{"report_id":"09b4fb4a-2ffb-450b-ba7a-89dfd09e444a","version":6,"status":"done","tags":[],"date":"2025-08-29T06:47:16Z","url":{"schema":"http","addr":"gwda74x.life/","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"gwda74x.life/","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"title":"gwda74x.life/"},"submit":{"url":{"schema":"http","addr":"gwda74x.life/","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-03T06:47:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"ssogtx01.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.gwda74x.life","ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":36,"received_data":137008,"sent_data":18323,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gwda74x.life","ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":179,"received_data":5481044,"sent_data":193671,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-08-27T15:25:46.622354Z","alert_count":0,"request_count":2,"received_data":1613362,"sent_data":976,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gx.webim.ru","ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2006-09-29","domain_rank":0,"first_seen":"2024-01-26T10:34:55Z","last_seen":"2025-08-19T01:32:18.263087Z","alert_count":0,"request_count":15,"received_data":1918437,"sent_data":6878,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"gis-static.gtx-s3.pw","ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":0,"first_seen":"2025-08-09T06:39:48.635715Z","last_seen":"2025-08-19T01:32:18.627036Z","alert_count":0,"request_count":28,"received_data":816129,"sent_data":13656,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"us.i.posthog.com","ip":{"addr":"54.162.100.93","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2020-01-23","domain_rank":42193,"first_seen":"2024-02-22T12:48:36Z","last_seen":"2025-08-25T15:37:04.906968Z","alert_count":0,"request_count":4,"received_data":2429,"sent_data":2050,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gs.jdwqqi.site","ip":{"addr":"91.215.43.62","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2022-07-06","domain_rank":0,"first_seen":"2023-10-27T17:21:41Z","last_seen":"2025-08-19T01:32:18.758796Z","alert_count":0,"request_count":1,"received_data":758,"sent_data":593,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"api-iam.intercom.io","ip":{"addr":"44.194.218.116","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":17818,"first_seen":"2018-08-02T22:07:54Z","last_seen":"2025-08-29T04:24:52.790842Z","alert_count":0,"request_count":3,"received_data":3396,"sent_data":1573,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-08-27T15:14:20.392551Z","alert_count":0,"request_count":2,"received_data":1106,"sent_data":1674,"comment":"","tags":null,"fingerprints":null},{"fqdn":"js.intercomcdn.com","ip":{"addr":"54.240.174.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-25","domain_rank":23692,"first_seen":"2020-02-19T12:43:00Z","last_seen":"2025-08-28T21:11:56.986795Z","alert_count":0,"request_count":2,"received_data":1717156,"sent_data":843,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-08-27T15:12:56.836113Z","alert_count":0,"request_count":3,"received_data":743485,"sent_data":1427,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.gist.build","ip":{"addr":"104.26.10.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-11-17","domain_rank":124721,"first_seen":"2021-06-11T23:09:08Z","last_seen":"2025-08-28T15:07:31.772496Z","alert_count":0,"request_count":2,"received_data":53308,"sent_data":846,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"getxavatars1.gtx-s3.pw","ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":0,"first_seen":"2025-08-09T06:39:48.642557Z","last_seen":"2025-08-29T06:11:05.145465Z","alert_count":0,"request_count":20,"received_data":5417345,"sent_data":10050,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"ssogtx01.cc","ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2025-01-13","domain_rank":760426,"first_seen":"2025-03-26T02:25:04.976918Z","last_seen":"2025-08-19T01:32:18.311466Z","alert_count":1,"request_count":1,"received_data":381264,"sent_data":563,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"widget.intercom.io","ip":{"addr":"54.240.174.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":19213,"first_seen":"2020-07-20T12:16:46Z","last_seen":"2025-08-28T10:16:20.295938Z","alert_count":0,"request_count":1,"received_data":7476,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"licensing.gaming-curacao.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2013-09-13","domain_rank":5874765,"first_seen":"2019-05-08T08:27:38Z","last_seen":"2025-08-19T01:32:18.449806Z","alert_count":0,"request_count":2,"received_data":763,"sent_data":1176,"comment":"","tags":null,"fingerprints":[{"name":"PHP:5.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/D7g2Y9Ik.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"17f4b640bfbf870f44fd3b9f372e4030","sha1":"ba16baece8c01d4e409cbcf83f1b699785d954e2","sha256":"9dfec4b4ce52ca584022a42d697b4afe2d6bcf7cec5a7581feb5192e127aa7c6","sha512":"04ab44f245fc347f4b7020b2ce3753346e7767ff2c758d696b3c97201a70659f07dd5b5cbd26b336647d942e9b32ccd0d2862b0bfa7e335e82e35c2de66457e6","ssdeep":"192:EqsxSEFu6ZufGq+wk5q2IkZQ+tOWwYpsTctq0ipgNE7oVKRpnKFEN:EhZ8fKwkQ2IkDLwYpfqZplOKRpnv","tlshash":"5d12eae473ac72aa59620dd12475481de434e6243b26e4d1f2ba34bab4d7c44b273f3c","size":9185,"data":"","first_seen":"2025-08-29T06:11:20.793603Z","last_seen":"2025-08-29T06:47:39.548541Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/B6SJDy_u.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"a63bffbd6a32718714b2dea6fffabf00","sha1":"598f615abc4d518bbc49bb2bfee75ea3566667d2","sha256":"341c261f7e26a056834e04726b4c7bce07b4db9263104c80552f113fbf1f5ede","sha512":"a51a0698e103a3bdfefe61a3913d7f1b615315d264799b6d0ad55c6517b1d68e28d85bbb169ae0e119283570478dd96d83cc93b91c6804947dbcc773f0cb508f","ssdeep":"768:OmbHNJk7Wt1V01e62ZVnDF9BqmeQqkOGcn78WWnwnY48WZ0BEZA8DWeXksPzzAf:tXBn8nkJUvnBZT9wf","tlshash":"44f2e709f4295c3ed5b75dd878541401b22d2fdbd0814d72a1fc9e186bbad3823aeb6c","size":35755,"data":"","first_seen":"2025-08-29T06:11:20.701502Z","last_seen":"2025-08-29T06:47:39.437977Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/BNfhnzMP.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f88d57b3caa3e91d3e87ac938c574c0b","sha1":"4260b40b05b4f541adc30be0b063d17ffc487c1c","sha256":"ae127a6560609b319b33780ada9307e35a80f9ab402099171658b34accaa90b7","sha512":"c237bc82cd92e6ba3d2c2c0a31a32f5a723caa5b5b45a11e52a3d41f170e3591383241b1028474f76bdf0f110acaa0afee3d555ac018b148ff1c0ca9b6aa2fc1","ssdeep":"","tlshash":"9911414f3496eefa924ccdfc9d36643815e4ccf972dc1487c10d4966a27510ad19e313","size":878,"data":"","first_seen":"2025-08-29T06:11:20.771853Z","last_seen":"2025-08-29T06:47:39.494184Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DIBeZulZ.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"31f1b7502842872db29f6910ff411be2","sha1":"27afebefbe7371ac7efcb4b079e17bed79a254bc","sha256":"8c9c9fa06a9cd22b2ec61e6d687fa48741f31d2d99cbe7e6e227a820faeb8489","sha512":"a99d937c752d6edb1debf5c2fac497c519bb09a88d0f9c78dceb8e762bf07d55d6ab76bd846517a9d805e7d1080d6b571b373181f37dfaf4ba496664cb284a3f","ssdeep":"","tlshash":"a6f0e51fd59586b88168ccf8d478d6702a3325dba7cad7e4c2cf07706310070d589b6b","size":450,"data":"","first_seen":"2025-08-29T06:11:21.024101Z","last_seen":"2025-08-29T06:47:39.602091Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CgwjNhf5.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"39e4c3b1bcf00b894cecf2d1fd473fea","sha1":"2ff232fde424b34567c3b2e630ec1374409d1b14","sha256":"531a003644e89398dd8af794f6a5642aa6fb7d5490c66d9fbe9048c5fa33491e","sha512":"c3c2a1d90c7d9c39913745963beb2486e0ac3a886176d8fcce8d9d8b3f6f95ff3934b6768e7bfaaea8e62cde95e5a83b8b43f6d87b6c8abe46860a8914ae3182","ssdeep":"","tlshash":"11110eafbce1cc3d82b218b8d6742923135666c436fcd0d8559d0ca56a6a84b596df03","size":1050,"data":"","first_seen":"2025-08-29T06:11:20.996518Z","last_seen":"2025-08-29T06:47:39.484645Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CVh778U1.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"5cb71f36aa9447413734581154b7f50f","sha1":"249cd1e5b06642a00be4a141c77a7b2945846a7e","sha256":"2ae73d43fed63e7c0351dc4749d2adbea4e5c161e093d342ac2d83771e4368b1","sha512":"2432628bff9f8206212a74ac51564ed914d0e0f8dbb0f56aa382502f6c9d8bd6dfce3543347bbd9f92fb272befa7cc4fb990fb7c3e6b2bf7081cca2fd724d756","ssdeep":"","tlshash":"df21357d4aec2dcc091cbc843ad89d7c7504d249a191cc9638a6fee7f487d5aec48471","size":1111,"data":"","first_seen":"2025-08-29T06:11:21.058056Z","last_seen":"2025-08-29T06:47:39.545181Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/ext/google/recaptcha/api.js?render=explicit","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5db423a2f4c68bcba596f83637d60b2","sha1":"e9502d29cc43675e82eba0701a0b72c1b4ed40bd","sha256":"b883a10103dc757540db87991251dc3d741d071de63d58e0428f36251a46de4a","sha512":"1c7e1e8472e778b692a63d8a2da081e78fe3973813e9805552ceae38b3fb85e2588569b2a4500c84632f21bb2e264f227f23ce660968f588baf42b4ff2cb1d6e","ssdeep":"","tlshash":"731102771b14a0394b7209e5e2ffd772e491701cf06845e8a505dad81e6accbce05589","size":1019,"data":"","first_seen":"2025-08-28T11:21:24.455189Z","last_seen":"2025-09-04T14:54:14.240046Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KN757LMM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"973898c854dad04a2d1cd42780b40359","sha1":"75a0b8b386caa7073722a30239d3d4a694cd1f47","sha256":"340b17f7b4924b8708fdf94a3d5206a65772ae6384abf8b70cfbd629520d7708","sha512":"7a9100432f7c5b9d7f27d4953b6fbc563d21f2c71ed7d192f012fbc328195fc7273420e1acb83f5909ea9fd324b7a720f3186a8125c982da4343f85c67b9dbd5","ssdeep":"3072:6RZW1ugS81VuNROC0ex3hNXJzzDXajPOLgL0dYBuoJMjcCuRMqvFxpq4U7teGc0J:QvMu3rxZjXLgLuNuRP7pq4UZeXEqE","tlshash":"8e8419cdb3c6746683a2b478403f014ba17b69a2f84cd895f185dce42e74aaa4177f7c","size":376230,"data":"","first_seen":"2025-08-29T06:47:39.649587Z","last_seen":"2025-08-29T06:47:39.649587Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/ext/cdp-customer/v1/analytics-js/snippet/233e4c5f9379d04ec864/analytics.min.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"40dfec4366cf117adf70c52eb522f537","sha1":"75c459400a5c6d5ba9b6b4ba3d97b92a0154e4b2","sha256":"b83dfb3cc66ff4f563917de48d81823977e239ddc527f769d4a2b59ef36b4091","sha512":"e92fa91271cd16836f30e1b2ff274a0b154684e7e9fd3b2d32154ff353fdb9ba69e38e88a0fc8d37c305c86a302a5de144dad1d73cb74f78b7c0be92bb8c1efc","ssdeep":"768:0xOyftQBCLo1sw/cexpme6piT5nQk8v2RbgFoF4OnImsSfWdLyWQL9ZsBpi0vRxV:UtQBQo1sAIeaE5Qk8uV4oF4OvpU5xMCf","tlshash":"dda383c8f6e6f060439364b8803f110bf23e795e680e84a4f266d9d66cbc59d9127f79","size":106230,"data":"","first_seen":"2025-08-23T09:38:09.850489Z","last_seen":"2025-09-04T20:54:35.109693Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/D7g2Y9Ik.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"17f4b640bfbf870f44fd3b9f372e4030","sha1":"ba16baece8c01d4e409cbcf83f1b699785d954e2","sha256":"9dfec4b4ce52ca584022a42d697b4afe2d6bcf7cec5a7581feb5192e127aa7c6","sha512":"04ab44f245fc347f4b7020b2ce3753346e7767ff2c758d696b3c97201a70659f07dd5b5cbd26b336647d942e9b32ccd0d2862b0bfa7e335e82e35c2de66457e6","ssdeep":"192:EqsxSEFu6ZufGq+wk5q2IkZQ+tOWwYpsTctq0ipgNE7oVKRpnKFEN:EhZ8fKwkQ2IkDLwYpfqZplOKRpnv","tlshash":"5d12eae473ac72aa59620dd12475481de434e6243b26e4d1f2ba34bab4d7c44b273f3c","size":9185,"data":"","first_seen":"2025-08-29T06:11:20.793603Z","last_seen":"2025-08-29T06:47:39.548541Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DlAUqK2U.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","size":91,"data":"","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-07-26T11:51:02.591674Z","times_seen":24709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Bso1n4wf.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"4e0da105c66878ebf02c8f53705c0d78","sha1":"73e60eb2b2ffc86522b476a10fdac4d612f4aa8b","sha256":"76090b1f0d4c1237e6292cf3624935590f2503890811a60cc8d7770dc9556a8a","sha512":"07f27a2645a5b7dcfb389c8e9a146a4be4930813d890f25c3ae5446340f56ee30e24704e59c8a8c45bb7210858e4099b0d4899bc589e8799c21046f54e2f7c14","ssdeep":"","tlshash":"ba11022bf60a0b2263331c79456831e6cf650b8b2c7944c43c54df161237c83e5a6f04","size":1029,"data":"","first_seen":"2025-08-29T06:11:20.823668Z","last_seen":"2025-08-29T06:47:39.488879Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/BZscnf8_.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3684a34a49d0bfd5a9eadd031202d1a0","sha1":"1dd2311ef09e0e36b01853192371dc928613aea3","sha256":"4dd5d8d61841df4aadc0c29e4d97083c87c6f91f28e0e2ad65de81eafc6b0491","sha512":"fbec549cd0efad6f0b3b0e5f7da07bca18806d38044a5a89aea0c95f11e123750f96b89bc658ae01aedeb0e2267167eebd525de4c9d75922e1c17df112f405c8","ssdeep":"","tlshash":"f711440f24a9dffde24d5de8ae76653915f08ee932dc588bc2090c6192b9016e19d313","size":1013,"data":"","first_seen":"2025-08-29T06:11:20.916728Z","last_seen":"2025-08-29T06:47:39.595998Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/js/pwa-load-event.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f463b05f25296c1e185cc82087291f6e","sha1":"d15dfa009eaeeaaf36af83b20ace25714adbc583","sha256":"3f5bcf295bac81715b4413d640843ee19600f6a17c96503038c6a4193c331865","sha512":"5ecd0baa189383e24afadcbe391266fac63cdcdcb7da68ab1371168fae81f05f0140b4dcd86bc4cc59f4ebb3f5949e94b302f05de00942886fe3060436ae03bc","ssdeep":"","tlshash":"64e02b7483fc55b808e182b75f47bb15116721a77068d990c1871906f8d148780a2fd2","size":375,"data":"","first_seen":"2024-08-19T15:07:41.99372Z","last_seen":"2026-04-15T02:03:05.836861Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CFU304S8.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"65b0cca89e40818f39fdd7753db6d142","sha1":"24e169a25a2e5e795d2ba4918ad600ab939bc23a","sha256":"261a0d9b3884cb4797de2dd31290199dbcec4f295a6ca9ee2c3b48ab9d9651ce","sha512":"e4c57b7230da955929c01aa05a22c6039a4ab395d6480587e21169106ce56e84aa99238c37d03c5944a72a6c799d55cc072ee59b5e498caf41fd1f6e021b43be","ssdeep":"","tlshash":"53b092d6728a3ce12602b810a15b80b4a131e6240b8a47208026f08739724a48a52e38","size":120,"data":"","first_seen":"2024-12-07T17:14:43.577967Z","last_seen":"2026-07-25T00:01:50.12235Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/kpZTToS7.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"323c6814500273dfe88e976caefcad3c","sha1":"34fd9849a89a3de3984e90c730491f15d041a358","sha256":"a04a1c31efae04f9f8a8e5de0b9c21a27e53c3a028946f9d96e6dd009db424bf","sha512":"5569008409a8059dd6455d4d2ccb29f5131f36d8bd264bfbe59fb1d4696b416cdd46b22944d86d42bc817abc33ff6a4cc41fe35ab7f505278997e8ef22ae8cf7","ssdeep":"","tlshash":"774110e3932448e75862e4c538e35a305b5599e8e1fa2089bc3acec5725ea07fc38770","size":2327,"data":"","first_seen":"2025-08-29T06:11:20.751906Z","last_seen":"2025-08-29T06:47:39.465585Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/l2_yC_l5.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"6a4759f64c4ca48538e5d6b224c5597f","sha1":"e64e70034d88f24856be3f8521a4827816214530","sha256":"0893da243cc086ca5497fd69990e3f8f3c47fbaa316d1112781935064cd3a468","sha512":"fc1662a8f27ae168b9e3cd593e54ba769ea71f61f2de868423603618d01bc4e6f2b5979dc57cc29039c6e16382563420788d96d6134fb6683faff51a55b53fd6","ssdeep":"","tlshash":"3161980ee40564a8563174e8a218a1847b3c1fedf3c41841a3b8dff61b57c59f278b96","size":3425,"data":"","first_seen":"2025-08-29T06:11:20.956687Z","last_seen":"2025-08-29T06:47:39.550983Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DPY8sZOt.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a70fa6e617896569c79b0c57a8b6828","sha1":"cfcabbe41e5d6e7a0d3cf26e8f244eac78055c46","sha256":"617ef9adaf4ef2a233bbdd95e9eb6698132cd74c12e55ecaa34e2ef407fbfa90","sha512":"7063ac2480219be984e4ddc0a8de9b0bcd65662e10e942fd1a7bfc5c9c0e0acc537e5004547ca4cf9d9eac9752eee4e1c17049eb667ad2257c26e3a456be9fbc","ssdeep":"96:6YglTYiN7xRLAHhaJcZ8YrMaMTTJ7FmGjfyLq6:6YglTYM7LQ9Z82MaMTTZFm2f8q6","tlshash":"ca918719b0945cf4997187dedc4108b169cb9ebf8410e9b173fa2b3027d5ca4e316b29","size":4544,"data":"","first_seen":"2025-08-29T06:11:20.982373Z","last_seen":"2025-08-29T06:47:39.627152Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/cryptojs-aes-format.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6bc38f77922eaa6f1b23716034b4a2e","sha1":"db781b1e30c4f2a1d63d47054f0903c463cf01ab","sha256":"9ca00bddae85e30d59672da0089ea5e132df97d75a92f42114fe1befbaeaf32d","sha512":"0ad7c00c1564d77f8463dfc81003c0d6cd6ada4e3d01094331f72847f17718e4a6b2c7a2a0bcbd96a1107bc6cb9bcb1721e7b2968ae4544595ab98d39bb30c82","ssdeep":"","tlshash":"163177407debb4c287e8e1d50435a044f67b7a0ab1558ef3aa5aa404ffedf3006326e4","size":1494,"data":"","first_seen":"2023-03-07T18:27:54Z","last_seen":"2026-07-26T09:44:04.955028Z","times_seen":716,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/wU3fTVt-.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"c0a226b8e9e2da339233781b46164987","sha1":"d96e3beb983303c350bee07b0f3b28811c032322","sha256":"b6afe0be133bed59ffcec2883cfa8a9c90bc515c5c3371d67e0198fd90f1376f","sha512":"8608c15473b78f0e9a1653912653aa3a66fc12b5432201c49215f10e374051ca3f482ee80cd1dcf9ae8ac80e8ac29f0e01a2d5131c35566521d3947be0717f3c","ssdeep":"1536:IK6l28I8DZzkXhvPS5uLEiMAa73hBlxvHB+CIdzkVXiA6w+EV93mBE09:V6nCvPS5uZS8a9Q","tlshash":"c8832989f224b57782f75aca8376c20172a14984b809d4e4b0ed4d7b496e95c03afffc","size":86097,"data":"","first_seen":"2025-08-29T06:11:20.850915Z","last_seen":"2025-08-29T06:47:39.57311Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/TAsJwC6U.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0078287cfae86c53a9d73e65ef3eeeca","sha1":"c5647f6f511402241cf149974e059eb93ecdf299","sha256":"fa5a09013ae93b7dccb41780fdd9137399a30d126e4c3b0e5e84b226fda48dc9","sha512":"a2a62dbc0e2e9e1962cee2970d4fa11b2d08617805d9883b4243ad0196384832b15bbf2a69ca5b357a3f847dcd077bc2016320719458f0b229135389ea76d78b","ssdeep":"1536:QsrUzXu9+2FYnF8qN1qo6HrXJF707AMvrHCRAxpdh5CVaxwBNz5pdCked5+:QxzXuw2FYhWw5qpaRdY","tlshash":"02d3504b4e0c0e7a056213b12fada7b362acc03571dbc3e557be82182375475aea679c","size":134885,"data":"","first_seen":"2025-08-29T06:11:20.778125Z","last_seen":"2025-08-29T06:47:39.466254Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/GDQKXCap.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"1090e235a4cb085eb1c966cb5a56a9d6","sha1":"bb7dcb3ff7bab04044523595d98e47d20ced0736","sha256":"6ccf03a0f2598c3256c4d50bb09cae09e619c2ee3e9eb001d54571d93c19db3f","sha512":"6f5b7c838f0410299b93713fa997efd5abbf80f349433f4ef993e790f1965fb725c403ff3f71be8b21b4f21bb1d237bd8aa3ec7d157f8b749cc0e00706d499de","ssdeep":"","tlshash":"df11afc070d4a87583b4498801d7deb1b429ca843ce782c5d89e1d33217fd8cd23eb0a","size":874,"data":"","first_seen":"2025-08-29T06:11:20.780221Z","last_seen":"2025-08-29T06:47:39.440117Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/D15-urTW.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"425b6bea6f359a26229f4d817aeb215c","sha1":"689eb1c0bebfa02a0145bc1b97f74403c99b5ce5","sha256":"7fcc314cb57a39c609879b893d5155ac94db7f5b45ec7603e16797724c35ccdb","sha512":"ef7007de5f3b99cc9e9101852cdb1c8ec619c95782a6fd8b82acb2c3a60a5b35d5e1e5fc5ff2e6cd7535d399c1dcf013b5a1cc75ab4ef2134de7238431571c10","ssdeep":"","tlshash":"ad41978c78bd99f886be48c7b559156423881fe8507e65cbb6fd1c385a62804731fb14","size":1903,"data":"","first_seen":"2025-08-29T06:11:20.910078Z","last_seen":"2025-08-29T06:47:39.636478Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c19b1b5d91c8d683b1310562d9c4a225","sha1":"4d45dcac5c6a88e10052f4e356b2170c20413441","sha256":"bb5779145f1ebdcdee053876a4ed060174dda4656978972304c79ddd5f36dac4","sha512":"3a4e8d2e8f5d9a3b45c08ce99374c149a5b67d04d016edfe6259dfbbba948a049301c0cfa5f9bf334cb93b9b4a3558cffa725c166a943c90834c8d2237a1a21c","ssdeep":"1536:Ask/3qTBpVX0Ib6vhb2pJkuppl5METErM2jnpkDtoT1JaM18PIQunrr9gltn2BE/:IqBfX046vhb2pKMQt1Jawi697w","tlshash":"4ec329deb397b033539355a980bb0101b73a6a19300d4464f62ad9ea3c7d847a277fbd","size":126923,"data":"","first_seen":"2025-08-09T06:39:58.991299Z","last_seen":"2026-03-24T13:49:06.781634Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/js/fp2.min.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","size":34877,"data":"","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/YtoO_7C-.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"8c2a66b09ecf443e1523059c34060f9e","sha1":"8d00f7a7b998a7c1d28112041b886ec02838901d","sha256":"473d56fcad0097e55e59002388ffeb8f5dfecb38241bd0f5ea6a8179c388cc38","sha512":"b84a4e020a5b48b3c2478b26f74ca8ba30113e2cf1db515160f8ac4d0c9417c1fb10a36b993d1da95504cc583f4d86fb4fcfc9ed3b7b604b64592cf66d68beba","ssdeep":"","tlshash":"07f099c9f424de331643098e40236a351251295c663032b096d382b188cb01de26cbad","size":642,"data":"","first_seen":"2025-08-29T06:11:20.782095Z","last_seen":"2025-08-29T06:47:39.623124Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Ckg_KlpZ.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cf0980e10dcd5472d18eed96ac56d64","sha1":"e5e594b8b0c8a996b2873c762eb7cc207dd3b738","sha256":"52b1bd62716b50653ace50fce971c0eaa88ebd0c691ca7c8f76e9f93c1510067","sha512":"bd74630695f578048fad0b2b00a9392b1f99de06885ba9e7d3ce0f467b93ad2942662117cbcb1dd07087ddea2033dfabbf12a3501734e5d7c6d74c5a087fe596","ssdeep":"192:4HwppTPlxBZfew3hY+0N7pr8QSXkTmSwnWxb5Y3NgqlPMu8vmb3p6EBTiSDULJ/T:2gpVZfewxL074QSX2mSwnWxb5Y3NgqlI","tlshash":"15120325d1fe4caa633730e11c2e9c1274146f42cb528d6398a8c415efdfa6d6bd239b","size":9517,"data":"","first_seen":"2025-08-29T06:11:20.6984Z","last_seen":"2025-08-29T06:47:39.569714Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CFU304S8.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"65b0cca89e40818f39fdd7753db6d142","sha1":"24e169a25a2e5e795d2ba4918ad600ab939bc23a","sha256":"261a0d9b3884cb4797de2dd31290199dbcec4f295a6ca9ee2c3b48ab9d9651ce","sha512":"e4c57b7230da955929c01aa05a22c6039a4ab395d6480587e21169106ce56e84aa99238c37d03c5944a72a6c799d55cc072ee59b5e498caf41fd1f6e021b43be","ssdeep":"","tlshash":"53b092d6728a3ce12602b810a15b80b4a131e6240b8a47208026f08739724a48a52e38","size":120,"data":"","first_seen":"2024-12-07T17:14:43.577967Z","last_seen":"2026-07-25T00:01:50.12235Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/cryptojs-aes.min.js?v=1","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd93b7f0987a614bc17698503bcb6af9","sha1":"68a66448326499ff34c75bf31e2769b278584e0c","sha256":"8d4fae1a37a5b5338c889d0897b50024194b4d3ae94940e7e42c1c1423a1183e","sha512":"e3b87dfe10c0e3f3d801a85ae9c654a74eac22c2a93a757568a0d2b13755c36aeb5f9337e94a21db4ef2d1f0f1cfb98fccbbb0151d5cdf8d967730df96bfde98","ssdeep":"192:9BIGDmDm90mP9z8Ui015lN1I5rI2Tru6hMJFmHV+mdpwIfyAaYfKnNVYkUUFJZm3:9yiB0ez8UiIX1SrTegsEHJuI+y8Z7AX","tlshash":"625297c936edb94263963028587f6017b86b28b6945c4824f29cd4ddff9899dc03ae3c","size":13722,"data":"","first_seen":"2024-11-30T18:08:34.076577Z","last_seen":"2026-06-26T20:23:29.818692Z","times_seen":1206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DNbMPNIg.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"94da510b6581c13c498b25615e9008a5","sha1":"0f2e7dbe88f7194b46520d5ad21e6b63a340e80a","sha256":"1356b031cedbb9588777cfcba7459f32750cd4b75382e01944429bdd01b4bb73","sha512":"2178d0b8b552b2ff58b1cde65b023423c45b01e1b623f5280aa881aeac9ac4ba9f511e8a717e5c279ce194dae254316e9ee8ac9d05649dd99acdf3975cfd08ea","ssdeep":"","tlshash":"ec6130fc1635a57226eb17bb43620ca282764455f049b27010da8f0d552dc984bf7ffa","size":3347,"data":"","first_seen":"2025-08-29T06:11:20.889469Z","last_seen":"2025-08-29T06:47:39.609761Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CUsHs50J.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e9ad5c4ca928ba6cf844f54b9b89a5c","sha1":"6fd50eb9c9e9201524a82a9b67443b7ea76660c7","sha256":"33a533cd8834cd2c52e3fe19c283fea7656febe9d1764795ec0f76818ae8a4fa","sha512":"31380004aec761307e083e55afeb81c9650a4d5c93e8d680a8db79273da42087991831790399a2447eb1a10a98e928266f8561a0cf04e4cbc52646416eacbef3","ssdeep":"","tlshash":"b7012e1be68081b40028cdf9d4758935b273849b1beae7f0e2de4b304bd10b2d108a1b","size":806,"data":"","first_seen":"2025-08-29T06:11:20.991937Z","last_seen":"2025-08-29T06:47:39.487621Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DEv5PRLn.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"fb3c16dd8853087f42af87a5d379a98c","sha1":"0dc29e100b227ba83f0898d2ccdb12e7963a597d","sha256":"89ae6bcf39a4e0501924e50bdf4a23f87f64e993ebbe6e83a926cc8ad000407b","sha512":"0718c3e6dec2ffd2c13d49f8befbd1154f826cce3bb78b2159ce095fab2a6983b3fe78c0fc1855c55684acf06aa0fb386493593980c06b288431626ac55a7e6b","ssdeep":"","tlshash":"594141da274e0918340e8382c885f9aaa73763a5b5f3d46c3ce29dc77201c43f6b0e65","size":2215,"data":"","first_seen":"2025-08-29T06:11:20.750658Z","last_seen":"2025-08-29T06:47:39.608139Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/cqkD4Ey_.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"98abaf8c0e7452f1b335b85556c17b81","sha1":"c0e20a53cb10a1eb860b0011e7dec53d8c127ce2","sha256":"d56d6bd8866b8920d642b59ee3323bff9345af1d15959bfa798c79e26cb5fe09","sha512":"59a2d50ecb02f9ca190d17fc54c9abee9278929169036760313542456659afca2aee4d06e36adda446e6b43ec505f8a516936d499c9569145c14df39cf88242e","ssdeep":"","tlshash":"9711239f5845cef4a14c8df8dd22603c16a088a672dd49dbc34d0972537205ac18e797","size":928,"data":"","first_seen":"2025-08-29T06:11:20.904684Z","last_seen":"2025-08-29T06:47:39.641816Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/BT7fzLUn.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"e35ce0891f6ffeb038c10c49112260df","sha1":"cf1548169bedf10bb8436715cf37c49f87535396","sha256":"2afbdd0e99eab329019e7f9bbe2bdc7dbcfff1dd6628db73f9213f63aef4323d","sha512":"cf5279ddb04d8a6fb61361b0f5eb25f94a21e8cffa5d3c1109e50d01aaa318962e65ebe30b11bee0e9281cedf7c89599013cdd67f24c999721fcb6b768f68014","ssdeep":"","tlshash":"613141c9f29ce4b7d0e7d7e88472843076d875fb3f98dbd4828099711623096ba4ead0","size":1671,"data":"","first_seen":"2025-08-29T06:11:20.795314Z","last_seen":"2025-08-29T06:47:39.509068Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/TAsJwC6U.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0078287cfae86c53a9d73e65ef3eeeca","sha1":"c5647f6f511402241cf149974e059eb93ecdf299","sha256":"fa5a09013ae93b7dccb41780fdd9137399a30d126e4c3b0e5e84b226fda48dc9","sha512":"a2a62dbc0e2e9e1962cee2970d4fa11b2d08617805d9883b4243ad0196384832b15bbf2a69ca5b357a3f847dcd077bc2016320719458f0b229135389ea76d78b","ssdeep":"1536:QsrUzXu9+2FYnF8qN1qo6HrXJF707AMvrHCRAxpdh5CVaxwBNz5pdCked5+:QxzXuw2FYhWw5qpaRdY","tlshash":"02d3504b4e0c0e7a056213b12fada7b362acc03571dbc3e557be82182375475aea679c","size":134885,"data":"","first_seen":"2025-08-29T06:11:20.778125Z","last_seen":"2025-08-29T06:47:39.466254Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.136ccc3e.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"103a089944d2295463b2f637a2fd1dac","sha1":"52544e4efd975b53d49b6fdd733fc294ef6c7018","sha256":"f23b1bd86b485b4f38f1671e46398627ea21518aed0b437be2d196c5c0c1880c","sha512":"8c49df15b440181ecf2af04709b52fa4ad199c22b7f10a145c7a883cb8a3184ad518ab4a6f8293a7cbd19ce16cf6aeef854a7c89b26658d103ea4b46c3d2c25d","ssdeep":"6144:pxE8LlzpXe7RvofOq1BrFZGEkYg+kfFd+oNEf9upyuAhOLtaX:HE8LlzpORwfH9kYqfFUkEFup/M","tlshash":"bce43bdc79d1f0a207f352f6807f140bf27a1a69680c8490f765d8c968b994e9237f6e","size":684253,"data":"","first_seen":"2025-08-21T12:18:11.824347Z","last_seen":"2025-09-09T08:35:33.568189Z","times_seen":449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c49f42ddfa296744603c8f3729ed32e4","sha1":"47749904d3e30cf9a359b21640a06610abe33792","sha256":"1cbcbe5288bf5fd650c17f3947ca2dd25b03c5ec044168dfd9e016c7f6007967","sha512":"4d8366ce22bc29566c2e3b78c9c63fddbe4061019bdec3aefff491cae9bbf0937e3391b98f4115f5f27150ccf6f34a043967018fd502ad6aff7749a1b59f27a2","ssdeep":"","tlshash":"8851d77ae029aa3fa016199c74053340584c9f7f60ae3d64e4c6d7a4bc0b35f1eb179d","size":2761,"data":"","first_seen":"2025-08-29T06:11:21.071804Z","last_seen":"2025-08-29T06:47:39.651221Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/ext/cdp-customer/v1/analytics-js/snippet/233e4c5f9379d04ec864/analytics.min.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"40dfec4366cf117adf70c52eb522f537","sha1":"75c459400a5c6d5ba9b6b4ba3d97b92a0154e4b2","sha256":"b83dfb3cc66ff4f563917de48d81823977e239ddc527f769d4a2b59ef36b4091","sha512":"e92fa91271cd16836f30e1b2ff274a0b154684e7e9fd3b2d32154ff353fdb9ba69e38e88a0fc8d37c305c86a302a5de144dad1d73cb74f78b7c0be92bb8c1efc","ssdeep":"768:0xOyftQBCLo1sw/cexpme6piT5nQk8v2RbgFoF4OnImsSfWdLyWQL9ZsBpi0vRxV:UtQBQo1sAIeaE5Qk8uV4oF4OvpU5xMCf","tlshash":"dda383c8f6e6f060439364b8803f110bf23e795e680e84a4f266d9d66cbc59d9127f79","size":106230,"data":"","first_seen":"2025-08-23T09:38:09.850489Z","last_seen":"2025-09-04T20:54:35.109693Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/js/fp2.min.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","size":34877,"data":"","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/ext/google/recaptcha/api.js?render=explicit","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5db423a2f4c68bcba596f83637d60b2","sha1":"e9502d29cc43675e82eba0701a0b72c1b4ed40bd","sha256":"b883a10103dc757540db87991251dc3d741d071de63d58e0428f36251a46de4a","sha512":"1c7e1e8472e778b692a63d8a2da081e78fe3973813e9805552ceae38b3fb85e2588569b2a4500c84632f21bb2e264f227f23ce660968f588baf42b4ff2cb1d6e","ssdeep":"","tlshash":"731102771b14a0394b7209e5e2ffd772e491701cf06845e8a505dad81e6accbce05589","size":1019,"data":"","first_seen":"2025-08-28T11:21:24.455189Z","last_seen":"2025-09-04T14:54:14.240046Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ff24fb4cd9ae726b39c730e38ac5cea","sha1":"719fa0c0e030deec05362e626313d4e11274563d","sha256":"af4d3a5d0b6e2d084e38459ddebe0f1bad6f188189d05d8bdc1ab0e196d075f3","sha512":"eeee0e9b3988c37055e21aabb4c5153ce2d81ff38ec90f255e43ea6383a12aa1ea8cf4cfa0ecf0de74ee9677e59517d415a3f30d8429c9cfa39838cec0e41ac1","ssdeep":"","tlshash":"92a00241c073d565db58400c49af7610293076e556606510f440c746711e037212a348","size":64,"data":"","first_seen":"2025-08-09T06:39:59.156203Z","last_seen":"2025-09-11T21:42:04.087089Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/tdLatql2.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"44d3da7143e426a7ab49d42becd33e39","sha1":"0dc23cdcba67b7948dbf858de6891b8e4524c420","sha256":"aef05d695ef9d86ee9fe21992b24fffcb77893bc884e11a1eaae33aa187d254b","sha512":"1d000aca9c282f8b55f96f8e026285855ace0334c86879feb63a822dcf40e5df7a0388dd3203eb9a3772fafdbbec18ab2e26de2ee5e15dbe7d94e0afa4142f1f","ssdeep":"","tlshash":"cd11045e90351e9dd06ccfbe806af38330209dbb2713e4597959d1a57eda5034d28f32","size":926,"data":"","first_seen":"2025-08-29T06:11:20.784041Z","last_seen":"2025-08-29T06:47:39.558661Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DYMeqr-Z.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"473c5847db8ac8518710c95a9351614d","sha1":"a18bd257267dea926952cf0a7a67593c15cac213","sha256":"593d92e9b1821d941f976504ffb4eb58e055fccac12864fc89c225d937194ea4","sha512":"a29df6c259ba417817b02a30946975dc2bd517ea8fe6be4c6bb4a1a6624b33ffe343b3555ad2f2ddcf24dd4744a0e971d75ddfb7ed4d063504da1659082baf24","ssdeep":"384:rH/RfQ3cEQQX9TBoKJr+V0qlggS/prIjMIOBfclz3ehifrZqYyn:jR43HHloY+V0qlgLnBfM7ehifrZqYy","tlshash":"7162f81ef48e5c3e66ba58c439e47945b1381fd7c04048e2a4f5ce311647c6df2aeab9","size":15373,"data":"","first_seen":"2025-08-29T06:11:20.901302Z","last_seen":"2025-08-29T06:47:39.634571Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b7ffd5b7408c1219fbd35dd53208e70","sha1":"87db90852ceaf58be691a8c2492353a5d76de059","sha256":"fb997fc9d5069092971ad25f0131258ced2c36bf9d313ad535de25ac5c36e70c","sha512":"4045a6bb31e36cdcd5d0d32b3a672004365bfe391ea66b11bf2d2ee96e2715105255f02bf2b442072b902e9f0ba7db465a5d4733ddf3b18378375de86f112d8f","ssdeep":"","tlshash":"633126cab36189126a97383b653b5344617326e61e0268a3f2260e447c2cadbd53375d","size":1677,"data":"","first_seen":"2025-08-09T06:39:59.161093Z","last_seen":"2026-03-24T20:06:00.342299Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KN757LMM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"37db4d181e63f15453496f8c6ad91bb1","sha1":"dc738b30bd94142baf7e48e7fadd08e35236c4e0","sha256":"4430bb040f1e8e81cbf4368be94739833c94df5cf4fc3bff42f8df34903d63ad","sha512":"f08df28a1d65fd99006d8e75e6e97e23b4909d9a40039293db7c51cf9138c442e18c7682576f3bff8473fc0bf8783c2cea8ece84141b5483492565a07cb83b6c","ssdeep":"3072:6RZW/ugS81VuNROC0ex3hNXJzzDXajPOLgL0dYBuoJMjcCuRMqvFxpq4U7teGc0J:QVMu3rxZjXLgLuNuRP7pq4UZeXEqE","tlshash":"bd8419cdb3c6746683a2b478403f014ba17b69a2f84cd895f185dce42e74aaa4177f7c","size":376230,"data":"","first_seen":"2025-08-29T06:11:21.0288Z","last_seen":"2025-08-29T06:47:39.610397Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/ui-resources.php?location=default\u0026mode=desktop\u0026lang=ru\u002638ec198d\u0026callback=getWebimUIResourcesCallback","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e9c07f1ec1b3c1dd975c02f671a3a03","sha1":"dcbd763e866f901b631c617aaa18aa143806d2c8","sha256":"e622d5f29270a914d6207ef17c826713e1d21768e157b9ab47adfa30d903334b","sha512":"de4df5255d597366f5ebb9de02691b77f9c5435d4af6f9c08b4d7444ef10011d859227ffbbc17b142c4a11ebfca73da8cf391bd1134e10a78c1af4541cf6e5ab","ssdeep":"1536:QQHOcWqV61g4iy5VkMN2KQRgME234Cs57h7Fbsas1sUs+s1seT5Ggr6uN+Y3L5ii:cMgvyawQJ3gy5f9uZS44WkHD","tlshash":"13d4270feed21469be2bee6361f70655713d34a29590079cb22f34de5f81ce29322b64","size":625501,"data":"","first_seen":"2025-08-29T06:11:21.03245Z","last_seen":"2025-09-11T21:42:03.649935Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DlAUqK2U.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","size":91,"data":"","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-07-26T11:51:02.591674Z","times_seen":24709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Bgzbv_Gu.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"16fa5e9dc814155bcf21dce61f988788","sha1":"0e10840b4fdc8a457184d6d31b9fee15b2eb27d6","sha256":"ec652f33dc5db71bffe08131e24219c32cab0d9ec2ba141f561979f6790f538b","sha512":"ecdc951bd01f1e848e7640e9a4d2906f23bc9a02eafde05105c682558fb7b26a6b1402d0fd82623926621dd035a3dc3f0428ed74525c0910ff0cac9891686dcf","ssdeep":"96:4bVpyTIFvwmBocgjI3Y0cyn/6MjNZpjt0+zxlV8i05rZC:4hpyT2uUoGhSF5FC","tlshash":"61b14318e864cdb6d112415d9c0b18d079dd3ebdc476e435e4f869906bbac3ca28db2e","size":5285,"data":"","first_seen":"2025-08-29T06:11:20.805563Z","last_seen":"2025-08-29T06:47:39.479126Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CVh778U1.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"5cb71f36aa9447413734581154b7f50f","sha1":"249cd1e5b06642a00be4a141c77a7b2945846a7e","sha256":"2ae73d43fed63e7c0351dc4749d2adbea4e5c161e093d342ac2d83771e4368b1","sha512":"2432628bff9f8206212a74ac51564ed914d0e0f8dbb0f56aa382502f6c9d8bd6dfce3543347bbd9f92fb272befa7cc4fb990fb7c3e6b2bf7081cca2fd724d756","ssdeep":"","tlshash":"df21357d4aec2dcc091cbc843ad89d7c7504d249a191cc9638a6fee7f487d5aec48471","size":1111,"data":"","first_seen":"2025-08-29T06:11:21.058056Z","last_seen":"2025-08-29T06:47:39.545181Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DNGV6Jh0.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"9fd3606b8f53d1e7f9c4087a69332294","sha1":"211b69f8e382fa711a51a291d7c07dd3afb65ba6","sha256":"e6c1a26292d8a55a7f9636cd31f462516b451d44210215dcc3592ec3de8aee28","sha512":"0c080d497fa568ce8d10bd7b326e9dd41b8991048b4993f2de695c9033ac638f3256f3b9807586b1ac3c14d5ea5a8b8fafac7d8dfe17aa60a2108f41ef051a2d","ssdeep":"1536:tYGn407ukNMPHUyeCFtsSPswJYccBynmI0Mkc/BynmI0Mkckk9ug1JVBynmI0MXJ:teFPHUuYq0VHwQpEu4","tlshash":"1c94c8e973a8a2e4f407dbfdc9236475711e35fb3a96c7c442a25f7899720ac4c49c90","size":432680,"data":"","first_seen":"2025-08-29T06:11:21.008972Z","last_seen":"2025-08-29T06:47:39.483254Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/MYDrgT1C.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"e0fc3df1230c271735681874919408db","sha1":"b2d76d4e370a20b62553bdc66b29b18435d4dd33","sha256":"3f1ce5cff7f5683018bcf002fa88f8fbdaa7b0697482259eceffe1087bc630d3","sha512":"7589de4493750f04c974f3de5738533d798795fdb55f67177cccf666fe41d8ed8e27861bc945422641db48604769882358f220acd6013056778274c7f80c4828","ssdeep":"","tlshash":"ecf0ac6d393490e0f3b20c89c6158b70b6034376389bd8f4810d188502a9de9dadeb17","size":623,"data":"","first_seen":"2025-08-29T06:11:20.767499Z","last_seen":"2025-08-29T06:47:39.639218Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/ls-cdn.amplitude/analytics-browser-2.6.2-beta.0-min.js.gz","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a81d9804ed47201de5314a7110e680be","sha1":"df58e208599843e46894e9c2bbfdf2feb2a985a5","sha256":"59dd69f4230f7535182747c17235fe4526d34826a142498485779bfdb5d617f1","sha512":"2c15805effa726a40e1b3156d003df4b5f602ab4c1b09b8897ff759d143c0a33a5eb7cc90887b850b1f209ccb05b7be263935ad805ad86383f88947d777fdb42","ssdeep":"768:p6wmsZPARRFO/J6zZsideR53I+dte7I4GWyihZurBJ8:/msY4/JceR54+zeU4GWyaZudq","tlshash":"f35372c9f6cbf0250393a5b8907f140ab33e7e9d242d4428f626d9d53c6d6499233bb9","size":66596,"data":"","first_seen":"2025-03-26T18:10:08.318249Z","last_seen":"2026-06-26T20:23:29.909592Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DIqXRze_.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"e0bb473302b4cf9a0d652eb6592a565e","sha1":"f9c63cd9239547b76ab45ceaceb01ffbc5fef62e","sha256":"7d12b44d8ff93893c5e65cf426dc3ba246a6d085c2432b2d7d9f90308e1eb01b","sha512":"a82ef7749cf59db9edd5847af0dab225d3f39fb2f6ca90b3ed5f331e3caf6cc72bfaede67905117be2056f93e0fef09cb02f80e5576ec5e581849074284db1f1","ssdeep":"","tlshash":"ed31320c380960bb139213e094de084ee218bd617a6bc4c5e2cc7d677d27599dc8efad","size":1539,"data":"","first_seen":"2025-08-29T06:11:21.052059Z","last_seen":"2025-08-29T06:47:39.57563Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/D-Zb1Yrr.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"7006c838829da09f40a644589401b756","sha1":"07ed2d5634cdb8925443936f594c7141a1b4267a","sha256":"ad51a3976a13a8ec2a15ff5d29d29898141b8433fe56e95532a87d778078ac45","sha512":"a8fba21a55f3579e7bb71e82c0d92faae376058f30fcc0b530b099ea28150e2104b01337fbd069e9216c49306a7dc98adc919fa1e710dabaf5d512c53ac0de59","ssdeep":"","tlshash":"9e01b88e647ba5ec08a57b403cd84ca44b91bfe92a9351c03e2cacc08bd0c86b13803d","size":748,"data":"","first_seen":"2025-08-29T06:11:20.99776Z","last_seen":"2025-08-29T06:47:39.519707Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DNbMPNIg.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"94da510b6581c13c498b25615e9008a5","sha1":"0f2e7dbe88f7194b46520d5ad21e6b63a340e80a","sha256":"1356b031cedbb9588777cfcba7459f32750cd4b75382e01944429bdd01b4bb73","sha512":"2178d0b8b552b2ff58b1cde65b023423c45b01e1b623f5280aa881aeac9ac4ba9f511e8a717e5c279ce194dae254316e9ee8ac9d05649dd99acdf3975cfd08ea","ssdeep":"","tlshash":"ec6130fc1635a57226eb17bb43620ca282764455f049b27010da8f0d552dc984bf7ffa","size":3347,"data":"","first_seen":"2025-08-29T06:11:20.889469Z","last_seen":"2025-08-29T06:47:39.609761Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/nUmiNz8K.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"17f4551de070611d6532d3744c6a4b27","sha1":"0290821e11de6a7f289b140a5e7389996da4943b","sha256":"54405dc7fb7783e22affea8e19bdee3d73102ffc84976522c52c0e3222d9443e","sha512":"3a1b6651dd49e018778a1b16f420300bb48fdbfce1368894eb523d0f68d01f01340c7f0184ea19f5102322e5e85f05783d26fc21762d2fffc36634c56949eeab","ssdeep":"","tlshash":"52d02bceef7065b4bb00445d545bc762c724b90016986ac0d87b5aa13f109c68306fd6","size":285,"data":"","first_seen":"2025-08-29T06:11:20.919366Z","last_seen":"2025-08-29T06:47:39.593975Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/cryptojs-aes-format.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6bc38f77922eaa6f1b23716034b4a2e","sha1":"db781b1e30c4f2a1d63d47054f0903c463cf01ab","sha256":"9ca00bddae85e30d59672da0089ea5e132df97d75a92f42114fe1befbaeaf32d","sha512":"0ad7c00c1564d77f8463dfc81003c0d6cd6ada4e3d01094331f72847f17718e4a6b2c7a2a0bcbd96a1107bc6cb9bcb1721e7b2968ae4544595ab98d39bb30c82","ssdeep":"","tlshash":"163177407debb4c287e8e1d50435a044f67b7a0ab1558ef3aa5aa404ffedf3006326e4","size":1494,"data":"","first_seen":"2023-03-07T18:27:54Z","last_seen":"2026-07-26T09:44:04.955028Z","times_seen":716,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CTeQurwT.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"5b9e7c9173b398989b0535f79ff42969","sha1":"b6ef20cd36349bd0bf2eddaae918894b43012f6c","sha256":"f1b6b56c49686d5e4d7eb34a1831e67f56877ee3a1dbd51a713562d1ea17f0d3","sha512":"a76f87663b257dbe4d1e15109a79bc1014bd2b1e8ba8b2bbaf861f42abb3228265e763495b0d997495a7a9818d00b5229df3c164df1b225c8363a71de99c8ac0","ssdeep":"96:oq53hKMoKMj1W3FdeF31f5HnPx1oRstVCBR4Ir8Dtgjiby+qUECPRv5:v3BY1W3eFFvmQVCkIgJbtD","tlshash":"2ab196e4b0d9e0dbb7764fd1c036225260076b957834e0d0e27aad73215be58a562b3f","size":5164,"data":"","first_seen":"2025-08-29T06:11:20.766217Z","last_seen":"2025-08-29T06:47:39.540501Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.136ccc3e.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"103a089944d2295463b2f637a2fd1dac","sha1":"52544e4efd975b53d49b6fdd733fc294ef6c7018","sha256":"f23b1bd86b485b4f38f1671e46398627ea21518aed0b437be2d196c5c0c1880c","sha512":"8c49df15b440181ecf2af04709b52fa4ad199c22b7f10a145c7a883cb8a3184ad518ab4a6f8293a7cbd19ce16cf6aeef854a7c89b26658d103ea4b46c3d2c25d","ssdeep":"6144:pxE8LlzpXe7RvofOq1BrFZGEkYg+kfFd+oNEf9upyuAhOLtaX:HE8LlzpORwfH9kYqfFUkEFup/M","tlshash":"bce43bdc79d1f0a207f352f6807f140bf27a1a69680c8490f765d8c968b994e9237f6e","size":684253,"data":"","first_seen":"2025-08-21T12:18:11.824347Z","last_seen":"2025-09-09T08:35:33.568189Z","times_seen":449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CsHVBYhU.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"ad8a0313f9a2f5c801f6f16534cdd250","sha1":"8abda0a7c17adc697687dc2ca527ec9c187ae558","sha256":"1549fe363c04e09a5a99ab4f9c419ede55cbc25b9f3ab3f4d8fa7f398f08c6fd","sha512":"53ae645d097cb4bd799bbfab8785f5b0ede4a427568d23ec1c8af9edda017fc5101e5149efb2524900fd9d7cec899b4e62b8823480c8ae9ccfc6f3c5681a0eea","ssdeep":"","tlshash":"9b41a38ef1556e3063d3e1f1a0096100875a9f2b34bd84d0b929bbc3022697efccbac1","size":2046,"data":"","first_seen":"2025-08-29T06:11:21.042249Z","last_seen":"2025-08-29T06:47:39.534205Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/js/pwa-load-event.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f463b05f25296c1e185cc82087291f6e","sha1":"d15dfa009eaeeaaf36af83b20ace25714adbc583","sha256":"3f5bcf295bac81715b4413d640843ee19600f6a17c96503038c6a4193c331865","sha512":"5ecd0baa189383e24afadcbe391266fac63cdcdcb7da68ab1371168fae81f05f0140b4dcd86bc4cc59f4ebb3f5949e94b302f05de00942886fe3060436ae03bc","ssdeep":"","tlshash":"64e02b7483fc55b808e182b75f47bb15116721a77068d990c1871906f8d148780a2fd2","size":375,"data":"","first_seen":"2024-08-19T15:07:41.99372Z","last_seen":"2026-04-15T02:03:05.836861Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c19b1b5d91c8d683b1310562d9c4a225","sha1":"4d45dcac5c6a88e10052f4e356b2170c20413441","sha256":"bb5779145f1ebdcdee053876a4ed060174dda4656978972304c79ddd5f36dac4","sha512":"3a4e8d2e8f5d9a3b45c08ce99374c149a5b67d04d016edfe6259dfbbba948a049301c0cfa5f9bf334cb93b9b4a3558cffa725c166a943c90834c8d2237a1a21c","ssdeep":"1536:Ask/3qTBpVX0Ib6vhb2pJkuppl5METErM2jnpkDtoT1JaM18PIQunrr9gltn2BE/:IqBfX046vhb2pKMQt1Jawi697w","tlshash":"4ec329deb397b033539355a980bb0101b73a6a19300d4464f62ad9ea3c7d847a277fbd","size":126923,"data":"","first_seen":"2025-08-09T06:39:58.991299Z","last_seen":"2026-03-24T13:49:06.781634Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DlpqiW89.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"5e2bc2ba62552aa09f9cf5a9d42e5dda","sha1":"53708279fa1bf482464058e464202b3f02b7db89","sha256":"03702a2a3426142da4d8dd097f7e040b8c5f22d75237dce295fb44e7a2bd18e0","sha512":"20c846e7c174005f18180251766ce120c253d33cf70af42af4718651740133fee5da03b0194fd54099b2c604f291b90cd95cc77d76ac7f9e07e021303b7da5d1","ssdeep":"","tlshash":"e041332b7eda54311b252430e0db5563a002dad25c1dc721b9200eed79b2e529ef2fef","size":2264,"data":"","first_seen":"2025-08-29T06:11:20.998941Z","last_seen":"2025-08-29T06:47:39.446711Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CBejlb-R.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"b475ad2203be80364fc330ef76551b6d","sha1":"07dd1e9a6db63ca64e639b72a0a6dc9305dfae4a","sha256":"a34842663b81bf18cf4a1139d7f164b9f21d9639d45aa94fae2492c628465d93","sha512":"d9798e87037282685ecbdf45a388946fa2820feb434cc1a89dc40805c669523d59cccf7b00d81819d23cb7dd001a0fab29d2cbb4568f0ab405f7b09933b1afbb","ssdeep":"","tlshash":"4d11028d32e27d6d5946909a401b684ab33e59c3601d89a1d319ae743c91d54066facc","size":1000,"data":"","first_seen":"2025-08-29T06:47:39.653257Z","last_seen":"2025-08-29T06:47:39.653257Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/js/button.js","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d7925a8189b5c5d2a3d9c66f3fdc313","sha1":"0022e7c0dbeb09e9e5ba5930a2eb7ffe1285e722","sha256":"904624f64d5cb7b2d773e4a593cad96ff68086a941e41f07ab0d4908f253817c","sha512":"db015bb3b727fe8c32650773a33ad203c07370fdf3776d19ff0f76b300fd9cf936af5b6f03aa135035cd90bc60613d38bf87fa369ea70920abea59c758d9ef30","ssdeep":"24576:Io36wXnnOqCNTKi983ht1x2vRfXj1jryWezetQ:Io36wXnnOqCNTKe83ht1xYdpjryWeitQ","tlshash":"7c155c897644353a82dba2bf702b170976379552a444d46cf878e8d4bfb4d09823bfbc","size":899663,"data":"","first_seen":"2025-08-22T22:32:10.403109Z","last_seen":"2026-07-13T11:53:35.373448Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.d89c9ebe.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"61d179843a3cfac92fa53b6b3e893bbb","sha1":"bf70558026921d0c68cf6a0b62332ca0d16168e7","sha256":"a9afc719299f4a13239839604f7445849e07179d7b795ce214ed542d5d8117ad","sha512":"f1a6ef80c64e7acb2a0d36c5bbfe9a8590d415600f940b84c59adc9bced6edc5057a67277e15d162ef1dc6408392f9d2333e8ae28958fbca3c7c58bef38800ce","ssdeep":"6144:MwO3WSIXxZHI0eZXw9pmpGWi5vMz4/M4FApZyuxQBwoTAWqCtWB1dSwCaR1l5Cp8:diCZYbBkbfRVxHLHmeguwYzSGmqa1y0","tlshash":"8925c5ccb2d2f06a43976175813f200bf33ea999b54e8450e669d8d1bcb858d9237f78","size":1031291,"data":"","first_seen":"2025-08-28T18:02:37.507845Z","last_seen":"2025-08-29T07:48:16.477881Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/NCxdOIYd.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceefc0fd9d15549b98e8b49735ab275d","sha1":"f2fb2ca18939834281203c138c88dce9d3439d45","sha256":"df9d9bcb0e1169ec7946e4ecfe125bc81032b80ca051f00bc639f17e2e613959","sha512":"cc8ff4e68e3e92b6de792dd315bffd546e6a39964f370ca3ac19a3acf33e9488b8e40c38f1799f4a69ddc5bb4e71dca2d1148467f3e4dac868011a4ffbd096a6","ssdeep":"6144:YnjnXc3Og+VNogkkc3Q0XgcWBCqdvQD0jinH6WeGpwdBuJVbNIT+tnzrI0TFHmx9:YjszCoDkcqZBCqdv2BHf4BpGnI0c","tlshash":"51a45ad971d6b02213ea19e4907b0106f3392e54384ec4e8f16d9dea3d7680a92b7f7d","size":484212,"data":"","first_seen":"2025-08-29T06:11:20.924852Z","last_seen":"2025-08-29T06:47:39.444878Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/B6SJDy_u.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"a63bffbd6a32718714b2dea6fffabf00","sha1":"598f615abc4d518bbc49bb2bfee75ea3566667d2","sha256":"341c261f7e26a056834e04726b4c7bce07b4db9263104c80552f113fbf1f5ede","sha512":"a51a0698e103a3bdfefe61a3913d7f1b615315d264799b6d0ad55c6517b1d68e28d85bbb169ae0e119283570478dd96d83cc93b91c6804947dbcc773f0cb508f","ssdeep":"768:OmbHNJk7Wt1V01e62ZVnDF9BqmeQqkOGcn78WWnwnY48WZ0BEZA8DWeXksPzzAf:tXBn8nkJUvnBZT9wf","tlshash":"44f2e709f4295c3ed5b75dd878541401b22d2fdbd0814d72a1fc9e186bbad3823aeb6c","size":35755,"data":"","first_seen":"2025-08-29T06:11:20.701502Z","last_seen":"2025-08-29T06:47:39.437977Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CSvZyz9e.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"c1051f11af799d449080610b2a8cfdc8","sha1":"e19036b1e701861a533051f8aee90898b1456617","sha256":"14a5f80ed888ec13773fa86ddd05e3d0b7c08cfcb3e6ddf8fe0b03e8e5d6d09d","sha512":"c31efc87dee528bee1eb9936247432709366b7d0a5d8e0133795d5d570b42bc7a1ef348caccd7bcabb5b2f33c9d2ea9218aa7683cf78e4786669d582696cb15e","ssdeep":"","tlshash":"3f41df0e9586d160eafb0015a51c0681621ca99ee464085df2fce7effb0c87d7b0de70","size":2247,"data":"","first_seen":"2025-08-29T06:11:20.745232Z","last_seen":"2025-08-29T06:47:39.554161Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/BAPVoqqi.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"f0ca4c806b03c42ba8172cd3d0731092","sha1":"55e1cbf5379e42532b5cfbbaa8bbc4fa0e120c34","sha256":"d1f4feabba8ad305b1e3a1de3b34675d7ab46e14190b0dc3143236a1f0752f8c","sha512":"ec2f148696e017cf2c9eab55418600193efd4a18325f393080d4efdfd2dc79a5b0241e4237d001885cca1a3bd56ea4ba4524dd3f32fa5c3d79191271c3ac69f2","ssdeep":"","tlshash":"f0a0240d0470047d10040cfc770f557d55701417177d0fc04000470107174df750cc00","size":86,"data":"","first_seen":"2025-08-29T06:11:21.007592Z","last_seen":"2025-08-29T06:47:39.485246Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/BUYlV-qA.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f577aeb297a2235485251d00fea5a040","sha1":"3a20d372186ac79a3b01d96224b2c675890c740a","sha256":"379074dfc879d94eee539e1636e95034339821a8f9a4f3c3cb66b44b96f13be0","sha512":"dc61cbcf33f82d07fa8b2070185e1caa051f84d22f5ebf09d008a9b6bb706fb28a53c16cac105b04030b30fce0c33aea7823523ab9658ed5919b6f906c6dc0d7","ssdeep":"","tlshash":"bff0e51fd99685b89415ccf4e478d230263325daa7dad7e4c2cf0b706310071d489727","size":453,"data":"","first_seen":"2025-08-29T06:11:20.791505Z","last_seen":"2025-08-29T06:47:39.520362Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DQqiEsJr.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"f60efa78ca84502cdba47f441b3576fb","sha1":"e93bc0652a5f2f34a6c869899d1210cc5b7b8b4b","sha256":"ff9c72e988754bcd8bf470d412bd6e8e934729b6f8fcf53d5040a8fb8a356162","sha512":"959a2a9448f9f25eb4cea54b061f70a01f4eda939302ff93ca8deacd1a4b3d4fa73fee9248d2726be903b618b4b7edabd491e838775ff7fa73d6a6bec2d0ede9","ssdeep":"96:vSI0Lgam5pFjwsmyzqVBRJzxv7A28/s1/HEwYx+3cCL:v8mjsyGRFThSu/j4U","tlshash":"85a1748f1240762e7ded4b5543f4681883304886fc1c2bedf4ae5d389b5a88f65bba74","size":4910,"data":"","first_seen":"2025-08-29T06:11:20.886516Z","last_seen":"2025-08-29T06:47:39.48828Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DrRQwopS.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"8b4e2f4d3e815a84c2e9c1616ab283aa","sha1":"eca66979de8b48dd5fb724728cd632f62e427fe0","sha256":"c753a51db2ee5549b236de2668de518a46353027763efa716a6fb970ba63ea6b","sha512":"fd6e65f80e89441c2f3ffa949927cabd91abfe4fd237906407da622311e2d529da5b51adf4faa2e724fc76d6804d47b0305933841479f02163c8ba9277824f1e","ssdeep":"","tlshash":"4e2110aea524003e8e99742989482465cf454f15b0fb8546b83d5d5a63005c2ec7ce29","size":1259,"data":"","first_seen":"2025-08-29T06:11:20.897891Z","last_seen":"2025-08-29T06:47:39.479876Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/NCxdOIYd.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceefc0fd9d15549b98e8b49735ab275d","sha1":"f2fb2ca18939834281203c138c88dce9d3439d45","sha256":"df9d9bcb0e1169ec7946e4ecfe125bc81032b80ca051f00bc639f17e2e613959","sha512":"cc8ff4e68e3e92b6de792dd315bffd546e6a39964f370ca3ac19a3acf33e9488b8e40c38f1799f4a69ddc5bb4e71dca2d1148467f3e4dac868011a4ffbd096a6","ssdeep":"6144:YnjnXc3Og+VNogkkc3Q0XgcWBCqdvQD0jinH6WeGpwdBuJVbNIT+tnzrI0TFHmx9:YjszCoDkcqZBCqdv2BHf4BpGnI0c","tlshash":"51a45ad971d6b02213ea19e4907b0106f3392e54384ec4e8f16d9dea3d7680a92b7f7d","size":484212,"data":"","first_seen":"2025-08-29T06:11:20.924852Z","last_seen":"2025-08-29T06:47:39.444878Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.d89c9ebe.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"61d179843a3cfac92fa53b6b3e893bbb","sha1":"bf70558026921d0c68cf6a0b62332ca0d16168e7","sha256":"a9afc719299f4a13239839604f7445849e07179d7b795ce214ed542d5d8117ad","sha512":"f1a6ef80c64e7acb2a0d36c5bbfe9a8590d415600f940b84c59adc9bced6edc5057a67277e15d162ef1dc6408392f9d2333e8ae28958fbca3c7c58bef38800ce","ssdeep":"6144:MwO3WSIXxZHI0eZXw9pmpGWi5vMz4/M4FApZyuxQBwoTAWqCtWB1dSwCaR1l5Cp8:diCZYbBkbfRVxHLHmeguwYzSGmqa1y0","tlshash":"8925c5ccb2d2f06a43976175813f200bf33ea999b54e8450e669d8d1bcb858d9237f78","size":1031291,"data":"","first_seen":"2025-08-28T18:02:37.507845Z","last_seen":"2025-08-29T07:48:16.477881Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/KHcq37__.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d0e5c8e522d33a975d44189a0b1dab3","sha1":"2c49a881e1a82e11dc23261790df4f8de997d838","sha256":"f0733f16c7a335aceed289a0fdd169a714bdc21baef284aa462b72689f0bf49c","sha512":"425dd7822ed60c44c0273406a7eb8183208bdaa04a97c765fa2ab0f51c4bb7af66a71eeb68d318087c23854dd7654312fe323d3d896a9c5bf916428d02cf86aa","ssdeep":"","tlshash":"1a118ede01a80f8d354eac81ac612a0565e11e54ecec1ba7665720b921f9a8db12a8e7","size":1000,"data":"","first_seen":"2025-08-29T06:47:39.654603Z","last_seen":"2025-08-29T06:47:39.654603Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/BPV3sVQV.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"32da6d97b48fd479f71d98c425f871ea","sha1":"24fbe2751aa9529b7c7204eabb9ebee01fbd6d16","sha256":"2f198ede87c8b55b544e70fcb00943886b5b50ddb629bffc33ce3fb4ee8ab992","sha512":"6eb397691431e20575694e9bee95b4cb653f1bc82ec208f9fb103d89be924e96cc79765a81e73c2c5d7646dc2093225e238fa3f228da3a16a989623aea1084f2","ssdeep":"","tlshash":"bdd0955d5033d0b41575057904db0d06d14754bd373057246062db75279c4d3474fe06","size":259,"data":"","first_seen":"2025-08-29T06:11:20.92174Z","last_seen":"2025-08-29T06:47:39.614838Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/eCnsB0DT.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"d5e0b2455b36606b2aa417d060dff1a6","sha1":"52853764434381f0cd83e5868e0e39d10328a905","sha256":"c9e4d0b2c543f98541a082a23fbae3ee6c09d7e90ed6332fc92260b8e1c01a6b","sha512":"b0d2256be7f0dd1d397783b43ae3214b959cc3b8e15cdb515460324fac6967ccb346e7a53495a0dbb46a47ba76586735f32b96e97eb83f1257663407c00b9a0d","ssdeep":"192:4iFojMIZjkItgj6pnaJe/HA9iReMDjHMtpgCtAoRXSAd55rD1W55Jr0UWip8W4JQ:4iCMIZjy0LhYRHMAhPMN07i6jC","tlshash":"9b0240de520a65b00bd706fa81e846d0d6b00444f04d997c64f8dedf477ec8917a6bbe","size":8647,"data":"","first_seen":"2025-08-29T06:11:20.984381Z","last_seen":"2025-08-29T06:47:39.592161Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/oGQsitAd.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ca924a2f97c8de2f522b7ec8ee6933f","sha1":"8354a0a5ebb2fcdbe8ca6e60be94cebd483fd7df","sha256":"ef0ef7a9a144d1586c374f17d0ade70891b2baae57db2fdcaf674740f29ae6e1","sha512":"9b5da538053b4aa3590f5e733cab27c8d8a0d87f2d16daedf90b23f764c4fd8f133a59aa844e43add8f0d50cb475b9644232ca9e6a54f141c5726dbd18c23db8","ssdeep":"6144:cNuayegAuTVcvTIOg1msnrMOuweo8xh26pl5Oa3ydobbUCdxN+TgBuw:cNuayegAuTVcvTIOg1msnrMOuweo8xhh","tlshash":"72247e310e5d1cbd1111a166de1cab1a38de81fe3e9b93e107796e6e35f10309ea931d","size":215101,"data":"","first_seen":"2025-08-29T06:11:20.915403Z","last_seen":"2025-08-29T06:47:39.557908Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CjIjlGq-.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"8536f2f542c30c3b37aa68fa9d57f5cb","sha1":"4679e0eb2b374266ccf64bfc73ac98dad5143a1d","sha256":"84a0b743a7ef37e6cd2a2db660b4b5899c3fecce9d1f28502709614fc9d191fa","sha512":"126dd430ac683507fae1c2a1e11c5ff94a9015441798342ca77791fe29709b30c33f8b30ff1b10b1f08b51fac27d016fed4b2f8e724afb82dd8b57c2fbc7fbfd","ssdeep":"768:kC43aMGeQtDCPB/HyzE0qct7yxP2C7dSlSxkPut06BcftOashQWEhQEq/iiB8faZ:760xiywcV64IX","tlshash":"e303f8c8b2a0506583e2a1a390750203f33999153409855cbb2ceefbad7eeda7177f75","size":40164,"data":"","first_seen":"2025-08-19T01:32:32.322521Z","last_seen":"2026-04-26T08:04:42.226428Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/2sJvksnKlEApLvJt2btz_q7n/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b479261fc082f106d6cb4ae5e046cf6","sha1":"613fca57695fb0e855f080c5c8b87ecdb93f1f64","sha256":"42ad1edb9cc9961376a5b1d68cbbdf2b12eb559d8160b8efb1b3d7922c09fae7","sha512":"23e6289f7638329405d67d5330144af0fe135df723b37ddd91fbd183e5b0b7c67049fd4066511741e9de36d379324b148683b01e82f7cc5fedf48f885defd977","ssdeep":"6144:Amxhk9KLY1IVrSa7yPgZmaw2u/1CrC3YEtkaHuJZmh1g/gdwO6tM0s0xjLL6RGyp:DgC7rCaQIKYEtkOuy4aI00hefh","tlshash":"8a0527d9784638e55312b9f34427555ea3be9424de8c088eb198c9f02ff9809347aef7","size":805772,"data":"","first_seen":"2025-08-28T06:53:52.841247Z","last_seen":"2026-04-14T23:51:08.211631Z","times_seen":4271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CUsHs50J.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e9ad5c4ca928ba6cf844f54b9b89a5c","sha1":"6fd50eb9c9e9201524a82a9b67443b7ea76660c7","sha256":"33a533cd8834cd2c52e3fe19c283fea7656febe9d1764795ec0f76818ae8a4fa","sha512":"31380004aec761307e083e55afeb81c9650a4d5c93e8d680a8db79273da42087991831790399a2447eb1a10a98e928266f8561a0cf04e4cbc52646416eacbef3","ssdeep":"","tlshash":"b7012e1be68081b40028cdf9d4758935b273849b1beae7f0e2de4b304bd10b2d108a1b","size":806,"data":"","first_seen":"2025-08-29T06:11:20.991937Z","last_seen":"2025-08-29T06:47:39.487621Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DQqiEsJr.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"f60efa78ca84502cdba47f441b3576fb","sha1":"e93bc0652a5f2f34a6c869899d1210cc5b7b8b4b","sha256":"ff9c72e988754bcd8bf470d412bd6e8e934729b6f8fcf53d5040a8fb8a356162","sha512":"959a2a9448f9f25eb4cea54b061f70a01f4eda939302ff93ca8deacd1a4b3d4fa73fee9248d2726be903b618b4b7edabd491e838775ff7fa73d6a6bec2d0ede9","ssdeep":"96:vSI0Lgam5pFjwsmyzqVBRJzxv7A28/s1/HEwYx+3cCL:v8mjsyGRFThSu/j4U","tlshash":"85a1748f1240762e7ded4b5543f4681883304886fc1c2bedf4ae5d389b5a88f65bba74","size":4910,"data":"","first_seen":"2025-08-29T06:11:20.886516Z","last_seen":"2025-08-29T06:47:39.48828Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/ext/cdp-customer//v1/analytics-js/ajs-destination.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecdb24cdd6b5a3a4a7ba31895f79ca4b","sha1":"3284a1f3ba7aa68b324499a64bf32c8101701663","sha256":"ef949bb08ab368c25ce835e54a53b3eb842de7e868ff81ff99520ed16394637d","sha512":"e76cf7a6f407f484c5537258129ee7d29b765a14204c0cd4e1ee9ca3d9542ac01c5c0b0c557e704d8c69a1a12b29312b99ec0fd25608af07b3c79ea5a83d0492","ssdeep":"192:d61F3JpeOVXIhCBnMfJlUEpFX8nmuONy+2Yn:doF9TMsEzZuF+2Yn","tlshash":"5f1212ccf6c7f0055267bab5817b451ab33ebd1a244a4894f42bcdd5287c619a12bf38","size":9226,"data":"","first_seen":"2025-06-01T15:05:10.790294Z","last_seen":"2025-12-16T16:58:04.809767Z","times_seen":521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/gDr35j__.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea88cdbb384edad60430ee137a704299","sha1":"3eb3f132e70f703aee228a64c01fe8e013f0c41d","sha256":"46f43d0beff656a800ba0ecd2a67b474567f25771ae4c50060c8108d8ddf53f5","sha512":"8b6cd5446a4e4a3003918e4d11bf5c2fb79d8316c27ab19e3c59e336dc2aa27d1b014a4ee0888bac3799716b46f0825134c0f78029d87e9e54085de4e43a858a","ssdeep":"","tlshash":"cb418548b47a9a7d457e88c7f510142c63480ff8507d6adbb1f50c392b91c14a3aab24","size":2067,"data":"","first_seen":"2025-08-29T06:11:20.972322Z","last_seen":"2025-08-29T06:47:39.57422Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Jp1tcwad.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"34952a7621665088250c747924a2df6f","sha1":"eadfd6f5617849d46652ac4c1b9d65009648c485","sha256":"7281a1fa0dc648417dc18b9134edfc620123ef1335fbb345483fae7d90ec5af7","sha512":"77b0f5cb56b9b6f9512eea9b28c07ed0d7826c970d49f8cc284121e76b362739d2f38f969a00dbef309d7e742c34e11e26e7a70d8f3531f1680c7ca88ba24082","ssdeep":"96:JCSVoN+lLTbufLR9+uZ07TkGrSn2dcO2d8/mHK0PDA7i+5LTntPpKntctzZBbQJr:JCSVoN+lLTQ9+uZ0vrMrOR/wPwnLTntS","tlshash":"8fc1e86ef4448879e2b20ced9089bd82a22117e5b284d0f3a17cdd352714e4d670dfab","size":6112,"data":"","first_seen":"2025-08-29T06:11:20.828996Z","last_seen":"2025-08-29T06:47:39.544489Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/BAPVoqqi.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"f0ca4c806b03c42ba8172cd3d0731092","sha1":"55e1cbf5379e42532b5cfbbaa8bbc4fa0e120c34","sha256":"d1f4feabba8ad305b1e3a1de3b34675d7ab46e14190b0dc3143236a1f0752f8c","sha512":"ec2f148696e017cf2c9eab55418600193efd4a18325f393080d4efdfd2dc79a5b0241e4237d001885cca1a3bd56ea4ba4524dd3f32fa5c3d79191271c3ac69f2","ssdeep":"","tlshash":"f0a0240d0470047d10040cfc770f557d55701417177d0fc04000470107174df750cc00","size":86,"data":"","first_seen":"2025-08-29T06:11:21.007592Z","last_seen":"2025-08-29T06:47:39.485246Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Cfej7ZAS.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"4852dcc603b408b095ef3cb2138c6e40","sha1":"484e41f18e2c71acc64b30a4d09c14753e6282ff","sha256":"7e07f382302c0d58f14ac1352f7fd0057a4201ef54298f059b8b88600a081453","sha512":"e25f37a4ee958490fe75deb2a83729a3782cc0dea7a897eadaf11ef210973ca68ce44988eced615796c41d30e0402723c55a0cb8c9d78f424fa0faec97c95643","ssdeep":"768:jXU8MMca080Hjkh5UyvucDYxhROs9SewPpUzSsLP20+6a7kHGQPLFODM:mI088a5bvuc0xys9SeSpU1Lu0+67mQhN","tlshash":"e7e2c6ccb641b018a3a71176e1ef580fb37a2984980e8554a0aef5e43d7c4bd43abddd","size":33499,"data":"","first_seen":"2025-08-29T06:11:20.763686Z","last_seen":"2025-08-29T06:47:39.461455Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/wYhJkT6X.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"d57ef091b0eafe796f16f656fadb7a38","sha1":"ba19deb3ef8628bbf604f47b95bc87ba88731808","sha256":"5494c00794faf00f9fa9d56742d11f89639a87f0eaa9a253062e6027608569bd","sha512":"56cc7ec7d11439fdde69eeb0c344ff9b6647b2935d59b9fd44548cbde6cbd683905765e8efc2a571254cf040b06fb48dcac788091ae80260e37e43a5cce7034e","ssdeep":"","tlshash":"d7f09e8d70a3d6b0b736d78dc936ca42e03c1e423c0de5d1d44a56453247481e73d71e","size":512,"data":"","first_seen":"2025-08-29T06:11:20.787584Z","last_seen":"2025-08-29T06:47:39.477182Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/D6irYd3Y.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"38b6f7d53e3b6e3c9bbe5843b4308467","sha1":"e852a03b58293666a1caf362fdaba7574ac73b43","sha256":"ce4b9fe508eef4269e613247925c0aa75f1f3d914bf92604e8734426633f5185","sha512":"2c15ad38ca8b15d0e9ed46b17dc3277aeebd17cfaa780e962165893b33d3f6d25a561d859739af58e3ee0029a63cbf7c9071560da30e80ce409c11f161bc5759","ssdeep":"","tlshash":"4ef0598b5caa2c941de61e7b9027b1a2337a516e050180c5feb1e6c4a20b69ef32f430","size":513,"data":"","first_seen":"2025-08-29T06:11:20.993061Z","last_seen":"2025-08-29T06:47:39.522075Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/api/visitor/v1/configs/default?jsonp=true","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"af0285c7759f2c444f390cdcbe7c59b2","sha1":"96f7fae6a2d3e2deb2523ab413d7640dc12193c2","sha256":"9c6da0b4e72f2b33048c4dfa3daaa21b36f9f16e20d579a9074ff9f6015469d3","sha512":"05055e26e22eb51ea0f67747253484eb5be06c7da87d918ac2db7e43c7582e77a5db1fb3e800f47f9581780465070320b34340813ac9b9fcc3be0562abb9acb8","ssdeep":"96:mXzMOTx4alggVgY+/Syo6ygym/WYH9XfSa3ZSQ+yIahd4N:k1OVY+KH6Lt/WYHMa3IQ+/","tlshash":"b4b14561d066003b16c96a56ed396acf277492d2d740ef3e8f1c0917f38d6b562437e2","size":5236,"data":"","first_seen":"2025-08-29T06:11:20.944794Z","last_seen":"2025-09-11T21:42:03.937547Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ff24fb4cd9ae726b39c730e38ac5cea","sha1":"719fa0c0e030deec05362e626313d4e11274563d","sha256":"af4d3a5d0b6e2d084e38459ddebe0f1bad6f188189d05d8bdc1ab0e196d075f3","sha512":"eeee0e9b3988c37055e21aabb4c5153ce2d81ff38ec90f255e43ea6383a12aa1ea8cf4cfa0ecf0de74ee9677e59517d415a3f30d8429c9cfa39838cec0e41ac1","ssdeep":"","tlshash":"92a00241c073d565db58400c49af7610293076e556606510f440c746711e037212a348","size":64,"data":"","first_seen":"2025-08-09T06:39:59.156203Z","last_seen":"2025-09-11T21:42:04.087089Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/wU3fTVt-.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"c0a226b8e9e2da339233781b46164987","sha1":"d96e3beb983303c350bee07b0f3b28811c032322","sha256":"b6afe0be133bed59ffcec2883cfa8a9c90bc515c5c3371d67e0198fd90f1376f","sha512":"8608c15473b78f0e9a1653912653aa3a66fc12b5432201c49215f10e374051ca3f482ee80cd1dcf9ae8ac80e8ac29f0e01a2d5131c35566521d3947be0717f3c","ssdeep":"1536:IK6l28I8DZzkXhvPS5uLEiMAa73hBlxvHB+CIdzkVXiA6w+EV93mBE09:V6nCvPS5uZS8a9Q","tlshash":"c8832989f224b57782f75aca8376c20172a14984b809d4e4b0ed4d7b496e95c03afffc","size":86097,"data":"","first_seen":"2025-08-29T06:11:20.850915Z","last_seen":"2025-08-29T06:47:39.57311Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/tPdbiW_V.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"af7805d42f0e94d87c24a603905aa544","sha1":"7b8e20de9b8033988fd4fb49ae5214be2a1b317e","sha256":"67962a43b72e5541bff19a54203273e73fa6a40aef2c34b20da51c95817d336f","sha512":"4f5b71fae1dbed1ca64d3290836d4ee5f28885ca526c71eaccbad91c58ee45a25d2a2e847846f68d8e02509d5c833f84c2e7a9928991b0418953cbe3dc954732","ssdeep":"","tlshash":"07c01285d8202077cc607828a1d20f42027e3644e115d17c77fc2482f470565a4aec65","size":192,"data":"","first_seen":"2024-05-07T05:56:57Z","last_seen":"2026-01-21T08:18:56.877435Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DA4lr7nW.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"67a9a31fdcbe4f728b765484f4e75e88","sha1":"f32e6dc60d0c9338e51cf5596ef0e87c6e2d41aa","sha256":"c294f4ef44c32bf7a6f96ee1474a6c25ae4126964a71ed1850b85e59cd471987","sha512":"b3dab9de5f63c9ff8acf6ab04bbe7eae680b2010a8a82d13c59c099b3de79897111fa9499e12b335b9e5c3dfe4e641e1a4759228558458fdb1f952747316cba8","ssdeep":"192:89KRTYqLUn9G2lKeYTPY79cJQXz9v/T2l:8IRQ9hYDZJQB/q","tlshash":"54e1b99adc529d38fcb71bd01cee411439392fba95c2cc5166fc9e24de049e09e296dc","size":7331,"data":"","first_seen":"2025-08-29T06:11:21.048556Z","last_seen":"2025-08-29T06:47:39.512979Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/cryptojs-aes.min.js?v=1","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd93b7f0987a614bc17698503bcb6af9","sha1":"68a66448326499ff34c75bf31e2769b278584e0c","sha256":"8d4fae1a37a5b5338c889d0897b50024194b4d3ae94940e7e42c1c1423a1183e","sha512":"e3b87dfe10c0e3f3d801a85ae9c654a74eac22c2a93a757568a0d2b13755c36aeb5f9337e94a21db4ef2d1f0f1cfb98fccbbb0151d5cdf8d967730df96bfde98","ssdeep":"192:9BIGDmDm90mP9z8Ui015lN1I5rI2Tru6hMJFmHV+mdpwIfyAaYfKnNVYkUUFJZm3:9yiB0ez8UiIX1SrTegsEHJuI+y8Z7AX","tlshash":"625297c936edb94263963028587f6017b86b28b6945c4824f29cd4ddff9899dc03ae3c","size":13722,"data":"","first_seen":"2024-11-30T18:08:34.076577Z","last_seen":"2026-06-26T20:23:29.818692Z","times_seen":1206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/eCnsB0DT.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"d5e0b2455b36606b2aa417d060dff1a6","sha1":"52853764434381f0cd83e5868e0e39d10328a905","sha256":"c9e4d0b2c543f98541a082a23fbae3ee6c09d7e90ed6332fc92260b8e1c01a6b","sha512":"b0d2256be7f0dd1d397783b43ae3214b959cc3b8e15cdb515460324fac6967ccb346e7a53495a0dbb46a47ba76586735f32b96e97eb83f1257663407c00b9a0d","ssdeep":"192:4iFojMIZjkItgj6pnaJe/HA9iReMDjHMtpgCtAoRXSAd55rD1W55Jr0UWip8W4JQ:4iCMIZjy0LhYRHMAhPMN07i6jC","tlshash":"9b0240de520a65b00bd706fa81e846d0d6b00444f04d997c64f8dedf477ec8917a6bbe","size":8647,"data":"","first_seen":"2025-08-29T06:11:20.984381Z","last_seen":"2025-08-29T06:47:39.592161Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/knfz4177","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"54.240.174.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d523f87d32e2903b8a4b5abebb672b68","sha1":"a46490c4f7fa9e572c9d63d470d5617af8e04b12","sha256":"f8b6209e29fd00ba89b0b7dbc5c59a1b4831625ad66bc74c07af048a507afa09","sha512":"862af8bb058032b25735121011c21410a206013759933194aff3dc8d55609b7e03d0fcecea442e5151f06bba47ea53d9e4c36c272f90ba512413f02d09d507cd","ssdeep":"96:vv8/xVqhstBp8HEZgOM0PI0FNl7fADT9+tlb1JFrlPu:vOVGH8bMklMHOlPu","tlshash":"3ad163eeb2c2797806a3157a623f770c7f3b648428494810d06989d87a76dc7c15bfad","size":6742,"data":"","first_seen":"2025-08-28T18:02:37.494708Z","last_seen":"2025-08-29T07:48:16.425124Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/oGQsitAd.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ca924a2f97c8de2f522b7ec8ee6933f","sha1":"8354a0a5ebb2fcdbe8ca6e60be94cebd483fd7df","sha256":"ef0ef7a9a144d1586c374f17d0ade70891b2baae57db2fdcaf674740f29ae6e1","sha512":"9b5da538053b4aa3590f5e733cab27c8d8a0d87f2d16daedf90b23f764c4fd8f133a59aa844e43add8f0d50cb475b9644232ca9e6a54f141c5726dbd18c23db8","ssdeep":"6144:cNuayegAuTVcvTIOg1msnrMOuweo8xh26pl5Oa3ydobbUCdxN+TgBuw:cNuayegAuTVcvTIOg1msnrMOuweo8xhh","tlshash":"72247e310e5d1cbd1111a166de1cab1a38de81fe3e9b93e107796e6e35f10309ea931d","size":215101,"data":"","first_seen":"2025-08-29T06:11:20.915403Z","last_seen":"2025-08-29T06:47:39.557908Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b7ffd5b7408c1219fbd35dd53208e70","sha1":"87db90852ceaf58be691a8c2492353a5d76de059","sha256":"fb997fc9d5069092971ad25f0131258ced2c36bf9d313ad535de25ac5c36e70c","sha512":"4045a6bb31e36cdcd5d0d32b3a672004365bfe391ea66b11bf2d2ee96e2715105255f02bf2b442072b902e9f0ba7db465a5d4733ddf3b18378375de86f112d8f","ssdeep":"","tlshash":"633126cab36189126a97383b653b5344617326e61e0268a3f2260e447c2cadbd53375d","size":1677,"data":"","first_seen":"2025-08-09T06:39:59.161093Z","last_seen":"2026-03-24T20:06:00.342299Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CoD_Oiw-.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"7eb3e66e8cb242a2c2421bdfd91666ba","sha1":"816dca4ebcbbd374e4522a652374e2153ee118eb","sha256":"964707914a67876446c4cc9aea93d2088b69725e12d941ba30cbeac6a36e6398","sha512":"726b63afce1860c9acf4cdbcaefc9ea0fd9af3e2c1e994656850194d434e0bcdacd3314cb8215ca67b48c61f1800e11d72d25a4f97f4476e5999bd767d6fbaa3","ssdeep":"768:YqTY+itM+orCjJJy1ee3JP6r1KCcKlyUW7YC6u64tH/9:DbiJou3CP6YhcW","tlshash":"0df21a487be0bc34c29a30d7353e0d057b726641586f6600e409c6b97fa968a717ef7e","size":36459,"data":"","first_seen":"2025-08-29T06:11:20.705458Z","last_seen":"2025-08-29T06:47:39.619766Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.gist.build/web/latest/gist.min.js","fqdn":"code.gist.build","domain":"gist.build","tld":"build"},"ip":{"addr":"104.26.10.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee8bbeffdeba56ade33bc6c987866344","sha1":"d56b7d527585f5afc238eebcd70217c429a9ab75","sha256":"ff89c63e84b735494078826a7e7971de665dde157c464176bce004c97e8037f4","sha512":"7f19b24b315eba3e058f52e802539709bc8b4ef5b61284d3c43e9f26e0cf9d4f77397ee1acb25937aa3be6345941bebe4ed7d48423ca1cb0a391a7b7f95e8e29","ssdeep":"768:E4072U1yf1F6qaEyf/iLzu1co/btwckxckIYyv38S8r/f98NRt:bw1y9paEyUu19DtlYyv38S8jfE","tlshash":"14c20a4b716a393d83d311d7bd7a3006633b7555b849c041b26ce8872f294cf6663f9a","size":25933,"data":"","first_seen":"2025-08-19T01:12:29.193244Z","last_seen":"2025-09-23T07:24:51.256389Z","times_seen":217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DBu44nVO.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c91da3cf7398aceb8b81dfedf471ecb0","sha1":"6b29cf8678eef8e3842b8060c2598d6f2f98a3e1","sha256":"b6c19eda596a7d266379039b42fd963977a949e6b204c867a7c1a6371321b245","sha512":"3ffba0a885d5041fcf6e0540e10ad27b02b01e623aae613359af8c366444b6b402391f1d464dd75786474d8ddf53f10c35bb54a25b28f40e73ae89b5eca4b2b4","ssdeep":"","tlshash":"8751b70db0359879713cac9ae6bb1357232535c27db4c0e0a11ead277b099c3d2537a1","size":3020,"data":"","first_seen":"2025-08-29T06:11:21.000884Z","last_seen":"2025-08-29T06:47:39.507956Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Cfej7ZAS.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"4852dcc603b408b095ef3cb2138c6e40","sha1":"484e41f18e2c71acc64b30a4d09c14753e6282ff","sha256":"7e07f382302c0d58f14ac1352f7fd0057a4201ef54298f059b8b88600a081453","sha512":"e25f37a4ee958490fe75deb2a83729a3782cc0dea7a897eadaf11ef210973ca68ce44988eced615796c41d30e0402723c55a0cb8c9d78f424fa0faec97c95643","ssdeep":"768:jXU8MMca080Hjkh5UyvucDYxhROs9SewPpUzSsLP20+6a7kHGQPLFODM:mI088a5bvuc0xys9SeSpU1Lu0+67mQhN","tlshash":"e7e2c6ccb641b018a3a71176e1ef580fb37a2984980e8554a0aef5e43d7c4bd43abddd","size":33499,"data":"","first_seen":"2025-08-29T06:11:20.763686Z","last_seen":"2025-08-29T06:47:39.461455Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/BPV3sVQV.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"32da6d97b48fd479f71d98c425f871ea","sha1":"24fbe2751aa9529b7c7204eabb9ebee01fbd6d16","sha256":"2f198ede87c8b55b544e70fcb00943886b5b50ddb629bffc33ce3fb4ee8ab992","sha512":"6eb397691431e20575694e9bee95b4cb653f1bc82ec208f9fb103d89be924e96cc79765a81e73c2c5d7646dc2093225e238fa3f228da3a16a989623aea1084f2","ssdeep":"","tlshash":"bdd0955d5033d0b41575057904db0d06d14754bd373057246062db75279c4d3474fe06","size":259,"data":"","first_seen":"2025-08-29T06:11:20.92174Z","last_seen":"2025-08-29T06:47:39.614838Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/nUmiNz8K.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"17f4551de070611d6532d3744c6a4b27","sha1":"0290821e11de6a7f289b140a5e7389996da4943b","sha256":"54405dc7fb7783e22affea8e19bdee3d73102ffc84976522c52c0e3222d9443e","sha512":"3a1b6651dd49e018778a1b16f420300bb48fdbfce1368894eb523d0f68d01f01340c7f0184ea19f5102322e5e85f05783d26fc21762d2fffc36634c56949eeab","ssdeep":"","tlshash":"52d02bceef7065b4bb00445d545bc762c724b90016986ac0d87b5aa13f109c68306fd6","size":285,"data":"","first_seen":"2025-08-29T06:11:20.919366Z","last_seen":"2025-08-29T06:47:39.593975Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/knfz4177","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"54.240.174.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d523f87d32e2903b8a4b5abebb672b68","sha1":"a46490c4f7fa9e572c9d63d470d5617af8e04b12","sha256":"f8b6209e29fd00ba89b0b7dbc5c59a1b4831625ad66bc74c07af048a507afa09","sha512":"862af8bb058032b25735121011c21410a206013759933194aff3dc8d55609b7e03d0fcecea442e5151f06bba47ea53d9e4c36c272f90ba512413f02d09d507cd","ssdeep":"96:vv8/xVqhstBp8HEZgOM0PI0FNl7fADT9+tlb1JFrlPu:vOVGH8bMklMHOlPu","tlshash":"3ad163eeb2c2797806a3157a623f770c7f3b648428494810d06989d87a76dc7c15bfad","size":6742,"data":"","first_seen":"2025-08-28T18:02:37.494708Z","last_seen":"2025-08-29T07:48:16.425124Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/BT7fzLUn.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"e35ce0891f6ffeb038c10c49112260df","sha1":"cf1548169bedf10bb8436715cf37c49f87535396","sha256":"2afbdd0e99eab329019e7f9bbe2bdc7dbcfff1dd6628db73f9213f63aef4323d","sha512":"cf5279ddb04d8a6fb61361b0f5eb25f94a21e8cffa5d3c1109e50d01aaa318962e65ebe30b11bee0e9281cedf7c89599013cdd67f24c999721fcb6b768f68014","ssdeep":"","tlshash":"613141c9f29ce4b7d0e7d7e88472843076d875fb3f98dbd4828099711623096ba4ead0","size":1671,"data":"","first_seen":"2025-08-29T06:11:20.795314Z","last_seen":"2025-08-29T06:47:39.509068Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Chd1ThOZ.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"317a2201ef3851dba19e8b41380c8518","sha1":"69f8afc7452ae5bbffe308672417d74ea784cee0","sha256":"64cbae9ec71c97c3ca661b3a42c7f0de57972f702378830b7911e5a148b1cb0b","sha512":"4d8e02b904019b8bc965749301e7a14aa67543e54a8b2a19862be134620f94b55e7a2481c50590bf05fc5b7f6ce8e54746b77e238fa7b3a83fbaf81345be42c0","ssdeep":"","tlshash":"372130aebb3aa7bc7c245a5f42306f30f0132096ffb8945cb8d22126e3425a155640b8","size":1151,"data":"","first_seen":"2024-06-08T05:57:25Z","last_seen":"2026-05-26T01:50:53.816934Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/BiRMcwLu.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"c17bc1c0eb8f31b608f1a92df8682283","sha1":"229b6feae50e8f70094af718dac038441e10ec8c","sha256":"714f17f3066f8b4803b79194f7f7cbc475d74556b3eef8d84a9dfa949d812593","sha512":"3fd622f527de887ccb3e29547434f7733b4009175834497bd56cb4a78e880368c62d8440dcbb8cbe6aa18d8ef3097bdc22a2637e1e5c568baafa4e1559c2a95a","ssdeep":"","tlshash":"2a813279a163a8f5a210c26f9e044d9239cf0dfe5a55f176e0f4a490a3eac64da4e312","size":3880,"data":"","first_seen":"2025-08-29T06:11:20.865608Z","last_seen":"2025-08-29T06:47:39.459738Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/EFWGUdKZ.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"24c0e1a9310d0df9ff5a522caf1669f7","sha1":"d82da0a91928361ad9c4dc07c29a2bb1ba3c170d","sha256":"29efdbde72a6edafa0d39a7c673f1e9429389efcbc3d7135b8c26286ee914bb3","sha512":"61741901b6ca2fc253446f3a0eb0eb36dc0df2b7dfad528ce75102bbce8210b2955f0c11fba828b2b20328d97c529028b0ed77e935d722fd2a6398c973793d3a","ssdeep":"1536:8G5PAN4iB/sSyISjXKaag7OUtpdW9dCLGHtHXHy:RAv/sSytj6an7HLv","tlshash":"cd233aeeb0ace1f5c17387c4989a5420bb1d3ff56a4040d6a1b90d646f6c4b86fbcd68","size":49549,"data":"","first_seen":"2025-08-29T06:11:20.961932Z","last_seen":"2025-08-29T06:47:39.518883Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CTeQurwT.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"5b9e7c9173b398989b0535f79ff42969","sha1":"b6ef20cd36349bd0bf2eddaae918894b43012f6c","sha256":"f1b6b56c49686d5e4d7eb34a1831e67f56877ee3a1dbd51a713562d1ea17f0d3","sha512":"a76f87663b257dbe4d1e15109a79bc1014bd2b1e8ba8b2bbaf861f42abb3228265e763495b0d997495a7a9818d00b5229df3c164df1b225c8363a71de99c8ac0","ssdeep":"96:oq53hKMoKMj1W3FdeF31f5HnPx1oRstVCBR4Ir8Dtgjiby+qUECPRv5:v3BY1W3eFFvmQVCkIgJbtD","tlshash":"2ab196e4b0d9e0dbb7764fd1c036225260076b957834e0d0e27aad73215be58a562b3f","size":5164,"data":"","first_seen":"2025-08-29T06:11:20.766217Z","last_seen":"2025-08-29T06:47:39.540501Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Bso1n4wf.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"4e0da105c66878ebf02c8f53705c0d78","sha1":"73e60eb2b2ffc86522b476a10fdac4d612f4aa8b","sha256":"76090b1f0d4c1237e6292cf3624935590f2503890811a60cc8d7770dc9556a8a","sha512":"07f27a2645a5b7dcfb389c8e9a146a4be4930813d890f25c3ae5446340f56ee30e24704e59c8a8c45bb7210858e4099b0d4899bc589e8799c21046f54e2f7c14","ssdeep":"","tlshash":"ba11022bf60a0b2263331c79456831e6cf650b8b2c7944c43c54df161237c83e5a6f04","size":1029,"data":"","first_seen":"2025-08-29T06:11:20.823668Z","last_seen":"2025-08-29T06:47:39.488879Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VRDLWS0SHC\u0026cx=c\u0026gtm=4e58r1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"04076e598da465dc7a5fa41bf685bb79","sha1":"fd996c013b72a691ae2c091f7669ff8898ec0d2a","sha256":"69938213556889f83e23a969941d939a9b2653d0fad910a2d1dd6bcf7a226d6a","sha512":"29973ef6bd6a605a851292049843f2a0f8f060911236c6c03cb930c872b7f5e18582b4dcbeb52cae66cb5359572cea8f10d851ceebc40a162cad51b759995c49","ssdeep":"3072:6RTFPgS819uk4VOz0ex3hNe5zzDXajPOLgL0dYBuoJM4uRiqNxpq4U7teG3tzfWB:WmukOixgjXLgL5uRZpq4UZeipWvLwDO","tlshash":"ad7419cd73d6706693a2b478503f018ba57b29a2f44cc899f186dce42e34a9a4177f7c","size":364069,"data":"","first_seen":"2025-08-29T06:47:39.449185Z","last_seen":"2025-08-29T06:47:39.449185Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/ext/cdp-customer//v1/analytics-js/inAppPlugin.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d809228dc97f0373ccbef8c5e4d6f36","sha1":"3e737a42cfc5a0e28eb48af1ee35ddf1261a08f0","sha256":"d9505a91f86c817da1c30c03472c862b761d0f0050a563edce2873a8e30a64f9","sha512":"63161ae066f36ecdbfe16b8f3762416ba5d8d73d5158d15516ff5a43cc9ff49fd351fb4d0fb33434ae32a1da2f5656f6f89b84eb13215c7cefb1e20ba36de675","ssdeep":"96:frOeJ1t6SzUP0w3Gt+buZolWdTW2ELyWfQWYrZ6y77vGEKQDCMZa3E2byhApAa7e:3kL2IbuZolWdCZyWnNEKQK7bWApA1d","tlshash":"71c11e9df393e82d01f3ea6de47b6033913e77036058b521e017cac1696878d6613bba","size":5854,"data":"","first_seen":"2025-08-23T09:38:09.641742Z","last_seen":"2025-09-04T20:54:35.092061Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Bg7Lp-Me.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"4a1a711187f92302cdba403b49ffd6e0","sha1":"59e11bcd6203bf756f25ebf3ff48d07b3743d6a1","sha256":"1bc085e1895574abb16d22ff0a748876a59c676aa92647c0d019cf39798adeb6","sha512":"3497b9a58baab41745a4051c44bd4147116ca8159017d3f5d59341733ac979a8d1436435116ee37a1d5c42849f092766269d8ad73bc960e548ac56fc186cafbb","ssdeep":"192:4QqPTXVAnumh4jyMSNXURJ6zZgD9fs3JiVc7cW9tqvwU4QZq4G8cGakKsgfxft+x:fqP9IAc3sgpjCdSXc5FBC487Qlvp","tlshash":"51025578d42ac6f4e1374a9e58945f403b4d3ff244908896b4f86a3c278a834337db2e","size":8298,"data":"","first_seen":"2025-08-29T06:11:20.923563Z","last_seen":"2025-08-29T06:47:39.539281Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"fe364450e1391215f596d043488f989f","sha1":"d1848aa7b5cfd853609db178070771ad67d351e9","sha256":"c77e5168dffda66b8dc13f1425b4d3630a6656a3e5acf707f4393277ba3c8b5e","sha512":"2b11cd287b8fae7a046f160bee092e22c6db19d38b17888aed6f98f5c3e936a46766fb1e947ecc0cc5964548474b7866eb60a71587a04f1af8f816df8afa221e","ssdeep":"","tlshash":"54600088282020000000228008802020000203e02002020020c020202aa02280800200","size":15,"data":"","first_seen":"2023-03-07T01:02:47Z","last_seen":"2026-07-26T10:41:59.231642Z","times_seen":86839,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/statsGames?limit=4","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"GET /games/casino/statsGames?limit=4 HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ocyOAZMqunBaTonz; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg10_=1756449999; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg1_=l9BlVNSF1RdH6E740JNr; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:39 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:39 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 89\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: fc0a6c72-63ed-451c-9ef6-584f33d62ca4\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5246,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1a37afeb4f6ddfc3c5686899c68e9754","sha1":"cbb69911b38944aaaf0aeb7ce29eb0dbed43b4f3","sha256":"d7e2d076686731f7844720632a815144177becf3af97f56f9d2ea993fd7ebf9f","sha512":"8fe98daabdb358b553685a96e641cbde1e17b661b8bc2fe9c54bbaff979137e1d883bb349cf09080b10af7bddaf00461f91eb7b357eb22fbb1e77a60a0fe7652","ssdeep":"96:qRK/VYaBODZQAE+cpCK/VCbreDZQAnzqS9B0br5K/VfI3qS9Bs2cJacyVcSh6c4:tuMSvczIC+S9iEOaS9FcMc8cs6c4","tlshash":"92b10411a5c822fb4ff35fd8dd5b7ee50ad9041711a8a967f0f1d51830e26fa1126a23","first_seen":"2025-08-29T06:47:39.429424Z","last_seen":"2025-08-29T06:47:39.429424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/locales/kz.png","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/locales/kz.png HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=e93HT2VZxX7P1rAn; __ddg10_=1756449999; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=blmEE8SN01GOCgc5; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:38:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 1409\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"68b05e9e-581\"\r\nage: 487\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1409,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"7a701954e3c39e96dee200a2aa97513b","sha1":"7b814ceaeb3f31aeac0a2ee34465ff6d9f149f0c","sha256":"60b4c06718aff3b9bd2ee484a9a9148acc5a3de674f435d9975bde16da6a706c","sha512":"5ddd3dfcc9272b7f651666ac1e0865c1a49ece72f8bf25acbfea391f966823054d01bbae3c3d3b0e02c25f1f95f7a4c9c4abd205480b46dfa6e1654f6aa8b976","ssdeep":"","tlshash":"3021e9d429de0038b80ed3a7a3cf6a65fe7598d41513cc04be4de0454336ac40064b68","first_seen":"2025-08-09T06:39:58.798537Z","last_seen":"2026-06-06T23:27:45.170448Z","times_seen":113,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/highRollers","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"OPTIONS /games/casino/highRollers HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=CEOhoYSQ7TFIGnih; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg1_=1Pr9KefVv8X6kh3t5wYD; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 5981d6d6-0a1b-4006-9251-2fd229e0b354\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/home/home-coinflip.webp","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/home/home-coinflip.webp HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=A2LCVmocpUFMqwPm; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=b6HlHUgZny0bsQHR; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 0\r\ncontent-length: 35476\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35476,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0012955decadf7f351dcd95b1acc3ca6","sha1":"4d0d9cdef50fb796fdfba3578e2ddf562da9a9c0","sha256":"64b3ce9b8e7117a79656e0307dcf1d919699c6a567bcf286c9c367c125878975","sha512":"d75a7f623e3b6eaf27ddfa6ad2e6fdc7c3a11bff8bd3b715854ebdf84a1e4f773f67ea73741dd4aa981498a84252cfa397d1860a4ee8f342e10043021a518b89","ssdeep":"768:kMQWbtGgfYTcaCNHN6g1u/hoa9nuxfytgsMZ9+mNWJ03wM4Rv+mQ:VQeeAaCNt6g1u/udx1z3+/e3wMuG","tlshash":"0bf2f1a05e599fac4862e127d9a3497483016f6cd0efe29788e4b9c8db1305db69288d","first_seen":"2025-08-09T06:39:58.978777Z","last_seen":"2026-03-01T21:47:53.460203Z","times_seen":34,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/loading.gif","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:34.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/loading.gif HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=DkFz1L4G3KjlgDmQ; __ddg10_=1756449994; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fA64oQ7hjDgMWQQA; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\n__ddg10_=1756449994; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:34 GMT\r\ncontent-type: image/gif\r\ncontent-length: 11144\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nddg-cache-status: MISS,HIT\r\netag: \"68b05e9e-2b88\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11144,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 64 x 64","md5":"e4d96bb51227829e536412e5392bdf74","sha1":"8bf350e63f7bc86615cdccc6d16e0c8abb00584a","sha256":"d2911698581f2b0f538c0d770d1b677ecad7b9e61e99d89d1f218f9dae6c31cd","sha512":"a580b7ee3f1a213a523cc8ac69662809cd21bf0952aa2767ea1c3a8ddf934a3a34c4c578d34525d54ab027915aa9097894545713f135126bb8cf7f280b8ab0e6","ssdeep":"192:Yx1zq53A3H8YLSfEdDNsS+4tygrQFFpslGsTg1z4cWl:MH38WdDNk4Ygkrmwj5Wl","tlshash":"5a326d2c1ca447e6e927463165dba2cb8811df2d226c18d39eac347fb95b23ee0dcd10","first_seen":"2024-12-10T17:19:34.10667Z","last_seen":"2026-01-21T08:18:56.850207Z","times_seen":57,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/B6SJDy_u.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/B6SJDy_u.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/CUsHs50J.js\r\nCookie: __ddg8_=0syTqpe6bxr3hMGe; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YC857ytN579aH2g3; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-8bab\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 9726\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":35755,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (35746)","md5":"a63bffbd6a32718714b2dea6fffabf00","sha1":"598f615abc4d518bbc49bb2bfee75ea3566667d2","sha256":"341c261f7e26a056834e04726b4c7bce07b4db9263104c80552f113fbf1f5ede","sha512":"a51a0698e103a3bdfefe61a3913d7f1b615315d264799b6d0ad55c6517b1d68e28d85bbb169ae0e119283570478dd96d83cc93b91c6804947dbcc773f0cb508f","ssdeep":"768:OmbHNJk7Wt1V01e62ZVnDF9BqmeQqkOGcn78WWnwnY48WZ0BEZA8DWeXksPzzAf:tXBn8nkJUvnBZT9wf","tlshash":"44f2e709f4295c3ed5b75dd878541401b22d2fdbd0814d72a1fc9e186bbad3823aeb6c","first_seen":"2025-08-29T06:11:20.701502Z","last_seen":"2025-08-29T06:47:39.437977Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/GDQKXCap.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/GDQKXCap.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/KHcq37__.js\r\nCookie: __ddg8_=0cfjt4j3XmoWOtR2; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=3RTJYN4lpw67z19I; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-36a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 438\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":874,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (873)","md5":"1090e235a4cb085eb1c966cb5a56a9d6","sha1":"bb7dcb3ff7bab04044523595d98e47d20ced0736","sha256":"6ccf03a0f2598c3256c4d50bb09cae09e619c2ee3e9eb001d54571d93c19db3f","sha512":"6f5b7c838f0410299b93713fa997efd5abbf80f349433f4ef993e790f1965fb725c403ff3f71be8b21b4f21bb1d237bd8aa3ec7d157f8b749cc0e00706d499de","ssdeep":"","tlshash":"df11afc070d4a87583b4498801d7deb1b429ca843ce782c5d89e1d33217fd8cd23eb0a","first_seen":"2025-08-29T06:11:20.780221Z","last_seen":"2025-08-29T06:47:39.440117Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Icons.2uJgGonT.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/Icons.2uJgGonT.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=iOy2BKuOdWHCetU7; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1AXdOXDtWrHtTYt9; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg10_=1756449999; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-2ce\"\r\nage: 4353\r\ncontent-length: 166\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":718,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (717)","md5":"a2201f0cecb3c2b9de28888ed282369f","sha1":"41f15dde279c425f33ee43514a6c6ab9df7a527a","sha256":"efbe59e0ae10d48fd1907620fb08460f42131ce35d3b66bdc42266ed98b8f443","sha512":"560a374ff3a275e4bed7bea54d7c0c77446b3d241dbf169e1be08a791b4869da1f2d566b0c639d45855210c28e405334de8ad68492b3befe0a83ac18cbf1e2f6","ssdeep":"","tlshash":"18017c7e364efb435b2bdf9f8249402315ee67b7dd6142406287783ab676a50190f073","first_seen":"2025-08-19T01:32:32.308655Z","last_seen":"2025-08-29T06:47:39.441834Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/images/upload.png","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:41.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"GET /v/images/upload.png HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 5607\r\nLast-Modified: Wed, 20 Aug 2025 07:24:07 GMT\r\nConnection: keep-alive\r\nETag: \"68a57817-15e7\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5607,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 252 x 192, 8-bit/color RGBA, non-interlaced","md5":"7b5802fbdfcaff9ccd0826fa008c38ba","sha1":"bec3747315222740af2524067fdb193ba5cd3dd4","sha256":"455f8ff96a7775e51c6766e041b6d94f324729236e4f11cee602d5374d4c70e6","sha512":"0b0a952f2f4ee0b4db1f8d195fdbd81487e6c34b2b1d72a3fda1870c6d8eda43e4291e2a0cb5a060e75644ee6dbc2e1e2932aa10e1027b578d4691c87187b26d","ssdeep":"96:bJ/0V4UQ9C6HWpAK6a44RkRMeUkucxOx5QUR6eDJHV7IlH:V/2yHWpHiTgkucxI5QeDJHV7IB","tlshash":"7ac17cf769d8da9a70dfa9e043237872f8041b2bc6f0f356a8298097bf15c41f961301","first_seen":"2023-05-01T22:32:10Z","last_seen":"2026-07-24T07:40:56.59049Z","times_seen":2293,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":147,"dns":1,"connect":32,"send":0,"wait":36,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/SliderBlock.B3wtTtBU.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/SliderBlock.B3wtTtBU.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=6zeVylwwQ2py3ynY; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=URP2KpcFVoHva23q; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:00:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-9a0\"\r\nage: 2777\r\ncontent-length: 713\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2464,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2463)","md5":"635b450980ec985e9dca2c76cb79c669","sha1":"b6021606da515caf47e8abf4a7989b5c50f973e8","sha256":"2c1263da32b4c80f084553254d0373c6d6cc111dc02aed38a5e7e16add47681e","sha512":"97f983e582acb44215ffe76d4d2c9b820f643cbcbf84f93841c4e61758340d39bcf2f30247461a9b72a064e550a2d64ef7146dd9e97d16aefe0edeccde0bdb9c","ssdeep":"","tlshash":"9351cb701a223cbb5621e75bae459caa70c8d96b5f13e1fbd148f024c2cbdb1dd16283","first_seen":"2025-08-09T06:39:58.865686Z","last_seen":"2026-01-21T08:18:56.964591Z","times_seen":31,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/NCxdOIYd.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/NCxdOIYd.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=b3QiiyGjRVwkXNGT; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YKIykstFtOfxOiLM; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-76374\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 167470\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":484212,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47564)","md5":"ceefc0fd9d15549b98e8b49735ab275d","sha1":"f2fb2ca18939834281203c138c88dce9d3439d45","sha256":"df9d9bcb0e1169ec7946e4ecfe125bc81032b80ca051f00bc639f17e2e613959","sha512":"cc8ff4e68e3e92b6de792dd315bffd546e6a39964f370ca3ac19a3acf33e9488b8e40c38f1799f4a69ddc5bb4e71dca2d1148467f3e4dac868011a4ffbd096a6","ssdeep":"6144:YnjnXc3Og+VNogkkc3Q0XgcWBCqdvQD0jinH6WeGpwdBuJVbNIT+tnzrI0TFHmx9:YjszCoDkcqZBCqdv2BHf4BpGnI0c","tlshash":"51a45ad971d6b02213ea19e4907b0106f3392e54384ec4e8f16d9dea3d7680a92b7f7d","first_seen":"2025-08-29T06:11:20.924852Z","last_seen":"2025-08-29T06:47:39.444878Z","times_seen":3,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DlpqiW89.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/DlpqiW89.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/KHcq37__.js\r\nCookie: __ddg8_=0cfjt4j3XmoWOtR2; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Y4jIjF6njZQMI5tZ; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-8d8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2264,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2197)","md5":"5e2bc2ba62552aa09f9cf5a9d42e5dda","sha1":"53708279fa1bf482464058e464202b3f02b7db89","sha256":"03702a2a3426142da4d8dd097f7e040b8c5f22d75237dce295fb44e7a2bd18e0","sha512":"20c846e7c174005f18180251766ce120c253d33cf70af42af4718651740133fee5da03b0194fd54099b2c604f291b90cd95cc77d76ac7f9e07e021303b7da5d1","ssdeep":"","tlshash":"e041332b7eda54311b252430e0db5563a002dad25c1dc721b9200eed79b2e529ef2fef","first_seen":"2025-08-29T06:11:20.998941Z","last_seen":"2025-08-29T06:47:39.446711Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.d89c9ebe.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 31 Oct 2024 00:00:00 GMT","end":"Fri, 28 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:4F:FB:78:56:DC:20:7E:66:CC:9B:57:7F:92:C2:FA:50:69:C1:5B","sha256":"09:35:37:9C:E9:C9:26:27:7B:F2:E2:42:CA:82:EF:F1:2C:B2:B4:97:04:61:0B:FD:77:9A:15:4D:57:F4:76:D6"}}},"request":{"raw":"GET /frame.d89c9ebe.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 217103\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Thu, 28 Aug 2025 17:03:54 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: AJGGVmRIeATzXSo_STbubafgdviK.UcL\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 29 Aug 2025 05:06:01 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"22de89467530ceb23e248d0d0f00b07a\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nage: 6037\r\nx-amz-cf-id: 1MDg7Cpw0S1yB53EFMYKzm-OPVbCmqnR0m7ICUNu-B_5GXmrXC5BSQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1031291,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65464)","md5":"61d179843a3cfac92fa53b6b3e893bbb","sha1":"bf70558026921d0c68cf6a0b62332ca0d16168e7","sha256":"a9afc719299f4a13239839604f7445849e07179d7b795ce214ed542d5d8117ad","sha512":"f1a6ef80c64e7acb2a0d36c5bbfe9a8590d415600f940b84c59adc9bced6edc5057a67277e15d162ef1dc6408392f9d2333e8ae28958fbca3c7c58bef38800ce","ssdeep":"6144:MwO3WSIXxZHI0eZXw9pmpGWi5vMz4/M4FApZyuxQBwoTAWqCtWB1dSwCaR1l5Cp8:diCZYbBkbfRVxHLHmeguwYzSGmqa1y0","tlshash":"8925c5ccb2d2f06a43976175813f200bf33ea999b54e8450e669d8d1bcb858d9237f78","first_seen":"2025-08-28T18:02:37.507845Z","last_seen":"2025-08-29T07:48:16.477881Z","times_seen":17,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VRDLWS0SHC\u0026cx=c\u0026gtm=4e58r1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=G-VRDLWS0SHC\u0026cx=c\u0026gtm=4e58r1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\nexpires: Fri, 29 Aug 2025 06:46:37 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1106:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1106:0\r\nreport-to: {\"group\":\"ascgcycc:1106:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1106:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 125933\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":364069,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6006)","md5":"04076e598da465dc7a5fa41bf685bb79","sha1":"fd996c013b72a691ae2c091f7669ff8898ec0d2a","sha256":"69938213556889f83e23a969941d939a9b2653d0fad910a2d1dd6bcf7a226d6a","sha512":"29973ef6bd6a605a851292049843f2a0f8f060911236c6c03cb930c872b7f5e18582b4dcbeb52cae66cb5359572cea8f10d851ceebc40a162cad51b759995c49","ssdeep":"3072:6RTFPgS819uk4VOz0ex3hNe5zzDXajPOLgL0dYBuoJM4uRiqNxpq4U7teG3tzfWB:WmukOixgjXLgL5uRZpq4UZeipWvLwDO","tlshash":"ad7419cd73d6706693a2b478503f018ba57b29a2f44cc899f186dce42e34a9a4177f7c","first_seen":"2025-08-29T06:47:39.449185Z","last_seen":"2025-08-29T06:47:39.449185Z","times_seen":1,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/vip/mainPage/vip-logo.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/vip/mainPage/vip-logo.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=IfHJm3V7dtWsoPhO; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Tka3ZPTWqjLIHqBY; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-135b\"\r\nage: 4335\r\ncontent-length: 2283\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"15326d24a9c9c1179319a40491a77f20","sha1":"38d1265be366aa25f026d0401f349b1c33459ae2","sha256":"25705fa2dc626c00e80884d3f5169ad4f5ec2f9c6627a0e178747c2f1d78bcdd","sha512":"02b94b969ed3cbdbd99c262a3f8751a01e679e33bf0a844d63c595ae92d557e69a44cab9923f6073c8527d235d2cd1ab068f8bf111b6ea2bed89e28013ae3785","ssdeep":"96:LsShqhVJHu0qUm07P5dm32k+uBdG8h70e9zAzoiboIqlhxFp2jU62I:ISsx60/m32kBGxYzAzHqBFpmmI","tlshash":"e1a1baefb7759df4e885f3f8456500147a6728b738a0ca38c3a07fd9aa8529e9d44cc1","first_seen":"2025-08-09T06:39:59.041692Z","last_seen":"2026-03-01T21:47:53.355466Z","times_seen":39,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/best","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"GET /games/casino/best HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4vxnEdY3vVItu2AL; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg1_=LjDRXVkK3JUAypGt1ys4; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 83\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: d66ac3cd-bc4c-48b6-95f2-b286741a1edb\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9758,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d7d2e59701fa5e9806a23af1b7c6097f","sha1":"953d3882b92b76ee60682899a5131f8e939c03e4","sha256":"14c092a90ea9edd6701fbcb2d10b2aa35780f1c53eacc9c2f31c2f27f4f03d83","sha512":"7307b0aa3b577afc278513cc0e68bb43f2e0cdf86acc0f3e0b27606cc957556823a007f0ff864f35903fee7ee9a96f1670c4eabda97ab42c6e32d12ca7778d38","ssdeep":"96:lNSRs2XKnnbCXV+WezyZ58cWEXjMQfzCsLyHofy6koCl+Tox+R+XU0IncK0vf+CW:jTG8e5jTygDVNniLVNzAp","tlshash":"70121253258038a14fe272e40f6f7f9668c80a53656cb953b8caec6500b16f75729df3","first_seen":"2025-08-29T06:11:20.816226Z","last_seen":"2025-08-29T06:47:39.453104Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/ui-resources.php?location=default\u0026mode=desktop\u0026lang=ru\u002638ec198d\u0026callback=getWebimUIResourcesCallback","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"GET /v/ui-resources.php?location=default\u0026mode=desktop\u0026lang=ru\u002638ec198d\u0026callback=getWebimUIResourcesCallback HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: application/x-javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Wed, 20 Aug 2025 07:24:07 GMT\r\nX-Cache: HIT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":625501,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"exported SGML document, ASCII text, with very long lines (65536), with no line terminators","md5":"3e9c07f1ec1b3c1dd975c02f671a3a03","sha1":"dcbd763e866f901b631c617aaa18aa143806d2c8","sha256":"e622d5f29270a914d6207ef17c826713e1d21768e157b9ab47adfa30d903334b","sha512":"de4df5255d597366f5ebb9de02691b77f9c5435d4af6f9c08b4d7444ef10011d859227ffbbc17b142c4a11ebfca73da8cf391bd1134e10a78c1af4541cf6e5ab","ssdeep":"1536:QQHOcWqV61g4iy5VkMN2KQRgME234Cs57h7Fbsas1sUs+s1seT5Ggr6uN+Y3L5ii:cMgvyawQJ3gy5f9uZS44WkHD","tlshash":"13d4270feed21469be2bee6361f70655713d34a29590079cb22f34de5f81ce29322b64","first_seen":"2025-08-29T06:11:21.03245Z","last_seen":"2025-09-11T21:42:03.649935Z","times_seen":4,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":97,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/l/v/init?action=init","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:41.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"POST /l/v/init?action=init HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwda74x.life/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 163\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:41 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Webim-Version: 10.7.124\r\nAccess-Control-Allow-Origin: *\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1074,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7c1d4a1cbf80e0deb12337f54b746105","sha1":"673ee06c563a7d71ec18945db84cb8de583622b5","sha256":"1cbfa8471eebb4cd2b521b09ad9ebbd4cb089e305efabe5d6c70c644941457f7","sha512":"b71621f5d77314cdf51cc21f19ebc4a1dc6eab39084300e75338abee10797d103271704de4e9947b8d6e1673d150e88cce5c693fb4274cf83105d446b8437431","ssdeep":"","tlshash":"951150a1842144b705c6741bd0750fcb132cf35bab49a529aad5581df397734b305f65","first_seen":"2025-08-29T06:47:39.456169Z","last_seen":"2025-08-29T06:47:39.456169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":71,"dns":1,"connect":19,"send":0,"wait":26,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Block.DbcjC2uu.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/Block.DbcjC2uu.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=6zeVylwwQ2py3ynY; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8piGPDCQnQUI4Ug6; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:00:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-1fa7\"\r\nage: 2776\r\ncontent-length: 1782\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":8103,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8102)","md5":"55ec564e1f8583cda7ff66b3814e6098","sha1":"97622a1461e7e50a1cd1930213c244241721401f","sha256":"7b3ef65348ae0be0085e43c360ecbcf3f27dc507115ad3549f118584bf73e752","sha512":"c35cde654877d94e1d6edac3dffd0d16eef995701209cbae438ed4b0838c81adcc17fe4d5b625263b88c81e0ed9ba1fbde8f9f3fcef27777157ff8ec171854e7","ssdeep":"96:1F+c5ILJqk3S23/YgrB+7EfopVKnTONGvcCvgt4mDYYf/K7:2eIvSw9+7EoXKTOAvcyj","tlshash":"c5f11122222de4b4b23bca336d526ece214ae3a76653579cef18589d949f4e7270034d","first_seen":"2025-08-29T06:11:20.977919Z","last_seen":"2025-08-29T06:47:39.458385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/BiRMcwLu.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/BiRMcwLu.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/DPY8sZOt.js\r\nCookie: __ddg8_=AHQE2RX34Td62DjY; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Vu8eAS5hy0DJB02G; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-f28\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3880,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3879)","md5":"c17bc1c0eb8f31b608f1a92df8682283","sha1":"229b6feae50e8f70094af718dac038441e10ec8c","sha256":"714f17f3066f8b4803b79194f7f7cbc475d74556b3eef8d84a9dfa949d812593","sha512":"3fd622f527de887ccb3e29547434f7733b4009175834497bd56cb4a78e880368c62d8440dcbb8cbe6aa18d8ef3097bdc22a2637e1e5c568baafa4e1559c2a95a","ssdeep":"","tlshash":"2a813279a163a8f5a210c26f9e044d9239cf0dfe5a55f176e0f4a490a3eac64da4e312","first_seen":"2025-08-29T06:11:20.865608Z","last_seen":"2025-08-29T06:47:39.459738Z","times_seen":2,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/triplecherry.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/triplecherry.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=inKiPFJTAK6uCKv0; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yJcngyoOfmSG63QM; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-9cc2\"\r\nage: 4330\r\ncontent-length: 29086\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":40130,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7b72497a709d371c0b42510ecfac382","sha1":"70f19990d8e54831e33edaceacc0d521d3e4d366","sha256":"cc32bf72860f4cb7444d1cadff17a1fd31b1a09952c0a716bbff9d528a692227","sha512":"5eb32a62d1ead4b37c466f43f75d300e9083f532c25b9d8e2a514205901c491debbd94997d71553f7596734678dde7fb78d1475411d66d45de856c274d6b6a43","ssdeep":"768:hIx0XMOOxWinoJiBWSof+k4pTOLyE3U+tIXf63mpkg:hIx08JBnoJxDwTapU+SSOkg","tlshash":"6203e1b9de215ccdaa40e100927baf905e7a0ecb7ce497c8844d610fb5c9a9cca4edd5","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.940066Z","times_seen":76,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Cfej7ZAS.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/Cfej7ZAS.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/CUsHs50J.js\r\nCookie: __ddg8_=0syTqpe6bxr3hMGe; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1ra61wGzGM98LuAX; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-82db\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 4\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 15258\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":33499,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32971)","md5":"4852dcc603b408b095ef3cb2138c6e40","sha1":"484e41f18e2c71acc64b30a4d09c14753e6282ff","sha256":"7e07f382302c0d58f14ac1352f7fd0057a4201ef54298f059b8b88600a081453","sha512":"e25f37a4ee958490fe75deb2a83729a3782cc0dea7a897eadaf11ef210973ca68ce44988eced615796c41d30e0402723c55a0cb8c9d78f424fa0faec97c95643","ssdeep":"768:jXU8MMca080Hjkh5UyvucDYxhROs9SewPpUzSsLP20+6a7kHGQPLFODM:mI088a5bvuc0xys9SeSpU1Lu0+67mQhN","tlshash":"e7e2c6ccb641b018a3a71176e1ef580fb37a2984980e8554a0aef5e43d7c4bd43abddd","first_seen":"2025-08-29T06:11:20.763686Z","last_seen":"2025-08-29T06:47:39.461455Z","times_seen":3,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.gist.build/web/3.16.7/gist.min.js","fqdn":"code.gist.build","domain":"gist.build","tld":"build"},"ip":{"addr":"104.26.10.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"code.gist.build","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:12:05 GMT","end":"Sun, 23 Nov 2025 09:11:43 GMT"},"fingerprint":{"sha1":"8A:7D:9E:D2:01:92:34:63:8D:CB:A9:23:7C:0F:F0:DE:4E:7E:D3:A0","sha256":"BF:F5:6A:BD:EC:BC:38:BD:2E:2C:C6:37:C8:D0:9A:EF:C5:9A:83:8E:FF:04:E5:CF:04:66:CE:CD:63:15:5D:94"}}},"request":{"raw":"GET /web/3.16.7/gist.min.js HTTP/1.1\r\nHost: code.gist.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwda74x.life/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RFhgF5jfp4aA71itTKC5MjGdBaHO1HV1gmB39aTAyeZHzWGOVv80nATwlN7LSOFPxw9xfCcQd1PycSl5jMIgGAYSF4OnmxOWY19D333Z\"}]}\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 18 Aug 2025 06:31:17 GMT\r\nx-rgw-object-type: Normal\r\netag: \"ee8bbeffdeba56ade33bc6c987866344\"\r\nx-amz-request-id: tx00000c0680a3fdb54cab3-0068a2c8bb-4f04b624-ams3b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-do-cdn-uuid: 03b5fb56-b915-4b88-b380-33c921f54627\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 106\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 976a17aced0d9082-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":25933,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25933), with no line terminators","md5":"ee8bbeffdeba56ade33bc6c987866344","sha1":"d56b7d527585f5afc238eebcd70217c429a9ab75","sha256":"ff89c63e84b735494078826a7e7971de665dde157c464176bce004c97e8037f4","sha512":"7f19b24b315eba3e058f52e802539709bc8b4ef5b61284d3c43e9f26e0cf9d4f77397ee1acb25937aa3be6345941bebe4ed7d48423ca1cb0a391a7b7f95e8e29","ssdeep":"768:E4072U1yf1F6qaEyf/iLzu1co/btwckxckIYyv38S8r/f98NRt:bw1y9paEyUu19DtlYyv38S8jfE","tlshash":"14c20a4b716a393d83d311d7bd7a3006633b7555b849c041b26ce8872f294cf6663f9a","first_seen":"2025-08-19T01:12:29.193244Z","last_seen":"2025-09-23T07:24:51.256389Z","times_seen":217,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/home/100hp-mines.webp","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/home/100hp-mines.webp HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=A2LCVmocpUFMqwPm; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FtLV753kh00om239; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 0\r\ncontent-length: 78496\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":78496,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2984x2060, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c6f029f85525ce74fdc27158bbcc9f29","sha1":"668174608e43fc014ffd5bb2a2f0fd5bb372bf9c","sha256":"be6bfff23afb528ef93365d27766fa7e58e71cec454e050e83bedff33d100364","sha512":"b1205bb36bb949f7ba7ceb04fbb7d93722632631e49ed96365523dce46e0d1c97aeeee542418f8291b56c950e607213090c06412e1a7c15e2e9c5a4a67dc31e1","ssdeep":"1536:lAa7AAAAAyrn6EYN/0TQTYDl5gMw1CCUq7Qe1Gm4QccRxEHcsF+loQ:lAa7AAAAAyDl5TQElECCN8esQccRU3bQ","tlshash":"367312ddd9037375641f38f00b4a924b14489a8152d09353d268e39e2fbacb9f2b3ad6","first_seen":"2025-08-09T06:39:58.968609Z","last_seen":"2026-03-01T21:47:53.47534Z","times_seen":34,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/OnlyPlay/27647df565e14f86b7b2a911d50e45cc.jpg","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/OnlyPlay/27647df565e14f86b7b2a911d50e45cc.jpg HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 19671\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"8e016f5df06721885976af89b2477dbc\"\r\nlast-modified: Thu, 21 Aug 2025 09:35:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 185F42CF5FE115EC\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 3393\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AhnKG9MNRB5vTnFC0IP%2FiFgWuuOj58ghQTxDqBy38NWn1QVBIm7%2FPcAew36gCBmiomAQnZZsqq4uZ91GghPNvBasuBKmFZg0Nrp10chO\"}]}\r\nCF-RAY: 97699c843a05751f-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19671,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 287x193, components 3","md5":"8e016f5df06721885976af89b2477dbc","sha1":"4e8543d93fc054993f799fecde1ea6d329b9af22","sha256":"ea762e692a455c4a79a949a7d6af8c1c84c0de7557372bcac3ff28979c2e9ce1","sha512":"b926f032f2534957ec0c9fe5040400c32cae9efa6adaa6afeb889d8e663b25572de538f25dc4fee5965d56d46ae0083e1aca250814f516ed19aefb2f6c75f248","ssdeep":"384:4Jk5GTPv+u54iew6bejIAQmBGOskYPkgabuYW+raaTX6gdNIWAcFtu:L5Gzvrew6ySmBEkwkgEuYW+sMJAcFI","tlshash":"5b92e02b14026008bcec5f393d2d78e8d24a0b1b5a7d0354c439645fabbd7e2eb8b719","first_seen":"2025-08-29T06:11:21.022125Z","last_seen":"2025-08-29T06:47:39.463829Z","times_seen":2,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":279,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/collect?r=8511063","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"POST /collect?r=8511063 HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nRegion: RU\r\nContent-Length: 56160\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OlY1r3KkM5sfNIlz; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg1_=5DH2A3L1ggs2iHMZnRox; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 7b983e24-8701-4e05-b26a-4c205d44132c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":30,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"11977a90f6bcc30dbb2c1096dfb33a52","sha1":"8cd52c68a113f8e4b3d8f141784dab663d3fd5cb","sha256":"8031180d4d982a471ca97ef5a04e8d013d003c5c19e80d0a5f45401c4463ec27","sha512":"ba256f5a6c4314e7f804a84cfd54ee37829b98698b373393d1e7061bee56e58df212dfb02cb039a78b644b8b0c4921cbec243e181aae5d89272a2835e48217ac","ssdeep":"","tlshash":"18800020ca802e2be30a02a2b20820800200028888c0280308082a0c020c80b80ea282","first_seen":"2023-04-06T20:47:37Z","last_seen":"2026-07-26T10:13:12.642321Z","times_seen":3753,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/middleware/mirror","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"OPTIONS /middleware/mirror HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,region\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Ylo3vKmUNzKEkpHD; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg1_=q7BVWup60O68yNo2zyT5; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type,region\r\naccess-control-max-age: 86400\r\nx-request-id: 3ed14f23-0240-47f4-aa9a-2c54aa645f95\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/kpZTToS7.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/kpZTToS7.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/EFWGUdKZ.js\r\nCookie: __ddg8_=BqvzQJOt7QzyX9vo; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ASurx7MrlJSDwYrC; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-917\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2327,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2326)","md5":"323c6814500273dfe88e976caefcad3c","sha1":"34fd9849a89a3de3984e90c730491f15d041a358","sha256":"a04a1c31efae04f9f8a8e5de0b9c21a27e53c3a028946f9d96e6dd009db424bf","sha512":"5569008409a8059dd6455d4d2ccb29f5131f36d8bd264bfbe59fb1d4696b416cdd46b22944d86d42bc817abc33ff6a4cc41fe35ab7f505278997e8ef22ae8cf7","ssdeep":"","tlshash":"774110e3932448e75862e4c538e35a305b5599e8e1fa2089bc3acec5725ea07fc38770","first_seen":"2025-08-29T06:11:20.751906Z","last_seen":"2025-08-29T06:47:39.465585Z","times_seen":2,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/TAsJwC6U.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/TAsJwC6U.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/NCxdOIYd.js\r\nCookie: __ddg8_=abKGl53qMvg3tJYY; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yUhfokZX8Bcw0Oi8; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-20eeb\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 30210\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":134891,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (43719)","md5":"0078287cfae86c53a9d73e65ef3eeeca","sha1":"c5647f6f511402241cf149974e059eb93ecdf299","sha256":"fa5a09013ae93b7dccb41780fdd9137399a30d126e4c3b0e5e84b226fda48dc9","sha512":"a2a62dbc0e2e9e1962cee2970d4fa11b2d08617805d9883b4243ad0196384832b15bbf2a69ca5b357a3f847dcd077bc2016320719458f0b229135389ea76d78b","ssdeep":"1536:QsrUzXu9+2FYnF8qN1qo6HrXJF707AMvrHCRAxpdh5CVaxwBNz5pdCked5+:QxzXuw2FYhWw5qpaRdY","tlshash":"02d3504b4e0c0e7a056213b12fada7b362acc03571dbc3e557be82182375475aea679c","first_seen":"2025-08-29T06:11:20.778125Z","last_seen":"2025-08-29T06:47:39.466254Z","times_seen":3,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/KHcq37__.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/KHcq37__.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/NCxdOIYd.js\r\nCookie: __ddg8_=Gu5cIgSGnksPSrZH; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0cfjt4j3XmoWOtR2; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-3445d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\ncontent-length: 55307\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":214109,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (62119)","md5":"e2c6912dad06b058007d9ee9846d7a64","sha1":"6c3c38d3722893fbc4780391106fd7229ad19c8f","sha256":"b36c4fce8f11ef3f695aff34d522be97b3ee72855cdcff2c36f811b73aeef2cc","sha512":"6b21b39503b93dd51b188beef5499e35814403fd9ed674b1b467e10692927d6be77e2f5d7897b0f335d8d7e59afe3ab6ee655472c4564ec2949eb7b09359453b","ssdeep":"1536:+aZHrgh9wadAh6xERrwYOGiLxa168UYjIEubVf+LoORTr0puwRpHjRPkC459rS9Y:zlEvwaS3wZJ8ACT0rmcLt/oHB1","tlshash":"9e246caef38691fde11a87d8a04a341431752ffea381cc9282fc5d1416298fc67dda66","first_seen":"2025-08-29T06:11:20.676246Z","last_seen":"2025-08-29T06:47:39.467378Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/batch/","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"54.162.100.93","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:47.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:07:A5:B7:4A:00:EA:45:09:50:EF:4B:44:63:83:38:E2:97:F8:13","sha256":"6D:1D:1C:48:82:61:EB:EF:E4:D8:57:9A:EA:F6:ED:0A:07:BB:6C:17:71:6F:A3:F1:88:57:DC:E3:A4:E8:44:96"}}},"request":{"raw":"OPTIONS /batch/ HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 06:46:47 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://gwda74x.life\r\naccess-control-allow-credentials: true\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: content-type\r\nx-envoy-upstream-service-time: 0\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/collect?r=10852430","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"OPTIONS /collect?r=10852430 HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=sXTDcuXSCOENG569; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg1_=Xts9JFSGDqHnIeW9237b; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: be06fac8-03ff-4d0c-890c-96a28366a2fe\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/bonuses.Dor-XBtB.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/bonuses.Dor-XBtB.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=6zeVylwwQ2py3ynY; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=6zdPnZbWxE5rYyUQ; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:00:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-5f59\"\r\nage: 2776\r\ncontent-length: 3916\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":24409,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (24408)","md5":"d8f992163e46f0bf3bae7d784bce73dd","sha1":"fc13bc67a740a10c23ce8c222bcaba6e3dd2ebbb","sha256":"f6cbddb3674ec860d3a11c7d545fb7fc74ff1378b5105bd406ebaefd2df07db3","sha512":"662faa10424a1f457cbee84ecd0ba01c4968f36db033f73a0589d854c4b56c58315a21207495251dc5cd08281420410fa9d5924d06d789e070c9cc39651947eb","ssdeep":"384:pDHUswjlt97PLvgBt+olcwcTRByP45MZnMipaHp:10swp7kwyP4GnMipAp","tlshash":"d7b24032742c6468f03bdadab4e46698355d760795428fbbee656c79c9cf0e33632308","first_seen":"2025-08-29T06:11:20.869865Z","last_seen":"2025-08-29T06:47:39.468105Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/sounds/click.mp3","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /sounds/click.mp3 HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=blmEE8SN01GOCgc5; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=A2LCVmocpUFMqwPm; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:21 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 6731\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"68b05e9e-1a4b\"\r\nage: 4339\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":6731,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"b497ee5b7f24d5540859a2fe9a2f94a8","sha1":"402f32b8a0c59a6655cee008020948c8b0dc3878","sha256":"627e28dd820dbe208a2d764c086b4eca2c54330b9741073bec9da852aa592962","sha512":"1f0e4fd80c187354ac665cf7e3dc52b8834ef35022c6fe922db3aae0f89f8530c5e97aa2d4860f2351c8fbf05ea2252593d626d12b8f90865b7eca6b6a476ee9","ssdeep":"192:79qf6EhSf0IotHNKWliJRgFn0DsEZM8+h/wgMgl:79qf6ASfCtHtliJ2F6sEZMph/w1gl","tlshash":"cad16d6a6d478951e40c5570d8ce1b4c737824b5afb0b3daa267f79e00e536c12ceb29","first_seen":"2023-04-10T18:19:05Z","last_seen":"2026-06-26T20:23:29.963181Z","times_seen":1246,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/Spinomenal2/f7b227e6c36f58e56398a43edaff34dac728307c.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/Spinomenal2/f7b227e6c36f58e56398a43edaff34dac728307c.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 37782\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"6d86b116cbb1596ad799a0d0a40d991f\"\r\nlast-modified: Wed, 04 Jun 2025 07:36:27 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 185D50DEDC878C7C\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 3205\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AfNJDtLuzk6WNMchKmxa450KC5miegBLJVNv95EOX9UZoqVXO%2FVygbeOJx8eSpoPfOQLFKl9ZhbwXNWeD4AzMZBQ6dJwnvjVsIMN4VzC\"}]}\r\nCF-RAY: 9769b546ec3f55af-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":37782,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"6d86b116cbb1596ad799a0d0a40d991f","sha1":"cddfe353f9319e71cfd75e0e7ac3d62d91e07bce","sha256":"cb79ae643021e4528661de291bb8cad5bfbb80f51351d26d1b75fa633b696cd2","sha512":"939b2b1508f6243ae77fcd4d7b8d96ab668534fd1bfbd2ec209e3b662035788b36e4d43871e0d856754fc9129ae8a67011db58963c677c7cc1cbeb73ca0de3cd","ssdeep":"768:cXyzKbupyDNTSrVK1euS0I3GlcVjRUXO5vjQYA8PfB97c:cXybGmrUYureGojSwLQYlfDc","tlshash":"0103f1e80b7840f37c4be380456b0900b22e69cb1bde2469e41776a350f5aca6cd2f7d","first_seen":"2025-08-09T06:39:58.984053Z","last_seen":"2026-04-05T20:02:46.677632Z","times_seen":49,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":213,"dns":115,"connect":42,"send":0,"wait":66,"receive":4,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/f1ea0268c65d44babe977efe24e26c4e.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/PragmaticPlay/f1ea0268c65d44babe977efe24e26c4e.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 21180\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"caba909a099d14aff6a7e561c32c1188\"\r\nlast-modified: Mon, 06 Jan 2025 19:15:51 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18507B24A9C70587\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 5625\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q8eoVE8gLDNPn6Gj%2BVG2JDNAziWjdutSoOJF3FPMbsTYdVDv0mIS7uVTSMJZOSLwPnUvzJ5bh6%2Fljon15XbG3vYUwO7HfiDTPXUszACH\"}]}\r\nCF-RAY: 9769b88c8c585286-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"caba909a099d14aff6a7e561c32c1188","sha1":"19ef91a29efeffce8f0b883fa8dcc3eb782ab517","sha256":"a76fd0f65594c7272a36473700435e11c4d7f11e09b9be692ae123c798636459","sha512":"1567b26d6dd3d5e58400f361d601081a7e47acb6bdbc3e5dfb49ae1a3cd14dd36512e5fd5a4086d635effb29ae88d23617e8b4a916dca64254c172f523225f11","ssdeep":"384:w/4xu/kaWg3JOlpnipL/3cX/PGo2kcuHPSVtBuuuUQybJwXWKxIp8zMrGSR8:wwxRRGJeQYHGFxbXYKpbJGxISzSW","tlshash":"5492d1094bf9533eafcb4a44b638d3536791f86b2ec4c5a44746df0489ad57058cbbb0","first_seen":"2025-08-09T06:39:59.151237Z","last_seen":"2026-07-12T17:41:43.893341Z","times_seen":49,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":241,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/js/fp2.min.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:34.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /js/fp2.min.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=G0qIZLgyUuq5m7Wb; __ddg10_=1756449993; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=51TJCH6CbaHIrasS; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\n__ddg10_=1756449994; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-883d\"\r\nage: 4349\r\ncontent-length: 11113\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":34877,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (34698)","md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.136ccc3e.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 31 Oct 2024 00:00:00 GMT","end":"Fri, 28 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:4F:FB:78:56:DC:20:7E:66:CC:9B:57:7F:92:C2:FA:50:69:C1:5B","sha256":"09:35:37:9C:E9:C9:26:27:7B:F2:E2:42:CA:82:EF:F1:2C:B2:B4:97:04:61:0B:FD:77:9A:15:4D:57:F4:76:D6"}}},"request":{"raw":"GET /vendor.136ccc3e.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 212176\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Wed, 27 Aug 2025 16:41:57 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: r0H1fdwFeLlF_kPyMONCDDBoZdb59MLL\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 29 Aug 2025 05:40:52 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"bb76b415fd7e0703e73712883fcc0221\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nage: 3946\r\nx-amz-cf-id: Hw2cxsCGC_19Gtm84AbmYCkhus_1EyanKbRquIx5yv9w1j5MkJJfoA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":684253,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65463)","md5":"103a089944d2295463b2f637a2fd1dac","sha1":"52544e4efd975b53d49b6fdd733fc294ef6c7018","sha256":"f23b1bd86b485b4f38f1671e46398627ea21518aed0b437be2d196c5c0c1880c","sha512":"8c49df15b440181ecf2af04709b52fa4ad199c22b7f10a145c7a883cb8a3184ad518ab4a6f8293a7cbd19ce16cf6aeef854a7c89b26658d103ea4b46c3d2c25d","ssdeep":"6144:pxE8LlzpXe7RvofOq1BrFZGEkYg+kfFd+oNEf9upyuAhOLtaX:HE8LlzpORwfH9kYqfFUkEFup/M","tlshash":"bce43bdc79d1f0a207f352f6807f140bf27a1a69680c8490f765d8c968b994e9237f6e","first_seen":"2025-08-21T12:18:11.824347Z","last_seen":"2025-09-09T08:35:33.568189Z","times_seen":449,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/api/v2/tracking/events","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"PUT /api/v2/tracking/events HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 102\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"PUT"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FC0oWgs4RDRKfAXh; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg1_=aTXJnYZ99xsizo1OAveI; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 6f5b347f-7edb-4235-ae63-d3a66762feb6\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-07-26T12:16:11.012554Z","times_seen":178175,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"gs.jdwqqi.site/socket.io/?token=\u0026EIO=4\u0026transport=websocket","fqdn":"gs.jdwqqi.site","domain":"jdwqqi.site","tld":"site"},"ip":{"addr":"91.215.43.62","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gs.jdwqqi.site","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Jun 2025 06:39:59 GMT","end":"Sun, 07 Sep 2025 06:39:58 GMT"},"fingerprint":{"sha1":"CB:24:B0:88:8F:77:D2:4F:ED:3B:17:3A:BE:7A:F0:1E:B2:A3:CA:D2","sha256":"AA:DB:69:A0:99:34:0C:BB:5A:DC:92:F2:26:B5:18:C6:B1:CC:CA:87:35:2E:22:4A:22:43:7C:94:C5:67:61:20"}}},"request":{"raw":"GET /socket.io/?token=\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: gs.jdwqqi.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://gwda74x.life\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 3gWCqTKwWxQKZy9Be8Q8ng==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: ddos-guard\r\nSet-Cookie: __ddg8_=DOxdQU2GCVJTHDb6; Domain=.jdwqqi.site; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.jdwqqi.site; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.jdwqqi.site; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg1_=CnR4YG5PkdKGIqhurTWa; Domain=.jdwqqi.site; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:38 GMT\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nDate: Fri, 29 Aug 2025 06:46:38 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 33ksdxB5BF0oHN7pQB1u1QIOFXg=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover; server_max_window_bits=10\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":557,"timings":{"blocked":0,"dns":93,"connect":113,"send":0,"wait":284,"receive":0,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/playson_premium.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/playson_premium.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=inKiPFJTAK6uCKv0; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=kFcW9YEAnjG1wNpN; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-4b6\"\r\nage: 4330\r\ncontent-length: 604\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5c779d57bcec0fe4d42e108b4f34c15f","sha1":"40e4c6d78d1a92f13deee6ff8291df1a84c2de61","sha256":"6903bea0047248cef50e6c09312dcf1df8f26ef511c10fd4f22bb7c9c7580494","sha512":"51ec89c6412be1df2d784b1368a1797067e248946c29eb545d9914bc3884552ee0a7d9bb1834f4ec7ba1ccafde38ffce918d2dbc04a49d7aff1a52dcb357422b","ssdeep":"","tlshash":"392151ebf39da7d0ed048320c82dd97840a678be7f58a39d43d0ecb2e41a85e1c48c80","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.866029Z","times_seen":70,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/kagaming.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/kagaming.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=inKiPFJTAK6uCKv0; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XGU75FZgNokFlQaQ; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\nuserVersion=45.10.240.136; Max-Age=86400; Path=/\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3864,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f9bc9f0b50c4720d23b7073393347994","sha1":"3af7a97a5920cf50d96107da3eee7cde205c3882","sha256":"4c8d13254c9620e0d1dfaf23652c6829800c21a7ab654f1a3e18c9053010c14b","sha512":"8986ac343180eb877ad94a4533b2f7c3dafab0feaddfe9088a711cbcea7e679d98880c614be0eb27422b2ae960a64d28de6dfa75bf6bce49b8139497db05c10b","ssdeep":"","tlshash":"fc8111ca01a71121a603a46a2bef060171948807e54bec127edd33cccfcb69897e378d","first_seen":"2025-08-29T06:11:20.964489Z","last_seen":"2025-10-09T10:23:07.278451Z","times_seen":8,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/geo_ip","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"GET /geo_ip HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Fj32KAK3bhRZYwti; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg1_=WepQLsPYMBME2wkYHanQ; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: de3e57e7-bef2-4e31-92cc-2ca1fb1eb407\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bbafd4518d91b4ec04a45a5e17573247","sha1":"b90b618fb29a244c561b535ae9a4f270aaf3862e","sha256":"d4b6c1e00f94659a0050ca0ab76580eae50cb81f50029909c447f3bbb71e8aa5","sha512":"7969a584e3c04c6cc4fdb36be9dabfeecedcf0f05ed3d559a74e741afe12a5994d60fd2f0c97b33ed330cba79fa2f58fe6ac13b8e116798604a40359fb357a55","ssdeep":"","tlshash":"9ad0a72935799d2e0c3dc280852da39767153416d28e129bc1a24f21c0c87ee2060557","first_seen":"2025-08-09T06:39:58.993804Z","last_seen":"2025-09-04T16:11:26.333967Z","times_seen":6,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/api/v2/banners/main","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"OPTIONS /api/v2/banners/main HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=sZFZxckoMlzGYyhN; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg1_=yRDJeC7JPsC8PMxXPDTY; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:39 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: f70c47f3-8f91-471f-b369-6c1db7d5c7e7\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/0b6e2e38d76c4a40bf6ab7235f92c5e7.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/PragmaticPlay/0b6e2e38d76c4a40bf6ab7235f92c5e7.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 21309\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"a0243053186e9dc6b7ceb3f5ae10058b\"\r\nlast-modified: Mon, 06 Jan 2025 19:17:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18502DF1A8F83A1F\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 2183\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0HrXnczCphoqNDQOa3rdlwpNlTbVPA8jOO%2BBZl2%2B48N4FKdQ74NVMiNYLxxCF1RJ34OuUn9vmjxIkZBRdlrOoEul8K48Qqus5S7NVBg9\"}]}\r\nCF-RAY: 9769b8884f0c666e-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21309,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"a0243053186e9dc6b7ceb3f5ae10058b","sha1":"b71e035aae00b689245f0966c3d9a3a7b52892d7","sha256":"458e62a07eded322f3a1f254fdfba3f49e9dba0f3148f47da7844697c11801ac","sha512":"54fa56177a5a8f0503c6908bb91fef479aea4611ff61b6f614e6b941eca458b49b5c0071b5f82ae6ef4f55be4b15554ebb9a36fc17026b4504d4824c017e6678","ssdeep":"384:wWvwb3jEKZdinOjA4JKcRA1lNSpNEalUMfTHrt/buMkgIeGfe+:wWYbTEm0Ok4J/G1lN6EayEHrt/C+3L+","tlshash":"84a2d03a9ef5c6391a19b6a0308131892f0986b3f7c9752bda296543ee3d91784e6488","first_seen":"2025-03-21T05:40:09.025565Z","last_seen":"2026-03-01T21:47:53.218484Z","times_seen":41,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":267,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/ModalNew.ca9vUQYj.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/ModalNew.ca9vUQYj.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=YWQImJdgp0VhRUwz; __ddg10_=1756449999; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=34hQTE1U88IfSgTr; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg10_=1756449999; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-2cc\"\r\nage: 4335\r\ncontent-length: 250\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":716,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (715)","md5":"45cc074a7bed8d0b5e187d42844292d9","sha1":"fcf4b42db6a02f6522030b88546cde2c5c6a1f76","sha256":"40d4737d6986bde65edc717adb9a8c5f80ad4124a1c31901d164c82a8aa26b98","sha512":"3e50a3d83e731a4ff6513f0dbd0fcc8eb0a2c84f77a7726c335f9b149b77636111bf379c40a06139a590b43dc258c8be162412809694fc25dda2c9e3a10f6332","ssdeep":"","tlshash":"f701289a3b7c903c38bfc042b5a38f9f53341e164727aa9b8e3a72684c4f54228304e4","first_seen":"2025-08-19T01:32:32.365574Z","last_seen":"2025-09-11T21:42:04.04613Z","times_seen":5,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Home.CBZvEtgP.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/Home.CBZvEtgP.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=esoGAGOiOzFu0162; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=SU5rb5fZVzhRAG4Q; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-7a7e\"\r\nage: 4351\r\ncontent-length: 5456\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":31358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31357)","md5":"7998687802ad8048f691b82b2ee84b20","sha1":"357958dec73a5608c8d1020ce8554793efcdbe21","sha256":"2c57126680de1d65eb37e917476e3ef407fbf040f186e7696984711a95719405","sha512":"4c41ffae8a1a7c9dada2a0239dcf5160b8e829ca7975987587ae8930145040c30580af745e8150a7d4de48ee90dfafed696231ba2b57519f6bd4fa0d920e1137","ssdeep":"384:WT6aeLqghWqYtWyThd9Tk7R3uIRBksYCsk7JWGCIEw5Oymxg:W2aeLqghHyTn9Q7usYCxRmxg","tlshash":"5ee29631624c206d71bbea65b8e2298c7168f61be7130779d6d47438c8eb6463736acc","first_seen":"2025-08-19T01:32:32.28433Z","last_seen":"2025-08-29T06:47:39.475381Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/apple-touch-icon.png","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=vtoCl7dkeVrSK6K8; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=QxiLoOK8gZJpofa5; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 5476\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"68b05e9e-1564\"\r\nage: 4348\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"b0fd6219c3cc6542ac16de5fb1a803e5","sha1":"32e23eec5c195ebb1288a30e3eb88fabef54d68e","sha256":"3de26349c4bfab8a20055a516f6a01a3e26870922b5e158d25b222150248bb9f","sha512":"ca31b6c5eed2c86716e420501bba2bd940b0b74627e9acf6c535e1391dd518851aaa699484966b2c9b463af4b84fea8a91072966e6d355f12e7bbd7e04b724a8","ssdeep":"96:TitXRWWOLtp6cCMcakSchLRel2CgQ+dwmcwveg4tjvR8VRtvS:TUoWOLPIaihg29dwAv5Vi","tlshash":"b0b18db839459902eec1e13923565bd0af3111a036012c4a136fc9375b147a23abbfdd","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-06-26T20:23:29.98019Z","times_seen":156,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/api/v2/tracking/events","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"OPTIONS /api/v2/tracking/events HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: PUT\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OvirR2JbsjElv97F; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg1_=EXYLzGu2pezljn2iD6yb; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 86400\r\nx-request-id: 8f1a31f7-8eea-47b7-bff7-ca6790ece9f6\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/wYhJkT6X.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/wYhJkT6X.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/KHcq37__.js\r\nCookie: __ddg8_=0cfjt4j3XmoWOtR2; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=5oIJpSDBR13s64Xy; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-200\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 304\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":512,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (511)","md5":"d57ef091b0eafe796f16f656fadb7a38","sha1":"ba19deb3ef8628bbf604f47b95bc87ba88731808","sha256":"5494c00794faf00f9fa9d56742d11f89639a87f0eaa9a253062e6027608569bd","sha512":"56cc7ec7d11439fdde69eeb0c344ff9b6647b2935d59b9fd44548cbde6cbd683905765e8efc2a571254cf040b06fb48dcac788091ae80260e37e43a5cce7034e","ssdeep":"","tlshash":"d7f09e8d70a3d6b0b736d78dc936ca42e03c1e423c0de5d1d44a56453247481e73d71e","first_seen":"2025-08-29T06:11:20.787584Z","last_seen":"2025-08-29T06:47:39.477182Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/footer/lvlx/default.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/footer/lvlx/default.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/default.Dfe-jFN_.css\r\nCookie: __ddg8_=RhxID2JCNxjR8DSX; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8hOcZ2L3RJG1dHqG; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:20 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-131f4\"\r\nage: 4338\r\ncontent-length: 33770\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78324,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"861bc0fbfe9e67f911533676dcdc95e4","sha1":"711166d32abc201afa9c14ff03b0cb98d4e4e35b","sha256":"df69d312fe8509a839802cd82fbea21cd863aaa4ce8ffa08c99fe0cc19cf2356","sha512":"1688c6f57916f56a146dc129ffaa617cc9e74eff2c46b431edbf8a643fd3f2bb81579afbfac3ef3f5f7d4049e452ba0966ca24b3481433438c32e5e56aed7648","ssdeep":"1536:wc/a8s+S0v+DRGkZHWQwaESSt7hSZBwmsAuppsPV+HJM33iM:5TK0TJ4Zmm10q","tlshash":"e273c7dc6bb405f0dec593daae2908a97c2765fe2d815d28c21c5f842ca1e6ccc65dca","first_seen":"2025-08-09T06:39:59.049635Z","last_seen":"2026-04-15T02:03:05.856061Z","times_seen":68,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/images/default-department-logo.png","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:41.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"GET /v/images/default-department-logo.png HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 15479\r\nLast-Modified: Wed, 20 Aug 2025 07:24:07 GMT\r\nConnection: keep-alive\r\nETag: \"68a57817-3c77\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15479,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"53a142e29b647ceba5a2adf6cc69b919","sha1":"37fc7f6523e5f4d9e01157c70acc74069bfff416","sha256":"a5b367cc08f01ae61da2109c04047ee7e218df860be597c35d4ca7e064fea63a","sha512":"898a79097ada980f99bc1fe495cf55aa54050d286e108e9fec3f1e53e75b0a88e650a53bbae8a5b0c708f227367b3b193c45103c482e71066a9c0a8988aca61e","ssdeep":"384:Vk8Swa5Qg42uLHe77h+CnqUMfgFvywxTcFOid/BQkrO9okl:ONwa5QgRuW7UecFOi8krO9oU","tlshash":"7e62c0eddc7f24cfbcfa527e1d9d0c1e4d989e240170a8f64ef3d49a4821a66d5029e8","first_seen":"2023-05-01T22:32:10Z","last_seen":"2026-07-24T07:40:56.599532Z","times_seen":2292,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":68,"dns":1,"connect":19,"send":0,"wait":39,"receive":1,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Bgzbv_Gu.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/Bgzbv_Gu.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/DPY8sZOt.js\r\nCookie: __ddg8_=AHQE2RX34Td62DjY; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=vkSehnPVG6ilHZsl; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-14a5\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5285,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (5284)","md5":"16fa5e9dc814155bcf21dce61f988788","sha1":"0e10840b4fdc8a457184d6d31b9fee15b2eb27d6","sha256":"ec652f33dc5db71bffe08131e24219c32cab0d9ec2ba141f561979f6790f538b","sha512":"ecdc951bd01f1e848e7640e9a4d2906f23bc9a02eafde05105c682558fb7b26a6b1402d0fd82623926621dd035a3dc3f0428ed74525c0910ff0cac9891686dcf","ssdeep":"96:4bVpyTIFvwmBocgjI3Y0cyn/6MjNZpjt0+zxlV8i05rZC:4hpyT2uUoGhSF5FC","tlshash":"61b14318e864cdb6d112415d9c0b18d079dd3ebdc476e435e4f869906bbac3ca28db2e","first_seen":"2025-08-29T06:11:20.805563Z","last_seen":"2025-08-29T06:47:39.479126Z","times_seen":2,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DrRQwopS.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/DrRQwopS.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/EFWGUdKZ.js\r\nCookie: __ddg8_=BqvzQJOt7QzyX9vo; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=bDwnE4KN2U822cB0; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-4eb\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1259,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1258)","md5":"8b4e2f4d3e815a84c2e9c1616ab283aa","sha1":"eca66979de8b48dd5fb724728cd632f62e427fe0","sha256":"c753a51db2ee5549b236de2668de518a46353027763efa716a6fb970ba63ea6b","sha512":"fd6e65f80e89441c2f3ffa949927cabd91abfe4fd237906407da622311e2d529da5b51adf4faa2e724fc76d6804d47b0305933841479f02163c8ba9277824f1e","ssdeep":"","tlshash":"4e2110aea524003e8e99742989482465cf454f15b0fb8546b83d5d5a63005c2ec7ce29","first_seen":"2025-08-29T06:11:20.897891Z","last_seen":"2025-08-29T06:47:39.479876Z","times_seen":2,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/smartsoft.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/smartsoft.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=inKiPFJTAK6uCKv0; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=vW2w7vx2iiQ3GmI0; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-3341\"\r\nage: 4333\r\ncontent-length: 2422\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13121,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7722afce4dc4c324b442e3ef00aa3490","sha1":"475e0ba00a1ac2e95ae1c61480ebf9b72a979986","sha256":"487a0543786eb77e32859b8f6d2442028623bd3bd26713f4c5d2427b7539211f","sha512":"ec087002ad401686045e7995d9d5da89d0dfa16880c0615b188975b824f4e8c7dbb8bd3612b814f04d3dacd8174222c545ca714f0257c40b8e2ca3612bcd2fff","ssdeep":"192:iL34Xr4ZC4Z8NmZ48+fDNmZ48+fwNmZ48+foPF34XqGu4ZJE47Ej:OHZfZ8NmZmNmZZNmZjFabZJE47y","tlshash":"6e42a5bfe394a1b2e145d3ecce06d070251b24faafa0c6d486b5bf5e571404f1dada84","first_seen":"2025-08-09T06:39:58.935368Z","last_seen":"2026-04-15T02:03:05.922293Z","times_seen":62,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/ns.html?id=GTM-KN757LMM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /ns.html?id=GTM-KN757LMM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: *\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1396:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1396:0\r\nreport-to: {\"group\":\"ascgcycc:1396:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1396:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 92\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":268,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"4aab75dcb6382c39dae33c9a1b45e608","sha1":"a8e4758330308a44ca74242cb17591e6c6599483","sha256":"d818a014761cd9516d1b3e296946e960d91f4c917bf42a808e67323a8b062da8","sha512":"0fe058db29f10d9f41db7b0cc9cbe8e403b36b07fa7a99b9699ce7cf60748d248d8a79b1a56f4bb006d507059fbe8ab73ce71b9a44ee095a6da8dea54da625ab","ssdeep":"","tlshash":"2fd09b4fd0013404d92052b05cc2776414516544f5e58d536582f4355d44755cd53158","first_seen":"2023-04-05T07:30:22Z","last_seen":"2026-07-24T13:12:40.547906Z","times_seen":5045,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/ping","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"44.194.218.116","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 14 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:E3:24:32:5B:DE:76:F0:A4:43:7F:C2:84:CD:98:D0:50:48:25:7E","sha256":"B0:C5:D5:8B:41:34:A0:3C:41:21:0F:E0:A4:E1:C3:F7:66:24:A3:25:E9:E6:67:D5:40:EA:68:FB:D3:70:73:74"}}},"request":{"raw":"POST /messenger/web/ping HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 664\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 403 Forbidden\r\nvary: Accept,Accept-Encoding\r\nx-intercom-version: 3ae6ae59759e34dfcd054b37adfdfe5031a217a1\r\naccess-control-expose-headers: x-request-id, x-runtime\r\ncontent-encoding: gzip\r\nx-request-id: 001qtpofbdjv879ldji0\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-cache\r\naccess-control-allow-origin: https://gwda74x.life\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.024945\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":113,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"43e96fa6723a7d8d01b13e155d45958e","sha1":"b0f49863bd55f59c44688e3ab2a0dd026439a046","sha256":"59f3b74262357e3cfb5112f9215dfcb931e86563de55a9f28ec56557995651ef","sha512":"8c85e80c1ebfc7988693ed3708ec0715bcad6454e3f8eeb9bb0f5996482b93c6ba888642d02115375f30d5bf229896f24bd05f8435325b769831e998f6f33765","ssdeep":"","tlshash":"2cb0124f8396bcf7dba20083ad4a14a1ca99d0f190e418d9c464939c86ce612953775a","first_seen":"2025-08-29T06:47:39.482233Z","last_seen":"2025-08-29T06:47:39.482233Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DNGV6Jh0.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/DNGV6Jh0.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/KHcq37__.js\r\nCookie: __ddg8_=0cfjt4j3XmoWOtR2; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=q15wUpI5aZnsSeY8; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-69a28\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":432680,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9fd3606b8f53d1e7f9c4087a69332294","sha1":"211b69f8e382fa711a51a291d7c07dd3afb65ba6","sha256":"e6c1a26292d8a55a7f9636cd31f462516b451d44210215dcc3592ec3de8aee28","sha512":"0c080d497fa568ce8d10bd7b326e9dd41b8991048b4993f2de695c9033ac638f3256f3b9807586b1ac3c14d5ea5a8b8fafac7d8dfe17aa60a2108f41ef051a2d","ssdeep":"1536:tYGn407ukNMPHUyeCFtsSPswJYccBynmI0Mkc/BynmI0Mkckk9ug1JVBynmI0MXJ:teFPHUuYq0VHwQpEu4","tlshash":"1c94c8e973a8a2e4f407dbfdc9236475711e35fb3a96c7c442a25f7899720ac4c49c90","first_seen":"2025-08-29T06:11:21.008972Z","last_seen":"2025-08-29T06:47:39.483254Z","times_seen":2,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/13892c6beb22da0ad6b5e8799d41c75b.png/lKWsaNTjFKCYsfM66PKuEuIGdjqOJUwOhKdtHpyl.jpg","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /casino/games/13892c6beb22da0ad6b5e8799d41c75b.png/lKWsaNTjFKCYsfM66PKuEuIGdjqOJUwOhKdtHpyl.jpg HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 338518\r\nConnection: keep-alive\r\nlast-modified: Thu, 30 Jan 2025 11:14:47 GMT\r\nx-rgw-object-type: Normal\r\netag: \"4918b6afcf7183be64c4edf328076bcb\"\r\nx-amz-request-id: tx000006e668fcb653c6ccf-006867c463-1639b45fb-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":338518,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, software=Adobe Photoshop CC 2019 (Windows)], progressive, precision 8, 610x400, components 3","md5":"4918b6afcf7183be64c4edf328076bcb","sha1":"799a8f4abb76b7d28f208090d9203e17e2f27e36","sha256":"e9eddd1ae4e3ccaf93f70b69744dde149e4a2275c7aaffa4f854390e490cad97","sha512":"b05a896e7fa2fc6ac0bc79fb42fd18ae77cfe8b4f91b268b78fd0cb8cc76db6fc42e470c73fa46eef89a889626a2ccbd88fd7094189e09bec945b48abd12e319","ssdeep":"6144:45QorbeIDU2zy9YtJClf64pSLldGAYcvO0PMN6s8+1WDdG1nYh3m:4xrqIDrkfRNAfOUMd1WU1nYh2","tlshash":"28742373cb806636eec40f0478dae8c44d161ad652dca04cbd1fe849ebd9a79b21534e","first_seen":"2025-08-09T06:39:58.884513Z","last_seen":"2025-10-23T21:23:43.056084Z","times_seen":12,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":154,"dns":0,"connect":0,"send":0,"wait":44,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/collect?r=10852430","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"POST /collect?r=10852430 HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nRegion: RU\r\nContent-Length: 56160\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=cewTwYQWvgTQHqd3; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg1_=smKoHKNeL5g2nFAzYZxD; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:41 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 1cf6ad3a-d58d-4946-9fc3-0bf5b27eed1b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":30,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"11977a90f6bcc30dbb2c1096dfb33a52","sha1":"8cd52c68a113f8e4b3d8f141784dab663d3fd5cb","sha256":"8031180d4d982a471ca97ef5a04e8d013d003c5c19e80d0a5f45401c4463ec27","sha512":"ba256f5a6c4314e7f804a84cfd54ee37829b98698b373393d1e7061bee56e58df212dfb02cb039a78b644b8b0c4921cbec243e181aae5d89272a2835e48217ac","ssdeep":"","tlshash":"18800020ca802e2be30a02a2b20820800200028888c0280308082a0c020c80b80ea282","first_seen":"2023-04-06T20:47:37Z","last_seen":"2026-07-26T10:13:12.642321Z","times_seen":3753,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CgwjNhf5.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:45.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/CgwjNhf5.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/NCxdOIYd.js\r\nCookie: __ddg8_=zFQCXCsRuKZWRWVU; __ddg10_=1756450005; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.120; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=A1jUPBFHw3UdoRa9; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:45 GMT\n__ddg10_=1756450005; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:45 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:45 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-41a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1050,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1049)","md5":"39e4c3b1bcf00b894cecf2d1fd473fea","sha1":"2ff232fde424b34567c3b2e630ec1374409d1b14","sha256":"531a003644e89398dd8af794f6a5642aa6fb7d5490c66d9fbe9048c5fa33491e","sha512":"c3c2a1d90c7d9c39913745963beb2486e0ac3a886176d8fcce8d9d8b3f6f95ff3934b6768e7bfaaea8e62cde95e5a83b8b43f6d87b6c8abe46860a8914ae3182","ssdeep":"","tlshash":"11110eafbce1cc3d82b218b8d6742923135666c436fcd0d8559d0ca56a6a84b596df03","first_seen":"2025-08-29T06:11:20.996518Z","last_seen":"2025-08-29T06:47:39.484645Z","times_seen":2,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/BAPVoqqi.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/BAPVoqqi.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/CUsHs50J.js\r\nCookie: __ddg8_=0syTqpe6bxr3hMGe; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4ZkWcesE9unLCInm; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-56\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 4\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 86\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":86,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"f0ca4c806b03c42ba8172cd3d0731092","sha1":"55e1cbf5379e42532b5cfbbaa8bbc4fa0e120c34","sha256":"d1f4feabba8ad305b1e3a1de3b34675d7ab46e14190b0dc3143236a1f0752f8c","sha512":"ec2f148696e017cf2c9eab55418600193efd4a18325f393080d4efdfd2dc79a5b0241e4237d001885cca1a3bd56ea4ba4524dd3f32fa5c3d79191271c3ac69f2","ssdeep":"","tlshash":"f0a0240d0470047d10040cfc770f557d55701417177d0fc04000470107174df750cc00","first_seen":"2025-08-29T06:11:21.007592Z","last_seen":"2025-08-29T06:47:39.485246Z","times_seen":3,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/regdep/pc-v2.webp","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/regdep/pc-v2.webp HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/default.Dfe-jFN_.css\r\nCookie: __ddg8_=RhxID2JCNxjR8DSX; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=f9hgIFzTghXAeC4a; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 94832\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"68b05e9e-17270\"\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":94832,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9018a8fdf0ff36253cc1f72bae5bf4df","sha1":"88daf79e98ed2da74ba53ec9aae175cfd92623b7","sha256":"531a28deef62525b83cd993c9239116f7a447521bccc88aa475ee76e17a8087e","sha512":"12b075ab073d229a491fd04b96b3baa164a6da07fbc8253959238712871059d7926df356012c8ec62ecfae465da0bf65205617b1f78820bd042c21a625c3f432","ssdeep":"1536:iaWi0jre92XKVGPJzAcy9iQNvOWRRFEE7itL3hasvBaUnbqykQrRvMMB:iU0jre3gPZAF9iQBO8SPa2beC","tlshash":"069302be4585d39cff3d773dac66f360abcd15645032eae12d84335aa698672c13ac02","first_seen":"2025-08-29T06:11:21.03738Z","last_seen":"2026-06-04T08:51:57.410112Z","times_seen":96,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/5878c98bf96de5c3ecb4fa37ddb45928da161525.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/PragmaticPlay/5878c98bf96de5c3ecb4fa37ddb45928da161525.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 23925\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"e6531c0c47e53a6a9001584a0194da73\"\r\nlast-modified: Mon, 06 Jan 2025 19:16:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18507266D278FE66\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 5122\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8G4v3ko88YtKOaBesG2%2F0zXrYpicmSRM5wGLnfhTAEr6AX%2BMzKtaOkdvm3wmzjTBRh4hTTtOLX8BNDU8M3OESAnRa36qLVhMsOiPZxdk\"}]}\r\nCF-RAY: 9769b889ea86da9e-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23925,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"e6531c0c47e53a6a9001584a0194da73","sha1":"9030997b339b418d7c3b8bf99eca4a7d28330ed1","sha256":"f88d4515fda6c8f1caea76b6ee1adedf6b613a24c8bba1751675fe6ba8625b7f","sha512":"908bd49718f2e979f6d0465d9d17533d1a7d3642e8161281c5968dc52f456cda5a4c188fa5d25b6cf8217fa9f0f530b6558e67415d7083471a4c9528faf3221c","ssdeep":"384:mL/RpeeVLdRQgRMGMIKG53P6qL4opDGjHWV5sBi/SPIxqlKL8/KbAujLRFqR3vmH:mLpgeVLdRQOZ3Sq/YH5BusIUlC8iMuBh","tlshash":"d4b2e1e651544f58c4fe3e774f0da4591cfe81e36e26a09deaad41b7a33ec20968d2c0","first_seen":"2025-03-18T06:51:28.240368Z","last_seen":"2026-03-01T21:47:53.269507Z","times_seen":43,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":258,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/macawgaming.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/macawgaming.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=inKiPFJTAK6uCKv0; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=h5ta3NEdaIPEaM9m; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-e0d\"\r\nage: 4331\r\ncontent-length: 1599\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3597,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a64857193463cc5a699c9859bd0424eb","sha1":"31a60ecc62a7757160d6d58b767444f599cb9ba0","sha256":"556fddcc2b950f549a72e74525a921700449590527849a874f2f45d724a277a6","sha512":"13f341a3ea2bb76649a7dae5b8809b970eefa8b5df62f02368ea5c16e529a04ca3ee6b497531848cc51fe026f350efbed22a99e139ba5e26f7dec924b787acd5","ssdeep":"","tlshash":"427182a1c3f862e4f009b3f0862698b6365729fe3b12df4947ea6e60821100d89d9c93","first_seen":"2023-10-28T21:30:08Z","last_seen":"2026-03-01T21:47:53.20689Z","times_seen":37,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CUsHs50J.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/CUsHs50J.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/NCxdOIYd.js\r\nCookie: __ddg8_=vtoCl7dkeVrSK6K8; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0syTqpe6bxr3hMGe; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-326\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 438\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":806,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (805)","md5":"1e9ad5c4ca928ba6cf844f54b9b89a5c","sha1":"6fd50eb9c9e9201524a82a9b67443b7ea76660c7","sha256":"33a533cd8834cd2c52e3fe19c283fea7656febe9d1764795ec0f76818ae8a4fa","sha512":"31380004aec761307e083e55afeb81c9650a4d5c93e8d680a8db79273da42087991831790399a2447eb1a10a98e928266f8561a0cf04e4cbc52646416eacbef3","ssdeep":"","tlshash":"b7012e1be68081b40028cdf9d4758935b273849b1beae7f0e2de4b304bd10b2d108a1b","first_seen":"2025-08-29T06:11:20.991937Z","last_seen":"2025-08-29T06:47:39.487621Z","times_seen":3,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DQqiEsJr.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/DQqiEsJr.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/CUsHs50J.js\r\nCookie: __ddg8_=0syTqpe6bxr3hMGe; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wLfoIXaDFcyNNx1p; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-132e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 4\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 1753\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4910,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4909)","md5":"f60efa78ca84502cdba47f441b3576fb","sha1":"e93bc0652a5f2f34a6c869899d1210cc5b7b8b4b","sha256":"ff9c72e988754bcd8bf470d412bd6e8e934729b6f8fcf53d5040a8fb8a356162","sha512":"959a2a9448f9f25eb4cea54b061f70a01f4eda939302ff93ca8deacd1a4b3d4fa73fee9248d2726be903b618b4b7edabd491e838775ff7fa73d6a6bec2d0ede9","ssdeep":"96:vSI0Lgam5pFjwsmyzqVBRJzxv7A28/s1/HEwYx+3cCL:v8mjsyGRFThSu/j4U","tlshash":"85a1748f1240762e7ded4b5543f4681883304886fc1c2bedf4ae5d389b5a88f65bba74","first_seen":"2025-08-29T06:11:20.886516Z","last_seen":"2025-08-29T06:47:39.48828Z","times_seen":3,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Bso1n4wf.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/Bso1n4wf.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/CUsHs50J.js\r\nCookie: __ddg8_=0syTqpe6bxr3hMGe; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=abKGl53qMvg3tJYY; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-405\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 643\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1029,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1028)","md5":"4e0da105c66878ebf02c8f53705c0d78","sha1":"73e60eb2b2ffc86522b476a10fdac4d612f4aa8b","sha256":"76090b1f0d4c1237e6292cf3624935590f2503890811a60cc8d7770dc9556a8a","sha512":"07f27a2645a5b7dcfb389c8e9a146a4be4930813d890f25c3ae5446340f56ee30e24704e59c8a8c45bb7210858e4099b0d4899bc589e8799c21046f54e2f7c14","ssdeep":"","tlshash":"ba11022bf60a0b2263331c79456831e6cf650b8b2c7944c43c54df161237c83e5a6f04","first_seen":"2025-08-29T06:11:20.823668Z","last_seen":"2025-08-29T06:47:39.488879Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/footer/lvlx/logo.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/footer/lvlx/logo.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=6YvkMlxLrJG1Kuij; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=RhxID2JCNxjR8DSX; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-4a0\"\r\nage: 4335\r\ncontent-length: 557\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1184,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"743489fa6132c79707cf67ab559d050c","sha1":"b1f7c69289033703f975043997715530210cc716","sha256":"bf3f8d2962026699f0229ca007322db9edd9ed366fe6770ef79c46276aeba886","sha512":"578e579d2a9806e1a6331644d4980185e0867dac3dd19136132e0fef3ef0b5ee8893889fbf922f7c8a40f089b4c19d4a0649567673dac7bd85c0203f21ffde6b","ssdeep":"","tlshash":"ed21078031995381640b47d4fe2b20345d57a0f7efcdf1fc16e14aa3a4d125658e4ed0","first_seen":"2025-08-09T06:39:59.124894Z","last_seen":"2026-04-15T02:03:05.831565Z","times_seen":46,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/roboto-bold.BeRaP8H0.woff","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/roboto-bold.BeRaP8H0.woff HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=RhxID2JCNxjR8DSX; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iOy2BKuOdWHCetU7; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\ncontent-type: font/woff\r\ncontent-length: 141532\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: \"68b05e9e-228dc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141532,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 141532, version 1.0","md5":"ba3d7f35e4e84772d778ced098c5a40c","sha1":"248262cc71832afb331a103116b8a5f061693cc3","sha256":"7abf45d601fc5dbc8c482c9cf62916b8463b14d4d9a90e0b5888952401f784e5","sha512":"6cc5d27fdd4030a66cde525d52c9cfebc1a2caa3ebe10a49b538694cba096fdc7ea57f2c4a2ea153bd102885cdb9e92d8c5c129dc38251be93bc6426ada89a4b","ssdeep":"3072:4SGRte9oLIED5Zc02YQeQDKyY6s10mehsr4QIaw545V:2GYhX27e0Jl3s7Ii","tlshash":"fbd3229fd04ca4e2c57fb6e1c4e74ef0a5b53cb6d10e358f1292c9118207ab9e8e6649","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-04-25T06:32:47.439749Z","times_seen":64,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":347,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/vip/mainPage/money.webp","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/vip/mainPage/money.webp HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=A2LCVmocpUFMqwPm; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OyLreP385PqMe68O; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 0\r\ncontent-length: 7150\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":7150,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3e0d20f5a2d729dd27c8452b80b95939","sha1":"c00fc7fa4d5ef14476a793657ceaf8da9040a5b4","sha256":"a97c6079842b58ded77787a7935ff429197e357dbf2785663ead679716693dae","sha512":"db18664f988ee7046dd6098611e29780ca06ed2eaa4a538cbff5ff6698b5c17838a36d9f2ffe88851d8d8e764ab07808c604a7c441bca5dcf8f3a0613cff4c52","ssdeep":"192:rDnnDtMWC7QCQJ4NwSImgrL0Zj6q0xGkeYJIb:HDtMlQJ4NpkL0Zj65","tlshash":"a0e19e45042767e6d3572427fbad790772432b61de1c01c31d78fa768daa40f277c58a","first_seen":"2025-08-09T06:39:58.831335Z","last_seen":"2026-03-01T21:47:53.450168Z","times_seen":34,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/espressogames.png","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/espressogames.png HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=rrOPXgDekf1o2Ja1; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.120; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=UOPL4t4fdtmhNmxO; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1296\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"68b05e9e-510\"\r\nage: 4326\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1296,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"3ace5819ac2b5d62bdd1309abd1b08cb","sha1":"b526fbb6a5bc94360fdb050ff616ca21742a4886","sha256":"403267a769888d0d63629e2a4a14bb29039ccd3f5e30dbb3d4c3ab3053388a8e","sha512":"fe228a67da3efe86aa772937c1eb34232958bb3b3e0fb4a6144ca51e07ad1b3f3669aca53aa1aabd725096a265698c5dfa48cc51b95c677cfaf3326d53e709c9","ssdeep":"","tlshash":"7221c85fe386dd0cffcc67998fe00470cf53a0734b4a9d0ab4886819a9c21976de6362","first_seen":"2025-08-09T06:39:58.926279Z","last_seen":"2026-04-15T02:03:05.965677Z","times_seen":62,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=b3QiiyGjRVwkXNGT; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2vwM1e5mTJpKTMBA; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 26 Aug 2025 10:50:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 07 Jun 2024 21:58:38 GMT\r\netag: W/\"ead49d69bc7839b0b873b096d418e1ea\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nx-amz-version-id: a9eB74QCYmN.zM7i5ckvNX3RYMk8LisI\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: AMS58-P4\r\nx-amz-cf-id: bXNd40s4tp2E-R8p95LflgvtA5UhY3Z3HV_lTxOoTvkpE_dPX2Jvqg==\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nvary: Accept-Encoding\r\nage: 244548\r\ncontent-length: 36626\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126923,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c19b1b5d91c8d683b1310562d9c4a225","sha1":"4d45dcac5c6a88e10052f4e356b2170c20413441","sha256":"bb5779145f1ebdcdee053876a4ed060174dda4656978972304c79ddd5f36dac4","sha512":"3a4e8d2e8f5d9a3b45c08ce99374c149a5b67d04d016edfe6259dfbbba948a049301c0cfa5f9bf334cb93b9b4a3558cffa725c166a943c90834c8d2237a1a21c","ssdeep":"1536:Ask/3qTBpVX0Ib6vhb2pJkuppl5METErM2jnpkDtoT1JaM18PIQunrr9gltn2BE/:IqBfX046vhb2pKMQt1Jawi697w","tlshash":"4ec329deb397b033539355a980bb0101b73a6a19300d4464f62ad9ea3c7d847a277fbd","first_seen":"2025-08-09T06:39:58.991299Z","last_seen":"2026-03-24T13:49:06.781634Z","times_seen":48,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/locales/ru.png","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/locales/ru.png HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=e93HT2VZxX7P1rAn; __ddg10_=1756449999; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wCySDrhz9dQ5WMyx; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 881\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"68b05e9e-371\"\r\nage: 4335\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":881,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"5b388e83adf41a4fc264e5f31af4ba2c","sha1":"d1baf6207b71fee26681803f534cd6af7c5fa379","sha256":"2b9d3c1f709b46aecdc68c684a3095d535e67a9333a180b0b8a71499c6297356","sha512":"5a862da94fe837e8131d94e7629e99fafd4769a049a632f2d975c8af352858d488932118c6b4b4c45f80f06d64b02f7b1847e2d6438be358f6d71ac6411a08e9","ssdeep":"","tlshash":"5a1123a3855eca2ce4577b3c46eb92427c4e60261e562999f418cef92c560543046771","first_seen":"2025-08-09T06:39:58.929564Z","last_seen":"2026-06-06T23:27:45.150726Z","times_seen":113,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Card.Cy-l_ghe.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/Card.Cy-l_ghe.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=6zeVylwwQ2py3ynY; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=loBW2FMDOhyGwXN2; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:00:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-124f\"\r\nage: 2777\r\ncontent-length: 1020\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4687,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4686)","md5":"585b058c48f9aad8effd7f0806526e12","sha1":"b9db46fd5e2fda9309dcebbdc01abe77d5494a63","sha256":"302223b68c6b8059429c88f1d5da5e43910f99fc549cac6eab6bc36e1b273bb9","sha512":"007749c66ff643ef887b6d4f65dcddcab6d4ce7eadd3f3ff4c8388b801b4fe04dc1bee040e1bb3f9846eb33143985506274010929a3eca0131164802a24e14e1","ssdeep":"48:epZelKc4US1z1D31TKjf8hWNoMU60dnfnq+s7jtnWUUnCRUVVEZSVC/gVKi7dV7a:erDMbdhWBj/gixwYRVW","tlshash":"cda1ee1039b83076b5bbe4af6cc21c8f258cba17f573429a9523e464c4af44765f43d9","first_seen":"2025-08-29T06:11:20.789412Z","last_seen":"2025-11-28T02:25:21.126039Z","times_seen":19,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/BNfhnzMP.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/BNfhnzMP.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/NCxdOIYd.js\r\nCookie: __ddg8_=6zeVylwwQ2py3ynY; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=vZVllT8rpHwoTHuT; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-36e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":878,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (520)","md5":"f88d57b3caa3e91d3e87ac938c574c0b","sha1":"4260b40b05b4f541adc30be0b063d17ffc487c1c","sha256":"ae127a6560609b319b33780ada9307e35a80f9ab402099171658b34accaa90b7","sha512":"c237bc82cd92e6ba3d2c2c0a31a32f5a723caa5b5b45a11e52a3d41f170e3591383241b1028474f76bdf0f110acaa0afee3d555ac018b148ff1c0ca9b6aa2fc1","ssdeep":"","tlshash":"9911414f3496eefa924ccdfc9d36643815e4ccf972dc1487c10d4966a27510ad19e313","first_seen":"2025-08-29T06:11:20.771853Z","last_seen":"2025-08-29T06:47:39.494184Z","times_seen":2,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/playson.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/playson.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=cdt6ZnXigQJug3ia; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NRT3dhWUDsDKgxvF; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-4b6\"\r\nage: 4332\r\ncontent-length: 604\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5c779d57bcec0fe4d42e108b4f34c15f","sha1":"40e4c6d78d1a92f13deee6ff8291df1a84c2de61","sha256":"6903bea0047248cef50e6c09312dcf1df8f26ef511c10fd4f22bb7c9c7580494","sha512":"51ec89c6412be1df2d784b1368a1797067e248946c29eb545d9914bc3884552ee0a7d9bb1834f4ec7ba1ccafde38ffce918d2dbc04a49d7aff1a52dcb357422b","ssdeep":"","tlshash":"392151ebf39da7d0ed048320c82dd97840a678be7f58a39d43d0ecb2e41a85e1c48c80","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.866029Z","times_seen":70,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/habanero.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/habanero.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=inKiPFJTAK6uCKv0; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=84X6dgjc6an8VVag; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:34 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-1150\"\r\nage: 4328\r\ncontent-length: 1425\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4432,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ddad478ea5ebbdb655251c9c30837098","sha1":"7cde431a9cae5937b46ba7ef2824b71cc52925e8","sha256":"eec76f6c2dd79a72c753dc39a8214f7e6764fd896864f55b29f4a025e9a2ad56","sha512":"92b6cfc0fc40759f23cf2cc638c1748b86bc0d0875ebbcf5aca8d6aaa251f26974299a3a441467bae902fa9e53d269a85cd9c3977a313f5378b7c95c55df6ba8","ssdeep":"96:/VStVZWkO1J3+PbBjdAs8YhsliWaDn3RYKohMLn4t+tdqlG:/gtVZuJw6s82stE3RYiLnFgQ","tlshash":"f69155fbe6d888e2e287c7f8c644987871fa24fe7a52c2da41e07e9e25300dd054c9d1","first_seen":"2023-10-28T21:30:08Z","last_seen":"2026-04-15T02:03:05.906679Z","times_seen":69,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/netgame.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/netgame.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=inKiPFJTAK6uCKv0; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=BFxK8yrFUbg3Vwgh; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-b73\"\r\nage: 4331\r\ncontent-length: 891\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2931,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6cdfc6dc5429074c5e070125e79a44df","sha1":"8acbdbdcd7906d983245bf7170d8d2f151463068","sha256":"c816adc9db1b1195d65773fc5d47a73db0711fa49e38e5ab5c5f4245780f76fd","sha512":"8c365afe7b3d42f9657ffdc0a1c41b6cdd52ef50c28a26668a8435b541b2ba3ec2e0a2015be92b412ec82f67106df75ec0110555ccf72ed00c6a98a7464f4d66","ssdeep":"","tlshash":"865142da734cc6e1bd80e3628b5bf839202321f4771741906b620aa56cd965f1c6eed6","first_seen":"2023-10-28T21:30:08Z","last_seen":"2026-04-15T02:03:05.843681Z","times_seen":68,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/2sJvksnKlEApLvJt2btz_q7n/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /recaptcha/releases/2sJvksnKlEApLvJt2btz_q7n/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 343013\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 25 Aug 2025 23:14:30 GMT\r\nexpires: Tue, 25 Aug 2026 23:14:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 25 Aug 2025 02:00:16 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 286328\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":805772,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (563)","md5":"4b479261fc082f106d6cb4ae5e046cf6","sha1":"613fca57695fb0e855f080c5c8b87ecdb93f1f64","sha256":"42ad1edb9cc9961376a5b1d68cbbdf2b12eb559d8160b8efb1b3d7922c09fae7","sha512":"23e6289f7638329405d67d5330144af0fe135df723b37ddd91fbd183e5b0b7c67049fd4066511741e9de36d379324b148683b01e82f7cc5fedf48f885defd977","ssdeep":"6144:Amxhk9KLY1IVrSa7yPgZmaw2u/1CrC3YEtkaHuJZmh1g/gdwO6tM0s0xjLL6RGyp:DgC7rCaQIKYEtkOuy4aI00hefh","tlshash":"8a0527d9784638e55312b9f34427555ea3be9424de8c088eb198c9f02ff9809347aef7","first_seen":"2025-08-28T06:53:52.841247Z","last_seen":"2026-04-14T23:51:08.211631Z","times_seen":4271,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/ext/api-amplitude/2/httpapi","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"POST /ext/api-amplitude/2/httpapi HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwda74x.life/\r\nContent-Type: application/json\r\nContent-Length: 682\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=IfHJm3V7dtWsoPhO; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8fJcKG5Pyo2CjHPf; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15768000\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d04c7b166b66f9861f69b8fa62c3baf6","sha1":"152d900b83d0d66095476a3a2d1da4278d120241","sha256":"1e33d15cd861bbd8001a85aea96b95e1e88d44b32626772afc708891cd7be6fc","sha512":"a6cca057cfce9bb7f9d25e2c5f14a325895041461ddb8bc871dbb9d8afbdd6231d530ea8287f50aabfe10a5c17d20ece0f8fa7b134c116dc593aed2816ec8be6","ssdeep":"","tlshash":"35b012034844c5541701000d1f8749d2e235201570000090db200f3750c22282047c45","first_seen":"2025-08-29T06:47:39.496644Z","last_seen":"2025-08-29T06:47:39.496644Z","times_seen":1,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/4aXjxUSr0xApdu9RQKawYIQdWBDywFZvdvzAY5rG.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /banners/4aXjxUSr0xApdu9RQKawYIQdWBDywFZvdvzAY5rG.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/webp\r\nContent-Length: 90310\r\nConnection: keep-alive\r\nlast-modified: Tue, 08 Apr 2025 10:07:29 GMT\r\nx-rgw-object-type: Normal\r\netag: \"fca035075eba496e0083ea0c08e2fcfc\"\r\nx-amz-request-id: tx000001994005420f3b1d0-006867c79b-162d5ff72-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fca035075eba496e0083ea0c08e2fcfc","sha1":"a26a10cf916f8055e48fde5e8ec4d20618ed7ae5","sha256":"5113740d240d322b2adad91042190fae6801e53f236a54f87c7f3ddd5f6de155","sha512":"c7e2020d3f95c3257161eccc926c0fd2cc6abac7f3794c161c41d45c3d71cb5b189db524a9a5521e0e4bcbc625124624186df9e7c8e99b8ff8639e621c1c6525","ssdeep":"1536:+Tvb49+fTx8BMpjDLFOHwyYOPKfKCfobjO88BYfSbCfluldY7CUZtdQ0m2OqlN:+Tvby+fl8O1qmOPcKIEO8fp4zUZXf/Og","tlshash":"3a9302f2db0e20d09354dab3a6762244342b5ca6e7f36ee1211a86c1d75fe84370ae13","first_seen":"2025-08-09T06:39:59.108778Z","last_seen":"2025-11-28T02:25:21.188333Z","times_seen":22,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":274,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/highRollers","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"GET /games/casino/highRollers HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Q4cpre8OxHABVdAu; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg1_=2gxNErknPEFT71y7MGj3; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 82\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: d33fd354-1a86-4435-9207-b8f13c882b4a\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1573,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"55608277655f363a4403e94da4554b38","sha1":"a012aa2bee973d9377bb0368abbcf80daac045ce","sha256":"67c7d2791c98653fd43ee10349b9099a34546b5d401f0996879f7e7f50c9039b","sha512":"ab1073685b260f65fb2525d8407af18b66db575129d28bbd900b5937d9f1afbaae59fd1e3fdab277d52609be472f46a5220678dd4479c4a090e5a0cf0125a4f0","ssdeep":"","tlshash":"d231accbb7990c9ce41505a44f1f7ae690cc782b23458e9258dbcd35c2458eb745193b","first_seen":"2025-08-29T06:47:39.498151Z","last_seen":"2025-08-29T06:47:39.498151Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/d8f118e9bfd01ace4f417a8adf3c72845788a658.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/PragmaticPlay/d8f118e9bfd01ace4f417a8adf3c72845788a658.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 21161\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"4e6f71a1dc12f9edd4678a6908361bda\"\r\nlast-modified: Mon, 06 Jan 2025 19:16:33 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18502797A60490B8\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 4133\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2Fn%2FgrmwqZsFio9kauM%2Bd0kbvXnxlHN86rw5ux%2B1brdG3JOj2nXnOlWF9m3yScDKk1nh9h%2FCX0OCXIkDXuOr1G3jO55h7m3u0eMNdD2B\"}]}\r\nCF-RAY: 9769d584c9033129-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21161,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"4e6f71a1dc12f9edd4678a6908361bda","sha1":"b13e37da6fa29810d5ba2b19480453497ccc3756","sha256":"b57968514a26ecf5aa665e277f0ea32bb174afa50b69f91ba75f9e6c19a64de7","sha512":"4d849dd4a7e17de9d4d86fd17b5d845c07625d0ddb02f2ec837bbae49d5b96cf26e8c724d0a16fa96d45705648f3508542d414f09049c2cd80107586bcf2d2c5","ssdeep":"384:3JDdAl4YanhoJhAn+SLERbPQ1i8o4M+SOVID:3JDel4Yan+jtmihP+36","tlshash":"1692e1778c5ef8b56186312b437ceb404eb8939ebd054e236e17f29e6f159a3035250e","first_seen":"2025-03-21T05:40:08.950924Z","last_seen":"2026-06-26T01:47:52.323076Z","times_seen":43,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":254,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/6e514731d448e9ce4bbec08ee14d054fa5570d54.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/6e514731d448e9ce4bbec08ee14d054fa5570d54.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 34843\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1850339770E170A7\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 5880\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XIG%2BOfeKy5q5Uzj6BzfBhhMZ6lgZO836aIvNLu%2Fp1CmrhyNubcQiR3P5QS4dsQPGsWle%2BX1PAKOaoCpcDoXP9qX6jC0jBvp2umKs%2FL7v\"}]}\r\nCF-RAY: 9769b88e3a71c716-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34843,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"f117aaf99d021bfe3e9d0dcffda4c951","sha1":"f16e5517be14af6acd42e8e785fe79042ef48ef4","sha256":"1d2a69fc0a3ab77d23d7f8562202a6335452bd2a7fed0378a9c9a6cde83da128","sha512":"50793ceb68f77357d9a033a5362de16312edcf52f18d584ca2b7307dd8f5b6e8dc4f8d81b483195b77c2e71614323711e91762ff2a01709c65a104c09945ffc2","ssdeep":"768:ZElR1K7AUNgBLHLPGFtb1vAEwIebo82WgMLew91Qpfx8V:GSjNuLP4HA7jJLew9kfaV","tlshash":"57f20143e0993f7d7ea0b0e9620b1198208e1abdb5494b5cfd7b4c2e49a5cb7c07c2d2","first_seen":"2023-05-21T11:43:22Z","last_seen":"2025-11-17T07:15:25.452965Z","times_seen":47,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":300,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/espressogames.png","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/espressogames.png HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=UOPL4t4fdtmhNmxO; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.120; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WrtwVQJ7qQj3wQLI; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1296\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"68b05e9e-510\"\r\nage: 4326\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1296,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"3ace5819ac2b5d62bdd1309abd1b08cb","sha1":"b526fbb6a5bc94360fdb050ff616ca21742a4886","sha256":"403267a769888d0d63629e2a4a14bb29039ccd3f5e30dbb3d4c3ab3053388a8e","sha512":"fe228a67da3efe86aa772937c1eb34232958bb3b3e0fb4a6144ca51e07ad1b3f3669aca53aa1aabd725096a265698c5dfa48cc51b95c677cfaf3326d53e709c9","ssdeep":"","tlshash":"7221c85fe386dd0cffcc67998fe00470cf53a0734b4a9d0ab4886819a9c21976de6362","first_seen":"2025-08-09T06:39:58.926279Z","last_seen":"2026-04-15T02:03:05.965677Z","times_seen":62,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/tp/header-tp-en.png","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/tp/header-tp-en.png HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=6YvkMlxLrJG1Kuij; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=kv2RLpMd1jIVpPwa; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 4100\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: \"68b05e9e-1004\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 80, 8-bit colormap, non-interlaced","md5":"9984919a7ae4558c9b93a3e95e4d9e4d","sha1":"e511b73c533f649ce720ec8ea97c3a18ec58a29d","sha256":"77bf06a496064b8cfb7fd716c2abf4afaedee4c17e6c28d446a2ee6ab515cb16","sha512":"1c4ef457055489ecdc7832d0894adf6409492b59131d96f0b17ff3d1a799f22fbf23147054d64ac8cc55244d45b0be99f7691792ffad58897932818138ca75e8","ssdeep":"96:oEg9OzjOTFQiWpgoREKWT1uXWKqkD2EAvBJGagMf9CXq+V:3jOFQiSnRZM1+WKqCl6Gag+cXNV","tlshash":"44815ded0f971dddb730ad58526c00f1a52c2082b9b8fcf534a8f1ba7d2b22815d519b","first_seen":"2023-05-21T11:43:22Z","last_seen":"2025-10-14T04:24:50.196148Z","times_seen":37,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/currentGames","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"GET /games/casino/currentGames HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7uE0QxL72u1hRi38; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg10_=1756449999; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg1_=2bMjNIgcBONmxPhos0Gn; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:39 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:39 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 84\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 14d8112e-5dd4-42cb-9ced-d160b06a9a9a\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1507,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3767d1c2b4bd910247f07c2b39e030a2","sha1":"5e4af299122890c3c408a9b4fa19e6d73b4fddb1","sha256":"4172b7da39ecf6da791a8618d45dd4b5977b6c0577aeaa8e26ca3300484d9da3","sha512":"9b37a8c2ae296fabb41a6d5e09da3db958f401839beddf43604c781cf3348a2bb633b617c0c0fea0f59b67cf66ae7f3cf9dac122073fa9f5348351455398e76d","ssdeep":"","tlshash":"633103cab7a90c9dc44916704f0737f5948c392b124a8e826ddbcc35c2805ff754063a","first_seen":"2025-08-29T06:47:39.500911Z","last_seen":"2025-08-29T06:47:39.500911Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/Thunderkick/6c5d6ed228284023871c3eb969d1dcc1.jpg","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/Thunderkick/6c5d6ed228284023871c3eb969d1dcc1.jpg HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 30211\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"867fe6fb6e0fe91b39275722eb1f5aab\"\r\nlast-modified: Thu, 21 Aug 2025 09:35:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 185FBB8158E17425\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 238\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r24IRFDVJBLocA8eURRdT5QDrx06lo8JCOQj%2B3l%2FOBYMYAyeqFRUm1SD72o6YuFe%2BH1g3SCm0McAmMwyXEcYe8%2FenKxpqwYt%2Fat90u6t\"}]}\r\nCF-RAY: 9768e886c9ba0b88-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30211,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 287x193, components 3","md5":"867fe6fb6e0fe91b39275722eb1f5aab","sha1":"619ef84412afae64b9cf4316b5228b3cff86ebd1","sha256":"c877a194ebf3910899ca52b842b9aa4163d842e61c1baa62f1fb983a67ac9586","sha512":"d1517d2ad9c80554c5d0b245364883bf378dc4b6053486013b20c900a9077c555e38c498a367374b5a1d4a66a763fb4d22c2bc1653cfba16a8c82f612bdca38e","ssdeep":"768:xv/XiNHekwuimTAIjwBa6UiHeKLP7prgULobMT9p:hXiNbw1cpjwE6eKnBq4","tlshash":"9cd2f149eaafdb81e4bc3976dcec1669837ecd458b23c811ff800e62a0c52e54979255","first_seen":"2025-08-29T06:11:20.74346Z","last_seen":"2025-08-29T06:47:39.502124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":254,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Button.DTPpyI1-.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/Button.DTPpyI1-.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=6zeVylwwQ2py3ynY; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1RzFpFPHOaqNWuS9; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:00:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-138\"\r\nage: 2776\r\ncontent-length: 174\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":312,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (311)","md5":"ecb5497c9d606aaba293842f9e63c4ac","sha1":"9cf5b1183d17892eff339197955134eb5967d322","sha256":"c2df52a8abdfa5e9d3546c8212b79113166c3e151ffbe2c872fec1d172939fcc","sha512":"d99d5c45bfffe0cdb84c2e92e49d34035e0adf02f955a72bbe879ca0944120c25bd0cf7f2556917a6f9d804fc702d4f7fca5cacb93a332800cd4fb23c2ca7521","ssdeep":"","tlshash":"b5e0cdb1ebc8734a3737d084b445034156635b779071364d69d173f599db452332f1a3","first_seen":"2024-05-07T05:57:01Z","last_seen":"2025-11-28T02:25:21.328929Z","times_seen":31,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/blueprint.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/blueprint.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=inKiPFJTAK6uCKv0; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=hrf9jD09lW9vDbQa; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-1ac1\"\r\nage: 4330\r\ncontent-length: 2682\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6849,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"799a505a45ff7b99c4662d5de8e0e143","sha1":"a8133ce38ca74f81200a3764f4b5c86142304a73","sha256":"9633c2f351c615d520abc9db32b6123c98ccf00a0039700d62468ee45ee0a386","sha512":"4ba877b7ab2501c21d3c1ef383e2db99dcf4209c73d0f2f2754b79d823ccd05c21d1421558884b2037d96ec41c0569d643a260961d0e33c1092de8a03558085d","ssdeep":"192:cyxK+91V6I2jzn57EEr4k0Bj65ntvYXxuz:c091V6/pAdk0BHxq","tlshash":"75e151ed77dca2e0b109b7e4ca2ba874362734f63a72d90d43ea7d14862151e48ddcc9","first_seen":"2023-05-21T16:42:19Z","last_seen":"2026-04-15T02:03:05.894519Z","times_seen":68,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-29T06:46:33.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=G0qIZLgyUuq5m7Wb; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:33 GMT\n__ddg10_=1756449993; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:33 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:33 GMT\n__ddg1_=cRvJUpjE0FgG41bzYXyy; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:33 GMT\ni18n_redirected=en; Path=/; Expires=Sat, 29 Aug 2026 06:46:33 GMT; SameSite=Lax\nuserVersion=45.10.240.22; Max-Age=86400; Path=/\nuserBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; Max-Age=86400; Path=/\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:34 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Nuxt\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":380314,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65068)","md5":"6f7a644c8615ca2952ba1a63c8a19ace","sha1":"fdf09dedd52991be328aac046ff3ce1e6d6d6fb4","sha256":"79dbbec1495dafb3b08a90425eef2d0fd21b835eca8b62e903e1e4180ab5ba6b","sha512":"1070bea1e17272ea426df6cec05588ae111709adddc0cab031c91c120fc5399a8dc43a909af9b3cde0feb1fafaa39314be65fbf98cfd81b285fad575d3c97862","ssdeep":"3072:uJYXSbqAfuybg1s705YOwfwONtsEb2FRRZXd:EbqAfB705YOwo4tsEb2FRTt","tlshash":"b384d5c32535382e615fd457f5a1ee94f434a816e31367ebf0e62a25cbc2d8a1273938","first_seen":"2025-08-29T06:47:39.504087Z","last_seen":"2025-08-29T06:47:39.504087Z","times_seen":1,"resource_available":false,"data":null}},"time_used":695,"timings":{"blocked":223,"dns":128,"connect":20,"send":0,"wait":250,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/ext/google/recaptcha/api.js?render=explicit","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /ext/google/recaptcha/api.js?render=explicit HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=yUhfokZX8Bcw0Oi8; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HTslskyknRgbDwxh; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: br\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: private, max-age=300, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Fri, 29 Aug 2025 06:46:37 GMT, 0\r\nservice-worker-allowed: off\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1019,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1019), with no line terminators","md5":"c5db423a2f4c68bcba596f83637d60b2","sha1":"e9502d29cc43675e82eba0701a0b72c1b4ed40bd","sha256":"b883a10103dc757540db87991251dc3d741d071de63d58e0428f36251a46de4a","sha512":"1c7e1e8472e778b692a63d8a2da081e78fe3973813e9805552ceae38b3fb85e2588569b2a4500c84632f21bb2e264f227f23ce660968f588baf42b4ff2cb1d6e","ssdeep":"","tlshash":"731102771b14a0394b7209e5e2ffd772e491701cf06845e8a505dad81e6accbce05589","first_seen":"2025-08-28T11:21:24.455189Z","last_seen":"2025-09-04T14:54:14.240046Z","times_seen":88,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/vip/mainPage/bg.webp","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/vip/mainPage/bg.webp HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/Home.CBZvEtgP.css\r\nCookie: __ddg8_=RhxID2JCNxjR8DSX; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=3KeAnu5X2FKyg57p; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45556\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"68b05e9e-b1f4\"\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":45556,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e39774d542e18edf4cfa36d04cac809a","sha1":"1861275d48a7be8ed8e03c06490ee02bde83b69a","sha256":"82c6d25a57ecbc14b8e3a4fff7bb25120f682501ed9b6e82a914e83952ab2429","sha512":"5055dc2080e22142fd134adcd8fd334b4c6b5b36e859afbbf49b43a680fec8abb711339dda4c1d44386f0e2b8aefb1ebe7a05df04f030117acbc9836e8c3c771","ssdeep":"768:YwAhH15qKerR/sXK+oRPl955n7wKiV3tfidYKNt6jb5mUbFuQgyTvmWAZwO4vRf:HALUcXEnrxwKkfihD63zMyKWAeO4v1","tlshash":"a313e0c05342605ebf48a97e7fdf0096443a6dc417ba80f299638b157fb3934ba71a78","first_seen":"2025-08-09T06:39:58.842762Z","last_seen":"2026-04-06T22:48:49.739794Z","times_seen":58,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/icons.CBEgwkkS.woff2?v=1629439516391","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/icons.CBEgwkkS.woff2?v=1629439516391 HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=sgfJXyMo4SWTTplS; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=vuTe50dcgnjBX3tB; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 9324\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: \"68b05e9e-246c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":9324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9324, version 1.0","md5":"fda09e7500d3a2867129d2ed80c57583","sha1":"d871428e4c47c45f3cd7232c489442943ed079ac","sha256":"fae8a414803516ee3ce7076358411be3ab4fdf1f68c8b9dee7e76802bd3aefc9","sha512":"94bae208ea5a0b8b9a6c04bd845247c59503852b42c32fa1a8e5833859dd963d3a1b26da5d3362babb5185206de0c05380fb3be080229284555f2e81d9f96485","ssdeep":"192:XlV9RVDfOg6KUzP++NzEsfO/aL+rNHxUQqj/qzT5SlrDuZYoh0:VV9RhfZ6DzP++tEsW/G+rNHxUQq2RAmW","tlshash":"8112cfbfb53be2a1e0f27d78141adb5259df317842fd0b781006313567f4b65a042532","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-06-26T20:23:29.819246Z","times_seen":134,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/highRollers","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"OPTIONS /games/casino/highRollers HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=D5ss1tg1matuvi6T; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg1_=56QWXGNAtBn6CgpokXnW; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:39 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 9b35afcd-cdc7-46a4-ad4a-c0dccbedfe82\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/vivogaming.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/vivogaming.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=inKiPFJTAK6uCKv0; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=dxIIbRbcQN2HdMWl; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-3fb0\"\r\nage: 4329\r\ncontent-length: 3662\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16304,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d628100fa5d779e3b9bc129fa62172da","sha1":"f608ca7e628bb6851ce103666626b8dbeee8bd77","sha256":"3f26c9bcd48d8ed603f734858a6dcc490927aa3991bc5b2d5de26fb9bb82b632","sha512":"60c2da3dda597931491baedee8dc8d8ad2762e395f0e026ae3bbcfad216a1f0cefb951e36a372eff6396689f571c13e5221eb99ff94ac1ac7c8309d099d8887a","ssdeep":"384:sug5o71gg1u/CzY+xMQD2VOUWX/yUA3egn+1umMoHP:RLT1u/CzxxMwgOUgqUZg+1umXv","tlshash":"69724298f3e6f2a0e505f7f417299d79bf6a2cb63c23c96c0bfa0d94ea6251d4054843","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.873938Z","times_seen":80,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DBu44nVO.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/DBu44nVO.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/NCxdOIYd.js\r\nCookie: __ddg8_=xlLVd85mOc11E7BM; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.120; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MT9DVj7vZo8mLPWS; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-bcc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3020,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3019)","md5":"c91da3cf7398aceb8b81dfedf471ecb0","sha1":"6b29cf8678eef8e3842b8060c2598d6f2f98a3e1","sha256":"b6c19eda596a7d266379039b42fd963977a949e6b204c867a7c1a6371321b245","sha512":"3ffba0a885d5041fcf6e0540e10ad27b02b01e623aae613359af8c366444b6b402391f1d464dd75786474d8ddf53f10c35bb54a25b28f40e73ae89b5eca4b2b4","ssdeep":"","tlshash":"8751b70db0359879713cac9ae6bb1357232535c27db4c0e0a11ead277b099c3d2537a1","first_seen":"2025-08-29T06:11:21.000884Z","last_seen":"2025-08-29T06:47:39.507956Z","times_seen":2,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/loading.gif","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/loading.gif HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=xWECXm6bxbiSraHE; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=esoGAGOiOzFu0162; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:34 GMT\r\ncontent-type: image/gif\r\ncontent-length: 11144\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nddg-cache-status: HIT,HIT\r\netag: \"68b05e9e-2b88\"\r\nage: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11144,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 64 x 64","md5":"e4d96bb51227829e536412e5392bdf74","sha1":"8bf350e63f7bc86615cdccc6d16e0c8abb00584a","sha256":"d2911698581f2b0f538c0d770d1b677ecad7b9e61e99d89d1f218f9dae6c31cd","sha512":"a580b7ee3f1a213a523cc8ac69662809cd21bf0952aa2767ea1c3a8ddf934a3a34c4c578d34525d54ab027915aa9097894545713f135126bb8cf7f280b8ab0e6","ssdeep":"192:Yx1zq53A3H8YLSfEdDNsS+4tygrQFFpslGsTg1z4cWl:MH38WdDNk4Ygkrmwj5Wl","tlshash":"5a326d2c1ca447e6e927463165dba2cb8811df2d226c18d39eac347fb95b23ee0dcd10","first_seen":"2024-12-10T17:19:34.10667Z","last_seen":"2026-01-21T08:18:56.850207Z","times_seen":57,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/BT7fzLUn.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/BT7fzLUn.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/CUsHs50J.js\r\nCookie: __ddg8_=0syTqpe6bxr3hMGe; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Ku2LdcPrHMM5UcKG; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-687\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 929\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1671,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1670)","md5":"e35ce0891f6ffeb038c10c49112260df","sha1":"cf1548169bedf10bb8436715cf37c49f87535396","sha256":"2afbdd0e99eab329019e7f9bbe2bdc7dbcfff1dd6628db73f9213f63aef4323d","sha512":"cf5279ddb04d8a6fb61361b0f5eb25f94a21e8cffa5d3c1109e50d01aaa318962e65ebe30b11bee0e9281cedf7c89599013cdd67f24c999721fcb6b768f68014","ssdeep":"","tlshash":"613141c9f29ce4b7d0e7d7e88472843076d875fb3f98dbd4828099711623096ba4ead0","first_seen":"2025-08-29T06:11:20.795314Z","last_seen":"2025-08-29T06:47:39.509068Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/highRollers","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"GET /games/casino/highRollers HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=uQN5mvVETptSm2g8; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg10_=1756449999; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg1_=7oNm6IESlNRU8R9MbBbh; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:39 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:39 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 85\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 091cdb4b-a2cf-41b1-ba69-26a4009cfbd7\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1573,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"55608277655f363a4403e94da4554b38","sha1":"a012aa2bee973d9377bb0368abbcf80daac045ce","sha256":"67c7d2791c98653fd43ee10349b9099a34546b5d401f0996879f7e7f50c9039b","sha512":"ab1073685b260f65fb2525d8407af18b66db575129d28bbd900b5937d9f1afbaae59fd1e3fdab277d52609be472f46a5220678dd4479c4a090e5a0cf0125a4f0","ssdeep":"","tlshash":"d231accbb7990c9ce41505a44f1f7ae690cc782b23458e9258dbcd35c2458eb745193b","first_seen":"2025-08-29T06:47:39.498151Z","last_seen":"2025-08-29T06:47:39.498151Z","times_seen":1,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/BbYtGCksAYQdPJDTYQPLx1j8uWvvJOxnyALsBpxD.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /banners/BbYtGCksAYQdPJDTYQPLx1j8uWvvJOxnyALsBpxD.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/webp\r\nContent-Length: 236410\r\nConnection: keep-alive\r\nlast-modified: Tue, 15 Apr 2025 08:15:38 GMT\r\nx-rgw-object-type: Normal\r\netag: \"4581a5b7a04b0bec7b14d35c4c76041c\"\r\nx-amz-request-id: tx00000a06a204aad3626c4-006879fd22-1676fdcbe-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":236410,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4581a5b7a04b0bec7b14d35c4c76041c","sha1":"c0f3acef33f99bea6a0d7ac7a9868c3faf898591","sha256":"3a05178963c1df632070122b540eec32c0051b292ad9a71483e9532f37598e17","sha512":"27ab914c3d8996a84a4607a197eeebadb525c6b1bd171bd980735ebeb0c28d48c44f6219f3480d80d259d9964a102783cac37cef53bf08a7dcdf185c4666f239","ssdeep":"6144:/6fOXPxV6UtWbQ0abtjvu7MhYP5zjfH1JO6YBHPwHRdF:6cxbkbQ9g6YP5jq6YBHIHRdF","tlshash":"ef34235a0d9aeb5f53c81aa40983d6088b100a5c3d7db32b8f7a385dbd3fa548f535c2","first_seen":"2025-08-09T06:39:59.095877Z","last_seen":"2026-03-01T21:47:53.30129Z","times_seen":32,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":165,"dns":97,"connect":30,"send":0,"wait":60,"receive":95,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/lastBets","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"GET /games/casino/lastBets HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ypbjWK4h0HOyfBdW; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg1_=e6GJcCVWEbuImX6R9MQp; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 78\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: edb4b173-491e-49a2-89c2-db7444a88613\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1449,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"01111b61f920268d2bfbb0f90883323f","sha1":"fdf8ecbd2f8827985bc347cf71ed0fb4d8d2403f","sha256":"460a0ec28e79d6f26cab1d2c870754c5ed95b0dea5f03fefda07bea6af4ce578","sha512":"bad30cace5bcc4ea462aca2cd675a903a1b0d5f82532e0fe3056527a515d3702baeb8f18813d702430532744d7bc1d028222fdbad0812a33f87128fa9b37ae9b","ssdeep":"","tlshash":"2b319ed676ae1cdce59406740f5f3fe274cc2a2b228a4dd258cbdc6786809e7a481633","first_seen":"2025-08-29T06:47:39.510317Z","last_seen":"2025-08-29T06:47:39.510317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/b533e8ba711eb7fef8a694ee73ae082c.png/oJhKImNnZQfq6mQkjasFuYjsLbEswG3G8hLW2amH.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /casino/games/b533e8ba711eb7fef8a694ee73ae082c.png/oJhKImNnZQfq6mQkjasFuYjsLbEswG3G8hLW2amH.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 462515\r\nConnection: keep-alive\r\nlast-modified: Wed, 16 Jul 2025 13:29:18 GMT\r\nx-rgw-object-type: Normal\r\netag: \"9cf315bcb928defe08150287b604caf0\"\r\nx-amz-request-id: tx00000c1c8b2a9b773b8c1-006877a92f-166dc57f4-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":462515,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"9cf315bcb928defe08150287b604caf0","sha1":"c51742d98ea2a05a8b9c634021d5650e560877fc","sha256":"4cdd3151236420f31ca996641d610792403d7a5a1806b485a667bdaafe581998","sha512":"9abcb8236e87b046159b7a614be94bd4a1c8bfc4f39f4c26c41eaa9892c0bc2162a73528753edcf84c9bf8264b264f1481f07c62f9cc96d2fcff80e939e6cb9f","ssdeep":"12288:rKLvq/4MM4/qRSBlPeX9FRXIpg90btSdFgJczWQVPry:rMqwMMAqSBRCqtcccjBry","tlshash":"68a4235930bf813aa5f29e60a3e635f312a6091eff5346c42c7ecc647b6d1a14c846b3","first_seen":"2025-03-21T05:40:09.027316Z","last_seen":"2026-03-01T21:47:53.268796Z","times_seen":40,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DA4lr7nW.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:43.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/DA4lr7nW.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/NCxdOIYd.js\r\nCookie: __ddg8_=qT3vy5i071PSJFc8; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.120; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=u5It0nMKmfGhkttG; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:43 GMT\n__ddg10_=1756450003; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:43 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:43 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-1ca3\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":7331,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (7330)","md5":"67a9a31fdcbe4f728b765484f4e75e88","sha1":"f32e6dc60d0c9338e51cf5596ef0e87c6e2d41aa","sha256":"c294f4ef44c32bf7a6f96ee1474a6c25ae4126964a71ed1850b85e59cd471987","sha512":"b3dab9de5f63c9ff8acf6ab04bbe7eae680b2010a8a82d13c59c099b3de79897111fa9499e12b335b9e5c3dfe4e641e1a4759228558458fdb1f952747316cba8","ssdeep":"192:89KRTYqLUn9G2lKeYTPY79cJQXz9v/T2l:8IRQ9hYDZJQB/q","tlshash":"54e1b99adc529d38fcb71bd01cee411439392fba95c2cc5166fc9e24de049e09e296dc","first_seen":"2025-08-29T06:11:21.048556Z","last_seen":"2025-08-29T06:47:39.512979Z","times_seen":2,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/js/pwa-load-event.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /js/pwa-load-event.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=b3QiiyGjRVwkXNGT; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=tCqRDHrlGtvydAsV; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-177\"\r\nage: 4351\r\ncontent-length: 164\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":375,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"f463b05f25296c1e185cc82087291f6e","sha1":"d15dfa009eaeeaaf36af83b20ace25714adbc583","sha256":"3f5bcf295bac81715b4413d640843ee19600f6a17c96503038c6a4193c331865","sha512":"5ecd0baa189383e24afadcbe391266fac63cdcdcb7da68ab1371168fae81f05f0140b4dcd86bc4cc59f4ebb3f5949e94b302f05de00942886fe3060436ae03bc","ssdeep":"","tlshash":"64e02b7483fc55b808e182b75f47bb15116721a77068d990c1871906f8d148780a2fd2","first_seen":"2024-08-19T15:07:41.99372Z","last_seen":"2026-04-15T02:03:05.836861Z","times_seen":94,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/wYhJkT6X.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/wYhJkT6X.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=iOy2BKuOdWHCetU7; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Yr6F1L120sQnXqzB; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg10_=1756449999; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-200\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 4\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 304\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":512,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (511)","md5":"d57ef091b0eafe796f16f656fadb7a38","sha1":"ba19deb3ef8628bbf604f47b95bc87ba88731808","sha256":"5494c00794faf00f9fa9d56742d11f89639a87f0eaa9a253062e6027608569bd","sha512":"56cc7ec7d11439fdde69eeb0c344ff9b6647b2935d59b9fd44548cbde6cbd683905765e8efc2a571254cf040b06fb48dcac788091ae80260e37e43a5cce7034e","ssdeep":"","tlshash":"d7f09e8d70a3d6b0b736d78dc936ca42e03c1e423c0de5d1d44a56453247481e73d71e","first_seen":"2025-08-29T06:11:20.787584Z","last_seen":"2025-08-29T06:47:39.477182Z","times_seen":3,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/3ed8f052e200ffacc81df5daabb3dbdd.png/9A9SJ939FvAzBxWJ3u77f6zz6kK0TZDXB22GoeYs.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /casino/games/3ed8f052e200ffacc81df5daabb3dbdd.png/9A9SJ939FvAzBxWJ3u77f6zz6kK0TZDXB22GoeYs.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 389413\r\nConnection: keep-alive\r\nlast-modified: Fri, 08 Aug 2025 11:28:28 GMT\r\nx-rgw-object-type: Normal\r\netag: \"dfc1e7cde485f39ed62bed099577fb92\"\r\nx-amz-request-id: tx0000032403d2265db0a50-006895df5d-16cc5ab24-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":389413,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGB, non-interlaced","md5":"dfc1e7cde485f39ed62bed099577fb92","sha1":"41338b843a96ed339b2f05ddcdab689ef5e55c57","sha256":"eed87c66b015a583b521693cce9debe242b24f10c32046be5f71396a299b5482","sha512":"aa4b17917d4f78f805a0245896cf636bd69f46ac4928dffe189a5233836737e17aedb853f2cf34597aae19a39e7edf81472de9ecbdaae47f49048b4aefd5ee6d","ssdeep":"6144:P4h49ms1Ac10FBAkSIkFhG6YMwKbAlEauHrX6wi9Dot3tscPRUaY3U:P4ams6TFBtSxo6YMTbsEaI769AdXjYk","tlshash":"528423a8e468ee14482fd80c763655e2f86f12be88cdd89decfdd385cd39b50485c5a2","first_seen":"2025-08-12T21:10:07.71221Z","last_seen":"2026-01-21T08:18:57.02594Z","times_seen":28,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/EFWGUdKZ.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/EFWGUdKZ.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/NCxdOIYd.js\r\nCookie: __ddg8_=ezetp6qIStwdLspJ; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8M6IvgZr3RBxEvjK; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-c18d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":49549,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (49510)","md5":"24c0e1a9310d0df9ff5a522caf1669f7","sha1":"d82da0a91928361ad9c4dc07c29a2bb1ba3c170d","sha256":"29efdbde72a6edafa0d39a7c673f1e9429389efcbc3d7135b8c26286ee914bb3","sha512":"61741901b6ca2fc253446f3a0eb0eb36dc0df2b7dfad528ce75102bbce8210b2955f0c11fba828b2b20328d97c529028b0ed77e935d722fd2a6398c973793d3a","ssdeep":"1536:8G5PAN4iB/sSyISjXKaag7OUtpdW9dCLGHtHXHy:RAv/sSytj6an7HLv","tlshash":"cd233aeeb0ace1f5c17387c4989a5420bb1d3ff56a4040d6a1b90d646f6c4b86fbcd68","first_seen":"2025-08-29T06:11:20.961932Z","last_seen":"2025-08-29T06:47:39.518883Z","times_seen":2,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/D-Zb1Yrr.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/D-Zb1Yrr.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/EFWGUdKZ.js\r\nCookie: __ddg8_=BqvzQJOt7QzyX9vo; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=cdt6ZnXigQJug3ia; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-2ec\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":748,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (747)","md5":"7006c838829da09f40a644589401b756","sha1":"07ed2d5634cdb8925443936f594c7141a1b4267a","sha256":"ad51a3976a13a8ec2a15ff5d29d29898141b8433fe56e95532a87d778078ac45","sha512":"a8fba21a55f3579e7bb71e82c0d92faae376058f30fcc0b530b099ea28150e2104b01337fbd069e9216c49306a7dc98adc919fa1e710dabaf5d512c53ac0de59","ssdeep":"","tlshash":"9e01b88e647ba5ec08a57b403cd84ca44b91bfe92a9351c03e2cacc08bd0c86b13803d","first_seen":"2025-08-29T06:11:20.99776Z","last_seen":"2025-08-29T06:47:39.519707Z","times_seen":2,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/BUYlV-qA.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/BUYlV-qA.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/NCxdOIYd.js\r\nCookie: __ddg8_=xiL8JElDEwCK3OCI; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.120; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ZZ1fOwCvmHwqwe8M; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-1c5\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":453,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (452)","md5":"f577aeb297a2235485251d00fea5a040","sha1":"3a20d372186ac79a3b01d96224b2c675890c740a","sha256":"379074dfc879d94eee539e1636e95034339821a8f9a4f3c3cb66b44b96f13be0","sha512":"dc61cbcf33f82d07fa8b2070185e1caa051f84d22f5ebf09d008a9b6bb706fb28a53c16cac105b04030b30fce0c33aea7823523ab9658ed5919b6f906c6dc0d7","ssdeep":"","tlshash":"bff0e51fd99685b89415ccf4e478d230263325daa7dad7e4c2cf0b706310071d489727","first_seen":"2025-08-29T06:11:20.791505Z","last_seen":"2025-08-29T06:47:39.520362Z","times_seen":2,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CjIjlGq-.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/CjIjlGq-.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/KHcq37__.js\r\nCookie: __ddg8_=KaMYqgi6TL6ftZYI; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=IfHJm3V7dtWsoPhO; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-9ce4\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":40164,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"8536f2f542c30c3b37aa68fa9d57f5cb","sha1":"4679e0eb2b374266ccf64bfc73ac98dad5143a1d","sha256":"84a0b743a7ef37e6cd2a2db660b4b5899c3fecce9d1f28502709614fc9d191fa","sha512":"126dd430ac683507fae1c2a1e11c5ff94a9015441798342ca77791fe29709b30c33f8b30ff1b10b1f08b51fac27d016fed4b2f8e724afb82dd8b57c2fbc7fbfd","ssdeep":"768:kC43aMGeQtDCPB/HyzE0qct7yxP2C7dSlSxkPut06BcftOashQWEhQEq/iiB8faZ:760xiywcV64IX","tlshash":"e303f8c8b2a0506583e2a1a390750203f33999153409855cbb2ceefbad7eeda7177f75","first_seen":"2025-08-19T01:32:32.322521Z","last_seen":"2026-04-26T08:04:42.226428Z","times_seen":67,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/sounds/click.mp3","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /sounds/click.mp3 HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=YQbw0ZAPwnSossa8; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ZY9cdPQqPcLVtFbk; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:21 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 6731\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"68b05e9e-1a4b\"\r\nage: 4337\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":6731,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"b497ee5b7f24d5540859a2fe9a2f94a8","sha1":"402f32b8a0c59a6655cee008020948c8b0dc3878","sha256":"627e28dd820dbe208a2d764c086b4eca2c54330b9741073bec9da852aa592962","sha512":"1f0e4fd80c187354ac665cf7e3dc52b8834ef35022c6fe922db3aae0f89f8530c5e97aa2d4860f2351c8fbf05ea2252593d626d12b8f90865b7eca6b6a476ee9","ssdeep":"192:79qf6EhSf0IotHNKWliJRgFn0DsEZM8+h/wgMgl:79qf6ASfCtHtliJ2F6sEZMph/w1gl","tlshash":"cad16d6a6d478951e40c5570d8ce1b4c737824b5afb0b3daa267f79e00e536c12ceb29","first_seen":"2023-04-10T18:19:05Z","last_seen":"2026-06-26T20:23:29.963181Z","times_seen":1246,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/default.Dfe-jFN_.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/default.Dfe-jFN_.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=w6quJRDlnNGY6tom; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Gu5cIgSGnksPSrZH; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-af07\"\r\nage: 4351\r\ncontent-length: 7312\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":44807,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (44806)","md5":"710327a09f66ce88e7d8a5db8b3f6930","sha1":"7929ad34e17cad6082e1ad813cf59ae439047483","sha256":"68f4e9343e37a3ce1d068cad8270feb071d5f5c57fad112eef83e39b46e78d79","sha512":"c98627c8c24586fa9cd3874afdb30ffdd44474b678f06feb1956226f3977eca2b078a26244c454de7cddf0c8891e07c837dc78718c221ee142795e3f0a9d8c6b","ssdeep":"384:G0jdhhDkKSWJ7Hv0DyikxbAv0DyiONt3JnymteZFqy/bZJWrfv6/XL:LpFHvkQ+vkO6PF1z","tlshash":"b8138525761c602cb53bcda2f5d0169e2035f707d5278bbeda683629c9cb2d72b31788","first_seen":"2025-08-29T06:11:20.747417Z","last_seen":"2025-08-29T06:47:39.521441Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/D6irYd3Y.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/D6irYd3Y.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/KHcq37__.js\r\nCookie: __ddg8_=KaMYqgi6TL6ftZYI; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=KJe25QvZCPC2iCto; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-201\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":513,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (512)","md5":"38b6f7d53e3b6e3c9bbe5843b4308467","sha1":"e852a03b58293666a1caf362fdaba7574ac73b43","sha256":"ce4b9fe508eef4269e613247925c0aa75f1f3d914bf92604e8734426633f5185","sha512":"2c15ad38ca8b15d0e9ed46b17dc3277aeebd17cfaa780e962165893b33d3f6d25a561d859739af58e3ee0029a63cbf7c9071560da30e80ce409c11f161bc5759","ssdeep":"","tlshash":"4ef0598b5caa2c941de61e7b9027b1a2337a516e050180c5feb1e6c4a20b69ef32f430","first_seen":"2025-08-29T06:11:20.993061Z","last_seen":"2025-08-29T06:47:39.522075Z","times_seen":2,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/best","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"OPTIONS /games/casino/best HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MUqNU7nnuDr1mpqj; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg1_=ZfeV9IODT4JN2FnrhSkq; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 7b528c52-286c-42cf-833b-d20331e24b76\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/dlv.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/dlv.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=inKiPFJTAK6uCKv0; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PEtXwlWtAVePRhE7; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-9f81\"\r\nage: 4330\r\ncontent-length: 7834\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":40833,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd10397e4cde4d6bfc4e9ba25ff4f3c4","sha1":"ce2eb8e4d28d5e12bdaf25db6320cc00560be2a8","sha256":"d806932121ff74dc7848b1c401bfddeed58a476519d0aa74d475689f17ac383c","sha512":"be0caa33b1518ac871e6e6b0085812d838c7b67b6a7648e56db0cd67cbbb38da7c8adf11fa36c7ae314b837682768b229310afb657395c0698db2e4a5f4ddff2","ssdeep":"384:B1pLXXAlMrUrUcbAD7BuPhJpoMUVecccCcqrDiI3N0/PAW:j1HAlykUcsHEPFUEzTDiI3N0/Pp","tlshash":"f803ac6bf724dc37d28ad3bcd954806432298696adc4c38192f9ff1f992588a3d4e7c1","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.890504Z","times_seen":80,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/pdIiDVyqASxDtfGfxTErzIviM3DgmIAX8vQyhS46.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /banners/pdIiDVyqASxDtfGfxTErzIviM3DgmIAX8vQyhS46.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/webp\r\nContent-Length: 178970\r\nConnection: keep-alive\r\nlast-modified: Wed, 04 Jun 2025 12:06:34 GMT\r\nx-rgw-object-type: Normal\r\netag: \"fcfe060d5331775c9dc4c22c53ff5060\"\r\nx-amz-request-id: tx00000923b379892937d1e-006867c79b-162bc1ae0-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":178970,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2160x960, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fcfe060d5331775c9dc4c22c53ff5060","sha1":"bf293afd26f119c03676565d16892faabe8faac9","sha256":"d2becb49361887a3a5a370c7b500122a54fd21b41f3664614731b9fff553324b","sha512":"3b02033fdedb40583673136a1d365b157235e55c5a070a8c202d43d82f499e8cf8eedc8e09c601d0985217b44eb69bb0d3f970193cae07244fe01470ef644872","ssdeep":"3072:Dl0lW+UYuLItP4oMIHh54nerQSIWcKkheUHfTp11ZsKoEvAZ4lX6vF0GsUJp/zoP:DuWRYsItP4QB5K1SIvKkhZ/300MkqF0v","tlshash":"88041233015ab2c49eeb58fd0cf19a93b47b151f001e354fdeea6d3bb4609a6a1f4819","first_seen":"2025-08-09T06:39:59.004618Z","last_seen":"2025-08-29T06:47:39.523412Z","times_seen":6,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":188,"dns":91,"connect":49,"send":0,"wait":86,"receive":93,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/cryptojs-aes-format.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /cryptojs-aes-format.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=b3QiiyGjRVwkXNGT; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=maaQr1hLsnebPnON; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-5d6\"\r\nage: 4351\r\ncontent-length: 562\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1494,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"e6bc38f77922eaa6f1b23716034b4a2e","sha1":"db781b1e30c4f2a1d63d47054f0903c463cf01ab","sha256":"9ca00bddae85e30d59672da0089ea5e132df97d75a92f42114fe1befbaeaf32d","sha512":"0ad7c00c1564d77f8463dfc81003c0d6cd6ada4e3d01094331f72847f17718e4a6b2c7a2a0bcbd96a1107bc6cb9bcb1721e7b2968ae4544595ab98d39bb30c82","ssdeep":"","tlshash":"163177407debb4c287e8e1d50435a044f67b7a0ab1558ef3aa5aa404ffedf3006326e4","first_seen":"2023-03-07T18:27:54Z","last_seen":"2026-07-26T09:44:04.955028Z","times_seen":716,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/entry.B0BOi0i9.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/entry.B0BOi0i9.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=b3QiiyGjRVwkXNGT; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yft9Ke2CrHJpRvqG; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-1080\"\r\nage: 4351\r\ncontent-length: 751\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4224,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4223)","md5":"61f0bd26cea7d117c5e7c486acc68d00","sha1":"6c8bcb0f1c4f0fb0f07276c5eacd898124ed10df","sha256":"f099b430b92e0f00145cb9382b4a9ae5fd988a1e4f4bfb3043e5a938efc4ee39","sha512":"f9bc1136e2349b7ac1471ec7801d8047312f950e30808796e33dcc45bdf4cc68b709d9a30c6ae3f2cc7371b4d47bd532b8cc59e09569e52f1d9a1b30cb0b91c2","ssdeep":"48:qBK1KVrwxo7yXr29OKJgbKA7cb2XYKBKJKeKbKaeEaSkeEnS0SSSWS8VSfHeEPeG:qxi8yK9RHN4MEBWWXIShv7JRhW4D/qi","tlshash":"4491ff7fb288f6580127ff02a4a15bddf42b23b0b2522a15f2d5523061b67d1bc29d7c","first_seen":"2024-05-30T05:56:49Z","last_seen":"2026-06-10T14:34:42.966261Z","times_seen":189,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CFU304S8.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/CFU304S8.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/CUsHs50J.js\r\nCookie: __ddg8_=0syTqpe6bxr3hMGe; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=VVpeWEzpFYXDsCfD; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-78\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 95\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":120,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"65b0cca89e40818f39fdd7753db6d142","sha1":"24e169a25a2e5e795d2ba4918ad600ab939bc23a","sha256":"261a0d9b3884cb4797de2dd31290199dbcec4f295a6ca9ee2c3b48ab9d9651ce","sha512":"e4c57b7230da955929c01aa05a22c6039a4ab395d6480587e21169106ce56e84aa99238c37d03c5944a72a6c799d55cc072ee59b5e498caf41fd1f6e021b43be","ssdeep":"","tlshash":"53b092d6728a3ce12602b810a15b80b4a131e6240b8a47208026f08739724a48a52e38","first_seen":"2024-12-07T17:14:43.577967Z","last_seen":"2026-07-25T00:01:50.12235Z","times_seen":101,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/common","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"GET /games/casino/common HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=03UMsXamxdge7OqE; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg1_=dg8AK0FEZbeEFYPb3rKY; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 78\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: fc83e2ea-c569-42c6-b34e-1030feec92d9\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":17276,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d46ededaa1c058a66be0a135a6279c52","sha1":"5e564f81aa4a218f6a4cc8a9966ebed89ae335e3","sha256":"5b35c779eb3a34da003c5435dd1c22ac5e93c0630495c3211519ee2377a49204","sha512":"96923842ec8ff0403bd0860653684ee313f5a053b725fe6fb2dcb83d26379d82bd47143b178f6392a619b7a75fed2eb2a89fa1a2a19d4aafc67d7dd16220a6c9","ssdeep":"384:xA9U722OK4EBWpnqGo4T4tvKXmZnoh9XjktDo3sybmHwI0EsBYHaPgWSzxsNfHFY:ghuDgI8SaRU3v","tlshash":"7a72cf2ab884e95629331d70f917bcfaf5fe080fa8846f51dcc54e4858e277f6201ab5","first_seen":"2025-08-29T06:47:39.532003Z","last_seen":"2025-08-29T06:47:39.532003Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1983,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1983,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/index.DghLH_8T.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/index.DghLH_8T.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=6zeVylwwQ2py3ynY; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ezetp6qIStwdLspJ; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:00:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-12db\"\r\nage: 2777\r\ncontent-length: 1224\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4827,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4826)","md5":"e9c8484d14e49d421006fd266ad05a0f","sha1":"06c1d001a3c3ae4ef75cf857057b38192ca7c305","sha256":"d9777077b2d5fdca33bdbe68e95c61f950520737f3600db01e59d24c5884e5de","sha512":"b1cbf2e703c1a52f3b47e50bff600ad94d6c748aff818416ce6efcf1c4435ecd83206ac99dadec41bc30897ca18ee28df17cacf336b0e4da222a95647ba1b2df","ssdeep":"48:VKZlTORiawcVQfud6pKlBpSc4SGq6d3w+u61G1aWezQbtYtLwrysijNtZlCaOLK5:Ey5Od3v3Z8m0nYsq7N","tlshash":"e6a17531330c702878b7c583e9606d85214bbaafd563876ad66031399ddba933f721db","first_seen":"2025-08-09T06:39:59.091465Z","last_seen":"2026-03-01T21:47:53.351507Z","times_seen":34,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CsHVBYhU.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/CsHVBYhU.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/cqkD4Ey_.js\r\nCookie: __ddg8_=Iqo78ubbuwf85s1L; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=BqvzQJOt7QzyX9vo; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-7fe\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2046,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2045)","md5":"ad8a0313f9a2f5c801f6f16534cdd250","sha1":"8abda0a7c17adc697687dc2ca527ec9c187ae558","sha256":"1549fe363c04e09a5a99ab4f9c419ede55cbc25b9f3ab3f4d8fa7f398f08c6fd","sha512":"53ae645d097cb4bd799bbfab8785f5b0ede4a427568d23ec1c8af9edda017fc5101e5149efb2524900fd9d7cec899b4e62b8823480c8ae9ccfc6f3c5681a0eea","ssdeep":"","tlshash":"9b41a38ef1556e3063d3e1f1a0096100875a9f2b34bd84d0b929bbc3022697efccbac1","first_seen":"2025-08-29T06:11:21.042249Z","last_seen":"2025-08-29T06:47:39.534205Z","times_seen":2,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/favicon-16x16.png","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=vtoCl7dkeVrSK6K8; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=nVgB73QuYZYnjTJ7; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 1103\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"68b05e9e-44f\"\r\nage: 4349\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"11f24fdbf91f702bda779fc31cda72b6","sha1":"675c7e4a5d8443b041056cf934a6e2f652914a62","sha256":"22680e0318483689dda6c739ddcada0864dc530300444247c87d8233b347b858","sha512":"56998c6ce69ca75e2c00756450a2c33ed491a5be0499d5003eb3638d643efb5d395705a986df5301f74ffc9c0f10c707b9e7837a491ec7afa55f349240d2087e","ssdeep":"","tlshash":"de1146d1e121e051c26614f169222480ff67407bfeff8b1afd22a4145c5a6b997f76c1","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-06-26T20:23:29.961595Z","times_seen":155,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/locales/en.png","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/locales/en.png HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=e93HT2VZxX7P1rAn; __ddg10_=1756449999; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Kfyt4i8k87QSzVlO; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:38:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 1751\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"68b05e9e-6d7\"\r\nage: 487\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"4cd1cdce1c1f2c0290a2b686aefd5ddf","sha1":"250db2d70a924c49b0ac1c1a3668bc1737267069","sha256":"3d2348697a12ab3e497f215c2920a6f738a058c599429cad719e36adc4eaf61e","sha512":"ec34b4ba528679e4fbbf3a4022ed5127f89186291036d8ebef5c0781353efa89bdbb24cdd006656160a85a7dfcfe000458d7ffbfe4ca2c13e4558189d583b197","ssdeep":"","tlshash":"79311dcfc46897c980e782392ac6d3954a399ce0449bf58698150264370ae57575dd0b","first_seen":"2025-08-09T06:39:58.901689Z","last_seen":"2026-06-26T20:23:29.901851Z","times_seen":108,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Bg7Lp-Me.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/Bg7Lp-Me.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/EFWGUdKZ.js\r\nCookie: __ddg8_=BqvzQJOt7QzyX9vo; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Nt8zVp0n6GNpDT1e; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-206a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8298,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (8296)","md5":"4a1a711187f92302cdba403b49ffd6e0","sha1":"59e11bcd6203bf756f25ebf3ff48d07b3743d6a1","sha256":"1bc085e1895574abb16d22ff0a748876a59c676aa92647c0d019cf39798adeb6","sha512":"3497b9a58baab41745a4051c44bd4147116ca8159017d3f5d59341733ac979a8d1436435116ee37a1d5c42849f092766269d8ad73bc960e548ac56fc186cafbb","ssdeep":"192:4QqPTXVAnumh4jyMSNXURJ6zZgD9fs3JiVc7cW9tqvwU4QZq4G8cGakKsgfxft+x:fqP9IAc3sgpjCdSXc5FBC487Qlvp","tlshash":"51025578d42ac6f4e1374a9e58945f403b4d3ff244908896b4f86a3c278a834337db2e","first_seen":"2025-08-29T06:11:20.923563Z","last_seen":"2025-08-29T06:47:39.539281Z","times_seen":2,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/logo.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:34.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=G0qIZLgyUuq5m7Wb; __ddg10_=1756449993; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=RDebkD7oqKnhrOAr; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\n__ddg10_=1756449994; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:34 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 728\r\nddg-cache-status: MISS,HIT\r\netag: \"68b05e9e-5f5\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1525,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"90c2e8c0d206d5eaeac1b5660a865926","sha1":"fe0386bf75d653fbacf2638c0dfe63544acc878b","sha256":"68da6ba7e3c1d4c39c888f4cfef2e3090ae95b091ef2b0bc1e6b638a3f2e523d","sha512":"1912a93b523c285d3ea1da9831b45240b5a6e5ddaacb2922b9b35c346beca192b37ce9881b7120fd215d1ff7087b732df496026f5bb49ae424ea1c27a0433545","ssdeep":"","tlshash":"c0315ee2b3a9d38191080f00834e7864032f15e9a710818ddbd76ba579b526fcc3d8d0","first_seen":"2024-12-10T17:19:34.101377Z","last_seen":"2026-05-26T01:50:54.168263Z","times_seen":69,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fgwda74x.life%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=386742394.1756449996\u0026auid=793701873.1756449996\u0026navt=n\u0026npa=1\u0026gtm=45He58r1v9186219929za200zd9186219929xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105427542~105427544\u0026tft=1756449996297\u0026tfd=2667\u0026apve=1\u0026apvf=f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:54 GMT","end":"Mon, 29 Sep 2025 08:35:53 GMT"},"fingerprint":{"sha1":"F3:96:6E:68:01:34:12:AD:6A:03:D8:EF:BD:47:E1:FD:A4:AA:FB:C5","sha256":"BF:6D:12:A9:D7:AB:31:65:56:63:8F:97:4E:12:51:58:55:9A:75:81:94:F8:34:D1:46:46:48:4B:34:CB:8A:9E"}}},"request":{"raw":"POST /ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fgwda74x.life%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=386742394.1756449996\u0026auid=793701873.1756449996\u0026navt=n\u0026npa=1\u0026gtm=45He58r1v9186219929za200zd9186219929xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105427542~105427544\u0026tft=1756449996297\u0026tfd=2667\u0026apve=1\u0026apvf=f HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 06:46:36 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://gwda74x.life\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":79,"dns":0,"connect":7,"send":0,"wait":18,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CTeQurwT.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/CTeQurwT.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/CUsHs50J.js\r\nCookie: __ddg8_=0syTqpe6bxr3hMGe; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=98wHL1UlAgqQOWgN; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-142c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 2077\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5164,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5163)","md5":"5b9e7c9173b398989b0535f79ff42969","sha1":"b6ef20cd36349bd0bf2eddaae918894b43012f6c","sha256":"f1b6b56c49686d5e4d7eb34a1831e67f56877ee3a1dbd51a713562d1ea17f0d3","sha512":"a76f87663b257dbe4d1e15109a79bc1014bd2b1e8ba8b2bbaf861f42abb3228265e763495b0d997495a7a9818d00b5229df3c164df1b225c8363a71de99c8ac0","ssdeep":"96:oq53hKMoKMj1W3FdeF31f5HnPx1oRstVCBR4Ir8Dtgjiby+qUECPRv5:v3BY1W3eFFvmQVCkIgJbtD","tlshash":"2ab196e4b0d9e0dbb7764fd1c036225260076b957834e0d0e27aad73215be58a562b3f","first_seen":"2025-08-29T06:11:20.766217Z","last_seen":"2025-08-29T06:47:39.540501Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/lastBets","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"GET /games/casino/lastBets HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=lYAo5yNk9EEHT6A6; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg10_=1756449999; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg1_=62JeBHYm0qocAdYJR7vl; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:39 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:39 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 86\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 94aab067-1578-4cf2-94a5-e12cbfb57530\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1449,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"01111b61f920268d2bfbb0f90883323f","sha1":"fdf8ecbd2f8827985bc347cf71ed0fb4d8d2403f","sha256":"460a0ec28e79d6f26cab1d2c870754c5ed95b0dea5f03fefda07bea6af4ce578","sha512":"bad30cace5bcc4ea462aca2cd675a903a1b0d5f82532e0fe3056527a515d3702baeb8f18813d702430532744d7bc1d028222fdbad0812a33f87128fa9b37ae9b","ssdeep":"","tlshash":"2b319ed676ae1cdce59406740f5f3fe274cc2a2b228a4dd258cbdc6786809e7a481633","first_seen":"2025-08-29T06:47:39.510317Z","last_seen":"2025-08-29T06:47:39.510317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/vkGFNfXPWz6kGmJuVFqHZz60Jn1PJvYqaQ0CaeRm.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /banners/vkGFNfXPWz6kGmJuVFqHZz60Jn1PJvYqaQ0CaeRm.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/webp\r\nContent-Length: 83666\r\nConnection: keep-alive\r\nlast-modified: Mon, 16 Jun 2025 16:57:30 GMT\r\nx-rgw-object-type: Normal\r\netag: \"f3d5d70dd5d6a4e1d27a75ad21088cde\"\r\nx-amz-request-id: tx0000038c0dc591881fa3c-006867c79b-162e91d58-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83666,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f3d5d70dd5d6a4e1d27a75ad21088cde","sha1":"c0ea3b56ebaa1edadda97f7d57800d57ef66d4c1","sha256":"6fc0c0defe0cc85bcfeff16dc58e880b4b91abb81a668f99793b796fbd76e0c2","sha512":"53306d2be770126c46e6b3260badd757e026f38d7e602cccc9c86fcf074a2c47777c0bf0a50edb6620e1736600cc8d7f5faab3b69afca5e9bb60c575523864c0","ssdeep":"1536:eI0BIWfA2r7S+6bexDC9Hh+UfGeZYVfC2Woud189mDydlbBY4AVV:0bfzuvUDC9HY7tUDm9v1HM","tlshash":"20830208fa761d070bd214f69934b1eae5a124fbeff655187456b4f82119da0b03ecc7","first_seen":"2025-08-09T06:39:59.056033Z","last_seen":"2026-01-21T08:18:56.837454Z","times_seen":30,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":190,"dns":90,"connect":48,"send":0,"wait":86,"receive":46,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/fdc4364a3eae2f06260e2f95ce9571ed/Belatra%20Games/714ca4aa6a5a444b979c52b8d37cad53.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/fdc4364a3eae2f06260e2f95ce9571ed/Belatra%20Games/714ca4aa6a5a444b979c52b8d37cad53.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 25741\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"220486d966c1a1a36ab56e0f5395ea94\"\r\nlast-modified: Thu, 31 Aug 2023 06:06:21 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1850E1CA865BC6D6\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 1554\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EkkXv%2FfriMnIzcfMNWr6HnvWyZ7V1RCp82FGWaTxb32sVAgrgKeH25RJYQKJghjAYcejORjm2qJLHVALjTyHReInWuSJqRKvek8gP16t\"}]}\r\nCF-RAY: 9769b88dbd0a7a4b-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"220486d966c1a1a36ab56e0f5395ea94","sha1":"780101293ba21e0ac7193d0e6e979ca3fa082912","sha256":"f0e372822148f12ed8f014504853b32bef5ae14d758e19af0103543f675a2c66","sha512":"cb113582e16d1910dab55221983c03e5b581bf984338c62930098dd3578a039957903e8c60505253e87eb771c8f55f90a2e802717a624d965f5d4ad73bc4b5b6","ssdeep":"768:YC/Ew+9U5+Mhl+Q8lQZNhZnCC+f5eGyOmDup:LEw+9U5+Mhl+2ZNhZnckGyOmDup","tlshash":"6dc2f176da92f8abd4c887f40090b8427e92af38201ee5dd9a3c75f127b53f12498d13","first_seen":"2024-05-07T05:57:00Z","last_seen":"2026-03-01T21:47:53.490083Z","times_seen":44,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":274,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/eurostile-regular.i2b9H2-b.woff","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/eurostile-regular.i2b9H2-b.woff HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=esoGAGOiOzFu0162; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fut9kfvvf9Nr22ET; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:34 GMT\r\ncontent-type: font/woff\r\ncontent-length: 97680\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"68b05e9e-17d90\"\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":97680,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 97680, version 1.0","md5":"535b1e86232aafcca96b143529c8226d","sha1":"9408a42efc92ea6972f4d0f50560c22ca84d8a08","sha256":"c5a7a7d506426bb073f4f866f0ea9f3c57c8e856444e5403494d9db263e85671","sha512":"b54f1a43cd21271056f02d0626c573357b3ad962969d24a7c03914513d6644155108d5fb0608d47c734e650e1141de70cb9cc13e1ee1f08830c33ecd7dbb8abf","ssdeep":"1536:mndVS5OB0M0Lfxv9JKgzmzwv25WCnEx2pW594UIi/m3KYdu+WLSkNQ:mv3BbuX0gswcIb4UIi/m3K4u+B1","tlshash":"95a312039a03b7246d764afa2eaf4b39f5d4ef988d0d63c147e1a410194d52f2f6126f","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-04-25T06:32:47.453739Z","times_seen":81,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/flags/?v=2\u0026config=true","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"54.162.100.93","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:07:A5:B7:4A:00:EA:45:09:50:EF:4B:44:63:83:38:E2:97:F8:13","sha256":"6D:1D:1C:48:82:61:EB:EF:E4:D8:57:9A:EA:F6:ED:0A:07:BB:6C:17:71:6F:A3:F1:88:57:DC:E3:A4:E8:44:96"}}},"request":{"raw":"POST /flags/?v=2\u0026config=true HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwda74x.life/\r\nContent-Type: application/json\r\nContent-Length: 228\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\ncontent-type: application/json\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://gwda74x.life\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 2\r\ncontent-encoding: gzip\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":642,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ed78c9ed72357653bc2789093ceedd4c","sha1":"7f1fc43753c11604191f19d56cae282fb629c497","sha256":"2aea8fb6d1867ce88a4868d5440b881f92e5740c1726301229cf5778aad8a319","sha512":"d4a06544d64439e87a544ca7b4a7e28a02fdc821e2ed4d0aebc53f83cb4fed9cdb4d02913466946af9aab45f45d001c4b251be684b47bef063275bd283ed18df","ssdeep":"","tlshash":"d8f0ac6ef660153988189746e6e2a9194ffa46273224bc6ce0ac949171db4c9d6a2a03","first_seen":"2025-08-29T06:47:39.542435Z","last_seen":"2025-08-29T06:47:39.542435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/currentGames","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"OPTIONS /games/casino/currentGames HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jArLwcjpTxfmMxmj; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg1_=o1fBvFinxcXLefUZpdlD; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 380ed84e-01b7-48f8-a896-88a3de0c2613\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/cryptojs-aes-format.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:34.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /cryptojs-aes-format.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=G0qIZLgyUuq5m7Wb; __ddg10_=1756449993; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=QpegKS7ZxFMKYBfk; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\n__ddg10_=1756449994; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-5d6\"\r\nage: 4349\r\ncontent-length: 562\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1494,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"e6bc38f77922eaa6f1b23716034b4a2e","sha1":"db781b1e30c4f2a1d63d47054f0903c463cf01ab","sha256":"9ca00bddae85e30d59672da0089ea5e132df97d75a92f42114fe1befbaeaf32d","sha512":"0ad7c00c1564d77f8463dfc81003c0d6cd6ada4e3d01094331f72847f17718e4a6b2c7a2a0bcbd96a1107bc6cb9bcb1721e7b2968ae4544595ab98d39bb30c82","ssdeep":"","tlshash":"163177407debb4c287e8e1d50435a044f67b7a0ab1558ef3aa5aa404ffedf3006326e4","first_seen":"2023-03-07T18:27:54Z","last_seen":"2026-07-26T09:44:04.955028Z","times_seen":716,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DlAUqK2U.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/DlAUqK2U.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/CUsHs50J.js\r\nCookie: __ddg8_=0syTqpe6bxr3hMGe; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zXAFNh3PYrw773R2; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-5b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 4\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 82\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-07-26T11:51:02.591674Z","times_seen":24709,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/KHcq37__.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/KHcq37__.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=iOy2BKuOdWHCetU7; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qbZ33PeOBkGEYsWd; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg10_=1756449999; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-3445d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 4\r\ncontent-length: 55307\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":214109,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (62119)","md5":"e2c6912dad06b058007d9ee9846d7a64","sha1":"6c3c38d3722893fbc4780391106fd7229ad19c8f","sha256":"b36c4fce8f11ef3f695aff34d522be97b3ee72855cdcff2c36f811b73aeef2cc","sha512":"6b21b39503b93dd51b188beef5499e35814403fd9ed674b1b467e10692927d6be77e2f5d7897b0f335d8d7e59afe3ab6ee655472c4564ec2949eb7b09359453b","ssdeep":"1536:+aZHrgh9wadAh6xERrwYOGiLxa168UYjIEubVf+LoORTr0puwRpHjRPkC459rS9Y:zlEvwaS3wZJ8ACT0rmcLt/oHB1","tlshash":"9e246caef38691fde11a87d8a04a341431752ffea381cc9282fc5d1416298fc67dda66","first_seen":"2025-08-29T06:11:20.676246Z","last_seen":"2025-08-29T06:47:39.467378Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/sounds/click.mp3","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /sounds/click.mp3 HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=blmEE8SN01GOCgc5; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pKSL3n2E7hn72I89; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:21 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 6731\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"68b05e9e-1a4b\"\r\nage: 4339\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":6731,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"b497ee5b7f24d5540859a2fe9a2f94a8","sha1":"402f32b8a0c59a6655cee008020948c8b0dc3878","sha256":"627e28dd820dbe208a2d764c086b4eca2c54330b9741073bec9da852aa592962","sha512":"1f0e4fd80c187354ac665cf7e3dc52b8834ef35022c6fe922db3aae0f89f8530c5e97aa2d4860f2351c8fbf05ea2252593d626d12b8f90865b7eca6b6a476ee9","ssdeep":"192:79qf6EhSf0IotHNKWliJRgFn0DsEZM8+h/wgMgl:79qf6ASfCtHtliJ2F6sEZMph/w1gl","tlshash":"cad16d6a6d478951e40c5570d8ce1b4c737824b5afb0b3daa267f79e00e536c12ceb29","first_seen":"2023-04-10T18:19:05Z","last_seen":"2026-06-26T20:23:29.963181Z","times_seen":1246,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/betting.BvvbPzJ1.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/betting.BvvbPzJ1.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=rrOPXgDekf1o2Ja1; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.120; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Dae38fnrd5joajMB; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:13:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-188\"\r\nage: 2021\r\ncontent-length: 166\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":392,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (391)","md5":"d1fc5a31927ee52342760cb953c03b8c","sha1":"15dc38b51bac7b7b56d917b588965bb8e0364518","sha256":"d924f1db79afbf0a86e72e0aefeb916cb0f3485c5a78877b6d04a1b3f7cd88d1","sha512":"74bfdeaf5bd02cb42a38efe45a93f3ad8ef456afe02b52265aea4ad8b42a7d1ffc526f16031234a6a71b6840b5f3c4b7b6a7652a04574246e2dce8d5386d3f1b","ssdeep":"","tlshash":"09e02b11262df179c07bf00ab6c7c64a7719950262163ab94e18e4676c5ba823f140c3","first_seen":"2025-08-09T06:39:59.068065Z","last_seen":"2025-09-11T21:42:03.670228Z","times_seen":8,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Jp1tcwad.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:45.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/Jp1tcwad.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/CgwjNhf5.js\r\nCookie: __ddg8_=A1jUPBFHw3UdoRa9; __ddg10_=1756450005; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.120; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=nFFn2Pfz0PpdPX7c; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:45 GMT\n__ddg10_=1756450005; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:45 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:45 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-17e0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":6112,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (6111)","md5":"34952a7621665088250c747924a2df6f","sha1":"eadfd6f5617849d46652ac4c1b9d65009648c485","sha256":"7281a1fa0dc648417dc18b9134edfc620123ef1335fbb345483fae7d90ec5af7","sha512":"77b0f5cb56b9b6f9512eea9b28c07ed0d7826c970d49f8cc284121e76b362739d2f38f969a00dbef309d7e742c34e11e26e7a70d8f3531f1680c7ca88ba24082","ssdeep":"96:JCSVoN+lLTbufLR9+uZ07TkGrSn2dcO2d8/mHK0PDA7i+5LTntPpKntctzZBbQJr:JCSVoN+lLTQ9+uZ0vrMrOR/wPwnLTntS","tlshash":"8fc1e86ef4448879e2b20ced9089bd82a22117e5b284d0f3a17cdd352714e4d670dfab","first_seen":"2025-08-29T06:11:20.828996Z","last_seen":"2025-08-29T06:47:39.544489Z","times_seen":2,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CVh778U1.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/CVh778U1.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/CUsHs50J.js\r\nCookie: __ddg8_=0syTqpe6bxr3hMGe; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ZhHLcTmq51ZHH1yR; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-457\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 491\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1111,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1110)","md5":"5cb71f36aa9447413734581154b7f50f","sha1":"249cd1e5b06642a00be4a141c77a7b2945846a7e","sha256":"2ae73d43fed63e7c0351dc4749d2adbea4e5c161e093d342ac2d83771e4368b1","sha512":"2432628bff9f8206212a74ac51564ed914d0e0f8dbb0f56aa382502f6c9d8bd6dfce3543347bbd9f92fb272befa7cc4fb990fb7c3e6b2bf7081cca2fd724d756","ssdeep":"","tlshash":"df21357d4aec2dcc091cbc843ad89d7c7504d249a191cc9638a6fee7f487d5aec48471","first_seen":"2025-08-29T06:11:21.058056Z","last_seen":"2025-08-29T06:47:39.545181Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/roboto-medium.eJsCudPf.woff","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/roboto-medium.eJsCudPf.woff HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=RhxID2JCNxjR8DSX; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=cUUkan8OPfYJxFcF; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\ncontent-type: font/woff\r\ncontent-length: 140892\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"68b05e9e-2265c\"\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":140892,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 140892, version 1.0","md5":"cf745939a2f0d88aa9e9e111d03f0c44","sha1":"e3e7869aa64560578586af40a475c0dfa55b8b77","sha256":"7090bfaf91390512f722b859fae9585ec5f662e31fbc00a0a281859f92c54c4e","sha512":"ff2483368f008496135c596a8b2863a9c5953a52041c85e03d3c01e6d4cb16ee74efb5411da034b9606b1a23e2d77ae472c9bfdc0b5358440d96c2a9a22232cf","ssdeep":"3072:tyGRtev6xczb/azWnXkjS3k0wzb9QZyKqtU0EzCq5YLA6+Txvw545N:FGiGzb/LnUwwzZUWN+B","tlshash":"4bd312b5d6a53397eef8fdca71a80f62279dbc48e8ec8f0b251c48543507ca9c276520","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-04-25T06:32:47.456343Z","times_seen":66,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":195,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/lastBets","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"OPTIONS /games/casino/lastBets HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Xi2nGMDdExwZewug; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg1_=eSl5U2C4lbRtCi4k0SKM; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 1b83180e-19da-4db3-ba18-51f812ec86f0\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/SlotsPlay.4HKLr1Mb.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:45.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/SlotsPlay.4HKLr1Mb.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=u5It0nMKmfGhkttG; __ddg10_=1756450003; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.120; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zFQCXCsRuKZWRWVU; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:45 GMT\n__ddg10_=1756450005; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:45 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:45 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:00:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-d68\"\r\nage: 2776\r\ncontent-length: 842\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3432,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3431)","md5":"b974ec84bc29a7554d16ba98d090eecc","sha1":"cad22f8c129c6ca660e42ebcb068ffd4758f109d","sha256":"053334373eda24c8408570b69394407bb35881b93893090972b9170456b274c8","sha512":"3fa59d39a660a2856fcdbddeb6ee95fbd5216681184d408ff240a5ea9b4c790dc207759f888a99b26e036b048b37dd7db67bfd11f10fa38daab1ad53deef4e44","ssdeep":"","tlshash":"2b61ae247ecf583da822d09f51b189cca324d90b816d27fdad22c134c5db62bafb5157","first_seen":"2025-08-29T06:11:20.736717Z","last_seen":"2025-08-29T06:47:39.547936Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/D7g2Y9Ik.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/D7g2Y9Ik.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/CUsHs50J.js\r\nCookie: __ddg8_=0syTqpe6bxr3hMGe; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jh5TW0v761jZ1PLx; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-23e1\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 3863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":9185,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9184)","md5":"17f4b640bfbf870f44fd3b9f372e4030","sha1":"ba16baece8c01d4e409cbcf83f1b699785d954e2","sha256":"9dfec4b4ce52ca584022a42d697b4afe2d6bcf7cec5a7581feb5192e127aa7c6","sha512":"04ab44f245fc347f4b7020b2ce3753346e7767ff2c758d696b3c97201a70659f07dd5b5cbd26b336647d942e9b32ccd0d2862b0bfa7e335e82e35c2de66457e6","ssdeep":"192:EqsxSEFu6ZufGq+wk5q2IkZQ+tOWwYpsTctq0ipgNE7oVKRpnKFEN:EhZ8fKwkQ2IkDLwYpfqZplOKRpnv","tlshash":"5d12eae473ac72aa59620dd12475481de434e6243b26e4d1f2ba34bab4d7c44b273f3c","first_seen":"2025-08-29T06:11:20.793603Z","last_seen":"2025-08-29T06:47:39.548541Z","times_seen":3,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/home/play-icon.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/home/play-icon.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/Home.CBZvEtgP.css\r\nCookie: __ddg8_=RhxID2JCNxjR8DSX; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7y5NvNhGhcAdiNPp; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:20 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-564\"\r\nage: 4338\r\ncontent-length: 475\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1380,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"89eda723c8dba836950c26b67cd04524","sha1":"9f3e34d6eb95f2e0b5fc9da99bc3928d70302684","sha256":"6d7e4782409131c0723e253d83d2849be4634cbefdf9d2ae6c5ad0cec9b08a32","sha512":"bc29d80eb47fc508f60d1e6aa660bea59af4ac72c608fb52c4b11b18712da727706b0029a25bb58d525e2031e9b69bb0f12664dae2514b85a222281d605c1768","ssdeep":"","tlshash":"b621823cd25c5c7bdb67827cda195465221e13de63c9431c7198df1e18344cb690fae4","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-04-15T02:03:05.921793Z","times_seen":79,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/3LDwFpHfnzejPdw1gkkhY2GtywM01PtiYajInyiD.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /banners/3LDwFpHfnzejPdw1gkkhY2GtywM01PtiYajInyiD.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/webp\r\nContent-Length: 213616\r\nConnection: keep-alive\r\nlast-modified: Fri, 18 Apr 2025 08:17:40 GMT\r\nx-rgw-object-type: Normal\r\netag: \"1ece2594b83e3fe5f9d9871670e414f0\"\r\nx-amz-request-id: tx000007164bd18d3e430c8-00687f66c5-1686c198d-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":213616,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1ece2594b83e3fe5f9d9871670e414f0","sha1":"96bfdfc02ad70da1d0a5366b59701d30d2dc86c5","sha256":"d3c3132f9a6fa0f31b6c17dd195425013614fbb136baededadc9394a41330298","sha512":"4055ba5af0711ed8a6c780904b0c77eff36ddded5223173e8558cc8f1b0a4ba83af073e426df797b2e670343bffc42b8cb405002f19795bbf7e14919755cd12f","ssdeep":"6144:onJhrC7dAbGBbIXgo0Z8CND/EO1UEgjKAzDSM0b1aN7V:onJh4BERiTFGEg+cS71Mp","tlshash":"92241237b8d68dc9adbb42945930ca09f0975066ec972cfc72201b18e6577b792f2332","first_seen":"2025-08-09T06:39:58.829989Z","last_seen":"2026-03-01T21:47:53.499531Z","times_seen":32,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":315,"dns":0,"connect":0,"send":0,"wait":31,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/4818c6efe224ca00508b68206c7072ef.png/Uoz6Y4UqItavwAMZgwa8vgcq1pY1cbQ3dDfJQv2e.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /casino/games/4818c6efe224ca00508b68206c7072ef.png/Uoz6Y4UqItavwAMZgwa8vgcq1pY1cbQ3dDfJQv2e.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 373555\r\nConnection: keep-alive\r\nlast-modified: Mon, 30 Jun 2025 18:30:43 GMT\r\nx-rgw-object-type: Normal\r\netag: \"87835f3d19ef24c456dd4c0b7894d1f4\"\r\nx-amz-request-id: tx000007108481b694ca6a2-006874b400-1664e693c-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":373555,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"87835f3d19ef24c456dd4c0b7894d1f4","sha1":"14cbdcaff8eaf86d4e8f26c265255036ed642b7e","sha256":"2d195884f567931a61cbaf838cca52847371c58132a31780bf89080a4ca28d60","sha512":"30316fa7c7f3790efb351fcb91cbc208f0824625058c307602642623322cebed37a4f6b6c484f53e643bba4ac0026b4bdc30622881b5457d5299f14f4033bea2","ssdeep":"6144:z+YTLKde07I0cUQZQ4DaPkPjDmpjpmUzn1fBKVWzWVpJoRqW6ls7aEFcAoKqUFWM:x4ecI0IDkkPjOpTr1fBSv4gKVFcuIM","tlshash":"c484235ab43810bcc8176b13e991eaed6aa0c836c545d72d8f4ae30b511ef6b0c5b35b","first_seen":"2025-08-09T06:39:58.980517Z","last_seen":"2026-02-25T19:06:54.224823Z","times_seen":31,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/l/v/js-debug","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"POST /l/v/js-debug HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 38\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=vuTe50dcgnjBX3tB; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YWQImJdgp0VhRUwz; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg10_=1756449999; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3864,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f9bc9f0b50c4720d23b7073393347994","sha1":"3af7a97a5920cf50d96107da3eee7cde205c3882","sha256":"4c8d13254c9620e0d1dfaf23652c6829800c21a7ab654f1a3e18c9053010c14b","sha512":"8986ac343180eb877ad94a4533b2f7c3dafab0feaddfe9088a711cbcea7e679d98880c614be0eb27422b2ae960a64d28de6dfa75bf6bce49b8139497db05c10b","ssdeep":"","tlshash":"fc8111ca01a71121a603a46a2bef060171948807e54bec127edd33cccfcb69897e378d","first_seen":"2025-08-29T06:11:20.964489Z","last_seen":"2025-10-09T10:23:07.278451Z","times_seen":8,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/igrosoft.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/igrosoft.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=cdt6ZnXigQJug3ia; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1ztnZiVyRnuVr7to; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-58b\"\r\nage: 4332\r\ncontent-length: 690\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1419,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c43ac70a9fd5785f819f4698a2bb3155","sha1":"1f00e8258187554e29a427867e73d6586257652d","sha256":"5d85cb4f4b63095dbf40a563a99373d28a4dcf47336c5cb6ded8d1fb1785b45f","sha512":"5dfa7a065e4b139c9ac94456d3aafa832e03817e553b6f8feb33b798b2362d38ad663512955e553f6a4bc9004246d8823baac47b51c410acc4ce9604429d5a68","ssdeep":"","tlshash":"af2174b5a294c76cd004979c543ac629bad76abd7fefd40182c12002c1f41ed8d778d3","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.948492Z","times_seen":69,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/l2_yC_l5.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/l2_yC_l5.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/DIBeZulZ.js\r\nCookie: __ddg8_=xlLVd85mOc11E7BM; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.120; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NgmwnKPdlg8XGyKl; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-d61\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3425,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3424)","md5":"6a4759f64c4ca48538e5d6b224c5597f","sha1":"e64e70034d88f24856be3f8521a4827816214530","sha256":"0893da243cc086ca5497fd69990e3f8f3c47fbaa316d1112781935064cd3a468","sha512":"fc1662a8f27ae168b9e3cd593e54ba769ea71f61f2de868423603618d01bc4e6f2b5979dc57cc29039c6e16382563420788d96d6134fb6683faff51a55b53fd6","ssdeep":"","tlshash":"3161980ee40564a8563174e8a218a1847b3c1fedf3c41841a3b8dff61b57c59f278b96","first_seen":"2025-08-29T06:11:20.956687Z","last_seen":"2025-08-29T06:47:39.550983Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DlAUqK2U.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/DlAUqK2U.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=iOy2BKuOdWHCetU7; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=AFjyNsTU2A51mNLb; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg10_=1756449999; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-5b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 7\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 82\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-07-26T11:51:02.591674Z","times_seen":24709,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/100hp_gaming.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/100hp_gaming.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=Vu8eAS5hy0DJB02G; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=inKiPFJTAK6uCKv0; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-452\"\r\nage: 4332\r\ncontent-length: 387\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1106,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cd70424dc36bb569cf66dce4c48ddf08","sha1":"5de353a0d76d6e3d096725cddb4d1a1cc7beedff","sha256":"d6a57b6d6c010fdf34e6d5f98611e05fd346f3c43e05ef25033b93d112e8d741","sha512":"3cf334bb6677631e68e2ec6d78e96ae1840285168cf9b3824f562a5d73ab7e43dd460c259417054af2cccf35b06566f495b6ed35e41de753710c0a95210a64ef","ssdeep":"","tlshash":"b411c3c9709c5690dd8203115e5ebcfb40a274fecab15b897a14273f2899aaf0cb5ec4","first_seen":"2024-12-10T17:19:34.308667Z","last_seen":"2026-04-15T02:03:05.915174Z","times_seen":64,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/pgsoft.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/pgsoft.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=cdt6ZnXigQJug3ia; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NjmcEEQADkD4wPua; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-b19\"\r\nage: 4332\r\ncontent-length: 2048\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2841,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9c3752392106e2f24a698ff42c677c10","sha1":"9fa4438728981a8809e5dcdfc637e2a88de43127","sha256":"8ffe768b6b541118bc2297edf6b85a1003e9b9d68d1f535f67ab931b45e978c8","sha512":"98cad8f5eae13358ededd74e4cc015f90a8c26fb789ebf59789feec4af0f340cd8ab76de08ff0fcefd656c359e0a9f17ff6f82fe2907ce50e0403a79898c40af","ssdeep":"","tlshash":"fa513b3ee1cb3b9f325845349664915b9c46b06b0106211e6cd8fcb8f8c71b0ee4a9aa","first_seen":"2025-08-09T06:39:59.027853Z","last_seen":"2026-04-15T02:03:05.870747Z","times_seen":62,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-29T06:46:36.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwda74x.life/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=wwfAgDYBCkq2IRd6; __ddg10_=1756449995; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ZTf67IxQjMJGlqG9; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:36 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Nuxt\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":380314,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65068)","md5":"6f7a644c8615ca2952ba1a63c8a19ace","sha1":"fdf09dedd52991be328aac046ff3ce1e6d6d6fb4","sha256":"79dbbec1495dafb3b08a90425eef2d0fd21b835eca8b62e903e1e4180ab5ba6b","sha512":"1070bea1e17272ea426df6cec05588ae111709adddc0cab031c91c120fc5399a8dc43a909af9b3cde0feb1fafaa39314be65fbf98cfd81b285fad575d3c97862","ssdeep":"3072:uJYXSbqAfuybg1s705YOwfwONtsEb2FRRZXd:EbqAfB705YOwo4tsEb2FRTt","tlshash":"b384d5c32535382e615fd457f5a1ee94f434a816e31367ebf0e62a25cbc2d8a1273938","first_seen":"2025-08-29T06:47:39.504087Z","last_seen":"2025-08-29T06:47:39.504087Z","times_seen":1,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/eurostile-black.CuyT6JKl.woff","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/eurostile-black.CuyT6JKl.woff HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=RhxID2JCNxjR8DSX; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YQbw0ZAPwnSossa8; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\ncontent-type: font/woff\r\ncontent-length: 95720\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: \"68b05e9e-175e8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95720,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 95720, version 1.0","md5":"ca7fd9425338588d941bfb331792ecce","sha1":"e4a8a3b0425a3323f2c3e8b4059a1429da8297ce","sha256":"cbeec4e4387480fcc4cf1bb7f9bd5736f9b6425ac6d7450770e3bb565eb4675f","sha512":"8e1fc6495d11f4c2eafaa8fd62112e0517c2f5046b9777b8fa0f771c481f72a0f73db15a7f6797ed1523d050886f9fd7635adbaac124fee24cdaa8b86e935eec","ssdeep":"1536:jj302uG3KgcImTEjOwWoiGRHIRRBCUo7zO102Y0OBGYQACp2ZPC3ZZ6p8rR:/EkKTImyWoiGRYRBVoR2Y9BCp2BUZ6pE","tlshash":"d99312eec0fcce88fd9d02ce105d6a35ae49a0fcb2c3598b82f154d892dd17e895506d","first_seen":"2024-12-10T17:19:34.260995Z","last_seen":"2026-04-25T06:32:47.440262Z","times_seen":55,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":88,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/SoXY3eRP1IfXB59cRpbMqcKzkN53rSUcLzEOpt4o.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /banners/SoXY3eRP1IfXB59cRpbMqcKzkN53rSUcLzEOpt4o.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/webp\r\nContent-Length: 86430\r\nConnection: keep-alive\r\nlast-modified: Fri, 11 Jul 2025 13:37:41 GMT\r\nx-rgw-object-type: Normal\r\netag: \"de426953fb9ce3964b235ef80f8a47c4\"\r\nx-amz-request-id: tx00000d3f60fe9af487fe6-00687113ae-16585b23f-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":86430,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2160x960, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"de426953fb9ce3964b235ef80f8a47c4","sha1":"f1adf189f69abf63f95bbdb781c3b1f838a7eded","sha256":"b5acfd71f35c7d6b5acddd17a37c07a69d3705918b1720a84953aadf091a7bfb","sha512":"3ac2de58f6717ce6f707036195cb004d5420ea2a43a453c0436346c12efa0d644df9102c2392fa240791ed4cd499ce329912954597ec8c10935f16013cc8221c","ssdeep":"1536:eke8Tsa0XGSh4u4XaQ1dVQxrCd3joj8ozO/Ou2LjcNzF/oEwCYMr7:/aXh4u4PLQZU3jRoi/EcRV/Jv","tlshash":"85831212408f928ea4abd174987ffc647e73c86bfd61ce56279947612f24c3688d1b32","first_seen":"2025-08-09T06:39:58.960037Z","last_seen":"2026-03-01T21:47:53.325757Z","times_seen":32,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":184,"dns":93,"connect":43,"send":0,"wait":86,"receive":46,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/fonts/Roboto.ttf","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:41.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"GET /v/fonts/Roboto.ttf HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:41 GMT\r\nContent-Type: text/plain\r\nLast-Modified: Wed, 20 Aug 2025 07:24:07 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"68a57817-29144\"\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":168260,"size_decoded":0,"mime_type":"text/plain","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", name offset 0x96000218","md5":"73e5e33319edb8e4c97e37cdfe616cb8","sha1":"7784f765a8fd13fb67bac14cf3c11373538955c8","sha256":"f66c295bf6f985892e07ce64d2df9149416ef950f9b65420b7de2e6f5ba0175a","sha512":"658ae380ebd8cb5a040d69d0bb8ed94421013298913fc46ba9bc010c017a2e72cdf162672a94852f466a1f764aa09e0c88cb19c3e73c1d2c616d08ad0786d318","ssdeep":"3072:RCgWJENpDQoK6jS3I+/l3mRDOTAzM7t2eV2dlNvVWgHkLAHX3lbgva:PCENtQVmNO8u2eV2h3kpva","tlshash":"59245106ebcebb9ec14093f33dabdacc56efe4225d51e513c64b6011ce05468a71f62a","first_seen":"2025-02-09T09:50:26.857461Z","last_seen":"2026-07-23T19:03:22.034717Z","times_seen":268,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":165,"dns":1,"connect":57,"send":0,"wait":70,"receive":65,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CSvZyz9e.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/CSvZyz9e.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/EFWGUdKZ.js\r\nCookie: __ddg8_=BqvzQJOt7QzyX9vo; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8cTFYg4YpGh8TBES; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-8c7\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2247,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (2246)","md5":"c1051f11af799d449080610b2a8cfdc8","sha1":"e19036b1e701861a533051f8aee90898b1456617","sha256":"14a5f80ed888ec13773fa86ddd05e3d0b7c08cfcb3e6ddf8fe0b03e8e5d6d09d","sha512":"c31efc87dee528bee1eb9936247432709366b7d0a5d8e0133795d5d570b42bc7a1ef348caccd7bcabb5b2f33c9d2ea9218aa7683cf78e4786669d582696cb15e","ssdeep":"","tlshash":"3f41df0e9586d160eafb0015a51c0681621ca99ee464085df2fce7effb0c87d7b0de70","first_seen":"2025-08-29T06:11:20.745232Z","last_seen":"2025-08-29T06:47:39.554161Z","times_seen":2,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/builds/meta/cc265202-01b7-4e18-a29d-183e4f49a4db.json","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/builds/meta/cc265202-01b7-4e18-a29d-183e4f49a4db.json HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwda74x.life/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=yUhfokZX8Bcw0Oi8; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1ly569hMSsLoWdiu; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-8b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5b5462f657ee19af93e35ee7084ec484","sha1":"e83f535ba9727621008aa556c30f1ebfb5ab5d52","sha256":"b555178b0377b3d5237fa3f478327accdb295551af886a1ad1f3cae1671077d1","sha512":"52867b5adb98bb3c5abec9b2cbc620f4fac2f8639008249552a4c8e21222f72b6a0e91e148e732c3c0e86f15fa12df00b365b9a73e6877c2faecca730065c123","ssdeep":"","tlshash":"d2c02b320411c04f34538961e8083450c09b2163153c44f93bf84b7f095c14e711c91b","first_seen":"2025-08-29T06:11:21.066862Z","last_seen":"2025-08-29T06:47:39.555Z","times_seen":3,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/4097fb773f0ecaa3e16dc80294c306df.png/bjsGYlqcJrC7vsoFd61yH2CD0mZTiJdXfALQ3oQY.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /casino/games/4097fb773f0ecaa3e16dc80294c306df.png/bjsGYlqcJrC7vsoFd61yH2CD0mZTiJdXfALQ3oQY.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 443093\r\nConnection: keep-alive\r\nlast-modified: Thu, 01 Aug 2024 09:45:31 GMT\r\nx-rgw-object-type: Normal\r\netag: \"86bb7f89e9b2adad9b6dcade91787ab6\"\r\nx-amz-request-id: tx00000e96e807c05b4596b-006867c482-1639b45c4-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443093,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"86bb7f89e9b2adad9b6dcade91787ab6","sha1":"9af44e5e46e7a4d52a6ceef1eff614f7bb1f4e98","sha256":"398a47f398241852e5e84d36a3693781190610c826cbeb2ffa87a6c492ae7c64","sha512":"378c5cd1918fd9e802c1e4b566d0cc107211a89186f816ebfadba4b840d9fe82fe21971697b7fc348ed28d1369362caa78c96610fe8dc3132607c61f0ee7abe5","ssdeep":"12288:WecXgLcceNMjg3DjeAeGUEfiLtDiyI9xcKvMp:WB93NAYDjeQ8t8p0p","tlshash":"509423dea1f4cfa5e89ce81210e12fe5bb5d60cadb66494691c4b360fb377e10c90ca5","first_seen":"2025-08-09T06:39:59.03782Z","last_seen":"2026-03-01T21:47:53.29643Z","times_seen":29,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/js/fp2.min.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /js/fp2.min.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=b3QiiyGjRVwkXNGT; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jpkusHNKZg2XFXK5; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-883d\"\r\nage: 4351\r\ncontent-length: 11113\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34877,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (34698)","md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/button.php","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"GET /button.php HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:36 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nX-Webim-Version: 10.7.124\r\nEtag: \"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-07-26T12:32:16.680089Z","times_seen":95166,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/sounds/click.mp3","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /sounds/click.mp3 HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=YQbw0ZAPwnSossa8; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7sK0d5iJtUsex7kc; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:21 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 6731\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"68b05e9e-1a4b\"\r\nage: 4337\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":6731,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"b497ee5b7f24d5540859a2fe9a2f94a8","sha1":"402f32b8a0c59a6655cee008020948c8b0dc3878","sha256":"627e28dd820dbe208a2d764c086b4eca2c54330b9741073bec9da852aa592962","sha512":"1f0e4fd80c187354ac665cf7e3dc52b8834ef35022c6fe922db3aae0f89f8530c5e97aa2d4860f2351c8fbf05ea2252593d626d12b8f90865b7eca6b6a476ee9","ssdeep":"192:79qf6EhSf0IotHNKWliJRgFn0DsEZM8+h/wgMgl:79qf6ASfCtHtliJ2F6sEZMph/w1gl","tlshash":"cad16d6a6d478951e40c5570d8ce1b4c737824b5afb0b3daa267f79e00e536c12ceb29","first_seen":"2023-04-10T18:19:05Z","last_seen":"2026-06-26T20:23:29.963181Z","times_seen":1246,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/Hacksawgaming/7ff508ea230f4c88b025ef32692dbcd7.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/Hacksawgaming/7ff508ea230f4c88b025ef32692dbcd7.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 31746\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"237c00d350be36d52956b2870e1dd118\"\r\nlast-modified: Thu, 17 Aug 2023 09:36:53 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 185169DABEAFE771\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 2946\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oETSwLMQAw5i%2FA2enq5TuKaSbXqBeoN1y2o3wZXTpmMGxn01hangIzjWTOE3EqS2a57kYbhtJaE7vJLDubQa6LtOO88GTMeLt%2FfCPVm6\"}]}\r\nCF-RAY: 9769b88c48456613-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"237c00d350be36d52956b2870e1dd118","sha1":"6a30519470a594318fcfc9189851c37d7e3e1da9","sha256":"ff25df0fe6236a03a268ed69367ef6fc79c1e5283d81da2d26e44d3b869af692","sha512":"1018378232cb766b86b5c4aba4aa0557c47aaac0b2a3075184738e875d3faefdeae0ea278fd6ef5c58037c1bf2725c6a49d44dc52b5ad02cd1fa004db180cf36","ssdeep":"768:MMK5EPmyBS7iGhIv+gcA3XoBgIOzLTozciOFmnQ:MMEEPmyBSLhIvX5XlIiViOInQ","tlshash":"37e2f11334c5deb51492ce37a469334208cba9bf8cd82486bb5d85ca44fff51609e827","first_seen":"2023-12-13T17:48:16Z","last_seen":"2026-06-05T18:43:38.64275Z","times_seen":64,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":195,"dns":122,"connect":55,"send":0,"wait":88,"receive":1,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/fdc4364a3eae2f06260e2f95ce9571ed/Belatra%20Games/a35ba034d66e0acfd1046961fa1b5242f219a347.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/fdc4364a3eae2f06260e2f95ce9571ed/Belatra%20Games/a35ba034d66e0acfd1046961fa1b5242f219a347.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 29434\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"3fa0e8d16b0bc9d147481719efa1f335\"\r\nlast-modified: Wed, 01 Mar 2023 08:18:51 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1852018A4DA24539\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 954\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BZWXyJ248rKtl8joyXYWNAOzJzP0KvmVLGGIQd0Qug4AUrv32UBaXx4zPjn27KIEFzQlACShA4Sl6mO%2FT5zdNT%2FJGMtCSdJUoNjp4yZK\"}]}\r\nCF-RAY: 9769b88d1dda0b64-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29434,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"3fa0e8d16b0bc9d147481719efa1f335","sha1":"7fdbc1a775f4acffa18aa472925f383d8555f564","sha256":"426bbeb8740cb4e18c8b4086e81e5c4fc8a02247906ae5b904d71406e1dd9ac3","sha512":"affb32d8f59ce551c284df2c1c8e0da154517660e6d7a7956b37a60a62d15c552d2cf63eb7f2b9e3cb9f7826ddc44c3f26cd74de23d291cae7bb1000d13d1687","ssdeep":"768:U+iUGZjbBE6RJxNHQeIavACk61YR9xGRKoQ2l:ULZjm6HvfYPxGbfl","tlshash":"5fd2f017bda4760a87da93aa2c0df91d66ad300032d8fd3796f603cea65088ef817750","first_seen":"2023-10-16T21:45:28Z","last_seen":"2026-07-10T18:49:57.329667Z","times_seen":80,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":274,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/oGQsitAd.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/oGQsitAd.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/NCxdOIYd.js\r\nCookie: __ddg8_=abKGl53qMvg3tJYY; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7YkUittJtWSfLpAC; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-349dc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 41912\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":215516,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (37618)","md5":"5ca924a2f97c8de2f522b7ec8ee6933f","sha1":"8354a0a5ebb2fcdbe8ca6e60be94cebd483fd7df","sha256":"ef0ef7a9a144d1586c374f17d0ade70891b2baae57db2fdcaf674740f29ae6e1","sha512":"9b5da538053b4aa3590f5e733cab27c8d8a0d87f2d16daedf90b23f764c4fd8f133a59aa844e43add8f0d50cb475b9644232ca9e6a54f141c5726dbd18c23db8","ssdeep":"6144:cNuayegAuTVcvTIOg1msnrMOuweo8xh26pl5Oa3ydobbUCdxN+TgBuw:cNuayegAuTVcvTIOg1msnrMOuweo8xhh","tlshash":"72247e310e5d1cbd1111a166de1cab1a38de81fe3e9b93e107796e6e35f10309ea931d","first_seen":"2025-08-29T06:11:20.915403Z","last_seen":"2025-08-29T06:47:39.557908Z","times_seen":3,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/tdLatql2.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/tdLatql2.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/KHcq37__.js\r\nCookie: __ddg8_=KaMYqgi6TL6ftZYI; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8gYp6JKzVNfxhRmz; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-39e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":926,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (925)","md5":"44d3da7143e426a7ab49d42becd33e39","sha1":"0dc23cdcba67b7948dbf858de6891b8e4524c420","sha256":"aef05d695ef9d86ee9fe21992b24fffcb77893bc884e11a1eaae33aa187d254b","sha512":"1d000aca9c282f8b55f96f8e026285855ace0334c86879feb63a822dcf40e5df7a0388dd3203eb9a3772fafdbbec18ab2e26de2ee5e15dbe7d94e0afa4142f1f","ssdeep":"","tlshash":"cd11045e90351e9dd06ccfbe806af38330209dbb2713e4597959d1a57eda5034d28f32","first_seen":"2025-08-29T06:11:20.784041Z","last_seen":"2025-08-29T06:47:39.558661Z","times_seen":2,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/vip-club.BH9anVVE.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/vip-club.BH9anVVE.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=rrOPXgDekf1o2Ja1; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.120; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qT3vy5i071PSJFc8; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:38:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-15f4\"\r\nage: 481\r\ncontent-length: 1273\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5620,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5619)","md5":"f5947b2a7cb7199205427cb322a241ad","sha1":"4a26c3c82306bbab62d034a468cd2cad4e734125","sha256":"ef1d6e870606cc785bf5c7bc292ca20c443da3bd87c6e2da62b5be1fcdd11e33","sha512":"f52521ce1df19ddf2d8852c06a569edb33f35db56b78b1b7a226289f12be8aec00b879c3463ecad3f8f6d5a12f10819080431477e9cd3358a3e7ca53c5d83988","ssdeep":"96:CXviHi1I57zo+imtlONP5MJSsMuru2wMsQMpGWn:C/iCk3oRmtlAcZu2wJQMpGWn","tlshash":"ffc11c637458b82cf07b96a2b5a6592e3110f63b870742a5d9d85439cc8b0da372e7cd","first_seen":"2025-08-29T06:11:20.913528Z","last_seen":"2025-08-29T06:47:39.559539Z","times_seen":2,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Loading.Bk2PI8_1.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/Loading.Bk2PI8_1.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=esoGAGOiOzFu0162; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=P7brvJZzlbpVpbHp; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-ee\"\r\nage: 4351\r\ncontent-length: 144\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":238,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"972ff87ed4252206f8f9d733a46cb522","sha1":"9998cd5afd3ccbd6aaa949b68fdf49bf05224cdb","sha256":"5ae8f77f7cb1ee4548d819e6f03fe4e3fbfcc50845c8ee77480d3f08a86de00b","sha512":"1dd31797719cb3c45a9694f1e7dc1bafddbe7da579d78d6aba797d4599ac185310493de67489970b64846b0d612979cae66138ad87b50721b24adbb78cfcc180","ssdeep":"","tlshash":"51d0a7d5864444530f670a3311cc5d59c8b02ec2c8be1c1eb399d1aa03492a933b7e69","first_seen":"2024-05-07T05:56:59Z","last_seen":"2026-02-25T19:06:54.055809Z","times_seen":57,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/ext/cdp-customer/v1/analytics-js/snippet/233e4c5f9379d04ec864/analytics.min.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /ext/cdp-customer/v1/analytics-js/snippet/233e4c5f9379d04ec864/analytics.min.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=yUhfokZX8Bcw0Oi8; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=p7S3ObUSgX5xfoJ2; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\netag: W/e10e268a3b13805b9cdd5e65f6c0cfc0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: public,max-age=300,immutable, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":106230,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"40dfec4366cf117adf70c52eb522f537","sha1":"75c459400a5c6d5ba9b6b4ba3d97b92a0154e4b2","sha256":"b83dfb3cc66ff4f563917de48d81823977e239ddc527f769d4a2b59ef36b4091","sha512":"e92fa91271cd16836f30e1b2ff274a0b154684e7e9fd3b2d32154ff353fdb9ba69e38e88a0fc8d37c305c86a302a5de144dad1d73cb74f78b7c0be92bb8c1efc","ssdeep":"768:0xOyftQBCLo1sw/cexpme6piT5nQk8v2RbgFoF4OnImsSfWdLyWQL9ZsBpi0vRxV:UtQBQo1sAIeaE5Qk8uV4oF4OvpU5xMCf","tlshash":"dda383c8f6e6f060439364b8803f110bf23e795e680e84a4f266d9d66cbc59d9127f79","first_seen":"2025-08-23T09:38:09.850489Z","last_seen":"2025-09-04T20:54:35.109693Z","times_seen":33,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/ping","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"44.194.218.116","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 14 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:E3:24:32:5B:DE:76:F0:A4:43:7F:C2:84:CD:98:D0:50:48:25:7E","sha256":"B0:C5:D5:8B:41:34:A0:3C:41:21:0F:E0:A4:E1:C3:F7:66:24:A3:25:E9:E6:67:D5:40:EA:68:FB:D3:70:73:74"}}},"request":{"raw":"POST /messenger/web/ping HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 707\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 403 Forbidden\r\nvary: Accept,Accept-Encoding\r\nx-intercom-version: b6aa2ae8e8134ee277aea221d1ee3da3827c792e\r\naccess-control-expose-headers: x-request-id, x-runtime\r\ncontent-encoding: gzip\r\nx-request-id: 0000i1albjef5umb4ttg\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-cache\r\naccess-control-allow-origin: https://gwda74x.life\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.058487\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":113,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"10aaa7de4eaece036b9a0b82cc54f9f9","sha1":"18f3dec1a8b26fab9c3a77f109a01c5348d700d1","sha256":"0149b8a009f617fc02ad02d180866c24fac43285285895295bb502d94601b3fe","sha512":"bb3a9761e9b3faecf35cef3ba76d5e7aea17c29eacfe9c29270deb60a5adb4046f504748486081494d22ed3dbb89a2b1447c7411d700fc5c9120a985c044f463","ssdeep":"","tlshash":"aab0121f825a6cf7dfd105576d4b145140bcf4a3b1e004c69494916c864e501971b669","first_seen":"2025-08-29T06:47:39.561527Z","last_seen":"2025-08-29T06:47:39.561527Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/ThreeOaks/7925d4c8b4aa44a1929abd608d1ff874.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/ThreeOaks/7925d4c8b4aa44a1929abd608d1ff874.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 35878\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"2180cf705991319ff9e63245a169e5f5\"\r\nlast-modified: Fri, 26 Jan 2024 10:04:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1850785CF61C3CD0\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 1546\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DHVUuQA3t4Oth7OIf%2Bo1Y7spFSL1SXdgddgeU0209L7R9ZXF45CcqwbaRMSVHGXFdEP8y4fdaHnoBLdNL4EGZrh0SGEl5hgplDZtz%2FfH\"}]}\r\nCF-RAY: 9769b88d7bd79f84-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35878,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"2180cf705991319ff9e63245a169e5f5","sha1":"09194e582590635e85096164137b7b297e2461fa","sha256":"61ddc27e8108acb7cb5c9f70106dc71b5896b1159944b19130240797caeceb08","sha512":"05098c72c6a1a4be35340f397c6f157f31f0c251b3dae030e58d3b278a959151bf078f74ffc65b8b6ff823ca85184a1e68732b18bd44b9325598970251b1da97","ssdeep":"768:ABRCN6HeNb2yE0FPMU790R8GZvl7eFfoSjuMCfGgSYpQQ:0E0HA2yNFPMU7+KGZkxoSiu7oz","tlshash":"06f202923032a0e40739865975f0b747ec9c10b1b7f74b5b54ab8266ef2c260a7a7c5f","first_seen":"2024-05-07T05:57:00Z","last_seen":"2026-07-16T16:33:15.724566Z","times_seen":51,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":272,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/images/cursor.png","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:41.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"GET /images/cursor.png HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 591\r\nLast-Modified: Wed, 20 Aug 2025 07:24:07 GMT\r\nConnection: keep-alive\r\nETag: \"68a57817-24f\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 27, 8-bit/color RGBA, non-interlaced","md5":"4fa7bdcd138f8aee5178f0d4f926595b","sha1":"6d3a5103766e97395bebbd2ffe811b2e7ad3c7c0","sha256":"a1fb1b429d644ad011e6bd98701d1951138d3f973bda19ce3411e1c1d65ef35e","sha512":"81d75aeb19459f946924b46919bc1c4f447dfc0a0b56915ea19edfca282ea936c4b58a9d417459fa1b41982380200b3a894a8fda09faeab075556defcec883a3","ssdeep":"","tlshash":"fbf047cd4d715339af5e04d190f714a8fc45228a2460a51c4e0fd01a3d85055fe0d34f","first_seen":"2023-05-01T22:32:10Z","last_seen":"2026-07-24T07:40:56.530205Z","times_seen":2289,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/roboto-regular.BtWrZLw2.woff","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/roboto-regular.BtWrZLw2.woff HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=esoGAGOiOzFu0162; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=vtoCl7dkeVrSK6K8; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:34 GMT\r\ncontent-type: font/woff\r\ncontent-length: 139160\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"68b05e9e-21f98\"\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":139160,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 139160, version 1.0","md5":"ae91f35c10375f1dab7137a298aba7c9","sha1":"6b9aae9dddb20bdfc56381f0d64bf54433977413","sha256":"264a621481c81a289ac3227cd63cc91902de13789dd9df920f0e2f465fa2bd38","sha512":"b0253e74fe7baf39316ec12622b1ace4899c51f6ce5c193e0ca2dbf713e4e1ce3d5ed4145d46680a91c68baa44bd73a31834e544c0d732f77975e72424151b60","ssdeep":"3072:2isY+Dpc1q2EHUmPsBut5j+mN9s+EIUb0Psp45nE:Tspc1s0osS5rc0Er","tlshash":"60d31255eb38110ff8be77f86dcad33408f471d5c7a322a4955802abae44fd4ea24da1","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-03-01T21:47:53.345572Z","times_seen":69,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/api/v3/welcome-pack/get-welcome-packs-guest","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"GET /api/v3/welcome-pack/get-welcome-packs-guest HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=QyRGjxoGiCjKXAmQ; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg1_=N2SLmwRUdkqtmHFIH3FZ; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: bfe44740-4517-4e94-8645-6a8369ba9fc1\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10093,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9930421582d81d34edb9e0f3e9392fd1","sha1":"f1821c52e1d421bec011f885114f289e5b89f453","sha256":"8655f718bd00238e8c5cdc5614b16930b9ff6b0ac1addb45ced30c767dcc26b8","sha512":"fd060c3a4d61a625cbb5bdff878d2e049e3d8e61e504e5b9fec7f84fca926dc5f3242d7df4035b95f1b06b15fc5c84abf577309dd62f961cc96e2b111d600eaf","ssdeep":"192:2ACnA5CiLs8CN+Xj4CIMqcCbCB0eAv0mI7e3/rgd1YS:JCA5Cz8CEXj4CLqcCmMrgXN","tlshash":"58221fe288ea1b6c199a36e3da73bddd34e43189d160c733fc7e7607d300661aa51b16","first_seen":"2025-08-29T06:11:20.853498Z","last_seen":"2025-10-09T10:23:07.386478Z","times_seen":9,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/MFIvBQPaqIuMRBBwzEUrO3K9EiKcKHe1uHeTyQyh.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /banners/MFIvBQPaqIuMRBBwzEUrO3K9EiKcKHe1uHeTyQyh.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/webp\r\nContent-Length: 101356\r\nConnection: keep-alive\r\nlast-modified: Tue, 08 Apr 2025 10:00:20 GMT\r\nx-rgw-object-type: Normal\r\netag: \"a196f6d3c320c1cf6c8ae3ae7ff8b112\"\r\nx-amz-request-id: tx00000ddd399e666eee427-006867c79b-162e91d4e-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101356,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a196f6d3c320c1cf6c8ae3ae7ff8b112","sha1":"2e8c5758efc50e1e5e815d108b063e026f3db959","sha256":"fcf09059c6d39108ae64550c209602e895aedc03772dc7e1b66e7eaa9321458a","sha512":"e63f7fda240b007dac88ab159567c3747ed515f3d5ef135f8c10b20581db5cf40763eeb67002082e9238b23f039a7ea087c95b7ce20b6b1c399b22970d7ea770","ssdeep":"1536:4XQyhrzL/Juuu5E288uaUYc77LiWZU/MFcoeGYtZ+47EJTvh53aUQy70a:6Qyhcuum2maUYcuWZU/MCLr+qEr5Kb6v","tlshash":"cca302f4085f529ccac6badf48ea154670231844e79efbd0a26377b5054ee71bb93243","first_seen":"2025-08-09T06:39:58.91578Z","last_seen":"2026-03-01T21:47:53.512135Z","times_seen":32,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":313,"dns":0,"connect":0,"send":0,"wait":44,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/tPdbiW_V.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/tPdbiW_V.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/KHcq37__.js\r\nCookie: __ddg8_=0cfjt4j3XmoWOtR2; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=kooMxkvYlsgG7F1f; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-c0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 121\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":192,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"af7805d42f0e94d87c24a603905aa544","sha1":"7b8e20de9b8033988fd4fb49ae5214be2a1b317e","sha256":"67962a43b72e5541bff19a54203273e73fa6a40aef2c34b20da51c95817d336f","sha512":"4f5b71fae1dbed1ca64d3290836d4ee5f28885ca526c71eaccbad91c58ee45a25d2a2e847846f68d8e02509d5c833f84c2e7a9928991b0418953cbe3dc954732","ssdeep":"","tlshash":"07c01285d8202077cc607828a1d20f42027e3644e115d17c77fc2482f470565a4aec65","first_seen":"2024-05-07T05:56:57Z","last_seen":"2026-01-21T08:18:56.877435Z","times_seen":55,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/df61abd27adc941e19df1accbe88208ba21e4f70.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/PragmaticPlay/df61abd27adc941e19df1accbe88208ba21e4f70.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 22623\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"c350dfa4e887c264c9fb0d1635a1b2e3\"\r\nlast-modified: Mon, 06 Jan 2025 19:15:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18514DFCED2F6E65\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 2695\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t2d0yF8ooo7Njkv%2FpNfHXmLkye3ZsOApf0GyF4Qog0jdltjA3kA%2Bjv%2Bis9srv2R2uYMbUnmCFGOI233%2FR7%2BsdekO67OxcIUt18jibwQt\"}]}\r\nCF-RAY: 9769b546ef4b7745-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 200, 8-bit colormap, non-interlaced","md5":"c350dfa4e887c264c9fb0d1635a1b2e3","sha1":"7d7bfa744ccbe4a2c0106e800f3de9bd3909503a","sha256":"fd55f07b1fdb3125900271bb5fd6862299d2edb3239e10a70a75eb7017937a3d","sha512":"4602d35c64a078421501425229f2b7b91d333ed2433b45bd13de564453bf43006359b388fa9c32cae25f686f704e0ee4eae4fe69576e27c7e1aa23a8db26145c","ssdeep":"384:IsNJ0kNGPTq1f3C6cBN7LF/6/mFYorwgY3VjeBkXTORZjWD/2M6gq/h:H0EKO3CBPLx9TkeBCKRZCDOTh","tlshash":"a9a2e02a5383f57a70da3125e9c8686084a7b410d1e96f0d2c9e101b2ee678be7dd737","first_seen":"2025-02-06T08:02:39.093262Z","last_seen":"2026-02-25T19:06:54.122407Z","times_seen":39,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":211,"dns":106,"connect":42,"send":0,"wait":43,"receive":18,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/middleware/mirror","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"POST /middleware/mirror HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nRegion: RU\r\nContent-Length: 25\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MUg5aXmiwkVE3N7D; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg1_=F9hIkMYr42nOWH9vFKpN; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: a4882013-7494-4d13-8d25-edfba67110df\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"28ec1eee5f4049e3c4f2135069c1d2c8","sha1":"3505519507ca1c2a089c46e100b80408ca278421","sha256":"edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b","sha512":"f71618e40ebaa14ab6d523a2341258c0da264b545388f8fffd14c31c64b35f94b21eb633316c4d77afcd864aade1db588ef6387ee0c4787e6f7770db0abc1183","ssdeep":"","tlshash":"f06000020000002088800a000220aa302a200a20080a0080000c30200020080800a002","first_seen":"2023-04-06T19:00:00Z","last_seen":"2026-07-26T12:09:38.266692Z","times_seen":12737,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/bonusWagering.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/bonusWagering.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=IfHJm3V7dtWsoPhO; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7KVqqncvMlcDBQ5Z; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:20 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-652\"\r\nage: 4338\r\ncontent-length: 657\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1618,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6630c9a6d86e7827d983c8afd4f3c47c","sha1":"6d52149d8636231b07cb30c3da8f7549410edca9","sha256":"2ec295a534e212461e58cf5dc3048ffd1207a417f03be96c22ff0f2a0462652c","sha512":"7802023b06e8452ee55427dacf6914bc7bc7ab0695a974a031f0a68e2b14a3b2c7b5423fc8748a852f5ac8c43ffdf545ac9dcf9ba5959f385ce9f9dfe7a96f10","ssdeep":"","tlshash":"7931c2faa2c4e6f19f436392c8a0a038f74b106637580f94a370d7d9fb7a05d4a49cd5","first_seen":"2024-12-10T17:19:34.230323Z","last_seen":"2026-04-06T22:48:49.699125Z","times_seen":62,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/24af37f89f48429eb57f315f3c5c80d7.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/PragmaticPlay/24af37f89f48429eb57f315f3c5c80d7.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 24882\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"36124c66609bcbfc658cab49ccbc43dc\"\r\nlast-modified: Mon, 06 Jan 2025 19:17:20 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18507262C754C38B\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 5180\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=utbrNXg1zXJFTECGPlUePI250tZlUh1C3jmRB%2Bzs%2FwWSy3Qr45jVaJuWs2zBv9%2FNBqwUXYIoY8Dj2tDExu9j95wTK7lqLhqtO11gjRyZ\"}]}\r\nCF-RAY: 9769b88ce9e6dde3-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24882,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"36124c66609bcbfc658cab49ccbc43dc","sha1":"4807a48c9a26aafe18728e0f1de98976d140a8af","sha256":"1d7466243afcf48d42499b7d98371f760c1c69aa1dd108426e781d77dccc3616","sha512":"9a3d3c8b7e69d294e0052a5ef1c01c9a5f2d9c654f1820166f301c30c7c1a2ef892907234e4e365bca73fb8386218f03e6aecbe04f90d30110fbef5e0f4e1937","ssdeep":"768:7v7GRlxglB8sZUWu+kz5rEj0b4ZgQX/61R:uXxgA+orEj44/6j","tlshash":"69b2e1ded133afdf90c01e5d3fb0491181a6c75ee20b4a40590191a52ba24aaa79e77e","first_seen":"2025-03-21T05:40:09.009592Z","last_seen":"2026-07-12T17:41:43.816578Z","times_seen":43,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":263,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/7cf4cb224da44bf7a5a76b057dc75794.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/PragmaticPlay/7cf4cb224da44bf7a5a76b057dc75794.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 26850\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"9c386aecf371a82630f51cd520e2044b\"\r\nlast-modified: Mon, 06 Jan 2025 19:17:08 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18514E0842050A1D\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 5970\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m1aToIXpFSv3RhaatL79M1Pf%2BFi2sR4YksU3OTNFRAdfsNKE%2FIzhgAKE8h6lIHVmG9IMVARTqzn%2BZ4cbO20YZWQd1BuvNqPwDWSfcWve\"}]}\r\nCF-RAY: 976a0281febf5f1e-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26850,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"9c386aecf371a82630f51cd520e2044b","sha1":"11bebc861ad66991c50291778db895b5e5eaa9ef","sha256":"7603444fa5ff104be0085fe35b4fc0d3725fa3c692642b55c969fb1a46f8db49","sha512":"2d1249c48f7a3ab5eb82fe5357cbded33f258cdb10b10137309676f90322ce66a6d25fd7eddb6498e4aa4ff7fdf47279949377f438f821df654b13649fed1f18","ssdeep":"768:vHz7sbFexlk+p+pcQddei4KN2Jsg9Lj5ZChY:vHsRexlgpcQdd54wgZWY","tlshash":"cac2d0550234edce3cade5c98f44b82a9f3dcd285a87f31445a5cad38985395c760bbc","first_seen":"2025-03-21T05:40:08.976225Z","last_seen":"2026-06-04T00:08:03.785877Z","times_seen":18,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":293,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/espressogames.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/espressogames.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=inKiPFJTAK6uCKv0; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=rrOPXgDekf1o2Ja1; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\nuserVersion=45.10.240.120; Max-Age=86400; Path=/\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3864,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f9bc9f0b50c4720d23b7073393347994","sha1":"3af7a97a5920cf50d96107da3eee7cde205c3882","sha256":"4c8d13254c9620e0d1dfaf23652c6829800c21a7ab654f1a3e18c9053010c14b","sha512":"8986ac343180eb877ad94a4533b2f7c3dafab0feaddfe9088a711cbcea7e679d98880c614be0eb27422b2ae960a64d28de6dfa75bf6bce49b8139497db05c10b","ssdeep":"","tlshash":"fc8111ca01a71121a603a46a2bef060171948807e54bec127edd33cccfcb69897e378d","first_seen":"2025-08-29T06:11:20.964489Z","last_seen":"2025-10-09T10:23:07.278451Z","times_seen":8,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Ckg_KlpZ.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/Ckg_KlpZ.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/NCxdOIYd.js\r\nCookie: __ddg8_=xiL8JElDEwCK3OCI; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.120; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=lwEjd6D620auiqlF; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-252d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":9517,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5011)","md5":"4cf0980e10dcd5472d18eed96ac56d64","sha1":"e5e594b8b0c8a996b2873c762eb7cc207dd3b738","sha256":"52b1bd62716b50653ace50fce971c0eaa88ebd0c691ca7c8f76e9f93c1510067","sha512":"bd74630695f578048fad0b2b00a9392b1f99de06885ba9e7d3ce0f467b93ad2942662117cbcb1dd07087ddea2033dfabbf12a3501734e5d7c6d74c5a087fe596","ssdeep":"192:4HwppTPlxBZfew3hY+0N7pr8QSXkTmSwnWxb5Y3NgqlPMu8vmb3p6EBTiSDULJ/T:2gpVZfewxL074QSX2mSwnWxb5Y3NgqlI","tlshash":"15120325d1fe4caa633730e11c2e9c1274146f42cb528d6398a8c415efdfa6d6bd239b","first_seen":"2025-08-29T06:11:20.6984Z","last_seen":"2025-08-29T06:47:39.569714Z","times_seen":2,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/knfz4177","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"54.240.174.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 14 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:E3:24:32:5B:DE:76:F0:A4:43:7F:C2:84:CD:98:D0:50:48:25:7E","sha256":"B0:C5:D5:8B:41:34:A0:3C:41:21:0F:E0:A4:E1:C3:F7:66:24:A3:25:E9:E6:67:D5:40:EA:68:FB:D3:70:73:74"}}},"request":{"raw":"GET /widget/knfz4177 HTTP/1.1\r\nHost: widget.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 2672\r\nage: 443\r\nlast-modified: Thu, 28 Aug 2025 17:06:01 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: 5Mi0Clb9Tdjg6XUCS5k4Y7w.VlwrxhJY\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 29 Aug 2025 06:39:14 GMT\r\ncache-control: max-age=300, s-maxage=300, public\r\netag: \"4e9f827359d6747ceb4f92f627336791\"\r\nvary: accept-encoding, Origin\r\nx-cache: Error from cloudfront\r\nvia: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-amz-cf-id: mUv8ior93_Gtfux7cInwgY35mA2OrOeiTmSJBHzBaHIRMHJoEG7xug==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":6742,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6742), with no line terminators","md5":"d523f87d32e2903b8a4b5abebb672b68","sha1":"a46490c4f7fa9e572c9d63d470d5617af8e04b12","sha256":"f8b6209e29fd00ba89b0b7dbc5c59a1b4831625ad66bc74c07af048a507afa09","sha512":"862af8bb058032b25735121011c21410a206013759933194aff3dc8d55609b7e03d0fcecea442e5151f06bba47ea53d9e4c36c272f90ba512413f02d09d507cd","ssdeep":"96:vv8/xVqhstBp8HEZgOM0PI0FNl7fADT9+tlb1JFrlPu:vOVGH8bMklMHOlPu","tlshash":"3ad163eeb2c2797806a3157a623f770c7f3b648428494810d06989d87a76dc7c15bfad","first_seen":"2025-08-28T18:02:37.494708Z","last_seen":"2025-08-29T07:48:16.425124Z","times_seen":17,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/redrake.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/redrake.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=inKiPFJTAK6uCKv0; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yeCY89Ty5tJTaaLx; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-474\"\r\nage: 4330\r\ncontent-length: 591\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1140,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"447cdedbee546eaf230b81d11581f336","sha1":"1cd455621f752221114a784a0a099b068a66d605","sha256":"2d6319c433d15fe63757b80aa5a1fe4e272bf055a7c501ea4b75c243664d2c91","sha512":"0f7a8e4042bd770b50ff5ef9b02d83a6f23f4f3c93e0758003d072747d26a2cae3c13d893c92f04a54d4176307d663b8e7bb006d599999d65572861ec8cb06c2","ssdeep":"","tlshash":"6e2133e7f7cd42fea401e7f0d106ac78332b34b57a21cead13cc2824728604dc8a4402","first_seen":"2023-10-28T21:30:08Z","last_seen":"2026-04-15T02:03:05.934997Z","times_seen":68,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/home/home-crash.webp","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/home/home-crash.webp HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=A2LCVmocpUFMqwPm; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0sVym6g29Grp6aeR; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 0\r\ncontent-length: 32418\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32418,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 868x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"06f712de8e75eae4f670f2658fac621c","sha1":"fa2b55ce23f7865adf1d47d5c67c5c4ab6691b44","sha256":"76009ad40ea26433da828503a60f5c0e7ed2b7fc6a085a70215f0374dba9d156","sha512":"013c795c4f03c96d227102824098ba859fe402064af6afef32e845c884723e8c1317757b23b529cb7f3e10e9d23d1d3edeb2952ee9c50e51cfb8539a40c2b63f","ssdeep":"768:5DwbhgUFshGzA3pVJ2jmthIZ+DrjptocteBsts189DhrIfN:5b/gzAZd9tDesialIF","tlshash":"d4e2f112b32e1e05a410bdd84638e776eb96f29ef41f5be725b8db4012764dc988f0d2","first_seen":"2025-08-09T06:39:58.844444Z","last_seen":"2026-03-01T21:47:53.337551Z","times_seen":34,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/cryptojs-aes.min.js?v=1","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:34.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /cryptojs-aes.min.js?v=1 HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=G0qIZLgyUuq5m7Wb; __ddg10_=1756449993; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MMqVSUdow5zLEofW; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\n__ddg10_=1756449994; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-359a\"\r\nage: 4349\r\ncontent-length: 4790\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":13722,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (629)","md5":"cd93b7f0987a614bc17698503bcb6af9","sha1":"68a66448326499ff34c75bf31e2769b278584e0c","sha256":"8d4fae1a37a5b5338c889d0897b50024194b4d3ae94940e7e42c1c1423a1183e","sha512":"e3b87dfe10c0e3f3d801a85ae9c654a74eac22c2a93a757568a0d2b13755c36aeb5f9337e94a21db4ef2d1f0f1cfb98fccbbb0151d5cdf8d967730df96bfde98","ssdeep":"192:9BIGDmDm90mP9z8Ui015lN1I5rI2Tru6hMJFmHV+mdpwIfyAaYfKnNVYkUUFJZm3:9yiB0ez8UiIX1SrTegsEHJuI+y8Z7AX","tlshash":"625297c936edb94263963028587f6017b86b28b6945c4824f29cd4ddff9899dc03ae3c","first_seen":"2024-11-30T18:08:34.076577Z","last_seen":"2026-06-26T20:23:29.818692Z","times_seen":1206,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/wU3fTVt-.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/wU3fTVt-.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/CUsHs50J.js\r\nCookie: __ddg8_=0syTqpe6bxr3hMGe; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=feySjxfwbzME9l7z; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-15051\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 4\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 25669\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":86097,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c0a226b8e9e2da339233781b46164987","sha1":"d96e3beb983303c350bee07b0f3b28811c032322","sha256":"b6afe0be133bed59ffcec2883cfa8a9c90bc515c5c3371d67e0198fd90f1376f","sha512":"8608c15473b78f0e9a1653912653aa3a66fc12b5432201c49215f10e374051ca3f482ee80cd1dcf9ae8ac80e8ac29f0e01a2d5131c35566521d3947be0717f3c","ssdeep":"1536:IK6l28I8DZzkXhvPS5uLEiMAa73hBlxvHB+CIdzkVXiA6w+EV93mBE09:V6nCvPS5uZS8a9Q","tlshash":"c8832989f224b57782f75aca8376c20172a14984b809d4e4b0ed4d7b496e95c03afffc","first_seen":"2025-08-29T06:11:20.850915Z","last_seen":"2025-08-29T06:47:39.57311Z","times_seen":3,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/ext/cdp-customer//v1/analytics-js/ajs-destination.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /ext/cdp-customer//v1/analytics-js/ajs-destination.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=LZyNHFhuXQZPnj39; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=dXIAj5BQd5qXCm9P; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\netag: W/70a1cd6d5c300a59c3b828b336627efe\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: public,max-age=300,immutable, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":9226,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9226), with no line terminators","md5":"ecdb24cdd6b5a3a4a7ba31895f79ca4b","sha1":"3284a1f3ba7aa68b324499a64bf32c8101701663","sha256":"ef949bb08ab368c25ce835e54a53b3eb842de7e868ff81ff99520ed16394637d","sha512":"e76cf7a6f407f484c5537258129ee7d29b765a14204c0cd4e1ee9ca3d9542ac01c5c0b0c557e704d8c69a1a12b29312b99ec0fd25608af07b3c79ea5a83d0492","ssdeep":"192:d61F3JpeOVXIhCBnMfJlUEpFX8nmuONy+2Yn:doF9TMsEzZuF+2Yn","tlshash":"5f1212ccf6c7f0055267bab5817b451ab33ebd1a244a4894f42bcdd5287c619a12bf38","first_seen":"2025-06-01T15:05:10.790294Z","last_seen":"2025-12-16T16:58:04.809767Z","times_seen":521,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"licensing.gaming-curacao.com/validator/?lh=511aadd110f565d008810403b6cffb85\u0026template=tseal","fqdn":"licensing.gaming-curacao.com","domain":"gaming-curacao.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaming-curacao.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 25 Jul 2025 04:03:06 GMT","end":"Thu, 23 Oct 2025 05:01:36 GMT"},"fingerprint":{"sha1":"83:86:F4:6C:FA:D2:79:96:08:CE:12:A5:55:BE:72:98:6D:44:90:64","sha256":"0C:9D:2E:75:4C:14:60:47:D0:98:67:DF:B9:DC:06:8D:3F:FD:3C:B9:25:78:C5:B6:E5:E8:04:BA:36:E1:DE:A4"}}},"request":{"raw":"GET /validator/?lh=511aadd110f565d008810403b6cffb85\u0026template=tseal HTTP/1.1\r\nHost: licensing.gaming-curacao.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":78,"dns":39,"connect":8,"send":0,"wait":0,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/best","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"OPTIONS /games/casino/best HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=dxFh6NRgN6ozcDD5; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg1_=jC3WXJJnzXi02hKWRbi2; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 3120e1b3-5f00-4b2a-99e5-714cdd399369\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/gDr35j__.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/gDr35j__.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/KHcq37__.js\r\nCookie: __ddg8_=A2LCVmocpUFMqwPm; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=If1my0y1P0isPcht; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-813\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2067,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2066)","md5":"ea88cdbb384edad60430ee137a704299","sha1":"3eb3f132e70f703aee228a64c01fe8e013f0c41d","sha256":"46f43d0beff656a800ba0ecd2a67b474567f25771ae4c50060c8108d8ddf53f5","sha512":"8b6cd5446a4e4a3003918e4d11bf5c2fb79d8316c27ab19e3c59e336dc2aa27d1b014a4ee0888bac3799716b46f0825134c0f78029d87e9e54085de4e43a858a","ssdeep":"","tlshash":"cb418548b47a9a7d457e88c7f510142c63480ff8507d6adbb1f50c392b91c14a3aab24","first_seen":"2025-08-29T06:11:20.972322Z","last_seen":"2025-08-29T06:47:39.57422Z","times_seen":2,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/faq.Dx4xxoOZ.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/faq.Dx4xxoOZ.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=rrOPXgDekf1o2Ja1; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.120; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=xiL8JElDEwCK3OCI; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:13:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-2f6\"\r\nage: 2022\r\ncontent-length: 311\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":758,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (757)","md5":"b132efc1ffee39bc28795989fa8e0bed","sha1":"54adb51c65c38803c91914ee553ac952f5f097eb","sha256":"b03d2fe5bf664f98d5b21c5df6533dd2a6ffc6e18beb48ec0057f4302d04f392","sha512":"6352bdbe0cdf3da54993a67b0512f34602ac88b2ae5d61c96d522e5b392c70c2a94d76528be83bbeaad534686dab4ed763ab38d3846ea26d9699f22bf914661b","ssdeep":"","tlshash":"ab014503b46c3c2a604fa108a5d336673131f51f9269bab9b9106904cacbaa923613b7","first_seen":"2025-08-09T06:39:59.133812Z","last_seen":"2025-10-14T04:24:50.182232Z","times_seen":13,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DIqXRze_.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/DIqXRze_.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/KHcq37__.js\r\nCookie: __ddg8_=0cfjt4j3XmoWOtR2; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=SvWooJiee7X9JV7R; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-603\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 849\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1539,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1538)","md5":"e0bb473302b4cf9a0d652eb6592a565e","sha1":"f9c63cd9239547b76ab45ceaceb01ffbc5fef62e","sha256":"7d12b44d8ff93893c5e65cf426dc3ba246a6d085c2432b2d7d9f90308e1eb01b","sha512":"a82ef7749cf59db9edd5847af0dab225d3f39fb2f6ca90b3ed5f331e3caf6cc72bfaede67905117be2056f93e0fef09cb02f80e5576ec5e581849074284db1f1","ssdeep":"","tlshash":"ed31320c380960bb139213e094de084ee218bd617a6bc4c5e2cc7d677d27599dc8efad","first_seen":"2025-08-29T06:11:21.052059Z","last_seen":"2025-08-29T06:47:39.57563Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/js/pwa-load-event.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:34.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /js/pwa-load-event.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=G0qIZLgyUuq5m7Wb; __ddg10_=1756449993; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=RGUkmEIBLmzGsHRo; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\n__ddg10_=1756449994; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-177\"\r\nage: 4349\r\ncontent-length: 164\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":375,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"f463b05f25296c1e185cc82087291f6e","sha1":"d15dfa009eaeeaaf36af83b20ace25714adbc583","sha256":"3f5bcf295bac81715b4413d640843ee19600f6a17c96503038c6a4193c331865","sha512":"5ecd0baa189383e24afadcbe391266fac63cdcdcb7da68ab1371168fae81f05f0140b4dcd86bc4cc59f4ebb3f5949e94b302f05de00942886fe3060436ae03bc","ssdeep":"","tlshash":"64e02b7483fc55b808e182b75f47bb15116721a77068d990c1871906f8d148780a2fd2","first_seen":"2024-08-19T15:07:41.99372Z","last_seen":"2026-04-15T02:03:05.836861Z","times_seen":94,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/button.php","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:34.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"GET /button.php HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:34 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nX-Webim-Version: 10.7.124\r\nEtag: \"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/2sJvksnKlEApLvJt2btz_q7n/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /recaptcha/releases/2sJvksnKlEApLvJt2btz_q7n/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 343013\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 25 Aug 2025 23:14:30 GMT\r\nexpires: Tue, 25 Aug 2026 23:14:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 25 Aug 2025 02:00:16 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 286326\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":805772,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (563)","md5":"4b479261fc082f106d6cb4ae5e046cf6","sha1":"613fca57695fb0e855f080c5c8b87ecdb93f1f64","sha256":"42ad1edb9cc9961376a5b1d68cbbdf2b12eb559d8160b8efb1b3d7922c09fae7","sha512":"23e6289f7638329405d67d5330144af0fe135df723b37ddd91fbd183e5b0b7c67049fd4066511741e9de36d379324b148683b01e82f7cc5fedf48f885defd977","ssdeep":"6144:Amxhk9KLY1IVrSa7yPgZmaw2u/1CrC3YEtkaHuJZmh1g/gdwO6tM0s0xjLL6RGyp:DgC7rCaQIKYEtkOuy4aI00hefh","tlshash":"8a0527d9784638e55312b9f34427555ea3be9424de8c088eb198c9f02ff9809347aef7","first_seen":"2025-08-28T06:53:52.841247Z","last_seen":"2026-04-14T23:51:08.211631Z","times_seen":4271,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":106,"dns":8,"connect":13,"send":0,"wait":14,"receive":63,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/ls-cdn.amplitude/analytics-browser-2.6.2-beta.0-min.js.gz","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /ls-cdn.amplitude/analytics-browser-2.6.2-beta.0-min.js.gz HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=yUhfokZX8Bcw0Oi8; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Ul3SK7DCmTrP0ywl; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Mar 2024 00:42:57 GMT\r\netag: W/\"7300cb5f3b4294338b104c0f3268002f\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nx-amz-version-id: IogUhwUfPmM04el12d60iABuuT4mFuey\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: AMS58-P4\r\nx-amz-cf-id: Rk0a06lSVn4eD8w2n5UNHo2pQE9AwC23Jrnv1_-0TF3uNX8--QX7cg==\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nvary: Accept-Encoding\r\nage: 3\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 17513\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66596,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a81d9804ed47201de5314a7110e680be","sha1":"df58e208599843e46894e9c2bbfdf2feb2a985a5","sha256":"59dd69f4230f7535182747c17235fe4526d34826a142498485779bfdb5d617f1","sha512":"2c15805effa726a40e1b3156d003df4b5f602ab4c1b09b8897ff759d143c0a33a5eb7cc90887b850b1f209ccb05b7be263935ad805ad86383f88947d777fdb42","ssdeep":"768:p6wmsZPARRFO/J6zZsideR53I+dte7I4GWyihZurBJ8:/msY4/JceR54+zeU4GWyaZudq","tlshash":"f35372c9f6cbf0250393a5b8907f140ab33e7e9d242d4428f626d9d53c6d6499233bb9","first_seen":"2025-03-26T18:10:08.318249Z","last_seen":"2026-06-26T20:23:29.909592Z","times_seen":142,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/api/mirror","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /api/mirror HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=HTslskyknRgbDwxh; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=w6quJRDlnNGY6tom; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nvary: Accept-Encoding, Origin\r\nx-request-id: e64068cf-68a9-4e78-af0e-bf24aef48f7f\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":17329,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e68e04ee9ebd07f70d6e5c42cda80ad6","sha1":"d81423a605f16593ff296ff95877cce94a40e72c","sha256":"dcbe0201a7e69580288e908ce31a4b4bf8c96d0b42a60106e3925ab10162123e","sha512":"4df9afeaf999a58f322c3387b7b5eec8a042b6f70f2c1b13bd59ab29c82af041d82a6d200eb19fcfbee61ce4f747fb9799c825dc1f8590a73b18ba62629071ca","ssdeep":"192:2Uj7Y0PvJCYgv4WKROPTYC/Z/yE5F5PAHQOh3NQCkdTyq:2o7Y0ZCDvm+lDT5PAHJh3NQCkdTyq","tlshash":"e472c9e2d0f3135c28c839e6d776bced38d8a990d114eb7fcc7e2687d5146216a9071a","first_seen":"2025-08-29T06:47:39.587222Z","last_seen":"2025-08-29T06:47:39.587222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/vip/mainPage/star.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/vip/mainPage/star.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=IfHJm3V7dtWsoPhO; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=DTwCIoTkhlju0uyE; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-c33\"\r\nage: 4335\r\ncontent-length: 729\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3123,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a52a0c3104e4ce6b3892f0cb079d27e","sha1":"9315a6cd602fb8d2477a0723f587307a43677cad","sha256":"49e08c929ab24a51bdc8935d0b1c7d8841abe3025755cc735640f3e10d218f87","sha512":"2db493ccaa35d93a4f7220c3c520057b9fea5d5cf79c7dd8faaa22e74e8b2ae3c7f839fcc3096a7c1c0d23e91fccbd800d98b2d679888a04972d7746ee368fcd","ssdeep":"","tlshash":"bc515af639ada9dd9c879264d3a95c900f3de1b4f11084699d8f0a31c09bcc6f5672c8","first_seen":"2025-08-09T06:39:58.898385Z","last_seen":"2026-03-01T21:47:53.493327Z","times_seen":39,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/TripleCherry/9c5dbaf88a794e49bb4c008954dfc4e9.jpg","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/TripleCherry/9c5dbaf88a794e49bb4c008954dfc4e9.jpg HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 25285\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"e712c7d3c8976c72a1342541925e92fd\"\r\nlast-modified: Thu, 21 Aug 2025 13:30:32 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 185F42CF68E30A7A\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 5024\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ZnCqkiEu%2BfW9r4gxfQH3QEUpo3A%2F8ZfepG8ZB81Y7FrumHTf6M0rn53Z0t17kdLnmM71UkfqR7TOQ5xfHB6PI3XF4MgzFAjZuaslxLk\"}]}\r\nCF-RAY: 9768ffc93800131e-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25285,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 287x193, components 3","md5":"e712c7d3c8976c72a1342541925e92fd","sha1":"7a6a8cf6ef8c4c4401ab18b6b4309010714ae027","sha256":"15c18c0781f126dd726207af7660ed2b30627aff607387f3edee24788d0bce98","sha512":"07d95e2f1d9f852e09648066ed5e8f8afdba9dc2490e8285aca1d018ed3ec0340127d67fc1f88676d138493c6bedfdd1c3984fcb67fefcd424b13f69b2955ae2","ssdeep":"768:STN58tMWLzwuIHj0bdkbFhvHsjKlhoU0xA:08yWHwuIHQebz3hP0xA","tlshash":"02b2f123563b174aee617676028dfdfaa3a14c30a9913c94340672228cf50fb6e6c69d","first_seen":"2025-08-29T06:11:20.920554Z","last_seen":"2025-08-29T06:47:39.590667Z","times_seen":2,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":280,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/cryptojs-aes.min.js?v=1","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /cryptojs-aes.min.js?v=1 HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=b3QiiyGjRVwkXNGT; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=SI5mtyak22QKkYjJ; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-359a\"\r\nage: 4351\r\ncontent-length: 4790\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":13722,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (629)","md5":"cd93b7f0987a614bc17698503bcb6af9","sha1":"68a66448326499ff34c75bf31e2769b278584e0c","sha256":"8d4fae1a37a5b5338c889d0897b50024194b4d3ae94940e7e42c1c1423a1183e","sha512":"e3b87dfe10c0e3f3d801a85ae9c654a74eac22c2a93a757568a0d2b13755c36aeb5f9337e94a21db4ef2d1f0f1cfb98fccbbb0151d5cdf8d967730df96bfde98","ssdeep":"192:9BIGDmDm90mP9z8Ui015lN1I5rI2Tru6hMJFmHV+mdpwIfyAaYfKnNVYkUUFJZm3:9yiB0ez8UiIX1SrTegsEHJuI+y8Z7AX","tlshash":"625297c936edb94263963028587f6017b86b28b6945c4824f29cd4ddff9899dc03ae3c","first_seen":"2024-11-30T18:08:34.076577Z","last_seen":"2026-06-26T20:23:29.818692Z","times_seen":1206,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/eCnsB0DT.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/eCnsB0DT.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/CUsHs50J.js\r\nCookie: __ddg8_=0syTqpe6bxr3hMGe; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=dCGXjnjRMywNddyG; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-21c7\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 2751\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":8647,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8646)","md5":"d5e0b2455b36606b2aa417d060dff1a6","sha1":"52853764434381f0cd83e5868e0e39d10328a905","sha256":"c9e4d0b2c543f98541a082a23fbae3ee6c09d7e90ed6332fc92260b8e1c01a6b","sha512":"b0d2256be7f0dd1d397783b43ae3214b959cc3b8e15cdb515460324fac6967ccb346e7a53495a0dbb46a47ba76586735f32b96e97eb83f1257663407c00b9a0d","ssdeep":"192:4iFojMIZjkItgj6pnaJe/HA9iReMDjHMtpgCtAoRXSAd55rD1W55Jr0UWip8W4JQ:4iCMIZjy0LhYRHMAhPMN07i6jC","tlshash":"9b0240de520a65b00bd706fa81e846d0d6b00444f04d997c64f8dedf477ec8917a6bbe","first_seen":"2025-08-29T06:11:20.984381Z","last_seen":"2025-08-29T06:47:39.592161Z","times_seen":3,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/pragmaticplay.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/pragmaticplay.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=cdt6ZnXigQJug3ia; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=bQFz2Saom9867dOR; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-770\"\r\nage: 4332\r\ncontent-length: 832\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1904,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a7d8b662ed646fc3b9b3b18ffae282d","sha1":"b22756c8b2f9cf53a5b5b0f53265a2f3331edfe3","sha256":"698a39d7e57e623e036917ac7963c2ae6722fb9451db3f8a343ca2d3e3c1d497","sha512":"7d4fd6212a27ca260ea86a86cbd84b83ae1580aaa5db7349861b717ee16e6ecd4898cd3e4088a51d987d7ef093dfca18b06ec74fe301530266dc72125aad4422","ssdeep":"","tlshash":"1d4164c867ccc2a0c94a9bb71f19b46d56533cfa6f2188ade3b10a10751845ecc68dc9","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.828382Z","times_seen":68,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/nUmiNz8K.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/nUmiNz8K.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/CUsHs50J.js\r\nCookie: __ddg8_=0syTqpe6bxr3hMGe; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=CwtoVHIrPx2vJi9L; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-11d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 205\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":285,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"17f4551de070611d6532d3744c6a4b27","sha1":"0290821e11de6a7f289b140a5e7389996da4943b","sha256":"54405dc7fb7783e22affea8e19bdee3d73102ffc84976522c52c0e3222d9443e","sha512":"3a1b6651dd49e018778a1b16f420300bb48fdbfce1368894eb523d0f68d01f01340c7f0184ea19f5102322e5e85f05783d26fc21762d2fffc36634c56949eeab","ssdeep":"","tlshash":"52d02bceef7065b4bb00445d545bc762c724b90016986ac0d87b5aa13f109c68306fd6","first_seen":"2025-08-29T06:11:20.919366Z","last_seen":"2025-08-29T06:47:39.593975Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/ext/cdp-customer//v1/projects/233e4c5f9379d04ec864/settings","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /ext/cdp-customer//v1/projects/233e4c5f9379d04ec864/settings HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwda74x.life/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=HTslskyknRgbDwxh; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=LZyNHFhuXQZPnj39; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":271,"size_decoded":0,"mime_type":"text/javascript","magic":"JSON text data","md5":"12c4ca482e1b7bf40375503843b5f997","sha1":"49d40faea70af1183b0ffb901b2a31da7df67e00","sha256":"3476d8f31024437417c5f09513e2917124968baedbe03b67e65610ab25bc6b11","sha512":"2ea63ebe73591d6db25a6ab54c245b29b4eed22ec8827abc39b4db69b79207dd04689cd6a9257ff94145ced2358ff3e66a31e8e6aa672805960387df8e5e4e26","ssdeep":"","tlshash":"6fd0c28c25701dfa88d16e798b9c5809b5cfd62d50a59b097574cd800dc08f82a246b4","first_seen":"2025-08-09T06:39:59.043609Z","last_seen":"2026-04-06T22:48:49.753298Z","times_seen":65,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/eurostile-bold.CvV91m_H.woff","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/eurostile-bold.CvV91m_H.woff HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=RhxID2JCNxjR8DSX; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=B6tsZyNj04iEvxrN; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\ncontent-type: font/woff\r\ncontent-length: 96804\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: \"68b05e9e-17a24\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":96804,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 96804, version 1.0","md5":"2e116fd896b19f31034b0dec4106d2e1","sha1":"530e6e27f2941307b1e26f260c3a4ccf855fbe7a","sha256":"428c1711732ee01fd5bbbf9d3a4a777a83414f1894f5399d77b22dd3bd50c523","sha512":"3eada120506cc1280dbb2e199acd4a386983f855771ca0e71bd2cb810d26ac50436165ff029c8c58e0506471675d5db59e7519781495e763fda70c1ee8fe9061","ssdeep":"1536:sBOXXEUF4boG1Y6VafRnAPwQIF+RqAW3z+57es+v39nzdEvF7y4TGRYhgil:WOHEUabN1YcalOIFMqZgCsI3dREW4Tr1","tlshash":"b4931220d9f1293570275f7e60deb491bb04ad5068e07ece2873cc569fede64b729920","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-03-01T21:47:53.474623Z","times_seen":56,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":84,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/BZscnf8_.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/BZscnf8_.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/NCxdOIYd.js\r\nCookie: __ddg8_=6zeVylwwQ2py3ynY; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=dzqDU1ZTq3ytZkIA; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-3f5\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1013,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (539)","md5":"3684a34a49d0bfd5a9eadd031202d1a0","sha1":"1dd2311ef09e0e36b01853192371dc928613aea3","sha256":"4dd5d8d61841df4aadc0c29e4d97083c87c6f91f28e0e2ad65de81eafc6b0491","sha512":"fbec549cd0efad6f0b3b0e5f7da07bca18806d38044a5a89aea0c95f11e123750f96b89bc658ae01aedeb0e2267167eebd525de4c9d75922e1c17df112f405c8","ssdeep":"","tlshash":"f711440f24a9dffde24d5de8ae76653915f08ee932dc588bc2090c6192b9016e19d313","first_seen":"2025-08-29T06:11:20.916728Z","last_seen":"2025-08-29T06:47:39.595998Z","times_seen":2,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/no_limit_city.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/no_limit_city.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=inKiPFJTAK6uCKv0; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=I0gpjZWxUlJiL2Wr; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-bf0\"\r\nage: 4332\r\ncontent-length: 1669\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3056,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9ff4deb92ced493fea0625b4d8f88d81","sha1":"5e693d82d776b8fb15ceb7afaa908579491479d7","sha256":"e343b9027a32c87e4aced50c8bb605bb6e9768ccaa141db8a8414db1e1b32e28","sha512":"59123620f973543ac8a08919e9f325f18c723e61c9e7a9d1a27675aa938267d43165ac48e7edb7a4705928d95b5f091dcd90d2732a28c6eb89e41469fc66e465","ssdeep":"","tlshash":"b1515677db4279178b92011f53eff9102f22964fedc2012b48c8a2d3398ec569c543ab","first_seen":"2023-07-23T18:22:18Z","last_seen":"2026-01-21T08:18:57.060083Z","times_seen":37,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/flags/?v=2\u0026config=true","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"54.162.100.93","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:07:A5:B7:4A:00:EA:45:09:50:EF:4B:44:63:83:38:E2:97:F8:13","sha256":"6D:1D:1C:48:82:61:EB:EF:E4:D8:57:9A:EA:F6:ED:0A:07:BB:6C:17:71:6F:A3:F1:88:57:DC:E3:A4:E8:44:96"}}},"request":{"raw":"OPTIONS /flags/?v=2\u0026config=true HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://gwda74x.life\r\naccess-control-allow-credentials: true\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS,HEAD\r\naccess-control-allow-headers: content-type\r\nx-envoy-upstream-service-time: 0\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/footer/logo_mini.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/footer/logo_mini.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=7KVqqncvMlcDBQ5Z; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=6YvkMlxLrJG1Kuij; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-153\"\r\nage: 4335\r\ncontent-length: 230\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":339,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec921737dc68bdec198dbf790cf25066","sha1":"7783777f39dd0406bf43f29691d5a297b6cdb254","sha256":"afb8137f243326318186eb1680a2f30d060004621a320a6ca93b807ec16cbb9c","sha512":"ee0a8cf1b8f8f28432ff245b02d211d6cc29d22fd55d60ac70ff126fb9b28a704bc862e2b7ae10027554b50b03ed73ee48e7f373f862ac8edac89350268dada7","ssdeep":"","tlshash":"00e0c0c4616833d090100768cf7f6165a5e2f4ae035c044bf2903115b215fc7a062b08","first_seen":"2025-08-09T06:39:59.047675Z","last_seen":"2026-01-21T08:18:57.02182Z","times_seen":36,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/805e294072873e2afdcc2f500913568bac1a6ee7.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/805e294072873e2afdcc2f500913568bac1a6ee7.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 31160\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18533EBFBA763318\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 511\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tX8f86L6doPJlVFuJrJqZb%2BVc97VwBrV1aKhvLsh6SpRl39zEAYxudmYYyHxzVklPxPNWWjrlSA2XlaO7hd2VxICvgfg0dv5iHAI%2BqhI\"}]}\r\nCF-RAY: 9769b5491f854f5f-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31160,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"d9162bc1c1e7d67d56d701707a87b9b5","sha1":"aa450f1f4897d30cfda4acfa4c85f62229ecd472","sha256":"4c56057c81c292ac2a61c2f74001156361db602c8a9d3a72f7ef7a9dc9eb4154","sha512":"875b0e7533ddce7566153182fc1911cd7eaf4c6157699132081aa32ba3963dc87bb287e5f2da97c3ba0e2c171fcf3b5c3ccea021313000adf5183b2d9fa4c2d0","ssdeep":"384:09RNdhLsCaMS7aNCElmgxXlEN/g3Ur479MEJg/71dD3mbx11GZYHs6tiqlQa6dOx:0PtgrN2UH/g3Use/7LD37+1lXNAcvNL","tlshash":"b4e2e04d867c866b232c4f33081847f8ff2497639fa523c650ea895d23295c923868ee","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-02-25T19:06:54.219522Z","times_seen":69,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":198,"dns":121,"connect":55,"send":0,"wait":87,"receive":1,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/bde39d2cf80fdfda99f94a09f98ea3e7.png/QeB4EAPO8RU9bCNa9LX89tRKA0fmOT6xSArX52cM.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /casino/games/bde39d2cf80fdfda99f94a09f98ea3e7.png/QeB4EAPO8RU9bCNa9LX89tRKA0fmOT6xSArX52cM.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 511082\r\nConnection: keep-alive\r\nlast-modified: Wed, 02 Apr 2025 13:57:32 GMT\r\nx-rgw-object-type: Normal\r\netag: \"92e2f4e846193281be0b1d1d77b435eb\"\r\nx-amz-request-id: tx000004a688b3b0178c2f9-00687df46d-1681c85f7-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":511082,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"92e2f4e846193281be0b1d1d77b435eb","sha1":"081cbd706f129a27843eaee07f688c3af9d06cc4","sha256":"2a23a278398c1a889eb67f7273c26937fd47f8b0b474a7bd94bc63b87fd0433b","sha512":"9e9a2d9f12df24f9a16ce8b57936e624cae68f955f16c3ec2584d24e3b1feec0fc634ab7a46505099a080055c33b357427f1858adbe2fd5d3a136df98c9ca964","ssdeep":"12288:rxmKzSxlzqAY28qx1xRWD6c2Zcf7hlBkKmKx1Ptg1R36j:rJzSzTY/q6rhlBkKm8tGAj","tlshash":"4bb42317efcbda01976f1095add359700a61645ae8f78f44f8cc8c29bf6d43206ea268","first_seen":"2025-08-09T06:39:58.792738Z","last_seen":"2026-01-21T08:18:57.013066Z","times_seen":20,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/ext/cdp-customer/v1/p","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"POST /ext/cdp-customer/v1/p HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwda74x.life/\r\nContent-Type: text/plain\r\nContent-Length: 734\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=OyLreP385PqMe68O; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=6zeVylwwQ2py3ynY; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\ncontent-type: application/json\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-07-26T12:16:11.012554Z","times_seen":178175,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/hacksawgaming.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/hacksawgaming.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=pA0Ub5dZiAd4zeEU; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=UiHn8rLlt7SJXstZ; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-18a\"\r\nage: 4332\r\ncontent-length: 237\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":394,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1189a31541a9827c632f4655e907a63f","sha1":"2514bf0ef8985e5ae82d1bd7229d42ddb95749a2","sha256":"5707ca19c71b77ed32be06c64d228c4e3848be28b7cf66313841dce2a9f4509c","sha512":"b9bfa0c9a1d559bf7f5ae01cd3c2d7bf2b9ab8c6f50bd67429c72d3587e3777c40d8568b07cf62232de112a2c7128f808b6ac99d872bf32347c9202f3a84b619","ssdeep":"","tlshash":"34e068b563fea580a30ca7305275a136dd62b4faf8e913b19cc22b02329518f8e5c189","first_seen":"2024-05-07T05:57:01Z","last_seen":"2026-04-15T02:03:05.963922Z","times_seen":68,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/mascot.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/mascot.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=inKiPFJTAK6uCKv0; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=6eXLqB5ZnfeKLaNG; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-2297\"\r\nage: 4330\r\ncontent-length: 3943\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":8855,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f4826d06166291a62e32c7f794b4fc8f","sha1":"fd62d06d6c4a677b4ac90edef20e308ee6e0c806","sha256":"1f12a2034f3b0d3e73df01ed1ff322dc8f7aed85d65e8e801ece342be0ad314f","sha512":"f0e6d347bee15f32163a3e987d5d23cdbf2fd0fc084488f1e662dda61b2f7f96dc2aecaa577aa44052c788a45e6c88310f7f687821a66ef596a99a039976ad02","ssdeep":"192:EOzwoc6e9mtS4h/udzl8bfpDZlcOyGh7Zljy:Eiw36a4hGf8bpNlcOx7zy","tlshash":"a20284d893a8e2f8f606b7f8c527d8347a6628f57f10e998c7e56955e50006d48eccc3","first_seen":"2023-10-28T21:30:08Z","last_seen":"2026-04-15T02:03:05.825392Z","times_seen":46,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/entry.B0BOi0i9.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:34.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/entry.B0BOi0i9.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=G0qIZLgyUuq5m7Wb; __ddg10_=1756449993; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1Xpl6HZNrCRcORmo; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\n__ddg10_=1756449994; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-1080\"\r\nage: 4349\r\ncontent-length: 751\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4224,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4223)","md5":"61f0bd26cea7d117c5e7c486acc68d00","sha1":"6c8bcb0f1c4f0fb0f07276c5eacd898124ed10df","sha256":"f099b430b92e0f00145cb9382b4a9ae5fd988a1e4f4bfb3043e5a938efc4ee39","sha512":"f9bc1136e2349b7ac1471ec7801d8047312f950e30808796e33dcc45bdf4cc68b709d9a30c6ae3f2cc7371b4d47bd532b8cc59e09569e52f1d9a1b30cb0b91c2","ssdeep":"48:qBK1KVrwxo7yXr29OKJgbKA7cb2XYKBKJKeKbKaeEaSkeEnS0SSSWS8VSfHeEPeG:qxi8yK9RHN4MEBWWXIShv7JRhW4D/qi","tlshash":"4491ff7fb288f6580127ff02a4a15bddf42b23b0b2522a15f2d5523061b67d1bc29d7c","first_seen":"2024-05-30T05:56:49Z","last_seen":"2026-06-10T14:34:42.966261Z","times_seen":189,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/currentGames","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"GET /games/casino/currentGames HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=QqCDh8hZ4aqlMkFJ; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg1_=J3rmgwk360bkspZWr08m; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 78\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: e715de2c-9272-4bab-b192-fbec13430fdd\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1507,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3767d1c2b4bd910247f07c2b39e030a2","sha1":"5e4af299122890c3c408a9b4fa19e6d73b4fddb1","sha256":"4172b7da39ecf6da791a8618d45dd4b5977b6c0577aeaa8e26ca3300484d9da3","sha512":"9b37a8c2ae296fabb41a6d5e09da3db958f401839beddf43604c781cf3348a2bb633b617c0c0fea0f59b67cf66ae7f3cf9dac122073fa9f5348351455398e76d","ssdeep":"","tlshash":"633103cab7a90c9dc44916704f0737f5948c392b124a8e826ddbcc35c2805ff754063a","first_seen":"2025-08-29T06:47:39.500911Z","last_seen":"2025-08-29T06:47:39.500911Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/onlyplay.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/onlyplay.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=inKiPFJTAK6uCKv0; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NreNO0iU7ScZzD2x; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-133f\"\r\nage: 4332\r\ncontent-length: 1949\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4927,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"012276e2cb9c3b370fd12c17771e6b5d","sha1":"5ed2db80f006ca50ff52b670d42cb06e6b2e5e55","sha256":"8cfe42bb41f96fe158e5d1d6765dfc1605ae47806a46ae96c4b9c7e2232c6e0a","sha512":"7f343af282052387bcee65cab1f74ac6e921ccdaf337120783aad5ce284ce00f8ee26de8412aabb563128086060194ecb5488ea602a2acb524c7b04d79426991","ssdeep":"96:K1FIFNEWh5Hy155cIiUHoL00uMcQThxc0K06lw2KC8qU:K1OFRKGUg0NQTYhlw2KCG","tlshash":"53a164b8b3e467d0e244e7e0e616d470304a3a723fddd2a087f57e47952902d45ac9e3","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.906023Z","times_seen":69,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DIBeZulZ.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/DIBeZulZ.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/NCxdOIYd.js\r\nCookie: __ddg8_=rrOPXgDekf1o2Ja1; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.120; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=p1iHv4wefycD2Zwb; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-1c2\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":450,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (449)","md5":"31f1b7502842872db29f6910ff411be2","sha1":"27afebefbe7371ac7efcb4b079e17bed79a254bc","sha256":"8c9c9fa06a9cd22b2ec61e6d687fa48741f31d2d99cbe7e6e227a820faeb8489","sha512":"a99d937c752d6edb1debf5c2fac497c519bb09a88d0f9c78dceb8e762bf07d55d6ab76bd846517a9d805e7d1080d6b571b373181f37dfaf4ba496664cb284a3f","ssdeep":"","tlshash":"a6f0e51fd59586b88168ccf8d478d6702a3325dba7cad7e4c2cf07706310070d589b6b","first_seen":"2025-08-29T06:11:21.024101Z","last_seen":"2025-08-29T06:47:39.602091Z","times_seen":2,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/batch/","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"54.162.100.93","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:47.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:07:A5:B7:4A:00:EA:45:09:50:EF:4B:44:63:83:38:E2:97:F8:13","sha256":"6D:1D:1C:48:82:61:EB:EF:E4:D8:57:9A:EA:F6:ED:0A:07:BB:6C:17:71:6F:A3:F1:88:57:DC:E3:A4:E8:44:96"}}},"request":{"raw":"POST /batch/ HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwda74x.life/\r\nContent-Type: application/json\r\nContent-Length: 823\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 06:46:47 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://gwda74x.life\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 1\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-07-26T12:32:49.524616Z","times_seen":41895,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/ext/cdp-customer//v1/analytics-js/inAppPlugin.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /ext/cdp-customer//v1/analytics-js/inAppPlugin.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=Gu5cIgSGnksPSrZH; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=KaMYqgi6TL6ftZYI; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\netag: W/ecae41c11d7a4fa8113a98ea436f432c\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: public,max-age=300,immutable, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5854,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5854), with no line terminators","md5":"9d809228dc97f0373ccbef8c5e4d6f36","sha1":"3e737a42cfc5a0e28eb48af1ee35ddf1261a08f0","sha256":"d9505a91f86c817da1c30c03472c862b761d0f0050a563edce2873a8e30a64f9","sha512":"63161ae066f36ecdbfe16b8f3762416ba5d8d73d5158d15516ff5a43cc9ff49fd351fb4d0fb33434ae32a1da2f5656f6f89b84eb13215c7cefb1e20ba36de675","ssdeep":"96:frOeJ1t6SzUP0w3Gt+buZolWdTW2ELyWfQWYrZ6y77vGEKQDCMZa3E2byhApAa7e:3kL2IbuZolWdCZyWnNEKQK7bWApA1d","tlshash":"71c11e9df393e82d01f3ea6de47b6033913e77036058b521e017cac1696878d6613bba","first_seen":"2025-08-23T09:38:09.641742Z","last_seen":"2025-09-04T20:54:35.092061Z","times_seen":32,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/launcher_settings","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"44.194.218.116","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 14 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:E3:24:32:5B:DE:76:F0:A4:43:7F:C2:84:CD:98:D0:50:48:25:7E","sha256":"B0:C5:D5:8B:41:34:A0:3C:41:21:0F:E0:A4:E1:C3:F7:66:24:A3:25:E9:E6:67:D5:40:EA:68:FB:D3:70:73:74"}}},"request":{"raw":"POST /messenger/web/launcher_settings HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 378\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 403 Forbidden\r\nvary: Accept,Accept-Encoding\r\nx-intercom-version: 3ae6ae59759e34dfcd054b37adfdfe5031a217a1\r\naccess-control-expose-headers: x-request-id, x-runtime\r\ncontent-encoding: gzip\r\nx-request-id: 001rh0o4o8opb7qo6m10\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-cache\r\naccess-control-allow-origin: https://gwda74x.life\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.024854\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":113,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f394ceb8356ed41f76977cf8598b490c","sha1":"5e6a9ecdeb43b2f9f5abda336de9aae7f27f8b3b","sha256":"f6737ee3e9e315b16278e02dc7c40f2ca96b97ecf625d335b4587deecd6d64b3","sha512":"fc24cc134c9d8786e58018d35665fa602e73ee819f10d9905d3f502b2706f87d2c350c43bac2598a95e54f4577671e5f9cb7c8c3eecc9010b7f6cc3f33b21bcf","ssdeep":"","tlshash":"d6b0120fc9566cbbaba200476c0a52a1c9d5d0e1d0f418c9845cd12cc5cf142de1769e","first_seen":"2025-08-29T06:47:39.604969Z","last_seen":"2025-08-29T06:47:39.604969Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/463211d8a53d7dab42157e08e3ba3435.png/3jF43bxkEgXwrlhbMo3TgKzQF9EqR4QIOK1QvLdd.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /casino/games/463211d8a53d7dab42157e08e3ba3435.png/3jF43bxkEgXwrlhbMo3TgKzQF9EqR4QIOK1QvLdd.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 566390\r\nConnection: keep-alive\r\nlast-modified: Fri, 02 Aug 2024 09:48:31 GMT\r\nx-rgw-object-type: Normal\r\netag: \"43a5036cbeb9805da9a59b954b6abbe9\"\r\nx-amz-request-id: tx00000ee560cd36d73b63e-006867c47e-162d5ff9f-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":566390,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"43a5036cbeb9805da9a59b954b6abbe9","sha1":"ac6da28e7472176a2e19d4e65b3018fdd5363d2d","sha256":"bd6e839f0658e4b87100f059bf0003cc1ce75859a62df4987c4ddb5c38131b02","sha512":"0a22948891b7b0c9710ff3246da5bb567906c572571bb67726926d97401fa811e1c8853c1dc7ec58a21b7f925d94af6716796f07accf15b528d00b4339310549","ssdeep":"12288:H6avv/X+Kv69uQ+uuS03mU9YTiQ84sdfQh+azkWVYA+1H:Vvv/X+Kv69xub3nKvsCNzko+Z","tlshash":"c3c423930fa6906ff216d21df0650c685efb54212e5f05dd2a1faef905b039ad390637","first_seen":"2025-08-09T06:39:59.116547Z","last_seen":"2026-03-01T21:47:53.319472Z","times_seen":21,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":33,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/ThreeOaks/13475d8ae79a47b9ab864b8c99d1c41f.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/ThreeOaks/13475d8ae79a47b9ab864b8c99d1c41f.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 27909\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"4a98cfb3ada38b3d88ee47f29ca3a9f7\"\r\nlast-modified: Fri, 20 Oct 2023 08:19:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 185094C90B3B54B5\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 2941\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NNroZbmL4u3UyLCg2QsOf%2FwOxXVy3wgpNfF4Lp%2FeEokr7tw5q2sK%2FcecON7sxWocak0gujw0TSSgsWQIrtDq4q9vXkudevPLUB6ngz4H\"}]}\r\nCF-RAY: 9769b88d1cc9b920-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27909,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"4a98cfb3ada38b3d88ee47f29ca3a9f7","sha1":"50724d58eb2e5f1cc96d83186bfccafe0053d5fa","sha256":"8164bef11cc409666cf73f882967845bc9d2dc64174acfdc8d330a6cfe09f7dd","sha512":"e23a250b8ffffe3305a0ea58ccd0574f20bbc7ed0e954bb16a512054173ceabb1dfa556d9f9a69299228fa2c567bad309ec93dd9e7e27bf34ce8da5537f30c51","ssdeep":"768:O+WqAchrLN7L0/xCatgWIK7IbQKQSIqE4d:NbzhrhF05IK7CQKQSBE4d","tlshash":"42c2e06254434e8e0ebf4ace1f9595e987a3dc786f98b117dca32b82634012899de173","first_seen":"2024-05-07T05:57:00Z","last_seen":"2026-03-01T21:47:53.410872Z","times_seen":86,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":272,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DEv5PRLn.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/DEv5PRLn.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/EFWGUdKZ.js\r\nCookie: __ddg8_=BqvzQJOt7QzyX9vo; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pA0Ub5dZiAd4zeEU; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-8a7\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2215,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (2214)","md5":"fb3c16dd8853087f42af87a5d379a98c","sha1":"0dc29e100b227ba83f0898d2ccdb12e7963a597d","sha256":"89ae6bcf39a4e0501924e50bdf4a23f87f64e993ebbe6e83a926cc8ad000407b","sha512":"0718c3e6dec2ffd2c13d49f8befbd1154f826cce3bb78b2159ce095fab2a6983b3fe78c0fc1855c55684acf06aa0fb386493593980c06b288431626ac55a7e6b","ssdeep":"","tlshash":"594141da274e0918340e8382c885f9aaa73763a5b5f3d46c3ce29dc77201c43f6b0e65","first_seen":"2025-08-29T06:11:20.750658Z","last_seen":"2025-08-29T06:47:39.608139Z","times_seen":2,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Icons.2uJgGonT.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/Icons.2uJgGonT.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=w6quJRDlnNGY6tom; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=s21ETj7tduiDdwhX; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-2ce\"\r\nage: 4351\r\ncontent-length: 166\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":718,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (717)","md5":"a2201f0cecb3c2b9de28888ed282369f","sha1":"41f15dde279c425f33ee43514a6c6ab9df7a527a","sha256":"efbe59e0ae10d48fd1907620fb08460f42131ce35d3b66bdc42266ed98b8f443","sha512":"560a374ff3a275e4bed7bea54d7c0c77446b3d241dbf169e1be08a791b4869da1f2d566b0c639d45855210c28e405334de8ad68492b3befe0a83ac18cbf1e2f6","ssdeep":"","tlshash":"18017c7e364efb435b2bdf9f8249402315ee67b7dd6142406287783ab676a50190f073","first_seen":"2025-08-19T01:32:32.308655Z","last_seen":"2025-08-29T06:47:39.441834Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/default.Dfe-jFN_.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/default.Dfe-jFN_.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=iOy2BKuOdWHCetU7; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1xKhwpFq4olS56g7; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg10_=1756449999; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-af07\"\r\nage: 4353\r\ncontent-length: 7312\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44807,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (44806)","md5":"710327a09f66ce88e7d8a5db8b3f6930","sha1":"7929ad34e17cad6082e1ad813cf59ae439047483","sha256":"68f4e9343e37a3ce1d068cad8270feb071d5f5c57fad112eef83e39b46e78d79","sha512":"c98627c8c24586fa9cd3874afdb30ffdd44474b678f06feb1956226f3977eca2b078a26244c454de7cddf0c8891e07c837dc78718c221ee142795e3f0a9d8c6b","ssdeep":"384:G0jdhhDkKSWJ7Hv0DyikxbAv0DyiONt3JnymteZFqy/bZJWrfv6/XL:LpFHvkQ+vkO6PF1z","tlshash":"b8138525761c602cb53bcda2f5d0169e2035f707d5278bbeda683629c9cb2d72b31788","first_seen":"2025-08-29T06:11:20.747417Z","last_seen":"2025-08-29T06:47:39.521441Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/RoYp9U0HjEHVsVWondFCkIWcHL5B79o9pXTXL9WP.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /banners/RoYp9U0HjEHVsVWondFCkIWcHL5B79o9pXTXL9WP.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/webp\r\nContent-Length: 212208\r\nConnection: keep-alive\r\nlast-modified: Tue, 08 Apr 2025 11:12:36 GMT\r\nx-rgw-object-type: Normal\r\netag: \"bcbbc1250da50f0814df99c1c130545c\"\r\nx-amz-request-id: tx0000087a60dcb2f11345c-00687aa0a7-1676fdcf0-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":212208,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bcbbc1250da50f0814df99c1c130545c","sha1":"d94e54f5a954476cf0559082401e6140f61c9e6d","sha256":"eaff6ab28594c395cb22b475ac748d33b3f969c7ba320e0b12dda9f6d4f1ae45","sha512":"1431e125bb71c2e24997ac88b332b564d6aa450216d0a530c619aed703f78ac056505cce02d0757a633703fe3a787d05d2e2969392ad59214a3bfad93d67dc41","ssdeep":"6144:IdkAXBhSzFo8u34Oy9WEdXzq+4az2XypC:fqBUoL34vFX0hL","tlshash":"3b2423b48093c40759b75bf77cc76419b661be12a87e1ad01af0efbc593c192f24d982","first_seen":"2025-08-09T06:39:59.050762Z","last_seen":"2025-09-11T21:42:04.054917Z","times_seen":8,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":186,"dns":95,"connect":43,"send":0,"wait":86,"receive":132,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DNbMPNIg.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/DNbMPNIg.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/CUsHs50J.js\r\nCookie: __ddg8_=0syTqpe6bxr3hMGe; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2EYrRy5pISaDI0ia; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-d13\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 1270\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3347,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3346)","md5":"94da510b6581c13c498b25615e9008a5","sha1":"0f2e7dbe88f7194b46520d5ad21e6b63a340e80a","sha256":"1356b031cedbb9588777cfcba7459f32750cd4b75382e01944429bdd01b4bb73","sha512":"2178d0b8b552b2ff58b1cde65b023423c45b01e1b623f5280aa881aeac9ac4ba9f511e8a717e5c279ce194dae254316e9ee8ac9d05649dd99acdf3975cfd08ea","ssdeep":"","tlshash":"ec6130fc1635a57226eb17bb43620ca282764455f049b27010da8f0d552dc984bf7ffa","first_seen":"2025-08-29T06:11:20.889469Z","last_seen":"2025-08-29T06:47:39.609761Z","times_seen":3,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KN757LMM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtm.js?id=GTM-KN757LMM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\nexpires: Fri, 29 Aug 2025 06:46:37 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 29 Aug 2025 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1348:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1348:0\r\nreport-to: {\"group\":\"ascgcycc:1348:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1348:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 127384\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":376230,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9775)","md5":"37db4d181e63f15453496f8c6ad91bb1","sha1":"dc738b30bd94142baf7e48e7fadd08e35236c4e0","sha256":"4430bb040f1e8e81cbf4368be94739833c94df5cf4fc3bff42f8df34903d63ad","sha512":"f08df28a1d65fd99006d8e75e6e97e23b4909d9a40039293db7c51cf9138c442e18c7682576f3bff8473fc0bf8783c2cea8ece84141b5483492565a07cb83b6c","ssdeep":"3072:6RZW/ugS81VuNROC0ex3hNXJzzDXajPOLgL0dYBuoJMjcCuRMqvFxpq4U7teGc0J:QVMu3rxZjXLgLuNuRP7pq4UZeXEqE","tlshash":"bd8419cdb3c6746683a2b478403f014ba17b69a2f84cd895f185dce42e74aaa4177f7c","first_seen":"2025-08-29T06:11:21.0288Z","last_seen":"2025-08-29T06:47:39.610397Z","times_seen":2,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CBejlb-R.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/CBejlb-R.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/KHcq37__.js\r\nCookie: __ddg8_=0cfjt4j3XmoWOtR2; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=UblGtOohdVe7s0WO; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-4b83\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":19331,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19330)","md5":"0bc56942284ca8679471c9c8e24f9c4d","sha1":"765b98a3427fd41a6d385cde33c01d54d789b281","sha256":"b199b24dafac08d9a4e458d525b448230920f9b13f267a0a9521d54a9b782415","sha512":"40a9829a6a20c7f59428299ce5364cd5c1dfe6684f9afffedb9e267bcc336b996f567c43fc71582d8762acc9f28bb13274d3baa225457eb94a2abb9e6603956a","ssdeep":"384:ebLmDw0GjHIVo6eR6o1Shl449OsLV5jbHQ6NhWWxZ9HqDXRoOkm4Zes:ePmDw0MHIVo64X1NdshJTQ63WUG4h","tlshash":"3a9295c832c7f5968793197681bf140bb23e6d85a40d8892d53ae0d87c7486c867bfed","first_seen":"2025-08-29T06:11:20.940874Z","last_seen":"2025-08-29T06:47:39.611445Z","times_seen":2,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/currentGames","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"OPTIONS /games/casino/currentGames HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=o2dVdJy1PmKy4vGA; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg1_=iMBLZIO6odND4IlF53Yt; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:39 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: baee9beb-3160-40b9-946f-ec670aaa56e6\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/common","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"GET /games/casino/common HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0qNrb83w1upxfa1T; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg10_=1756449999; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg1_=yDYm0w5JWShhZ9ZmHuIB; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:39 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 78\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 4b0c46ac-3d51-4860-9b6d-f7918ccd18bd\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":17276,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d46ededaa1c058a66be0a135a6279c52","sha1":"5e564f81aa4a218f6a4cc8a9966ebed89ae335e3","sha256":"5b35c779eb3a34da003c5435dd1c22ac5e93c0630495c3211519ee2377a49204","sha512":"96923842ec8ff0403bd0860653684ee313f5a053b725fe6fb2dcb83d26379d82bd47143b178f6392a619b7a75fed2eb2a89fa1a2a19d4aafc67d7dd16220a6c9","ssdeep":"384:xA9U722OK4EBWpnqGo4T4tvKXmZnoh9XjktDo3sybmHwI0EsBYHaPgWSzxsNfHFY:ghuDgI8SaRU3v","tlshash":"7a72cf2ab884e95629331d70f917bcfaf5fe080fa8846f51dcc54e4858e277f6201ab5","first_seen":"2025-08-29T06:47:39.532003Z","last_seen":"2025-08-29T06:47:39.532003Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1782,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/common","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"OPTIONS /games/casino/common HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=veSmE6qnYIYXnSHa; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg1_=oThELyyf63rzQfdJitFf; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: 76e4f0b6-6f99-4ea3-a5d0-bd60bfa7bdb5\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/api/visitor/v1/configs/default?jsonp=true","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"GET /api/visitor/v1/configs/default?jsonp=true HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 5236\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, must-revalidate\r\nSet-Cookie: WEBIM_LOCALE=ru; Domain=webim.ru; HttpOnly; Max-Age=86400000; Path=/; Secure\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5236,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5236), with no line terminators","md5":"af0285c7759f2c444f390cdcbe7c59b2","sha1":"96f7fae6a2d3e2deb2523ab413d7640dc12193c2","sha256":"9c6da0b4e72f2b33048c4dfa3daaa21b36f9f16e20d579a9074ff9f6015469d3","sha512":"05055e26e22eb51ea0f67747253484eb5be06c7da87d918ac2db7e43c7582e77a5db1fb3e800f47f9581780465070320b34340813ac9b9fcc3be0562abb9acb8","ssdeep":"96:mXzMOTx4alggVgY+/Syo6ygym/WYH9XfSa3ZSQ+yIahd4N:k1OVY+KH6Lt/WYHMa3IQ+/","tlshash":"b4b14561d066003b16c96a56ed396acf277492d2d740ef3e8f1c0917f38d6b562437e2","first_seen":"2025-08-29T06:11:20.944794Z","last_seen":"2025-09-11T21:42:03.937547Z","times_seen":4,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/images/files.svg","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:41.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"GET /v/images/files.svg HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 11762\r\nLast-Modified: Wed, 20 Aug 2025 07:24:07 GMT\r\nConnection: keep-alive\r\nETag: \"68a57817-2df2\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11762,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a05b040566ca5377535a07f94adb66ac","sha1":"fd3d544bf14f3c9ad33f6c9d17a861371d7b684d","sha256":"e85418c502fc12e921c30c21ab3c5ab58dd063e19b73fa231bd0d7bec2a605a7","sha512":"346d1a3979f32959851081a764e87950a602560638e9f87594569c395b6347844338faebaf8016982e269134978867497ad4152e6e4cd86ad681e61f09f21730","ssdeep":"192:y3IN8A3nLn/NTLpsCPeweE/c+okq+eRuDUfMYzLnoP+VhwOwyHN2ELrh:wIN8uLFUOom4zLnoPqhwVQhXh","tlshash":"0b321bb23efe2a843ef19e75852073f59cf1bd152485d22688da7202313364c8e9e5f9","first_seen":"2023-11-18T23:23:23Z","last_seen":"2026-07-24T07:40:56.618575Z","times_seen":1790,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":76,"dns":1,"connect":20,"send":0,"wait":19,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/517d2e03971d41f6875781c9d5bd4443.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/PragmaticPlay/517d2e03971d41f6875781c9d5bd4443.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 28436\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"292c32f96313eb629c6048365b9cfd30\"\r\nlast-modified: Mon, 06 Jan 2025 19:16:14 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18502F9314D16366\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 6953\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mhCBcYrelxUwJ2kfvpG2YK%2FiEEDo%2FE0kg30SA83fpN1d6qpmWPFvch3WAgb00RR8gzuqvBE4BaHJx%2BZGbfODAfdWhHJZ4785D5lnpqD7\"}]}\r\nCF-RAY: 9769b88def0cb903-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"292c32f96313eb629c6048365b9cfd30","sha1":"6a4d8d3da115b58939986073e0f1e6e9a169ff75","sha256":"31082483e8edfda486e628f211c772c0638b940f0838dc7bccc910fbf23d8d09","sha512":"078c6bef153f7f4958a768a44ad93ed5f3c80c46ebcc36af22bbf63af8afc009609495d28562cf4e344218b5a91d7b90923d98094b3153b71f70bcecfa065684","ssdeep":"768:UELWwDo/GftPDWMePOGaMfMtRY3vBmG7NsMIZySnx8A06c:rWlGfRDX0CtS3AGJ5I5xO6c","tlshash":"55d2f1a75637eb3d2f64a1b9588bcc7fd1899acd417e44d18389994c124f6db8372c0c","first_seen":"2025-03-21T05:40:08.927157Z","last_seen":"2026-07-12T17:41:43.58519Z","times_seen":35,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":279,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/BPV3sVQV.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/BPV3sVQV.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/CUsHs50J.js\r\nCookie: __ddg8_=0syTqpe6bxr3hMGe; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2nhqNQ3P4qfk8hJc; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-103\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 196\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":259,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"32da6d97b48fd479f71d98c425f871ea","sha1":"24fbe2751aa9529b7c7204eabb9ebee01fbd6d16","sha256":"2f198ede87c8b55b544e70fcb00943886b5b50ddb629bffc33ce3fb4ee8ab992","sha512":"6eb397691431e20575694e9bee95b4cb653f1bc82ec208f9fb103d89be924e96cc79765a81e73c2c5d7646dc2093225e238fa3f228da3a16a989623aea1084f2","ssdeep":"","tlshash":"bdd0955d5033d0b41575057904db0d06d14754bd373057246062db75279c4d3474fe06","first_seen":"2025-08-29T06:11:20.92174Z","last_seen":"2025-08-29T06:47:39.614838Z","times_seen":3,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/notfound.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/notfound.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/Home.CBZvEtgP.css\r\nCookie: __ddg8_=RhxID2JCNxjR8DSX; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=sgfJXyMo4SWTTplS; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:20 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-4f4\"\r\nage: 4338\r\ncontent-length: 660\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1268,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d407ca6493dfd5a34e7f79fa4504c402","sha1":"dd9fb47686492da351804b5826accf2524ab7dfb","sha256":"a0ac446a4d2979bfa2f6f73339f7087e6f7ff83435b3dd7f7b363c049b2c3bfd","sha512":"473308352777d8acb3d5d35275465ad7739729a4844908986ccd5f4e1041c0cf931cc328bf2c3f23035b218da4173afb835eeddfaf114304f5af1aaf3011c07e","ssdeep":"","tlshash":"2321b7f9932020d4dc075bf8dfa638d98007b9fa5e5002cba67471153308ccee401b5a","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-04-15T02:03:05.909912Z","times_seen":76,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/D7g2Y9Ik.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/D7g2Y9Ik.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=iOy2BKuOdWHCetU7; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9RfPhCvtGRlzyqeW; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg10_=1756449999; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-23e1\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 5\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 3863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":9185,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9184)","md5":"17f4b640bfbf870f44fd3b9f372e4030","sha1":"ba16baece8c01d4e409cbcf83f1b699785d954e2","sha256":"9dfec4b4ce52ca584022a42d697b4afe2d6bcf7cec5a7581feb5192e127aa7c6","sha512":"04ab44f245fc347f4b7020b2ce3753346e7767ff2c758d696b3c97201a70659f07dd5b5cbd26b336647d942e9b32ccd0d2862b0bfa7e335e82e35c2de66457e6","ssdeep":"192:EqsxSEFu6ZufGq+wk5q2IkZQ+tOWwYpsTctq0ipgNE7oVKRpnKFEN:EhZ8fKwkQ2IkDLwYpfqZplOKRpnv","tlshash":"5d12eae473ac72aa59620dd12475481de434e6243b26e4d1f2ba34bab4d7c44b273f3c","first_seen":"2025-08-29T06:11:20.793603Z","last_seen":"2025-08-29T06:47:39.548541Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/iEBOQDalhuG0fXan5LmUzp3Y96iPELLE3r8P9teA.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /banners/iEBOQDalhuG0fXan5LmUzp3Y96iPELLE3r8P9teA.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/webp\r\nContent-Length: 128198\r\nConnection: keep-alive\r\nlast-modified: Fri, 08 Aug 2025 13:15:07 GMT\r\nx-rgw-object-type: Normal\r\netag: \"20a8101db046fee535b123b1d9a8825e\"\r\nx-amz-request-id: tx000003f785e827128dd9f-006895f86a-16cd69584-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":128198,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"20a8101db046fee535b123b1d9a8825e","sha1":"7b3cccbca2a0d82553478188e5995ca41bf42e33","sha256":"24fff929d89744ba6e6f87fd1341f47b0efa4bfd76f950988c14606c4f4f6982","sha512":"ef1348855152c7709294f065a0a02d6637bb61b0ca3c7c7a38085756b924963440b94c037988e4510446204c9645c8471e93dfbae6a49a8cc4f963654ddc72b2","ssdeep":"3072:V5PYj0yR/gDkYT3d9koALv93+rAozxUqrb19zF:IYyR/+kcXkDLv8rHNbXp","tlshash":"bfc312b0866453f71d9884cf9cf7666bd10b644b0113299efe5f92292a1328d2ff2d12","first_seen":"2025-08-09T06:39:58.892795Z","last_seen":"2025-08-29T06:47:39.616136Z","times_seen":6,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":164,"dns":96,"connect":30,"send":0,"wait":60,"receive":65,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/home/hacksaw-mines.webp","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/home/hacksaw-mines.webp HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=A2LCVmocpUFMqwPm; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=vpE7EMdC4sWCBuLX; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 0\r\ncontent-length: 167720\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":167720,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"beaf795ddb57e557f9ef5bebe4a70e11","sha1":"e37cd31fc75d28b382f053ba7c5da306def119be","sha256":"72a11bf5c166c06de55683f827225a12649dc2ac5852f2a4f46838d285c3754f","sha512":"fdb558a4aa70d0db2670bde67cecb08f470f87e34d028cdcef2735e75916b89ad1124f56fb55abe9f92c21e6100363d9588ada6092941bda85173306d06ee22e","ssdeep":"3072:fNOoJ3KF5TvYdwVVDdMIhhl1tPGDnSU3sbYwPNjK8JJFjfCurdlJNd:73qTvlbRMIhJqSUqZXFjfxrjJb","tlshash":"4ef3122b1374ed91f3fd8a357bdbab46a3406d26cadd5722c270d409b8b71d88427d21","first_seen":"2025-08-09T06:39:59.030551Z","last_seen":"2026-03-01T21:47:53.238491Z","times_seen":29,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/tournaments/cup-desktop.png","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/tournaments/cup-desktop.png HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=A2LCVmocpUFMqwPm; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wU9rivqaqVykDoWE; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 0\r\ncontent-length: 100020\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":100020,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4fda67fb1f219b51734a424ee8bfed2b","sha1":"edaa5e3e9b2e4dae8e90e9719186194e9e5d0f72","sha256":"b00593999680b32a47ec2d142bd1a9e45238f392351c56353ea904d1beb60cc5","sha512":"09cae252dc84b051ecf26be9e8019241a49bf4c81cf8e5f6f86a6c9b3fda99bc9bf85701652a2eef91a0df56c5b88c4d1ae2aed38d34ce2dbedaf9c1f28e7a14","ssdeep":"1536:2iUNqhSFbeDH84FedlkvMLatgbDMYdeeY8oDaeOlqp6x13kzLxRu8WoFKQBRmY:CEhSYfFedyELlDM6JvRxdkzLxzBgY","tlshash":"98a3125ad5e2f613e648ceb6e23cd33c57f63e8b3a1976062db1214ae5c152c063943e","first_seen":"2025-08-09T06:39:59.110732Z","last_seen":"2026-04-06T22:48:49.663318Z","times_seen":48,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/collect?r=8511063","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:41.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"OPTIONS /collect?r=8511063 HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=eqGrh8HWf6VTt4kq; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:41 GMT\n__ddg10_=1756450001; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:41 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:41 GMT\n__ddg1_=Ncmy7KBtm0gdjYIWP5ky; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:41 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: f7141783-b700-4cad-947a-55e2fda253fc\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/gamzix.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/gamzix.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=cdt6ZnXigQJug3ia; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=aRoOIfBn2DngHJoD; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-7b3\"\r\nage: 4332\r\ncontent-length: 895\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1971,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e82c459ffd4d8e01f72c723b935b7293","sha1":"c04f51efa3918cc9a14629e688cdc862a1be7675","sha256":"2ca28a038719a9cefd62e55589551c3eb405d828b2893dee80936c3bfa128579","sha512":"84b9d2ae06b5b76806e1c303b0eb5a147176ca81fa7eb5205694de0cd875d754e4fac3e12cdfdee5a9e558cb5d04c7de91981990df58830995cd2e5fa196b6f0","ssdeep":"","tlshash":"3e41567ca3ade1e0d20c97b583ad1179b27a38eb0f21c29d07bb2d95fa5521d40ad8c4","first_seen":"2024-05-07T05:57:01Z","last_seen":"2026-04-15T02:03:05.847166Z","times_seen":68,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/7e4352eb49dad04b797ce6b1c6a2e99dcd378f74.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/7e4352eb49dad04b797ce6b1c6a2e99dcd378f74.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 34333\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1850278FEDD9D7F9\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 6282\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=968m3XDeFIXSDFIdeuPt76ED3OIzJjKfRTiNQ5H2zMw2kOcLkl%2FQbQpIsaKawq%2FxllMcgUFA4UCY%2Fa2AdtriPsfGfX9CpUm9bqs8nA%3D%3D\"}]}\r\nCF-RAY: 9769b88a292afb89-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34333,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"3a08bf816dbe5d58df213c6f4fd77177","sha1":"cf2600b0891b717f47bdbc2d53523e17cc7065c9","sha256":"d912d5fa092dc49b9fc1e27afc82f40a6ae1ee0dc16736eef37ddcb6b6fc5fcd","sha512":"0f2db5c4f8d978104fa7faeef9b30b6860166c128c32303f98046da3bf6232efe6cab366f7db93264713819ebc0ca2716f4992c60b0e486b8f1e6c2fcc632d20","ssdeep":"768:MjR1nsLnaKILL30CAgSUsDL6qrEbn9uxJHxHPI:s1sbSXRHmJ2","tlshash":"a1f2f1fd133917ca5c5fbc4062e11274edef0b748380d9c3a9b6c5b970ae9589683e68","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-03-01T21:47:53.39896Z","times_seen":65,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":287,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/CoD_Oiw-.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/CoD_Oiw-.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/KHcq37__.js\r\nCookie: __ddg8_=0cfjt4j3XmoWOtR2; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Tye3vooFwWT0sowf; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-8e6b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":36459,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26664)","md5":"7eb3e66e8cb242a2c2421bdfd91666ba","sha1":"816dca4ebcbbd374e4522a652374e2153ee118eb","sha256":"964707914a67876446c4cc9aea93d2088b69725e12d941ba30cbeac6a36e6398","sha512":"726b63afce1860c9acf4cdbcaefc9ea0fd9af3e2c1e994656850194d434e0bcdacd3314cb8215ca67b48c61f1800e11d72d25a4f97f4476e5999bd767d6fbaa3","ssdeep":"768:YqTY+itM+orCjJJy1ee3JP6r1KCcKlyUW7YC6u64tH/9:DbiJou3CP6YhcW","tlshash":"0df21a487be0bc34c29a30d7353e0d057b726641586f6600e409c6b97fa968a717ef7e","first_seen":"2025-08-29T06:11:20.705458Z","last_seen":"2025-08-29T06:47:39.619766Z","times_seen":2,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.gist.build/web/latest/gist.min.js","fqdn":"code.gist.build","domain":"gist.build","tld":"build"},"ip":{"addr":"104.26.10.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"code.gist.build","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:12:05 GMT","end":"Sun, 23 Nov 2025 09:11:43 GMT"},"fingerprint":{"sha1":"8A:7D:9E:D2:01:92:34:63:8D:CB:A9:23:7C:0F:F0:DE:4E:7E:D3:A0","sha256":"BF:F5:6A:BD:EC:BC:38:BD:2E:2C:C6:37:C8:D0:9A:EF:C5:9A:83:8E:FF:04:E5:CF:04:66:CE:CD:63:15:5D:94"}}},"request":{"raw":"GET /web/latest/gist.min.js HTTP/1.1\r\nHost: code.gist.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\nlocation: https://code.gist.build/web/3.16.7/gist.min.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KsSgOKGZJXTzQxK3n847eDKaXFVLbfIBCJKN22Dx0uMxltsdC0c7L0yy4LXyfF8bG%2F%2Bon9PrChU%2FLy70KEYo%2BurTjdPlKwoFPSlvtJdn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 976a17a94dd99082-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25933,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":257,"dns":1,"connect":8,"send":0,"wait":11,"receive":0,"ssl":246},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/1393b69d6f928c7230bda26ec032a23c.png/yvuJBhAavxDU6ND4Ul1D9vlsGdgQVUshrkcGtkQ9.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /casino/games/1393b69d6f928c7230bda26ec032a23c.png/yvuJBhAavxDU6ND4Ul1D9vlsGdgQVUshrkcGtkQ9.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 374100\r\nConnection: keep-alive\r\nlast-modified: Tue, 03 Sep 2024 06:51:35 GMT\r\nx-rgw-object-type: Normal\r\netag: \"4de62d9e6879435915381cedfa83725d\"\r\nx-amz-request-id: tx00000cf604f673a7c0df9-006867c49c-162d5ff72-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":374100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"4de62d9e6879435915381cedfa83725d","sha1":"ab1c2425f1e58f66d61eac3ebc4fc4fff4886cfa","sha256":"e326b99f9cc358561e0022b4be85b3e30b55c775dba2e72b01cfea76f6fe8ec4","sha512":"777c5f727e78a41a24d6587820a6001744c989ae935bc4a0bbc3548567f7b89501eb695da7d67310d3d7a1dc451157dfcef6208c3b78cdada01a4a90a6051b07","ssdeep":"6144:UJzJg5eOlf4iGU4JVDfZvpVSZfHkUlcFe7iaJqx0s49iqjOj2sW/QFE:yUV4i3wVDfZvqZPRF7RTiJW9","tlshash":"5b842355ef536e2284126ec19c5a8e27d55882a0fa866f3f11bdf4ee4ae38c45cc3f41","first_seen":"2025-03-26T02:25:21.384691Z","last_seen":"2026-03-01T21:47:53.502104Z","times_seen":33,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/9608ce90df8fc98075efc5535ff35f9f.png/OjAGuT337TJQJXoqI9NfPruOIfGk8mBMKwCsEGwH.jpg","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /casino/games/9608ce90df8fc98075efc5535ff35f9f.png/OjAGuT337TJQJXoqI9NfPruOIfGk8mBMKwCsEGwH.jpg HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 46831\r\nConnection: keep-alive\r\nlast-modified: Fri, 02 Aug 2024 09:49:11 GMT\r\nx-rgw-object-type: Normal\r\netag: \"de82605db5c5d9b0d0c5ad27eecf03fa\"\r\nx-amz-request-id: tx00000e8b5f029de80aafa-006867c47e-162e91d26-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46831,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 610x400, components 3","md5":"de82605db5c5d9b0d0c5ad27eecf03fa","sha1":"511570e109f5d4b823e376eff632af7e4e3862e9","sha256":"4529d2cb6c5c9d0002f6cf0114cf36c40c4302d3914275a8a6920c90bad24759","sha512":"547e068accd60071532cfc2ea93bda9c696a67ae2617efd6d20f100d7ace2468a9a7b4181a20973598757701f304e060872edc639bfa177c987bf986e220f222","ssdeep":"768:kl4hEfWOPGNUbt/HKAqeXGnYx14/kDNnBQpPfOksbRuAVUWcLvz/I6rn9xVy:kgEfWDSZ/KABGYxGsDNnWZLwhUWcrNrk","tlshash":"2d230285b2da06044c98233354cd322d9df92797b9f68aec3b15b106c750da3bac674b","first_seen":"2025-03-26T02:25:21.35832Z","last_seen":"2026-04-05T20:02:46.558861Z","times_seen":56,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/ef5aa848cb6234dd6ff6a4610bfb6b8c8ecdcf96.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/ef5aa848cb6234dd6ff6a4610bfb6b8c8ecdcf96.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 23538\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 185081719F30778E\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 2902\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WbUfC%2FISOUtxJWGwAqKXGeTl9JKn5m61Aew11tEKVLakuwMnqZsE2G2lx%2FBO%2BZsceM3lRhg7iJcEgmgF5T0cbmgIekzN0BAzZt9FTXs1\"}]}\r\nCF-RAY: 9769c9020bcb06be-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"21714aced848c5429bdbc1e1975dde05","sha1":"3df268e58050169f784d896ba59ba9364269f9ff","sha256":"63e2aca2d1ea721d14bd2424e9129963c19e7153e93addb1986760898705d611","sha512":"5d0f92ddf152117fe20879d2774ec0036230a8b58df63f284a5711e16cfc85896938238fbe9ba93a8d44e65db9a2195dc8b9f237a9de6211addad34cc5c942b2","ssdeep":"384:TDMXpTYs0PeRjCI91ZFECgOXyX0EqSP8mb6yg7jV0VSQlMrPQTmG41/JDKSAmL:TDopcMRjCI9pEPORSfufj+EQlx6f1BD/","tlshash":"24b2e0b06e40fa1a2e27d547789510f8ffd1fb65cc4ccd1560b9fa8258e156e9873c02","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-03-01T21:47:53.241668Z","times_seen":66,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":283,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/YtoO_7C-.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/YtoO_7C-.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/EFWGUdKZ.js\r\nCookie: __ddg8_=BqvzQJOt7QzyX9vo; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1fTfhUbSa1mZ5N6n; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-282\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":642,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (641)","md5":"8c2a66b09ecf443e1523059c34060f9e","sha1":"8d00f7a7b998a7c1d28112041b886ec02838901d","sha256":"473d56fcad0097e55e59002388ffeb8f5dfecb38241bd0f5ea6a8179c388cc38","sha512":"b84a4e020a5b48b3c2478b26f74ca8ba30113e2cf1db515160f8ac4d0c9417c1fb10a36b993d1da95504cc583f4d86fb4fcfc9ed3b7b604b64592cf66d68beba","ssdeep":"","tlshash":"07f099c9f424de331643098e40236a351251295c663032b096d382b188cb01de26cbad","first_seen":"2025-08-29T06:11:20.782095Z","last_seen":"2025-08-29T06:47:39.623124Z","times_seen":2,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/yggdrasil.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/yggdrasil.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=inKiPFJTAK6uCKv0; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qZuMt56BbQm9Ziu5; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:30 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-645\"\r\nage: 4332\r\ncontent-length: 805\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1605,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22ab76fd2733beece31d373c5e90fb94","sha1":"e6497bfe5c5b19a7c8f26dc2a802e85568e3485c","sha256":"64865a4891c08014fb03901360fa286e30c8da4b91e2304deff972033bfe9033","sha512":"3fdd3bea110dad310680d49d03f84a317c21f12802e7e3e5cd88862c7e72b2ca0c2fed8c6fe428d9ead9bfd3f2aaccbec5dd583ad16280ae40513b89ca063b4f","ssdeep":"","tlshash":"723141f7e39892d0ea069bf90a1b38b1342b3ce73d63c58d59566895f19019f84d4cc7","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-04-15T02:03:05.898772Z","times_seen":69,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/statsGames?limit=4","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"OPTIONS /games/casino/statsGames?limit=4 HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=V9SZ93N9iqgtBM5V; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg1_=ZCiK1cyzR9do4HNqF4A9; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: cdc63a17-faa9-4e62-8e63-a8688ea240b3\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:34.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=G0qIZLgyUuq5m7Wb; __ddg10_=1756449993; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1oQ5XiEWf1M8jOsH; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\n__ddg10_=1756449994; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:34 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 26 Aug 2025 10:50:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 07 Jun 2024 21:58:38 GMT\r\netag: W/\"ead49d69bc7839b0b873b096d418e1ea\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nx-amz-version-id: a9eB74QCYmN.zM7i5ckvNX3RYMk8LisI\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: AMS58-P4\r\nx-amz-cf-id: bXNd40s4tp2E-R8p95LflgvtA5UhY3Z3HV_lTxOoTvkpE_dPX2Jvqg==\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nvary: Accept-Encoding\r\nage: 244546\r\ncontent-length: 36626\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":126923,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c19b1b5d91c8d683b1310562d9c4a225","sha1":"4d45dcac5c6a88e10052f4e356b2170c20413441","sha256":"bb5779145f1ebdcdee053876a4ed060174dda4656978972304c79ddd5f36dac4","sha512":"3a4e8d2e8f5d9a3b45c08ce99374c149a5b67d04d016edfe6259dfbbba948a049301c0cfa5f9bf334cb93b9b4a3558cffa725c166a943c90834c8d2237a1a21c","ssdeep":"1536:Ask/3qTBpVX0Ib6vhb2pJkuppl5METErM2jnpkDtoT1JaM18PIQunrr9gltn2BE/:IqBfX046vhb2pKMQt1Jawi697w","tlshash":"4ec329deb397b033539355a980bb0101b73a6a19300d4464f62ad9ea3c7d847a277fbd","first_seen":"2025-08-09T06:39:58.991299Z","last_seen":"2026-03-24T13:49:06.781634Z","times_seen":48,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/analytics/pv?pgi=GTM-KN757LMM","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"POST /analytics/pv?pgi=GTM-KN757LMM HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 487\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=HTslskyknRgbDwxh; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=scFE6z961mQJxJMj; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:37 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Chd1ThOZ.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/Chd1ThOZ.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/KHcq37__.js\r\nCookie: __ddg8_=0cfjt4j3XmoWOtR2; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=45CsudSd9fIKp47o; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-47f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1151,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (1142)","md5":"317a2201ef3851dba19e8b41380c8518","sha1":"69f8afc7452ae5bbffe308672417d74ea784cee0","sha256":"64cbae9ec71c97c3ca661b3a42c7f0de57972f702378830b7911e5a148b1cb0b","sha512":"4d8e02b904019b8bc965749301e7a14aa67543e54a8b2a19862be134620f94b55e7a2481c50590bf05fc5b7f6ce8e54746b77e238fa7b3a83fbaf81345be42c0","ssdeep":"","tlshash":"372130aebb3aa7bc7c245a5f42306f30f0132096ffb8945cb8d22126e3425a155640b8","first_seen":"2024-06-08T05:57:25Z","last_seen":"2026-05-26T01:50:53.816934Z","times_seen":119,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/common","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"OPTIONS /games/casino/common HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=IU7CJNK0DXE0tVrf; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg1_=f7evgRMVeCgGSaJ8w9rE; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: c5f1ce48-9348-4a8a-9c72-959485c7b4bc\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/api/v2/banners/main","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"GET /api/v2/banners/main HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=hV2pmLy5l9VeEtxN; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg10_=1756449999; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg1_=DZ5qn9rh8txIhO9GLBeb; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:39 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:39 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: d0e526fb-e8fb-4b23-9f45-ae2d61e1a025\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17043,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f7f4ab309c820243747918e0582740a1","sha1":"242208f04b5d02a44290164c6bb9b4270cd341b4","sha256":"c7cfe5633b8c62939cf98be4632d9e839ce0d023a3066dd033a9a3e64eb05607","sha512":"9abf4c5d3861373c931ab3c3e8d3cbf785bf10856a59e0defb35d4ea0e60ae99ee4d7fa50ab6bad9a79fcc8f29f5f7d91a658e4263a2f2dfa130c18ca19f49de","ssdeep":"192:HQzpEjbtTRiiRwsyeseR9joo7hZpOaOYSr4q+Y4YA7bm0326G6H7an:RhxXOYS0VY4YA7van","tlshash":"da72fdd2d6bd46ae1ad831c6cebbbd8d30886505f148efb3ee2ed55bd0141a1d61830a","first_seen":"2025-08-29T06:47:39.625746Z","last_seen":"2025-08-29T06:47:39.625746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DPY8sZOt.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/DPY8sZOt.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/NCxdOIYd.js\r\nCookie: __ddg8_=ezetp6qIStwdLspJ; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=AHQE2RX34Td62DjY; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-11c0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4544,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (4543)","md5":"0a70fa6e617896569c79b0c57a8b6828","sha1":"cfcabbe41e5d6e7a0d3cf26e8f244eac78055c46","sha256":"617ef9adaf4ef2a233bbdd95e9eb6698132cd74c12e55ecaa34e2ef407fbfa90","sha512":"7063ac2480219be984e4ddc0a8de9b0bcd65662e10e942fd1a7bfc5c9c0e0acc537e5004547ca4cf9d9eac9752eee4e1c17049eb667ad2257c26e3a456be9fbc","ssdeep":"96:6YglTYiN7xRLAHhaJcZ8YrMaMTTJ7FmGjfyLq6:6YglTYM7LQ9Z82MaMTTZFm2f8q6","tlshash":"ca918719b0945cf4997187dedc4108b169cb9ebf8410e9b173fa2b3027d5ca4e316b29","first_seen":"2025-08-29T06:11:20.982373Z","last_seen":"2025-08-29T06:47:39.627152Z","times_seen":2,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/statsGames?limit=4","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"OPTIONS /games/casino/statsGames?limit=4 HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=guhvdcj9rKmg65t5; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg1_=VIu2osUlKEFaQa5Q89jV; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: c7d762fc-a207-45b7-8e9a-203d765efb86\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/banners/10KLJNPL1sH8h5hJVNud0wcmIJA0XVwF9vjqRMpW.webp","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /banners/10KLJNPL1sH8h5hJVNud0wcmIJA0XVwF9vjqRMpW.webp HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/webp\r\nContent-Length: 123634\r\nConnection: keep-alive\r\nlast-modified: Mon, 02 Jun 2025 10:11:00 GMT\r\nx-rgw-object-type: Normal\r\netag: \"ac58c328fc6ee46257c9f91bebe2b8a2\"\r\nx-amz-request-id: tx000007d65cc4556f66575-006867c79b-1628e751e-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123634,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2160x960, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ac58c328fc6ee46257c9f91bebe2b8a2","sha1":"02ab140971f1453eb6ca3ea807377cb2df33f4d9","sha256":"02661c3e4f00e70ee3c125e20a7dd42c44c59a2d407062ba2d4a5470b289a81a","sha512":"4d5c98746abbb711fdffa5e38bf0d297fa62db98b6bbd92b21e5c2fed3b512af4f2dba01ddf8f3ca7032551414411a24f9d931cea79ce945f0e217ca680e2867","ssdeep":"3072:RZcPrGbUJtzJfCfYeCOmD5Nh+Ew3ARiqbhW5GdQ/xiQNgI:RZ1AtBo7mVNMEol0W5Ga3qI","tlshash":"3ac312b561ae058be68309b150bf78747aaf30dc335e829099e7c4d3fb105286d5bdca","first_seen":"2025-08-09T06:39:58.789745Z","last_seen":"2025-08-29T06:47:39.628327Z","times_seen":6,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":281,"dns":0,"connect":0,"send":0,"wait":31,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/84b705dfbd5a8cf21e3ac794e96cc7549a8e8e1a.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/84b705dfbd5a8cf21e3ac794e96cc7549a8e8e1a.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 29047\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1851FB8DAF06D1BC\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 5593\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AcRlGRwM1t4W28kvVuJ2JEK3MiVuP1o1b%2Fu5n4coGi6AB8bsJYB3Qg7Os6wMROzf4vlQf0ZJOvVnCWGMElUTygiCsGDXctBfz53wEuej\"}]}\r\nCF-RAY: 9769b5471c3e66b0-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":29047,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"72eac6176c1bb11388a5e609856efc7b","sha1":"56e97c552ae949be8679b8587d9539cef049f93f","sha256":"81b2acd9bbfb9f3127342050e4c10e3aa03cb227fd4f2c45e043fdb3bfeaf909","sha512":"71dfebabc3ebe64a1d7f64d189ee37b036a02509e151b5ecb3d9276729db1524e292c4939951a965a4614e441cc1011bd11c82e30b699f10de18abfd4524c3a3","ssdeep":"768:uhFXNLlIdATTUtYK5Nf9Voy/5SGFs4mMxSX:UF9LlIGTUX57Vl/EYigi","tlshash":"69d2e12966e9005ebe55ead0805e6297717718c80709b6c737f8da7c9704e6840ffef8","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-07-12T17:41:43.663287Z","times_seen":67,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":212,"dns":118,"connect":42,"send":0,"wait":73,"receive":1,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/2d90c08b7b6927b4a04aa1b58f6bc336/Novomatic%20Premium/10a343c7014e625193d4159258c1f01ecbbdcbd3.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/2d90c08b7b6927b4a04aa1b58f6bc336/Novomatic%20Premium/10a343c7014e625193d4159258c1f01ecbbdcbd3.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 32965\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"e648dde2f1c87a6261c926095902df51\"\r\nlast-modified: Tue, 08 Jul 2025 10:07:10 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18513DF20CA080A2\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 3007\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRLQzraYLsMapTAXYQdHtEWaBO%2FqrTQZ%2FVBkpb7ElQww28sMnRC6C8AtHS8NLxLaKTnUbQ057buGET89mkHk9sNAegX2ZSxmbB%2FKxpEh\"}]}\r\nCF-RAY: 9769ba08e8316d94-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32965,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"e648dde2f1c87a6261c926095902df51","sha1":"0c30072e25756d7dfa8dab7f61a811301dc33f78","sha256":"9d5eaf6ad84f524c4c1eb42652a8669d29e340c236aaba2af7e6f6e5ceb3d166","sha512":"417844c6cd6a0b7cdc85526a5b76c2b677269ac3adb8c1844408ad2532d9c2f5f247808b4f91f994b6bd53181f63ae945c1c593704c0a30c51b5a8a5627ae575","ssdeep":"768:o2IFnlXgc29MZ0v78uH9XK6TPPqiCv2JYSRoXMtot:NclFwp9XFPPK2YSRBW","tlshash":"70e20167d93eb4354f1c3990924438d7eff3f520e0c0455f9b698a628a489e93be3239","first_seen":"2025-08-19T01:32:32.315043Z","last_seen":"2025-08-29T06:47:39.629704Z","times_seen":3,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":209,"dns":108,"connect":55,"send":0,"wait":86,"receive":1,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/lotto_instant_win.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/lotto_instant_win.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=inKiPFJTAK6uCKv0; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=QZUhZreLLnAc9Nop; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-c49\"\r\nage: 4331\r\ncontent-length: 1393\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3145,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6aa8bdbd5683a85dea4c14f70191e12","sha1":"a203945e31d63e787f3370eb8a8f047bb0ecadc5","sha256":"911c17212c19919c075e04a7169bafa59e69f4072e6580dfc3b8c545d0dd6e76","sha512":"aeac6e1780c3952e4ec433698e2cd7a1c93f81d76ac819e720835b874904b1e8be41c4b068e2bf31328b48daca8bb79f449c776a005b737b351f441d24e004ac","ssdeep":"","tlshash":"835172e993daa3e6e08df7b0c32b59b9325738f57920c56d47f4ac70ca5508cd48a9e0","first_seen":"2023-10-28T21:30:08Z","last_seen":"2025-12-16T06:29:49.425645Z","times_seen":26,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/SlotsListPage.tkBSM6Rd.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/SlotsListPage.tkBSM6Rd.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=rrOPXgDekf1o2Ja1; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.120; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NvdcDnP96i7FuU7G; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:00:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-24e1\"\r\nage: 2771\r\ncontent-length: 1876\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":9441,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9440)","md5":"5317fc2f8db6c762c31691ccfdcb68a5","sha1":"3ddafa249a553609c9ec68c84618cba8ca3d58b4","sha256":"0d7f3cf238179af04420a0748049a06fc8e0202bbc5419dfead3e94b3bd39ef7","sha512":"5b768d6d93d9a9feb386e7b3457a2fbcd80f01c75dc1309ad799a0f3e82c12f38594be2a5d50ae11305671b7a666f23001e24a107a292dd0321f6df9aedbeef6","ssdeep":"192:qF75HTpr8y5ROBPVU2bTMhVSrNDjDC9D6WDqtzaL7lBRgk:qfHqyJDgfCxLqgz+k","tlshash":"d612932179df2a1c3477c755f092ae8e302cd623c01a0bfdb99aa515c983d5b7fb2099","first_seen":"2025-08-09T06:39:58.976378Z","last_seen":"2025-09-11T21:42:03.748078Z","times_seen":8,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/l/v/poll?action=poll","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:51.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"POST /l/v/poll?action=poll HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gwda74x.life/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 217\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:51 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 2\r\nConnection: keep-alive\r\nX-Webim-Version: 10.7.124\r\nAccess-Control-Allow-Origin: *\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-07-26T12:08:46.440048Z","times_seen":750385,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/best","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"GET /games/casino/best HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7u6FhSgePscKwKbu; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg10_=1756449999; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg1_=nhiTFckBu42h9BBlpne0; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:39 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:39 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 87\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: f79786b2-e7f2-4886-a77a-98ec4de7848f\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":9758,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d7d2e59701fa5e9806a23af1b7c6097f","sha1":"953d3882b92b76ee60682899a5131f8e939c03e4","sha256":"14c092a90ea9edd6701fbcb2d10b2aa35780f1c53eacc9c2f31c2f27f4f03d83","sha512":"7307b0aa3b577afc278513cc0e68bb43f2e0cdf86acc0f3e0b27606cc957556823a007f0ff864f35903fee7ee9a96f1670c4eabda97ab42c6e32d12ca7778d38","ssdeep":"96:lNSRs2XKnnbCXV+WezyZ58cWEXjMQfzCsLyHofy6koCl+Tox+R+XU0IncK0vf+CW:jTG8e5jTygDVNniLVNzAp","tlshash":"70121253258038a14fe272e40f6f7f9668c80a53656cb953b8caec6500b16f75729df3","first_seen":"2025-08-29T06:11:20.816226Z","last_seen":"2025-08-29T06:47:39.453104Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/Thunderkick/74ff410f516d4267a617cad53db70dce.jpg","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/Thunderkick/74ff410f516d4267a617cad53db70dce.jpg HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 30211\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"867fe6fb6e0fe91b39275722eb1f5aab\"\r\nlast-modified: Thu, 21 Aug 2025 09:35:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1860043EC41353A4\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 322\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jyfWHfEr%2Buv2oeYEPXkQ%2BqLnjVPZxBAib8KDk8%2Fk4oqwLKzah7KjW73FlxT7ABMHdLVuD2uvpXbxomf3Cj9i7taJhk4151ybW8hIAUJh\"}]}\r\nCF-RAY: 9768ea982a88fe98-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30211,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 287x193, components 3","md5":"867fe6fb6e0fe91b39275722eb1f5aab","sha1":"619ef84412afae64b9cf4316b5228b3cff86ebd1","sha256":"c877a194ebf3910899ca52b842b9aa4163d842e61c1baa62f1fb983a67ac9586","sha512":"d1517d2ad9c80554c5d0b245364883bf378dc4b6053486013b20c900a9077c555e38c498a367374b5a1d4a66a763fb4d22c2bc1653cfba16a8c82f612bdca38e","ssdeep":"768:xv/XiNHekwuimTAIjwBa6UiHeKLP7prgULobMT9p:hXiNbw1cpjwE6eKnBq4","tlshash":"9cd2f149eaafdb81e4bc3976dcec1669837ecd458b23c811ff800e62a0c52e54979255","first_seen":"2025-08-29T06:11:20.74346Z","last_seen":"2025-08-29T06:47:39.502124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/images/file.svg","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:41.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"GET /v/images/file.svg HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 9286\r\nLast-Modified: Wed, 20 Aug 2025 07:24:07 GMT\r\nConnection: keep-alive\r\nETag: \"68a57817-2446\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9286,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d6d4ad1349f997af8f4bc6e45fc6d2ed","sha1":"7908555e4ba3d3c73eba84266f800120c43270e5","sha256":"56d45428cf96355b298c7f5c023ab7c004583b2a136af450968c55e1486e2453","sha512":"1e011720c337271c89a7571cf2a460d07fc075c54311d2707768a43caadf966bf410349bb62eac2db6e729c48d0e290dbdf477d3a347ac3cdf4c1333cffeed3d","ssdeep":"192:C3ISknUnObdnWlZohOWCXQuSSnnnnnnnnnnzmEfPWsLb:gISkUxlgmZSKmLs","tlshash":"ef1209797706aa5a0b718f25e04191227d281c2fb37a57d0f48d5ec3b326c407d8adfa","first_seen":"2023-11-18T23:23:23Z","last_seen":"2026-07-24T07:40:56.60849Z","times_seen":1606,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/v/fonts/Roboto-Bold.ttf","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:41.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"GET /v/fonts/Roboto-Bold.ttf HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:41 GMT\r\nContent-Type: text/plain\r\nLast-Modified: Wed, 20 Aug 2025 07:24:07 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"68a57817-28da8\"\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":167336,"size_decoded":0,"mime_type":"text/plain","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", name offset 0x1900020d","md5":"da7ecac250e13817947dd1f5c1571f91","sha1":"aa8f07e3b700656a5cb3a0a402451d98e796841a","sha256":"027ba3f46b3e647249971010ed596b9443d4eb95b96959582fbe5a1f8b83bb16","sha512":"506f2623384972a3969a8ba6b0665de8bb1d708d1e0e143ea77bf559c8bf82b678f57db34cc3240411e8679a4a86c532b2328eff4d9c4b8da2d226c78e7dd0af","ssdeep":"3072:11FSM9EcsQqivOV08PlIgn/CsDQVb16yyfHC820XRuX/4XhXXXXXXGKkxIMoFKna:fTsovQ7IgnLcTUfxhdknoena","tlshash":"0e246503ebcfb7aed14083f37debca8856eff03a5d11e557958a2011c905498a74f62a","first_seen":"2025-03-21T05:40:08.901524Z","last_seen":"2026-07-17T18:42:53.960132Z","times_seen":160,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/SlotItem.l67obBLi.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/SlotItem.l67obBLi.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=rrOPXgDekf1o2Ja1; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.120; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=O9Vw3gkWfLzUasbX; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:00:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-97a\"\r\nage: 2771\r\ncontent-length: 749\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2426,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2425)","md5":"80afec9432412b3683a3e4d53886648e","sha1":"89b3f6425f0184e0fcc2b10fcf0063153961bfda","sha256":"29fe866e7f9aa848b50eccd09c51e7e1eb6b3bda55a74b17765d44ab6f0abc34","sha512":"1d20cc2984cbbeb53a79d70492bfaa2ee052cc4a38e275ae65f31036b25f1ad0fa63fb0d1f29075b99afa91648c78ec753dc515b6adc60954851a5a6b5c1d9b3","ssdeep":"","tlshash":"d441ad61e50ba46f6477f760bde64d9c3164934bf722069af3581914cb8378ebd32270","first_seen":"2025-08-09T06:39:59.146818Z","last_seen":"2025-08-29T06:47:39.633858Z","times_seen":6,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/DYMeqr-Z.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/DYMeqr-Z.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/DIBeZulZ.js\r\nCookie: __ddg8_=xlLVd85mOc11E7BM; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.120; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=BSr6LC2cd7mkoEDx; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-3c0d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":15373,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15372)","md5":"473c5847db8ac8518710c95a9351614d","sha1":"a18bd257267dea926952cf0a7a67593c15cac213","sha256":"593d92e9b1821d941f976504ffb4eb58e055fccac12864fc89c225d937194ea4","sha512":"a29df6c259ba417817b02a30946975dc2bd517ea8fe6be4c6bb4a1a6624b33ffe343b3555ad2f2ddcf24dd4744a0e971d75ddfb7ed4d063504da1659082baf24","ssdeep":"384:rH/RfQ3cEQQX9TBoKJr+V0qlggS/prIjMIOBfclz3ehifrZqYyn:jR43HHloY+V0qlgLnBfM7ehifrZqYy","tlshash":"7162f81ef48e5c3e66ba58c439e47945b1381fd7c04048e2a4f5ce311647c6df2aeab9","first_seen":"2025-08-29T06:11:20.901302Z","last_seen":"2025-08-29T06:47:39.634571Z","times_seen":2,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dr=gwda74x.life\u0026dl=https%3A%2F%2Fgwda74x.life%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=511723256.1756449998\u0026auid=793701873.1756449996\u0026navt=n\u0026npa=1\u0026gtm=45He58r1v9186219929za200zd9186219929xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~105427542~105427544\u0026tft=1756449997561\u0026tfd=1723\u0026apve=1\u0026apvf=sb","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"POST /ccm/collect?en=page_view\u0026dr=gwda74x.life\u0026dl=https%3A%2F%2Fgwda74x.life%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=511723256.1756449998\u0026auid=793701873.1756449996\u0026navt=n\u0026npa=1\u0026gtm=45He58r1v9186219929za200zd9186219929xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~105427542~105427544\u0026tft=1756449997561\u0026tfd=1723\u0026apve=1\u0026apvf=sb HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://gwda74x.life\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/tournaments/banner-bg-desktop.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/tournaments/banner-bg-desktop.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/Home.CBZvEtgP.css\r\nCookie: __ddg8_=RhxID2JCNxjR8DSX; __ddg10_=1756449998; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=slhbsxl1VCw7DXYf; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-673\"\r\nage: 0\r\ncontent-length: 525\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c02768642950741c2a8d0e39f8d412e0","sha1":"118f935a0df15e0ac81aea94278cdb9becf7e2da","sha256":"3770b25538633725c3d38f810216e8e5f7404271db7f0d2c8b0451c1c8c3d537","sha512":"0b6902166f6e8a047afb84701de82dce41008465d70c73f01f0011eadfa53e0b0db1b381f346e5de57b20f806a23a8e154ef48eb8abefb190e0e215c66e7c472","ssdeep":"","tlshash":"c331dc7582ac7c1ee60dc64cc6eb4028221f41a3a3d1c5c072577b7e76384c52dbe36a","first_seen":"2025-08-09T06:39:59.150017Z","last_seen":"2026-04-15T02:03:05.874483Z","times_seen":62,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/D15-urTW.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/D15-urTW.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/KHcq37__.js\r\nCookie: __ddg8_=A2LCVmocpUFMqwPm; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FPljEkAWdI5fh5pf; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b05e9e-76f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1903,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1902)","md5":"425b6bea6f359a26229f4d817aeb215c","sha1":"689eb1c0bebfa02a0145bc1b97f74403c99b5ce5","sha256":"7fcc314cb57a39c609879b893d5155ac94db7f5b45ec7603e16797724c35ccdb","sha512":"ef7007de5f3b99cc9e9101852cdb1c8ec619c95782a6fd8b82acb2c3a60a5b35d5e1e5fc5ff2e6cd7535d399c1dcf013b5a1cc75ab4ef2134de7238431571c10","ssdeep":"","tlshash":"ad41978c78bd99f886be48c7b559156423881fe8507e65cbb6fd1c385a62804731fb14","first_seen":"2025-08-29T06:11:20.910078Z","last_seen":"2025-08-29T06:47:39.636478Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getxavatars1.gtx-s3.pw/casino/games/3a2c9dc212edfde626137fae5ddb22b3.png/xSTsWv4nQxIJxiBtgHoPEzV25xnMK05RgqVvEWJW.png","fqdn":"getxavatars1.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getxavatars1.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:15 GMT","end":"Wed, 01 Oct 2025 11:24:14 GMT"},"fingerprint":{"sha1":"46:F6:8A:0D:C6:2E:91:7B:D6:7A:7B:19:FB:EC:84:65:76:83:BD:2A","sha256":"86:92:D5:21:48:D0:32:BB:DE:A8:B6:E0:2E:55:A1:0E:E4:21:CF:85:B5:A6:50:D7:1E:8C:93:0C:B9:22:10:C0"}}},"request":{"raw":"GET /casino/games/3a2c9dc212edfde626137fae5ddb22b3.png/xSTsWv4nQxIJxiBtgHoPEzV25xnMK05RgqVvEWJW.png HTTP/1.1\r\nHost: getxavatars1.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 446202\r\nConnection: keep-alive\r\nlast-modified: Fri, 08 Aug 2025 11:28:05 GMT\r\nx-rgw-object-type: Normal\r\netag: \"e52cb297e75cfb0b064b0231cc4ee04d\"\r\nx-amz-request-id: tx00000ed8654f0664f64cb-006895df46-16cd69584-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":446202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 610 x 400, 8-bit/color RGBA, non-interlaced","md5":"e52cb297e75cfb0b064b0231cc4ee04d","sha1":"86a1e85f85a12a96e38808e2af1f02d9346fdb17","sha256":"c9d99f019ef67c7a402ff0f7526bba4dd462f741c39ad85e49f08d75e8e32b6c","sha512":"c0b988dea8552e2681e10deebdbee60e559920b37072ea61642ebb8cf5e120b7db73b31b2f250a5fc8c80f425de6002a33a66b751055bf51e8e2657be1f9e274","ssdeep":"6144:srq5uir6J6/Roxf3ZtY8if8xXFDmjHGVH1CFLyZjg1rGb1BrSfsLWGIY3kUz6G:sr1zJTxvZScXlw+csb1ORY06","tlshash":"9094238d2506ecc807c8fc11a567df8ca6c1f58be1f198b61c65b2f94bbadf14ad4a04","first_seen":"2025-08-12T21:10:07.685554Z","last_seen":"2026-01-21T08:18:57.047268Z","times_seen":28,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":33,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssogtx01.cc/go/auth/code/check?url=aHR0cHM6Ly9nd2RhNzR4LmxpZmUv","fqdn":"ssogtx01.cc","domain":"ssogtx01.cc","tld":"cc"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-29T06:46:35.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssogtx01.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Jun 2025 06:53:20 GMT","end":"Sun, 21 Sep 2025 06:53:19 GMT"},"fingerprint":{"sha1":"17:88:4B:80:06:34:D0:39:3F:D6:25:B1:08:C5:07:8F:B2:D4:ED:B9","sha256":"DE:D0:E3:E1:C8:36:28:DA:45:FA:13:44:1A:09:CB:4F:76:0D:EC:46:A0:B4:6E:A6:6F:19:94:0D:98:8A:1B:11"}}},"request":{"raw":"GET /go/auth/code/check?url=aHR0cHM6Ly9nd2RhNzR4LmxpZmUv HTTP/1.1\r\nHost: ssogtx01.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Ku6ud5LqMzxYP6pL; Domain=.ssogtx01.cc; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.ssogtx01.cc; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.ssogtx01.cc; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg1_=pCNhgayD6aNmLC9Il195; Domain=.ssogtx01.cc; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:36 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: private, must-revalidate\r\nlocation: https://gwda74x.life/\r\npragma: no-cache\r\nexpires: -1\r\nvary: Origin, Accept-Encoding\r\nx-request-id: 68e49c68-f9be-462f-b6e2-846744544b8c\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":380314,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":135,"dns":1,"connect":20,"send":0,"wait":130,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"ssogtx01.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/MYDrgT1C.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:37.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/MYDrgT1C.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/KHcq37__.js\r\nCookie: __ddg8_=0cfjt4j3XmoWOtR2; __ddg10_=1756449997; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=8Bn8eTcp4Y6snqJ3; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg10_=1756449997; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:37 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-26f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 340\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":623,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (622)","md5":"e0fc3df1230c271735681874919408db","sha1":"b2d76d4e370a20b62553bdc66b29b18435d4dd33","sha256":"3f1ce5cff7f5683018bcf002fa88f8fbdaa7b0697482259eceffe1087bc630d3","sha512":"7589de4493750f04c974f3de5738533d798795fdb55f67177cccf666fe41d8ed8e27861bc945422641db48604769882358f220acd6013056778274c7f80c4828","ssdeep":"","tlshash":"ecf0ac6d393490e0f3b20c89c6158b70b6034376389bd8f4810d188502a9de9dadeb17","first_seen":"2025-08-29T06:11:20.767499Z","last_seen":"2025-08-29T06:47:39.639218Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"licensing.gaming-curacao.com/validator/?lh=511aadd110f565d008810403b6cffb85\u0026template=tseal","fqdn":"licensing.gaming-curacao.com","domain":"gaming-curacao.com","tld":"com"},"ip":{"addr":"172.66.170.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaming-curacao.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 25 Jul 2025 04:03:06 GMT","end":"Thu, 23 Oct 2025 05:01:36 GMT"},"fingerprint":{"sha1":"83:86:F4:6C:FA:D2:79:96:08:CE:12:A5:55:BE:72:98:6D:44:90:64","sha256":"0C:9D:2E:75:4C:14:60:47:D0:98:67:DF:B9:DC:06:8D:3F:FD:3C:B9:25:78:C5:B6:E5:E8:04:BA:36:E1:DE:A4"}}},"request":{"raw":"GET /validator/?lh=511aadd110f565d008810403b6cffb85\u0026template=tseal HTTP/1.1\r\nHost: licensing.gaming-curacao.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: PHP/5.4.16\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: private\r\npragma: no-cache\r\nx-robots-tag: noindex\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iHCUx%2BS4s5yfgyPowUTsn4Sb%2B98ozH2ts5%2Fq6Xwldl1UFjoHVKJJ1sNexdwfH2wAihAQZXRpBSgWQVkWNehQ1DCoruCCYORcGsW6E5xeqWBhxVMEGihBpGn3WKo%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: PHPSESSID=03qitri5vccmekgkovu3okbvs0; HttpOnly; Path=/\r\ncf-ray: 976a17b32a3830b4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:5.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/PragmaticPlay/b3a22c28284e4de69efb358940838cb1.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/PragmaticPlay/b3a22c28284e4de69efb358940838cb1.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 22629\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"e063043198233d315d572492e46b0516\"\r\nlast-modified: Mon, 06 Jan 2025 19:17:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1851605C196F7B76\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 2941\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o01I5ZF2W0ut8lTGuJ04n%2Fmy6gkU3AIC0OUX00jRRlQVBMhyCCPwnbeTBWh8q8WOJpz1fN5iRaHl%2BUtvkXir7ndPiy6dZqCevMTNT%2Fss\"}]}\r\nCF-RAY: 9769b88cfd1cdfd3-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22629,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"e063043198233d315d572492e46b0516","sha1":"e719c1b648675987debfc36d652ad543a0104edd","sha256":"3890d4a4521ac5f03aa3f52073bb54ba382fab3d29dbc132a03b21d78041e596","sha512":"2fa66a1b86378d099a1a1dd6195c0859c4db448239089650d325030d3e1d9f40135507058032090002f10c29e8525417f4986e2bc3c52cda0c42115942009600","ssdeep":"384:dR1fjI9hXHBNC87F+rrzecc+93runTssJX+LoIjgyv8XeLJq+CNZBxKIgahpzf:b1fEBNL5CrzLCnYlb8XsJqTZBx1Rzzf","tlshash":"75a2e146cb23bad09ba52d5a6d84fa7b40cd95efcd0b29005125ef502d1e5e13dffa04","first_seen":"2025-03-21T05:40:08.943093Z","last_seen":"2026-02-25T19:06:54.159546Z","times_seen":31,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":276,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/cdee9014e4d2f1811fca73b151d093dddab267bd.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/cdee9014e4d2f1811fca73b151d093dddab267bd.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 33368\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"00000000000000000000000000000000-1\"\r\nlast-modified: Thu, 15 Sep 2022 12:02:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1850C6C2D9CEC350\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 1536\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dwd0h98gWFWJSAZ1Y%2FKaCF%2FvF6bFgXUTF7B2E9PubcYr47wqVSrRZBf1KcbPcpeFxt8XcokFqTjXtGaFkiQ%2BdujwxUECsnivm9auN3y7\"}]}\r\nCF-RAY: 9769a8c39a2d661e-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33368,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"556b860eb17cfa6f8fdc338ece02a958","sha1":"791d2e9a29244c70eba438000f50008eae113932","sha256":"3368734f4cf53acbd15d3680efe367fd3961f0db6c833b11e42647ab13ad2b5b","sha512":"117c294931b7f1ea10fa14125979e75d3dd7cb12703384a92dc486a501369cce6283341b4f707d0098db48deb700c5205d93b0d833ea6dcc969bcd0f3127c7d0","ssdeep":"768:/6KG8tImiBsY+enLcpalasRXNJD5QINWGGcrZ6NMLqolU3:yKG8t+BsXpaYsxlQ+3Xg","tlshash":"e8e2f108acc87f54536785a81210e58f9f29d8ccb5e7968b8b8f1c204879c586c3ebde","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-03-01T21:47:53.332676Z","times_seen":51,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":287,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/logo.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=xWECXm6bxbiSraHE; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Uppp4qlAvw0XkebA; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:34 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 728\r\nddg-cache-status: HIT,HIT\r\netag: \"68b05e9e-5f5\"\r\nage: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1525,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"90c2e8c0d206d5eaeac1b5660a865926","sha1":"fe0386bf75d653fbacf2638c0dfe63544acc878b","sha256":"68da6ba7e3c1d4c39c888f4cfef2e3090ae95b091ef2b0bc1e6b638a3f2e523d","sha512":"1912a93b523c285d3ea1da9831b45240b5a6e5ddaacb2922b9b35c346beca192b37ce9881b7120fd215d1ff7087b732df496026f5bb49ae424ea1c27a0433545","ssdeep":"","tlshash":"c0315ee2b3a9d38191080f00834e7864032f15e9a710818ddbd76ba579b526fcc3d8d0","first_seen":"2024-12-10T17:19:34.101377Z","last_seen":"2026-05-26T01:50:54.168263Z","times_seen":69,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/statsGames?limit=4","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"GET /games/casino/statsGames?limit=4 HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nRegion: RU\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=apaXzbDFKOkg6p80; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg1_=B4rrZaKctYM59JxjNWRF; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:40 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\nx-ratelimit-limit: 90\r\nx-ratelimit-remaining: 81\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: ae7fec0f-ce51-4ca1-970e-6322b1b7b368\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5246,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1a37afeb4f6ddfc3c5686899c68e9754","sha1":"cbb69911b38944aaaf0aeb7ce29eb0dbed43b4f3","sha256":"d7e2d076686731f7844720632a815144177becf3af97f56f9d2ea993fd7ebf9f","sha512":"8fe98daabdb358b553685a96e641cbde1e17b661b8bc2fe9c54bbaff979137e1d883bb349cf09080b10af7bddaf00461f91eb7b357eb22fbb1e77a60a0fe7652","ssdeep":"96:qRK/VYaBODZQAE+cpCK/VCbreDZQAnzqS9B0br5K/VfI3qS9Bs2cJacyVcSh6c4:tuMSvczIC+S9iEOaS9FcMc8cs6c4","tlshash":"92b10411a5c822fb4ff35fd8dd5b7ee50ad9041711a8a967f0f1d51830e26fa1126a23","first_seen":"2025-08-29T06:47:39.429424Z","last_seen":"2025-08-29T06:47:39.429424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/cqkD4Ey_.js","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/cqkD4Ey_.js HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/_nuxt/NCxdOIYd.js\r\nCookie: __ddg8_=6zeVylwwQ2py3ynY; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Iqo78ubbuwf85s1L; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 06:46:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\netag: W/\"68b05e9e-3a0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":928,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (613)","md5":"98abaf8c0e7452f1b335b85556c17b81","sha1":"c0e20a53cb10a1eb860b0011e7dec53d8c127ce2","sha256":"d56d6bd8866b8920d642b59ee3323bff9345af1d15959bfa798c79e26cb5fe09","sha512":"59a2d50ecb02f9ca190d17fc54c9abee9278929169036760313542456659afca2aee4d06e36adda446e6b43ec505f8a516936d499c9569145c14df39cf88242e","ssdeep":"","tlshash":"9711239f5845cef4a14c8df8dd22603c16a088a672dd49dbc34d0972537205ac18e797","first_seen":"2025-08-29T06:11:20.904684Z","last_seen":"2025-08-29T06:47:39.641816Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/ezugi.svg","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/ezugi.svg HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=inKiPFJTAK6uCKv0; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iZCtfkrMnYvTZS0R; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-97\"\r\nage: 4331\r\ncontent-length: 111\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":151,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d350aa779602ab8f010dd9cf9508532","sha1":"6f2ef55fce721313446c54e72615976e87e2866b","sha256":"930e4a508eb90ec69cf46bb8e43bfe406a45302943260b101b533e0231fc7f66","sha512":"e60d3c6405734d38b979b617d4f5fe71c69c5f5d0227ae84ee8431fe8802ddbc9c3d7e8acc2e1ac0e9140533337d6e23e2f6449bfbe33c673e67fdd2a48d0521","ssdeep":"","tlshash":"f8c02b3690dc8c0ec310c120512e33c713f661d911890266f4c02b02f0207fb78c97bc","first_seen":"2024-05-07T05:57:01Z","last_seen":"2026-04-15T02:03:05.91567Z","times_seen":68,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_ipx/f_webp,avif\u0026densities_1,2,3/img/home/home-aviatrix.webp","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_ipx/f_webp,avif\u0026densities_1,2,3/img/home/home-aviatrix.webp HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=A2LCVmocpUFMqwPm; __ddg10_=1756450000; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qrUeo5COvY49uaiP; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg10_=1756450000; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:40 GMT\r\ndate: Fri, 29 Aug 2025 06:46:40 GMT\r\ncontent-type: image/webp\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests;, default-src 'none'\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\ncache-control: max-age=60, public, s-maxage=60\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nage: 0\r\ncontent-length: 57166\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57166,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1830x1200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e69a9f84442238c66e229878fc2cc7d9","sha1":"f20e5ee5fa754fa9c7e4cefdfa8bc3c914e29253","sha256":"9417ec88d0bd6956206142d851a40e6665defe12075717688956e37c69a91c1a","sha512":"06ffc8a6aefc0541b85f45c28c1f995e03a2010ea2cc4e9a26e523287bbc2b3fed413e0d5c0d624a1b4688364a80b75c4a46dede2d211c068bc5c7ece6758648","ssdeep":"1536:ySYwoYfrg0RY+cL+JTan7h7/TKnWpe8uud2/nw4bih91jI:yTFw35cL+w7F/WnvAI/nw4W3dI","tlshash":"6143f1fc08f41f62a4c6a62f54b57c8903b412a7de62646b340a1c13c6e6d370fa3a7d","first_seen":"2025-08-09T06:39:58.867511Z","last_seen":"2026-03-01T21:47:53.513864Z","times_seen":34,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/fdc4364a3eae2f06260e2f95ce9571ed/Belatra%20Games/09880fff05a24f7aad26570c7a0c6a6c.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/fdc4364a3eae2f06260e2f95ce9571ed/Belatra%20Games/09880fff05a24f7aad26570c7a0c6a6c.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 29592\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"f7a6dbb0c78028cea71e3747ede4400f\"\r\nlast-modified: Fri, 21 Jun 2024 06:43:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 1850C772B0B68034\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: REVALIDATED\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iLBnV2gb9ZMqdJ51e2AfQvfR9Ci3ycHB4T2XPaJ%2F3vjdG6wmgtqP9feODKyHImeirbPY37xx03xUUObIAi%2FbxabHoKaUldN96b3%2FSiAI\"}]}\r\nCF-RAY: 976937912a09a11d-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29592,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"f7a6dbb0c78028cea71e3747ede4400f","sha1":"b99d8b7704ca7b211e23da619e37bbbb9ef059aa","sha256":"e16952606a04998d6bc1f9ab995c259f582d568beedee5ba8506f384d0140c31","sha512":"efebdc38a4fdc83ba7f45f83367ef71795ce1f263936ffe38384afed0eded1ee2006af7fcac1d0bff470fa6d119846151e3cbac9f24ad7d5233e4bf97f399a0e","ssdeep":"768:KEoTZ6+cokiWk0YjOC9/GeZN2tE1rHD3jDu2wQePtq:4cfJih0Yiy/GEhHDu2wQelq","tlshash":"66d2f1a50fc63c03ed7298a555412fdca88289b878ba36c4f86a0dc305138bab5b5749","first_seen":"2025-08-09T06:39:58.965161Z","last_seen":"2026-07-01T22:31:35.450857Z","times_seen":47,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":298,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/images/gx_site_logo.png?1701674734622167","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:41.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"GET /images/gx_site_logo.png?1701674734622167 HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 4133\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Aug 2025 07:24:07 GMT\r\nX-Cache: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4133,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced","md5":"5471e6f1ea316d4b2366712acec56bc9","sha1":"e27e075645ff51e7b4c6cb4f5db266bce833ef2a","sha256":"c9b2b18a0edcc73f11006cb37bb9e995ccc135e742191f423914b1004b4ca9f7","sha512":"c85aa2a3b9deb9b55cc012a0ab3c6ef114a16a854181901078d1d9d131d727724a25cff83c613d26e64f1b19975467d1362eb241dfd81ffc9ea271fb0f38d73f","ssdeep":"96:TjjcoQqosJxFjeAcv1TGJirAUmGT+mPxOHIe:TjjkyH+AUbmw+mP2Ie","tlshash":"30815dfa3d7233d38464aa064e795400a47b6ccfbf85955e86e7c0ab3d44a4846cf296","first_seen":"2025-08-29T06:11:20.975169Z","last_seen":"2025-08-29T06:47:39.644942Z","times_seen":2,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/kagaming.png","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/kagaming.png HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=rrOPXgDekf1o2Ja1; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.120; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=xlLVd85mOc11E7BM; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 2844\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"68b05e9e-b1c\"\r\nage: 4326\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"c73e8335e02c283c022ea47f9b072f28","sha1":"1587e6a4ad71337f14b822fe81d535b8fa41a793","sha256":"e01a0057456828bd333d553d66e4edb9bf36cdd9f797f70fd0eb925807d209fe","sha512":"6afc2ca7fdbe5e2cd3680bb6c95b3e249bc5f03bb817e6f4d21e6ca5db975ba7c3fff0f912d046d881df97dbb4f4e93841656fc89ff9e73c4c7217fa92aa2cab","ssdeep":"","tlshash":"df516db575b034615e9012f8180f11089bc299867903aaed800bc137ebc90a6b3c02ff","first_seen":"2025-08-09T06:39:58.927401Z","last_seen":"2026-04-15T02:03:05.950904Z","times_seen":62,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/img/providers/kagaming.png","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:42.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /img/providers/kagaming.png HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=xlLVd85mOc11E7BM; __ddg10_=1756450002; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.120; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998; ajs_anonymous_id=b0e6cb62-3871-49ba-adc8-7e3d53679d6d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7SAnZo0whB3tpOrI; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg10_=1756450002; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:42 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 2844\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\netag: \"68b05e9e-b1c\"\r\nage: 4326\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"c73e8335e02c283c022ea47f9b072f28","sha1":"1587e6a4ad71337f14b822fe81d535b8fa41a793","sha256":"e01a0057456828bd333d553d66e4edb9bf36cdd9f797f70fd0eb925807d209fe","sha512":"6afc2ca7fdbe5e2cd3680bb6c95b3e249bc5f03bb817e6f4d21e6ca5db975ba7c3fff0f912d046d881df97dbb4f4e93841656fc89ff9e73c4c7217fa92aa2cab","ssdeep":"","tlshash":"df516db575b034615e9012f8180f11089bc299867903aaed800bc137ebc90a6b3c02ff","first_seen":"2025-08-09T06:39:58.927401Z","last_seen":"2026-04-15T02:03:05.950904Z","times_seen":62,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/vue-splide.C9Z0wB1j.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:36.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/vue-splide.C9Z0wB1j.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=esoGAGOiOzFu0162; __ddg10_=1756449996; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.793701873.1756449996\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=643FttYMb2vR7o5C; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg10_=1756449996; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\netag: \"68b05e9e-734\"\r\nage: 4350\r\ncontent-length: 676\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1844,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1843)","md5":"e638a23113de5c173bd45cf1ec17cedd","sha1":"5e71875f9d7d6d3240729a9300e2be7b2c49d0d2","sha256":"25fecdb4c8330c6bfab65a09dbb53c0d8f407344f2ba4f4438bb48293444c846","sha512":"c76d640e7077019c6c609684d476a47b812c67eb4fbc8cf85240d2bc6e96e5254434483c8c8046b15b3683e09c749b26055b48f9656e0dbf5d78bad8aa18872c","ssdeep":"","tlshash":"fd31442240c92f599843973229bdd7a964eec2534e6302baeaded320468ad4d07e49cd","first_seen":"2024-08-20T04:44:02.347145Z","last_seen":"2026-07-20T07:08:57.528836Z","times_seen":137,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/js/button.js","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"GET /js/button.js HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:38 GMT\r\nContent-Type: application/x-javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Wed, 20 Aug 2025 07:24:07 GMT\r\nExpires: Fri, 29 Aug 2025 07:46:38 GMT\r\nCache-Control: max-age=3600\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":899663,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1210)","md5":"2d7925a8189b5c5d2a3d9c66f3fdc313","sha1":"0022e7c0dbeb09e9e5ba5930a2eb7ffe1285e722","sha256":"904624f64d5cb7b2d773e4a593cad96ff68086a941e41f07ab0d4908f253817c","sha512":"db015bb3b727fe8c32650773a33ad203c07370fdf3776d19ff0f76b300fd9cf936af5b6f03aa135035cd90bc60613d38bf87fa369ea70920abea59c758d9ef30","ssdeep":"24576:Io36wXnnOqCNTKi983ht1x2vRfXj1jryWezetQ:Io36wXnnOqCNTKe83ht1xYdpjryWeitQ","tlshash":"7c155c897644353a82dba2bf702b170976379552a444d46cf878e8d4bfb4d09823bfbc","first_seen":"2025-08-22T22:32:10.403109Z","last_seen":"2026-07-13T11:53:35.373448Z","times_seen":8,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwda74x.life/games/casino/lastBets","fqdn":"api.gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.31","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:38.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwda74x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 17:43:21 GMT","end":"Wed, 19 Nov 2025 17:43:20 GMT"},"fingerprint":{"sha1":"7E:AB:3D:BF:A9:B9:FF:D4:31:9B:D5:D7:BE:8C:75:F0:D8:94:0B:18","sha256":"C8:E8:93:1D:0E:87:73:51:B1:12:D9:2D:75:0D:CE:90:21:4C:D9:C6:AB:82:62:C1:22:F7:D6:6C:56:44:C8:7F"}}},"request":{"raw":"OPTIONS /games/casino/lastBets HTTP/1.1\r\nHost: api.gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: region\r\nReferer: https://gwda74x.life/\r\nOrigin: https://gwda74x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PENmExeasLILVkVj; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg10_=1756449998; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:38 GMT\n__ddg1_=Bm1bh2VOnn7JGiTrSFiN; Domain=.gwda74x.life; HttpOnly; Path=/; Expires=Sat, 29-Aug-2026 06:46:38 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 29 Aug 2025 06:46:39 GMT\r\naccess-control-allow-origin: https://gwda74x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: region\r\naccess-control-max-age: 86400\r\nx-request-id: f0f83f86-5479-482e-9c89-048d9d7b3ed7\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gwda74x.life/_nuxt/Index.DjeSHR9Z.css","fqdn":"gwda74x.life","domain":"gwda74x.life","tld":"life"},"ip":{"addr":"91.215.43.30","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:39.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwda74x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 15:24:26 GMT","end":"Thu, 06 Nov 2025 15:24:25 GMT"},"fingerprint":{"sha1":"98:88:28:E3:C8:9A:02:91:58:6A:52:44:39:36:F8:83:53:73:EF:76","sha256":"46:6E:E7:6B:70:B4:24:55:9C:29:15:1E:E1:09:D3:46:5F:38:3E:3B:B1:11:96:8A:D1:37:9A:04:E3:41:66:8B"}}},"request":{"raw":"GET /_nuxt/Index.DjeSHR9Z.css HTTP/1.1\r\nHost: gwda74x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nCookie: __ddg8_=YWQImJdgp0VhRUwz; __ddg10_=1756449999; __ddg9_=91.90.42.154; __ddg1_=cRvJUpjE0FgG41bzYXyy; i18n_redirected=en; userVersion=45.10.240.22; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; _gcl_au=1.1.793701873.1756449996; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJhNDZkNTE2Yi03NDdhLTQ2ZjMtODM4MC02ZTZhNjA2N2NjYmElMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU2NDQ5OTk3MjYzJTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NjQ0OTk5NzI2NyUyQyUyMmxhc3RFdmVudElkJTIyJTNBMCUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; welcomePackTimestamp=1757054797; _ga_VRDLWS0SHC=GS2.1.s1756449997$o1$g0$t1756449997$j60$l0$h0; _ga=GA1.1.1711659798.1756449998\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=e93HT2VZxX7P1rAn; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg10_=1756449999; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\n__ddg9_=91.90.42.154; Domain=.gwda74x.life; Path=/; Expires=Fri, 29-Aug-2025 07:06:39 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 29 Aug 2025 05:34:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:50:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"68b05e9e-13e\"\r\nage: 4335\r\ncontent-length: 159\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":318,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (317)","md5":"47f876f6777238b8fef6cab0e88a190e","sha1":"12350007296b859405aa99e5085540122bd66179","sha256":"752176faf7991d0fce63e67af84fa4b45ae51d72c966b866abf842e2a8783856","sha512":"7e02bc91f6c2b8b6a2bbeec518678e9858fe7d4b84db9a4105be070201876c68f42a3c25130faaff9cff2e29a18052db4afbcaa044eed268a685f286c89ea06b","ssdeep":"","tlshash":"e9e07d31388c509dc8ebe2697619495c0e1ef2abef3f49190875a0651cd7d44233a444","first_seen":"2025-08-19T01:32:32.305939Z","last_seen":"2026-03-01T21:47:53.436256Z","times_seen":31,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gis-static.gtx-s3.pw/games/ThreeOaks/11496fee3b36431ba2f1650cdbb50082.png","fqdn":"gis-static.gtx-s3.pw","domain":"gtx-s3.pw","tld":"pw"},"ip":{"addr":"45.136.50.79","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gwda74x.life/","date":"2025-08-29T06:46:40.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gis-static.gtx-s3.pw","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 09:08:20 GMT","end":"Thu, 02 Oct 2025 09:08:19 GMT"},"fingerprint":{"sha1":"50:5E:47:4E:04:08:B2:EC:00:FD:DD:03:C8:6F:DC:93:D4:6A:58:AF","sha256":"30:75:02:01:42:D0:1B:3C:C5:21:FB:A5:57:A0:24:55:DB:10:49:E0:66:BB:0D:D4:7F:BB:A5:4B:B0:A4:DE:21"}}},"request":{"raw":"GET /games/ThreeOaks/11496fee3b36431ba2f1650cdbb50082.png HTTP/1.1\r\nHost: gis-static.gtx-s3.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gwda74x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 06:46:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 34040\r\nConnection: keep-alive\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"a287a3d78c1b9bc8e2feff9e8ed7f26d\"\r\nlast-modified: Thu, 11 Jul 2024 10:21:45 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-request-id: 18507C8F1295335C\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nAge: 207\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7I7%2FNzoq1BN8u2wO1O120%2F%2F2nm%2FUthLUT5fgu9%2BGWbDUYXPPKOt4RBiHTj3noP2D0fkjH7kufORMdg8OO%2Fch1vevHwLYZZXDLdskJwWs\"}]}\r\nCF-RAY: 9769b88e2ef6ad9f-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nCache-Control: max-age=14400, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"a287a3d78c1b9bc8e2feff9e8ed7f26d","sha1":"df5276083070152a37f4e1fcc2b3970352b927c6","sha256":"98afc3a6958155d149386d0cebbad8a29ceffc072146ebb68c09957d7d0cf4c5","sha512":"fa3cfd41c525c17c4832ab25906c7c0aacdd5ed79fdd70961185523f4081b1adc34d397119e41f4ff6c03585db28c3311bd5bf9540367b0a9abca2603333ed54","ssdeep":"768:2JCLPGLvkVqFyNDUYE3YSUCbzG+OPSFpqdFuRn1j:cCLPGLcQFW4bpn9ywj","tlshash":"a4e2f1d8e197fbded70a426191edd7bfec4e40bc45a5b18ecab1174eb4e288c016001e","first_seen":"2025-03-21T05:40:08.916214Z","last_seen":"2026-03-01T21:47:53.270168Z","times_seen":79,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":302,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}