Fblue%2Funderstand-3.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Fblue%2Funderstand-3.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20040\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: jgVUswxBt37W0RArl3bHfj0y4lu6oc8TttujRZBDIOA=\r\ncontent-disposition: inline; filename=\"understand-3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wabiXGYDpXpICzhdXr9I1cuiQ0JPLosL6bEodQP0DSajDTH%2BDHQl8V8uW52yr0DctSHPspHKQnDgqEH9ru%2BJ5QQAWKUEuSIaPE%2BazEPImQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502ce8a24eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20040,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1212x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a44ca939514a253eab08f05fc3323055","sha1":"d40f2f78dda047dd45b34f35de48ffd75c6b3c98","sha256":"8e0554b30c41b77ed6d1102b9776c77e3d32e25bbaa1cf13b6dba345904320e0","sha512":"cb8459f747338af792562a6bb8cee28e2de4bb6b2bc5fb1d6dc1cb5cdc807ff9f9bc9d336ec4534bcee85b7e036aa9193b924b73c2d6599bea116eb6ba258436","ssdeep":"384:Q4XEg0ArHjUoJoydtAe48s6rhy4VofhSR3nKyyGeujPbyTQXDI6kdSTZ9dnsKDp:Q4XEDYjUPydue4c/YLyyGeunYQXnQS1n","tlshash":"7e92d10215e6370c79a942233b318501355354f16cbcadea582def978dd8f396b187d4","first_seen":"2026-02-15T11:02:56.268409Z","last_seen":"2026-02-15T11:06:28.898756Z","times_seen":2,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Fblue%2Funderstand-tablet-3.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Fblue%2Funderstand-tablet-3.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25788\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: iMsYDiWa60--WmCVTOnez3ouThmVOKdKkxXqhXK8k68=\r\ncontent-disposition: inline; filename=\"understand-tablet-3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z0UcLhCzR3qPrc4YpBitGVQ07tkElHwn0%2FRIWzqK%2FOyyQexBlks%2BJZIAPlozqHbhjZ5Kuh4f4F3yGWWDY5s9Rz6e9AatejMXO%2B%2ByGOw%2Bsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502ce8a34eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25788,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x520, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a2402428aab7e57e558f1dcf5b10175c","sha1":"7168de28cfede6705bc95048b04f2ea81d96f3a3","sha256":"88cb180e259aeb4fff5a60954ce9decf7a2e4e199538a74a9315ea8572bc93af","sha512":"15a0db06b5552534c734e72c275c049b761a3ef0c066c9f2880fc690b95216b26d53ffd4e5a82ea8469047cd7fbae14745d8f9438a63cd7bfcaceb78994d9202","ssdeep":"768:Gp3SRSm1fMckcHEjXxDkolHy6jVSvn2j49:I3NyxkL1HJIuj49","tlshash":"a9c2e1f597074381af496b499f1857207e1b7dc5c73cd3c2bb92bc2b814750a1629b1e","first_seen":"2026-02-15T11:02:56.269168Z","last_seen":"2026-02-15T11:06:28.911998Z","times_seen":2,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding10%2Fuser-2.png\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding10%2Fuser-2.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38510\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: za5u1Z5hwLmPPHlQZK-m2FJTA-UaCC1ekhJ5o7nllHA=\r\ncontent-disposition: inline; filename=\"user-2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DtQL3J9lD3aHTuiYKryp%2FJGBHZYMxwImbCGncS7tci0ycNiStJaz8jmH1%2BMPkTQNxOe%2BsGA4yhObxrXDZeBMY6Cb9YOQRGRF%2BZeb4wSWHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502df8cb4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38510,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x772, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"32aa9d2ac3004d3ce15246c235c9d6d6","sha1":"3c7d3c6b2d6110348dfbfe59f0d430c207fd831f","sha256":"cdae6ed59e61c0b98f3c795064afe6d8525303f51a082d5e921279a3b9e59470","sha512":"905005741eefc2ae6ddf0420855ba77e4cd3ca0460927e71ff861c34674db7765a17f642df43a50dd10bb38244ac1eb3eb0e59a0efa78fb1fd4d0191a5479584","ssdeep":"768:aWH24IsVZ6E7XPzKCFD16CktryEyH+/vMl91Sw0A2HkfhUy0k:vHLNXT7RFD11ktS+W91RB2EfhUy0k","tlshash":"e603020f602b11abf39e56a0bde891c60bf517194fe6d3cef81799e082b9965e17004f","first_seen":"2026-02-15T11:02:56.27005Z","last_seen":"2026-02-15T11:06:28.928231Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/MbfozOhnFzuISJNw7t-4D/_buildManifest.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:27.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/static/MbfozOhnFzuISJNw7t-4D/_buildManifest.js HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 11 Feb 2026 18:10:38 GMT\r\netag: W/\"d88-19c4de5e544\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w444MDAzIzJLR%2B8waNXUrqRmRPLRsWKtAyQC8nu%2Fq%2BHtDquH6hpNssOoDUIphxOfyGZvqqCg7%2BrLU4VpkIlSKz%2F7dGE8sxE3xsStdr5NPg%3D%3D\"}]}\r\ncf-ray: 9ce45026cf6a4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3464,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (3464), with no line terminators","md5":"cb2ac8b3f47a55ed34c17f552a5d0cf9","sha1":"f63168095f728cdb1cd8033723eb3710db0980bf","sha256":"8c79d6858bf5e7a1f08880195a93c29fdc2540bd58e8d8d58580995a775f17ce","sha512":"036151258eee6c920e4d643a1a27058aee544b0c399ea420c43705ccdfce116961c886034d9d21921354723d6ace671d3abbe40059a4d9bad2a2143478472c0c","ssdeep":"","tlshash":"d561ab134401f6199de0dee9b02f5322cac0ca33aa76d5c187dd5f6c01925ea9fbd823","first_seen":"2026-02-15T11:02:56.270861Z","last_seen":"2026-02-15T11:06:28.921118Z","times_seen":2,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/de","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-15T11:02:26.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /de HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Feb 2026 11:02:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: token=deleted; Max-Age=0; path=/\nrefreshToken=deleted; Max-Age=0; path=/\nrf_token=deleted; Max-Age=0; path=/\nudfToken=deleted; Max-Age=0; path=/\r\nx-powered-by: Next.js\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sf2vDdLBUAqQeCRmhD%2FwdNOPBJVwm%2BwFCiXxo052gn5%2B45v89%2FO6ylR992cIm7uyURBrx8MWTEGnNE1DqbO9T5F1omfhARZRFQhUvjYxuw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ce45022688bc8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":187907,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64581), with no line terminators","md5":"d45d76a6741e16cb400e12eed4c6252a","sha1":"f0ea76df40412f1783bf09412f5d470849754351","sha256":"bed49deb8e7007f8ae79b3c9242a2ea96ad963fa07c758467b1991f613830eb3","sha512":"94bfd31aabf21acf5b5e826280d41d9641445899c134d8e58badc11b033b2697f3f54c079a08bcc3b78c75583e615c920e7813623f998234183872ad65d88ef5","ssdeep":"3072:oOgzb98eXqpMTFNBrxBTtf9Lo67PUfQf/34T8vQJ2NDMnXRS:mzb98QFNBrxptf9kqPsQf/34TV0BuY","tlshash":"1104f823accb612c534b23717301dda7372da33e5399a129e0d8d1bb528b1f5c25ea79","first_seen":"2026-02-15T11:02:56.271671Z","last_seen":"2026-02-15T11:02:56.271671Z","times_seen":1,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":48,"dns":18,"connect":8,"send":0,"wait":509,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/media/ba9851c3c22cd980-s.p.woff2","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:27.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/static/media/ba9851c3c22cd980-s.p.woff2 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://blue-invest.org/de\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25844\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 11 Feb 2026 18:08:22 GMT\r\netag: W/\"64f4-19c4de3d1f0\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5cn0gP2czN5T9%2FJrgapObTZ0Fk3%2BcmQg42FjMqtZZogQHzJreZpG9BFxW0HKgzL1lHI6ZuMWBcGzARzHbYxPhJ3mHNX5vCDSG7e2cUHC7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce45026cf5e4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25844, version 1.0","md5":"9e494903d6b0ffec1a1e14d34427d44d","sha1":"b4aee2c6c0334b3d67d7ead9d1de35ba1ed00476","sha256":"fccca918fea40089dacadc7045861314d1a6bc91f1f323cc1eeb22ebcdb321b5","sha512":"3f8e02176e7ab5c2e15e5f502c2f3321390268f32689ba5062b7eaca6480544827c838dcf3064dc03ae8147e1209e18934fd24df05655a1a1544ad48ea18137c","ssdeep":"768:pR6eBYG7jxEiyMNqo+GB2xv/YLBWTtUpfI8AB:pm8jxEiTqo/2N/Y1WR+fI8AB","tlshash":"28c2c0ee21a14e8becb62c3c5cd912004910619a3c57143fc9b298bbee526d7b53676f","first_seen":"2025-09-14T07:21:43.456133Z","last_seen":"2026-05-24T04:12:49.360369Z","times_seen":202,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/chunks/webpack-b5e10820ab328258.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:27.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/static/chunks/webpack-b5e10820ab328258.js HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 11 Feb 2026 18:10:38 GMT\r\netag: W/\"3235-19c4de5e558\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aJoJJWAPzqJWBJk%2BqAVNMu9IiweLR%2Bmc2Bi7Id85rROFLkghj1FaoCHgBzVujSJbCfNMyk3LCeCHEpIlc7aONdg60GIFfm9dY8s4ejj73Q%3D%3D\"}]}\r\ncf-ray: 9ce45026cf624eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12853,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12853), with no line terminators","md5":"84a458a35a7bd885c09c10d4d22949e5","sha1":"be5c6427830b53d433d2109a6512de69002b9e7e","sha256":"6a1a548df0446518df563e66e1d470164c5fec29f2d5368093e9d0584bfbd498","sha512":"49fc8e52d0f845e3379ca93fc89e3e57176b6db003c40fcc5a1246b9677ac7b01546cc0238708dd61c3d94121c0f267041b3887f0a53403fa0a6d32e41d69433","ssdeep":"384:JSJQNC6+URlBB7AvMt1kN0g4Snx1pcEr8wki6f9OvdtqT8:B+mBB7/8yOx1pcEr8pi6fKdtqw","tlshash":"5b424b9e371df4d9396209e05c3b6499b17c7432381a88e0d289d6f95c78eec9233fa5","first_seen":"2026-02-15T11:02:56.272992Z","last_seen":"2026-02-15T11:06:28.917267Z","times_seen":2,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Fblue%2Fbars-mobile.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Fblue%2Fbars-mobile.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20226\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: LXaQ0529WOTDS4E2J7Xiwev0I1FDCo2MNcEWHKEaWtk=\r\ncontent-disposition: inline; filename=\"bars-mobile.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2s33eUsVZqG6lXw9zZQcmHDrEO2SrJ7BJPzA8pNq3fLyWl70BMRPY5gOBEUEaW8gDn6vsZTZNrMNXtHFUcrxc%2BAaABtUFcQrKJ8LG7vtyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502cc8984eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20226,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8079e6ed9da9cd63d86cc17e17ecc682","sha1":"50493ce119ca8b481ee6f55957a08aa28ebe3224","sha256":"2d7690d39dbd58e4c34b813627b5e2c1ebf42351430a8d8c35c1161ca11a5ad9","sha512":"cec32c73bd0a19cb98df466396dd0b4e8e1d02425f10c4bd793c7cb8f6012824094749465c9b06d5232d942a9cdc94f53d263d5473e3eda727c36278a26c86cb","ssdeep":"384:U/oE7SAMFe/TjZZ6bUyYScn9NN43QZWjz8vjQdwDaqXzGSA/UHacn3bA2V8P+y:QoE7rTj/6blYf9NNsp8vjQdwDasz6/Ug","tlshash":"3892bf1c40e29c91b9cec8f9e5bc5058464f943c766d87bbefd99a407e5e5d0c8e214c","first_seen":"2026-02-15T11:02:56.273866Z","last_seen":"2026-02-15T11:06:28.925772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Fblue%2Fbg-tools.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Fblue%2Fbg-tools.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25466\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 0LaXd4VNHqkqICE3WfHDRJolVfmkvraYVfNqedKbmew=\r\ncontent-disposition: inline; filename=\"bg-tools.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dwqDkpaDw%2Bu%2F6t6bjQ3i0LTgMmibZaYtX5yy%2BjAMGOpRaOTA0uY5kAw3bnAhdqWlNfMaxMRC7TikHfKQt8VlmHm%2BtmHLl2LkCsT1yGYrYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502cf8ac4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25466,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0d1e8d9506c10b7e8a48668965ea3c6d","sha1":"aef10e6af3377e1c91bd68e331851510d2a84d1f","sha256":"d0b69777854d1ea92a20213759f1c3449a2555f9a4beb69855f36a79d29b99ec","sha512":"e066e9ac26900fb8234c6980ca22b909c4744cb2eac9dc22be267e960944aeb035ff394a5a0f22f591280d275d45fda7e23cb62731af8c76d962c7155b7413d8","ssdeep":"384:2aPhBW8r6GeTPc4tw7n+a9B/wdP5zcr31Ys4P6v+99Db6O2v:3leGLyw7n+aodPBNs66299D+O2","tlshash":"f5b2f101ad8abf7ad505322450e0d8747b3bf4591f50da9af17c29127dafb42e8ac09a","first_seen":"2026-02-15T11:02:56.27487Z","last_seen":"2026-02-15T11:06:28.930133Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/scripts/theme.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:27.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /scripts/theme.js HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T4Zu2KKV5FYZrV7Avx3MmZOzhR00ChH%2B32F3SslGj7qnx9dE%2BCOLH3Dm8mlFiityzyn9QuL34FSMXYBQRSz57FEuKr51ycp6eeBI5TnOvg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 11 Feb 2026 18:05:32 GMT\r\netag: W/\"183-19c4de139e0\"\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce45026cf614eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":387,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"51af021037e2af37c6ed76c4cad06f47","sha1":"f786f6bfbada0f464248f84fa694717945d37852","sha256":"2b1dc9ba1584b98353a0a574ea1363b38032611f3f356a6610fb87a95fa357d4","sha512":"036249d0920caa9ff3a0dbbfe61e92396fc6fd615ee1bb59afa6a424b88150e398e45ab379ce49c5100b01e336eff4bde7d2f169e0611867aa3a0fca7be4d79e","ssdeep":"","tlshash":"ede0687899000112a5ae02ed752396543a3a5012b33a2221eaaee09816a6f8bc1a1bd9","first_seen":"2026-02-15T11:02:56.275658Z","last_seen":"2026-04-08T04:13:44.566291Z","times_seen":6,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/chunks/framework-5f2acf0e54e464e8.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:27.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/static/chunks/framework-5f2acf0e54e464e8.js HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 11 Feb 2026 18:10:38 GMT\r\netag: W/\"242a6-19c4de5e558\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TnGRy4Q4A69gF6vtXJ%2BkqeYNiUUkHC%2BH7mvIKLx3amD0vS%2Fan6Efj%2BcJoNtEAb5SRUqos60%2F2tIBJ4hcENZs6LpMjb9stAOEVm7Vjx3%2BbQ%3D%3D\"}]}\r\ncf-ray: 9ce45026cf634eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148134,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"349870dbae5e98d35f9d7dbe4a66f431","sha1":"e14571f2161a7a7702c2edb9cc1a0209995a3b2e","sha256":"783b190c1b3aaf6415cf79a1e011aa638c5b815ec6db0a6aa4358f1bee8bab60","sha512":"f5795f89b30e832c8d98b40ab34e7dd75a87f61af8627f2da6068de4d3873521fd6cd9d5db57c2e96a1c09bddbace8078c72fe002c0a2b43749a9277d1ca2303","ssdeep":"1536:MlSq4vldLMp5KZKIxm4Ea+36UEaXcfhKWWrQe:MUVe5IxgELNe","tlshash":"ffe309e83996f5526ab311a700df2803733d1a1b280c4960a615fd9eb5b842fb17bfdd","first_seen":"2025-01-10T05:21:25.003403Z","last_seen":"2026-04-08T04:13:44.557508Z","times_seen":9,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/chunks/2273.f10a57af40bd465f.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/static/chunks/2273.f10a57af40bd465f.js HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 11 Feb 2026 18:10:38 GMT\r\netag: W/\"203a-19c4de5e550\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MPEWSN7DoXMO1jbLEZlLLb364pl%2BKzB6WzXr%2FY7hWCVWXyxW%2FONO4siFdFF5pL3WJhayCWMwNmrfiJcZsL4ld7gzqY%2FVIveq8kGN5eEEEw%3D%3D\"}]}\r\ncf-ray: 9ce4502aa8164eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8250,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8250), with no line terminators","md5":"72482a0b86de70ce97e995e7e9767cd3","sha1":"55b6fd07abeb9178fdc65f31866db3f82ebe9a36","sha256":"7e6f23c44fff877df35481e79d39b848956fa140eeafb183140f39756fd213b7","sha512":"3723d2c327e4a19bdd828a5c8ded95fa83be31e8a03600f43a55eb26942ea8208de398f13e61ef880b8eb11126ef82c85bff74c71684332aeae9a6a32d3b9202","ssdeep":"192:jXHgoiWORR5ENzhjRILZ+TgcUKvuvmpl3Zhqn5oJ1JaVfw+:LHgRRR5ENtNtthyVfw+","tlshash":"d302c6b53741b076e3df576e806f432db3b7118530039828d2a89cd66d616b682e3fa9","first_seen":"2026-02-15T11:02:56.277625Z","last_seen":"2026-04-08T04:13:44.571948Z","times_seen":4,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Fblue%2Fbars-laptop.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Fblue%2Fbars-laptop.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29518\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 42y3eAXQK4iIjW3SNEOtyB5DXy9+G0pfNi9dDdTmDrk=\r\ncontent-disposition: inline; filename=\"bars-laptop.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OlxFdxnDyu8pu%2BgoYrLZQMBQsElpk2NLzlGZIKRZLOGZq3HsJcgxUdNnXxIa6k1STlICBoNx6mIgV8rGC3Xth1mGaLzF8NpHHUEg6ds2jg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502cd89b4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29518,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6f0f8902a4646786fda4bca4eb840c8c","sha1":"53e5ba57f0f1aeb0372650cf9fe6d2afcee3dba1","sha256":"e36cb77805d02b88888d6dd23443adc81e435f2f7e1b4a5f362f5d0dd4e60eb9","sha512":"dcd100294bb22729a1d606cf2209227f175faed6416c2a1d0a114602806e385a8891d844a9b96e6a50eb47b0834e4554decd176cfb2430e27e41f0fc17235564","ssdeep":"768:UGwShz21aRnVXhOdafzn0nt9FAt4KAb6jm7YmDCA:RwSQ1a/h/z0nt9y4KAobmD3","tlshash":"d3d2e1c9b020882816b5873e7722174313a1a1e4654cfbc923f3eac6634fbdd1659cbb","first_seen":"2026-02-15T11:02:56.278402Z","last_seen":"2026-02-15T11:06:28.923207Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Frounded-border-big.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Frounded-border-big.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30760\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: Ow-lJNzJU+5Qfyk5MZ9+2SbaT25tcxsaUF6aeLFWBVc=\r\ncontent-disposition: inline; filename=\"rounded-border-big.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BQdicoid6os%2Bh7kqs3EHs1SozsDBtanTWvhW9FnpcvStVjdhPYai0GrLcIc4adJfuRvLgEnfblMraHKZgd2dm6gX2X%2FXA1Vc1HqHSQzomA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502ce8a54eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30760,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f1b9815a38b6d239d26b64019bc30331","sha1":"51aeaee6e28ffd277e4a049c66148fb1e0b5815a","sha256":"3b0fe524dcc953ee507f2939319f7ed926da4f6e6d731b1a505e9a78b1560557","sha512":"28bc97c15787b7e3d6130bc292eadfca752471d36032a4efef1665a8e7c23e49acdf846367a02b3a1c9b94c30e16a19ea7d6e028612c33056e4590c54b653d55","ssdeep":"768:nafaUDZJnIwC7kFaeh3scJI8U2plbzKDigmZ02m9kpO:TULIZ72scJ/rnCD8HIb","tlshash":"90d24ab4b4c2c23a7b11fa3716036fa8e92242fb549dc81431d386571e97b593fb7129","first_seen":"2026-02-15T11:02:56.279141Z","last_seen":"2026-02-15T11:06:28.913805Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Fblue%2Fcontact-mobile.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Fblue%2Fcontact-mobile.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 101546\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: clIVFXUA-Vh2XTzw2zPqO8voQDt4VH6uoYecj-2jz5A=\r\ncontent-disposition: inline; filename=\"contact-mobile.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1yZga%2B%2B50AlL4WG41xHPEC14q67gMMsG%2FEma5R9KsIVWahfIlhTjvwBEr3fseWpqScj1R40wJADf9EVcyErs4QfJJbu3AcNaixwPZ3KVIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502cf8a94eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101546,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6be4b9f006e7a37530a93d1d80fa82af","sha1":"9ca51a50fa0329fa2e83a5e7c01242c363b7436a","sha256":"725215157500fd58765d3cf0db33ea3bcbe8403b78547eaea1879c8ffda3cf90","sha512":"890b08d8718932ce56a21fbd48b97025f7216ba4b1847ed8c077b777282ac406a82f6992c1f45fdc530baf385b13ac589cacb0889b0b0fcf5d38d6d4e2134613","ssdeep":"3072:rQrkRfyPYa9io22AJltkhnepWqEAgBpQ7:rGcfyPYa0o2TJIhlM7","tlshash":"76a3021932064d1caea7c294ed897653cfa6f3762588ecaf1875cee81e3e81c4182957","first_seen":"2026-02-15T11:02:56.279996Z","last_seen":"2026-02-15T11:06:28.914385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Fblue%2Fcontact-tablet.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Fblue%2Fcontact-tablet.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 110334\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 7TtIEvgHFBp--BGsarlt+4YuWLpliBIDT7avcvwKuBQ=\r\ncontent-disposition: inline; filename=\"contact-tablet.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2BCqTnCnEwmVM827qiwgXs3JE6zrSpPNArpPzNrFXif2DWkpyyILWkpkRNrefdlScMdRWsavHjmTJBQVVr4zZxWmfXeZl24omajVz02y8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502cf8aa4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110334,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6f19ccd15a77d8b5ac3c231e6c54b962","sha1":"91b7892169bde146df11cdd133cde6e6b36cc1f8","sha256":"ed3b4812f807141a7ffc11ac6ab96dfb862e58ba658812034fb6af72fc0ab814","sha512":"9254af93dd1a7590a6a8550c708744c1376c402597f2b1a834976bb1cb13cb988fe4cc73289caa062bc6d76da8a9924b5afd873676d047efbdff8b12b0f1023a","ssdeep":"1536:FyC23aCJcZ6pLrZKEqBAl4S1nIwF4T38PAao0K3SWTHF2FLwRiOz+mY4:Fs3fJc4prZnqUvFV4aoVdx2iRz+Y","tlshash":"40b312099e2b3311811c851cc10d3716f3690e90e7cee29d74c8e92a2cdf6e6d869b5f","first_seen":"2026-02-15T11:02:56.280788Z","last_seen":"2026-02-15T11:06:28.92707Z","times_seen":2,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding10%2Fuser-4.png\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding10%2Fuser-4.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 48814\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: IZ8rhXeUGX7rb9xZwUCwj6lkmrL3W50Y6Lf7uhq1riM=\r\ncontent-disposition: inline; filename=\"user-4.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yDirDBVMHoaWFBsk8ibYeUf2UuMhEdbL3L%2B%2F2TK94neJJmFQNrF%2FYb%2Bl17VOb2tQoVwQ2GJd79IzdcAWX%2BBeHzPfnnPpbYyIxnRKFNeIRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502df8cc4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48814,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x636, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0728b6695b4948f96d7e50ccd578879e","sha1":"9555e5d661da3664fafb17f454aaa935b3bfa521","sha256":"219f2b857794197eeb6fdc59c140b08fa9649ab2f75b9d18e8b7fbba1ab5ae23","sha512":"d7c06a66be3a2ce2c76642c85a4b2b9069dd9666bb50d23c2dd433a6d241fc3fea569ccf0eab59c0582aabab95b9d47e722387405dc254b278b1706d89ab68ed","ssdeep":"768:+RqBhD45Z1LDAFXkyFTjQYbvzd/AsSypPqdB6J6277EoP+45K/DK1k1TOOVC8ZcH:kqj0gTjQYbvRLSAPg6427wM5K+WSOEZh","tlshash":"da23f202d2471b13b9742201d80abdebf34bdf7a9f95ce180ef7d975a00a62449ebc24","first_seen":"2026-02-15T11:02:56.281582Z","last_seen":"2026-02-15T11:06:28.915712Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/media/8e9860b6e62d6359-s.p.woff2","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:27.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/static/media/8e9860b6e62d6359-s.p.woff2 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://blue-invest.org/de\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 85272\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 11 Feb 2026 18:08:22 GMT\r\netag: W/\"14d18-19c4de3d1f0\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qt3U7ytZzxhib2CGHJeBb6%2F6Hy%2B%2Fq9nmwhuLtIzkCci0sdFo%2BhcqA%2FsLPgyzsf4DnOvFkhHTsev18NoXlNmjbKyMS7guIqrJYAP24EViGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce45026cf604eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85272,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 85272, version 1.0","md5":"01ba6c2a184b8cba08b0d57167664d75","sha1":"521e24d1741e0c74388a84286150f8a927265597","sha256":"a28eb6d3ccb534ae0c94ca999371df024aab60b08c3c8a5720ee9e32fa0faaa2","sha512":"8a84cb76807f518c2ad3afc0382d94520a00b63dd0b1875012ea4f518068e3cfb971cafa4ee57daeadc7e7f466d4c206e66a992fa709ed527c1ebea592766c79","ssdeep":"1536:/+FNImycTVyrkJtpc/jISuC7eZGc67MTni3dq3OoRNJzJEXCDClBgzG2Hpj:EImyc0rknpc7tuC7vAmAeoMXUCIzG2H5","tlshash":"82831291a60b9dd0866bf8783b494e20827d95fdfb714ebe53a5a3d1410109a3f5c52c","first_seen":"2025-05-31T16:35:19.663912Z","last_seen":"2026-05-25T07:55:20.335407Z","times_seen":4843,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/MbfozOhnFzuISJNw7t-4D/_ssgManifest.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:27.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/static/MbfozOhnFzuISJNw7t-4D/_ssgManifest.js HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3kyA2JA9vcK1lCBZVoq70UE%2FhPONgGllJ2z4H1GryDwEMUqNs7jLTyWWuP1Pz9hpiGFcgEfpo%2Ff4vv4mvkxVK40qOmNerALGYB84qQ%2F6kQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 11 Feb 2026 18:10:38 GMT\r\netag: W/\"4d-19c4de5e544\"\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce45026cf6c4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-05-25T11:38:34.782855Z","times_seen":227868,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lrkt-in.com/logger-1.min.js","fqdn":"cdn.lrkt-in.com","domain":"lrkt-in.com","tld":"com"},"ip":{"addr":"172.67.132.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lrkt-in.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:05:43 GMT","end":"Mon, 11 May 2026 21:04:15 GMT"},"fingerprint":{"sha1":"D6:B6:12:F0:A8:9F:81:34:2A:E4:95:FC:92:13:4B:14:3D:56:C7:68","sha256":"B3:0F:84:8B:7A:BD:E6:3F:80:98:75:F0:AE:00:F7:4A:52:E8:4C:8C:CD:F7:1B:26:39:02:C8:32:AC:6A:65:CC"}}},"request":{"raw":"GET /logger-1.min.js HTTP/1.1\r\nHost: cdn.lrkt-in.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 128573\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\netag: \"6eecb454c74662dea1d842792711a4c7dc1c0af06facf7b69c10bf5117268aef-br\"\r\nlast-modified: Fri, 13 Feb 2026 22:28:56 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\nx-served-by: cache-bma-essb1270028-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1771036063.169728,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 2080\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m9hSVhSiTVJ6uoamlwkH4l5ThEVrsP5Lxhog0TJOGNFFktP8vXbFqTknGwXnpYLCzC4nugpP%2BUsJgDmcp6n%2FG1cMExD30%2BOSb84JMSfZJA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9ce4502aa99f57e3-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":816489,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"204a2a1c0319646029a6583c0f578bf3","sha1":"65a6979a014b5fd09dc29de8c487687b3351469e","sha256":"f19905fb70761648dbff4305c87087274125ed2c22b8d945df661098df955604","sha512":"823e7edb4b9e3c97e3fbd2f8c34c93a0ffa31da3c626b1a79905a63d93843787340060901158f987f95f920f3faba18fc8203b3786890e7c3f007ae41be93dcc","ssdeep":"12288:1sBgTuofwyAtUBM6NyxmYo+lPoHpiNb0HLVh/yGCAnhymx4AD4S5IT7Zd:GiKc+sh/yGCA0mx4AUS5ITFd","tlshash":"71052c893a98f46302da81d9503b2407f335181e706de0e4f3d9ddda686d68a617bf3b","first_seen":"2026-02-13T22:50:15.477517Z","last_seen":"2026-02-17T17:40:05.796245Z","times_seen":71,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":49,"dns":14,"connect":8,"send":0,"wait":13,"receive":18,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-15","alert":"Hunting_JS_WebAssembly","trigger":"cdn.lrkt-in.com/logger-1.min.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Fblue%2Fbars-tablet.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Fblue%2Fbars-tablet.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34852\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: C4BME7vSLgI2Uwlc73LmIxkFtNHOjE1SkEmKaGi47n8=\r\ncontent-disposition: inline; filename=\"bars-tablet.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CW94m6DssElhspPr4qoWX4fC7uKUFFAhHFXjWiznu2QBeojL79%2F5VgVycqLUkZikpy3Wgr2CW%2F7LQmpYib56uv7hmGoMyGPdHAwUauY0gw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502cc8994eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f992f2976185cb320fa04d61d41878b1","sha1":"b3b906090cd4a0ff0de3b738643926c23b456186","sha256":"0b804c13bbd22e023653095cef72e6231905b4d1ce8c4d5290498a6868b8ee7f","sha512":"9bde58b937408daa70d05a1dc55ee73c54e9e6c69f7c684a8f0616fecce7153cda99d5d76c4a74f268da3d8fcacc252d3ac5b415c99e97c336e47b485c766175","ssdeep":"768:sMVlYmcqb7StQ6xP/M+rRhBPPUPeXBBN/tt7aIlgpo5:smlnLHStQ6x3/1hBPu27B2bpW","tlshash":"98f2e09fabb0500c73d3c3e409ea144eda416b8a324de31bafb559294d127d8c71da9f","first_seen":"2026-02-15T11:02:56.284191Z","last_seen":"2026-02-15T11:06:28.918027Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Fblue%2Funderstand-2.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Fblue%2Funderstand-2.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28024\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: OOnU1WGD6axZJ4rRDYROR-+ukOP7vPdhth2Fs6iCI6I=\r\ncontent-disposition: inline; filename=\"understand-2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5KlE4s8suE1VLh0lGfaj2Qbl3j0CZ9EZKZG1Z%2FSlvY%2BK9hfYY%2BuG1TGswH3ASe58X48U1XdxSH0oNKygThUcVWgf4HdEKVSeqHq8KFuwrA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502ce89f4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28024,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1212x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c719df41d8f2b5ae71ddef87412f1bbc","sha1":"abf40c70d125c26889f2ba260af3ff68859af48d","sha256":"38e9d4d56183e9ac59278ad10d844e47ffae90e3fbbcf761b61d85b3a88223a2","sha512":"8e2ed14a372e545e4bc58d4dae951d3e09ff962871bf1131e8f7ea48a2c36a10abacacd0b83760573d2f063f7cf8c1ee6fb17926528c2440e8a3bc1629ebf420","ssdeep":"768:he1AiBAGwZ5Ofg1tntiilnp09eWy2gfMH/S2os:hkAnGwZ5OIXntigs1y2RH/5","tlshash":"ffc2f1b11baf7e89a58a2370f215537ffa40a10f442331a0297cdf69a492c3bf816795","first_seen":"2026-02-15T11:02:56.284954Z","last_seen":"2026-02-15T11:06:28.911338Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/images/sprite.svg","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /images/sprite.svg HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 11 Feb 2026 18:05:32 GMT\r\netag: W/\"b0bf4-19c4de139e0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NE3MZRFD4%2B7J3BUWMafCCXCaX59NqA3KL26mzETF5FUpMR%2Fald%2BR%2FPr%2FoWepPd1iNxoyJXvY1n6H07iOMv5bpCwRmjCcmZGvSdpEjNIGfQ%3D%3D\"}]}\r\ncf-ray: 9ce4502cf8ad4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":723956,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"beecc7ad19a21892b6c1ed4489201109","sha1":"4c994a342761c0d0ce7ee4047e6eb12663c2c6a4","sha256":"a43e55160d3a97643cc1514aca87c77699bc499313e27d117fa3fd1d1544e688","sha512":"72f0ad658dc0681d039d7f9e1f2ad46ede3390fc75ff308287695cbbe9c90c4d41b89176e8d219ae8846112a004c9c020a8a4bac0263583f168fb7973a240e38","ssdeep":"1536:qDV7fKoWlPYWt2mDbThwMgp+XX7oT93EExYPrWfXrLWr5hdyA46YtT9rTF4HjOnx:DnvHwsZbTaqAYlDGvSx9ZCHX","tlshash":"67f4f9f6a3e4a2f4e507ebf0da366875755f38fa3f81cac48264aed0961109d894dcc1","first_seen":"2026-02-15T11:02:56.28602Z","last_seen":"2026-02-15T11:06:28.924588Z","times_seen":2,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding10%2Fuser-1.png\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding10%2Fuser-1.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26842\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: MQhh0H8mZpoNCmHl8v2XkeiHm5qzpmSlLy9WPXmhCWI=\r\ncontent-disposition: inline; filename=\"user-1.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8BU7kDn80gcI%2BqYckgBrD5dVS0czdsIs9jPOQd5RcFCbVZpVoUD36Uf7EydG7PP%2F8unlTWHxbpcSJ944nn6sY8%2BeoBg%2FRKi7YbJLXyLqLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502de8ca4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26842,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 614x612, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"060ae1a88e09f931d48b06bc75f7abd8","sha1":"5b115bdaf8b4f3b0f56a298e3aab72a740823bd2","sha256":"310861d07f26669a0d0a61e5f2fd9791e8879b9ab3a664a52f2f563d79a10962","sha512":"d1d3cbca31412defac0b6ed03e728480abfc2c12b4a2a5cde35b9085218ef5a3071cb6f7125714a48066e58db76d72e6ed1fc1311070c170980225ac2e12b8f9","ssdeep":"768:uUWE7Z/HRP3AbZfm1vlZMAVAywAItQxnUm:8Et53QZfmDGCXwAIgnUm","tlshash":"69c2d0c942273a017364a6a0cff5995510d54bfc2be56bcd799b7b60b48c42de27a80c","first_seen":"2026-02-15T11:02:56.286869Z","last_seen":"2026-02-15T11:06:28.927646Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/css/5cd314d39692a223.css","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:27.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/static/css/5cd314d39692a223.css HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:27 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 11 Feb 2026 18:08:22 GMT\r\netag: W/\"8daec-19c4de3d1f0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=46nNpos1sBSn2F0pxQMxKwW0hwbZ7xmcps51z0ZC2MhNBYfz5meNibdRNjvqkpb7W%2FWLu4%2F9r5MGV%2FV%2BGyA57zRkGt1n8Ix9JlmYmrMz3A%3D%3D\"}]}\r\ncf-ray: 9ce45026cf5f4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":580332,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (61661)","md5":"8e9b3d6c206ec5df2d448a2d5bcd3b73","sha1":"fc6e5832553b139428e65bcb3a35cafd6f0ea1a8","sha256":"421fd2a4934b8f205c0059fffc0ce91b9d95bb57ae96cdea8703fe6dc1a0cfe4","sha512":"0b6e173cc8708cc3f6b56c08fe68b6a63ad1263c771af564489218edb507002cfb54dfc47e6ae368cd4bc93e53c2edab55773350fb300f8cb3a680a64d123cc5","ssdeep":"6144:xDHvE5nEJHcNkW4ZfeyjMo7gqwEcA161TT29GVQLm2aBs4J1CD1Jav9H1SDczCPG:xQwbtw1MSZ5","tlshash":"69c4d5ae2b00357af867c0f6e0b0efec5819a404df0262f7e51b74649ec16e61bbd954","first_seen":"2026-02-15T11:02:56.28775Z","last_seen":"2026-02-15T11:06:28.900074Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/chunks/5022.582216ba6ea5660f.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/static/chunks/5022.582216ba6ea5660f.js HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 11 Feb 2026 18:10:38 GMT\r\netag: W/\"6cf2-19c4de5e560\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xEGkWalG8wSXJIErZfpC%2BiaQQUr4UMy3x7Ep19gTXEtvFbT5Mg0YXYMTMIWOwI4YGLoYXbFcvcpZqI5j045bQInY%2BpKNnZn3%2F5edklMRAA%3D%3D\"}]}\r\ncf-ray: 9ce4502aa8174eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27890,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (27890), with no line terminators","md5":"688d730d5c051b7eb41fa96830946781","sha1":"c7a330493d5d1ac48e4754ca828bd145ea3c4dd8","sha256":"0b6dd16161008f01585e8f512d8d2ca6158b9fef0eb7431b975b9558eeba1632","sha512":"c91bc3f8b27972d49f0a72a9339815e1da92d67810b476ce4d6e74ffb918cae844bd0d63198e4de23af7cc64bb14a79fbbe4144fd2ae2a82df6835fd3d72611d","ssdeep":"96:mf6T5Zm+h+PKXpF3mRJXaiQCEFcbiBg7X35YMNh7xifQeA4AMu36mFpbQ+fIxq7g:mCS5+mRZBNm0MIQ+fIxq7V2","tlshash":"aec2ec69d098aed17c187ca09b3b9d8d33df679c855a18f8e8925916107d8e0332bfcd","first_seen":"2026-02-15T11:02:56.288463Z","last_seen":"2026-02-15T11:06:28.922113Z","times_seen":2,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.blue-invest.org/api/cdn/bluefavicon.png","fqdn":"api.blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /api/cdn/bluefavicon.png HTTP/1.1\r\nHost: api.blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 2318\r\npriority: u=6,i=?0\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: public, max-age=86400\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'none'; img-src 'self'\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nlast-modified: Sun, 15 Feb 2026 11:02:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=puwkzhDcZXziwKHjvmAwnyD%2Bbsv9AI0ZIKCxdNud6ouR5ovz8sFbTPWnK1t%2FTMv4BoZtpAOXPWe1OFW3L993t%2BxsFfevrg1c9ty7QZQ%2FMUheNPk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502c18844eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2318,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"2390dc3c782583fdc5af6482550b6fbb","sha1":"da17cc6eb1d0a43443e3acc2091f76191833e690","sha256":"8fd1e40ccb688d72c071d2dca6a8b87cb1cbc0b7c44df0bbdfc8278ee28f6779","sha512":"d739ca69506b3742793208c0e319146935bbad31a6435874c309f0b2dd395e2329976fd1883e40b8bfcc68feeea748ea570db9f3bd5fc79471a2191dddcbbb89","ssdeep":"","tlshash":"9f416d88058d1f1e87260f70c9b6c9edd199301f167cb409a2b3f9082d77cadb430914","first_seen":"2026-02-15T11:02:56.28924Z","last_seen":"2026-02-15T11:06:28.919321Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":13,"connect":8,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"api.blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Frounded-border-medium.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Frounded-border-medium.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32548\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: B7SZtpDLTy65Dh49aNSTaoAprCoaqMaWlmrHor-jT4k=\r\ncontent-disposition: inline; filename=\"rounded-border-medium.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H6y4Gg3Jc9M%2BOcaVn5AQWvoA94YuhipkhQIAWK0oDuKLWqDm%2Fos3njSElG3z8xCvkmZdOzzuTQfb%2BA9XE%2BGyZjVUS4vvS%2BxK9s382ujv3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502cf8a64eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32548,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3930385e0c1caac03ba78bd5966ed288","sha1":"f0d68e2f19a8fd79aa1ae805bb64551ae7a9f710","sha256":"07b499b690cb4f2eb90e1e3d68d4936a8029ac2a1aa8c696966ac7a2bfe34f89","sha512":"d07076ec4b863e58ae486cb5f195724cee250234ed0409c08fb23d9656a05053bd9467c379860a77a35be4494314ed184a896c871e177c3b963f2748398be2e4","ssdeep":"384:sQDDntiv5/S3hf3FfpXr9bHDd4EZFgP5E/AnKUOp8SMmKeJ6afWNE86t2ZA0NDFH:swrtq5S3hfHcEY5E/AE04/2/lxeqzj5","tlshash":"abe25bc7c1cb19b7d09e6aecde36bf27154acde917fe05178560280f189c4a609f9a83","first_seen":"2026-02-15T11:02:56.290153Z","last_seen":"2026-02-15T11:06:28.902581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Frounded-border-small.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Frounded-border-small.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15370\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: XOY8ukH3xKEFwkauqHlr7PuvI8hDbjBWRi43wWLKS74=\r\ncontent-disposition: inline; filename=\"rounded-border-small.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YrQPZI0w353QoWlrVNoPUFssHMOhgRU2TlPYGhHoaqKccjtUmXJI8KRygdaXVT%2FJTTM10wWKq0Sv4mXB%2F4u1b1MIsGF%2B%2FZIkZCgrZCkIPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502cf8a74eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15370,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c94055387050c8d8c6e62a95b0e5108","sha1":"32fae523060a769b51c269d6312b0da3e3eeaa9e","sha256":"5ce63cba41f7c4a105c246aea8796becfbaf23c8436e3056462e37c162ca4bbe","sha512":"ede21886239b3d198009cab95b37b525ed727d9d4545855e1931bd8458002cb16506d29029a5e284d249c2f3b2d9e4c47601545c8620f2cd64d6383095e518ee","ssdeep":"384:vSheSZGmw2GkJyhSazeCljQ9iOc94Z+VpvM+:vSZxMAy3lVOk4SpvM+","tlshash":"1a62b4796ea61f87910d523c4f2600e792d8f0b65e3ccd48668c6ec3305eb73e96a8c5","first_seen":"2026-02-15T11:02:56.290957Z","last_seen":"2026-02-15T11:06:28.923855Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/tradingview/charting_library.standalone.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:27.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /tradingview/charting_library.standalone.js HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 11 Feb 2026 18:05:32 GMT\r\netag: W/\"55ca-19c4de139e0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TnwvJmhJ8ElRNSXIiWITV3HTVXVlA8P1mRSxwH4s0OBYHjrqLIAwEfa2Z4YcdC5vywQWF5SkyyDfF4%2F%2FkpRQk1ML0a8y4JC8TjIbkkjKBQ%3D%3D\"}]}\r\ncf-ray: 9ce45026cf5c4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21962,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21961)","md5":"245007392b6340cec37f49a558af50e8","sha1":"7b23aef994ae02331b1da913091707d09d1b96ee","sha256":"aeaf9a383cba07c0d52439f40f73a3091539eb123aabc8bb48ebcf06213a205e","sha512":"65c3b0a20bf187ea750641ac78b347e78a717eab6bba2c2e2c67097b5ddae6c5720f268d521fcb7a288a950a57f4fefe756e16af3f9a120676df2b8d016d3850","ssdeep":"384:wkkcU8h/juT6F0GratOOlsWQK+8No3Vs3dVSQNX4Gsi0Xh+5/ISJhvHIh6egPh3c:/kcU8h2DlJTNyQh4G0h+5//JhvHIh6eJ","tlshash":"7ea21a509a35b83b06cf4af8817b18079127ef60b409889c3854aacc55fc9c6e57bff9","first_seen":"2026-02-15T11:02:56.29174Z","last_seen":"2026-04-08T04:13:44.582394Z","times_seen":6,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding10%2Fuser-3.png\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding10%2Fuser-3.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27902\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: Iiswua0zZRaFME2s6kXmZXL-bhLMpaF60o413H3N410=\r\ncontent-disposition: inline; filename=\"user-3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qrOZVF6uySKrniyXxgesxzhQykMF8QDPDgL2jES6wQu4%2B5tVkk52%2FoFKI1bVvsCGP7Ikt28iCQMLoZ4KOmIHTI6gBpOLrFqY%2FPNCENajIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502df8cd4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27902,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 789x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2d550ef25c158a462f94246cc907acf9","sha1":"beb43c1844310613d69782ed2d7da0332cd81dba","sha256":"222b30b9ad33651685304dacea45e66572ff6e12cca5a17ad28e35dc7dcde35d","sha512":"9ec94f4e27356077a0b25c120f32fd47961a4c958b8622cad798d91dda7bcb2f2a6bdc5acb9ef363d4f00eb1265c3aa60c0e59597ce11401f1c7116c1e91e9d6","ssdeep":"768:DkdmyDPF+3g+Jwx8J9cUiQVNHLo6UYDdxnn2qRR:DkDPF+3g+dJ9cVQXwYDL2qRR","tlshash":"7ec2e1c6c0b37fc6ae2675726dcb15cd263ca68ab270209d6c1e704c491ae59d44aff3","first_seen":"2026-02-15T11:02:56.292657Z","last_seen":"2026-02-15T11:06:28.903804Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/chunks/pages/_app-40f396c48faecfd5.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:27.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-40f396c48faecfd5.js HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 11 Feb 2026 18:10:38 GMT\r\netag: W/\"121029-19c4de5e54c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S0sk%2BToWBaN78Wwe%2FUZLT4OatF6htJe2uEvc3ULGri%2Bkdpc%2BKkgemJpX28kFL6AV%2F80jL84W0MU8TuEgy1mkmSy4pXse04WcCMgoenkBFQ%3D%3D\"}]}\r\ncf-ray: 9ce45026cf664eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1183785,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f0284e546c93ef1558c53778f09dd7","sha1":"3bf121c4c8108e3b6dfc08f2a61be2833170fbe1","sha256":"5b9c57b59f65c0423936ecd12ad15faf0c7214f7a2cda5a422c0849fa1dee002","sha512":"59b25103217efeb77c80cb3fee3e24a01a94f13c3c464b303a020ebfcbc290ff1c7bd026d6ceead2e494edebabf8f0540d91cdfd4b38a60c8b0c98e746921333","ssdeep":"12288:A2bnYp0behvU9fzZ7/Tw8Crl3kroWL3SK0:A2Pbehc9NTwVB4LCK0","tlshash":"e92518daf66cf33692d67275806f734ea26c7d66c40c8434b6d3e8cb16788c4712ab25","first_seen":"2026-02-15T11:02:56.293625Z","last_seen":"2026-02-15T11:06:28.896711Z","times_seen":2,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/static/chunks/pages/index-e6cdc6aed7e6dc0c.js","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:27.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-e6cdc6aed7e6dc0c.js HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 11 Feb 2026 18:10:38 GMT\r\netag: W/\"575-19c4de5e548\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DDYdKoGUzJW%2B9NXBVlc%2ButVwwA5jAw0VrlUnpKDzeFp7Cc0eWpwh%2F4OOIx25cpnqSte5GCxizTiQDew4QuPtsqzEgByZieZSC0EUzVIpxw%3D%3D\"}]}\r\ncf-ray: 9ce45026cf694eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1397,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1397), with no line terminators","md5":"b669956472365dd2c016c79a76057dff","sha1":"8f1ab032ff7e6ed8782bdb50ff35f185d631a44c","sha256":"1c7d0dfb527b150cb28321d3c00aff030927a8d84a91564e0bc9e5bc0677783b","sha512":"972e876bd94ae2998ff3749bbfa73a267774ae30cf883df23f52c79351c74fbd1335840358749500f0d3a19557f39666b0782ddb4ad01be48ed466fce27de5b1","ssdeep":"","tlshash":"3b21f408b9f2f85421a28cfc843b1c1b933f360418adbc7590a19dd56eb074eb292d6d","first_seen":"2026-02-15T11:02:56.294404Z","last_seen":"2026-04-08T04:13:44.603609Z","times_seen":4,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Fblue%2Funderstand-1.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Fblue%2Funderstand-1.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19154\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: cuJd0bjS5+mfG35u5HJh36GgACuQPg+pS1URPFlqufw=\r\ncontent-disposition: inline; filename=\"understand-1.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gzmV%2B7D9yS5GWn9eP1%2BenPGc1PKBgNnNCKDnZpYrZhkyc61RuuSFdJoauwjPkiAfBTksH%2BuD5z9WbQdAiltqnLUa73wJ4JNn20CsAwz4Pg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502cd89c4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19154,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1212x716, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2caacde70b9aa2c0539b763901ba0c85","sha1":"d8765e87031841c41d4c8e5773902305648e98bb","sha256":"72e25dd1b8d2e7e99f1b7e6ee47261dfa1a0002b903e0fa94b55113c596ab9fc","sha512":"35689e9d8e9b0d9d5646a652e65ddbf8128cdb777477452f5ff94f3cd7df44ecac9c3740655b5719b2ed420b0e1f95589ce0abe836155b27e45021f48be47ed9","ssdeep":"384:jL8FSz2ipll5pD5floUimdsHQqvHrISntZ/yl7wYTS:HWS3plJD5uUjRqvHkS/yC","tlshash":"8582d079690ac013ee0bd068ff7ca724b795f2a816051676050ddd35e28d28e3f93da7","first_seen":"2026-02-15T11:02:56.29517Z","last_seen":"2026-02-15T11:06:28.910422Z","times_seen":2,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blue-invest.org/_next/image?url=%2Fimages%2Flanding12%2Fblue%2Funderstand-tablet-1.webp\u0026w=1920\u0026q=75","fqdn":"blue-invest.org","domain":"blue-invest.org","tld":"org"},"ip":{"addr":"172.67.189.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://blue-invest.org/de","date":"2026-02-15T11:02:28.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blue-invest.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 16:03:29 GMT","end":"Thu, 14 May 2026 17:01:05 GMT"},"fingerprint":{"sha1":"B8:C6:D9:56:4F:03:9E:13:E2:A5:19:20:17:4C:B8:74:C0:98:A3:DA","sha256":"E6:C7:FD:C7:C3:AA:F0:5F:D8:FE:A3:52:4D:95:96:75:EC:12:B1:D0:09:07:40:F0:F0:CD:19:DE:4D:0C:BF:58"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Flanding12%2Fblue%2Funderstand-tablet-1.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: blue-invest.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blue-invest.org/de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Feb 2026 11:02:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34220\r\npriority: u=4,i=?0\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: GfnCXlw-ft1l29qxch81j8sf-UOlDTK1tkxs7WeGeBc=\r\ncontent-disposition: inline; filename=\"understand-tablet-1.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ue4J9Ou5qhZvsSoqC44QZtshmchy5tUO%2F8Bs%2FISVZuEDuT2TBszIwvwPmUoUodPUPHYPY7bZs1%2F3TdK0CFIbHBUpOjzhEKKbdfAWDk80bA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ce4502ce89d4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34220,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x518, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"313acae304eab16c0ef0617069f2ea95","sha1":"6daa2146ae78b088132cd6f1eb6f07746717c054","sha256":"19f9c25e5c3f7edd65dbdab1721f358fcb1ffd43a50d32b5b64c6ced67867817","sha512":"086109b9bcc511748314bba62e41de91e113ea6962a3b38005374b0bde945fe4b6d382c7ba1388a0885ebb3a488b5b3184f884516ccf8f45d37e93f52273794c","ssdeep":"768:WFBE62Rc0XVHC4gDPKFkqkn4XWsjjJ2dPK8MSGd/No4t:gkO+p35Fkqkn+WQJePKnSGhi6","tlshash":"7de2e17843c26f8ca7ffa2211c5d5f54eb31d2953121ce06deb4dea0b221be463191ca","first_seen":"2026-02-15T11:02:56.296052Z","last_seen":"2026-02-15T11:06:28.899413Z","times_seen":2,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"blue-invest.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}